$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: 03F5qVuybzIBqlOG8j2HuazZfIjYTRH4drnw2YbvNJs= Subject key identifier: C3:AC:4A:B6:4D:2B:40:C3:FC:5E:B6:FF:35:D4:1C:CC:D7:37:0B:21 Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 260BE155FB7A102D5C02787E42FF1C64D3C431CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 01C6 Signing time: Sat 03 May 2025 12:31:48 +0000 Manifest this update: Sat 03 May 2025 12:26:48 +0000 Manifest next update: Tue 06 May 2025 18:05:48 +0000 Files and hashes: 1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) 2: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: +rmqodSWE15Ks/uH5dpboEG82zC+6GXlMvdmn/jlC9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 18:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0b:e1:55:fb:7a:10:2d:5c:02:78:7e:42:ff:1c:64:d3:c4:31:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: May 3 12:26:48 2025 GMT Not After : May 6 18:05:48 2025 GMT Subject: CN=C3AC4AB64D2B40C3FC5EB6FF35D41CCCD7370B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:57:5a:ef:29:a9:02:8b:f3:97:42:01:12: cd:d8:17:aa:36:20:ac:a2:0f:14:62:2b:9c:a1:87: e6:93:67:8c:bd:6a:ff:30:d1:17:af:72:1a:af:dd: 02:43:91:21:5f:12:d6:0f:0e:ee:93:b9:5b:9c:ba: 91:1f:d8:b2:44:04:5d:ec:aa:a0:89:87:90:90:cf: f6:5b:90:8d:96:34:7b:2d:bf:d3:0b:cc:10:18:4c: 7a:f6:eb:86:1b:13:1e:8c:5d:bd:fc:4c:79:94:8f: 67:55:3c:82:01:9d:ad:94:eb:de:28:66:b4:8b:e2: c9:af:2e:e2:87:5b:7d:f0:0c:30:f0:4c:ca:0b:e8: 0f:d2:bd:fe:61:78:50:db:a9:8c:d6:2a:2e:bd:7e: c9:52:52:b0:21:9f:d2:e1:9c:9d:e1:bb:51:51:7a: e0:4b:ac:8e:f7:de:87:2b:1d:b2:c2:06:71:05:c6: d4:1b:d4:17:db:59:c2:86:01:61:81:5d:f2:40:9b: 6f:d2:2f:aa:06:18:97:45:08:d4:b7:a8:a1:b1:71: 67:11:6f:ef:a0:ee:e9:3e:14:32:eb:b1:d9:48:2d: 87:2a:43:00:92:db:3f:33:b9:70:66:33:5e:d1:56: 6d:8c:05:8f:a4:5c:be:78:4f:26:75:40:ee:93:e6: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AC:4A:B6:4D:2B:40:C3:FC:5E:B6:FF:35:D4:1C:CC:D7:37:0B:21 X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:af:75:99:6d:3d:5b:dd:5f:ab:d3:0f:07:98:c1:8e:ae:9a: 84:77:ef:c0:69:28:78:41:d3:db:15:6d:3f:c5:cf:28:23:01: 7a:d7:a3:99:ab:d2:36:8f:d7:b2:0e:ff:05:d8:8d:44:be:fd: d1:bd:0f:c3:f1:50:15:1d:1a:c0:6f:aa:05:3b:56:2d:0a:9c: 86:7e:56:79:87:73:ce:09:d1:03:c8:d1:73:3b:75:4c:83:98: b3:b4:05:76:d4:ff:41:73:17:98:bd:db:7b:4a:72:78:11:51: 1e:d0:2f:08:7b:3e:5d:21:95:40:c0:f4:df:ef:96:6a:f9:97: 9d:b9:e2:d0:4d:ae:34:5f:17:a2:64:7b:8a:6f:51:96:d1:5e: c0:c4:d5:75:8e:01:b4:68:ad:dd:03:6e:54:95:ff:ea:d9:21: d7:01:12:91:ee:96:13:19:04:8b:d9:dd:a6:da:70:32:75:2e: f6:02:f8:a7:5a:9d:45:3c:2e:2f:ab:13:f0:87:3c:b2:8d:34: 82:77:9e:97:e4:69:97:02:cc:56:d5:e6:5e:83:76:77:31:65: c8:3e:05:ab:a2:b5:bb:65:d1:84:9e:a8:ff:68:2a:0b:fc:16: 87:b2:b9:0e:f6:a7:16:4d:26:74:44:e2:71:9f:87:bb:72:35: 57:63:af:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgvhVft6EC1cAnh+Qv8cZNPEMcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTA1MDMxMjI2NDhaFw0yNTA1MDYxODA1NDhaMDMxMTAvBgNV BAMTKEMzQUM0QUI2NEQyQjQwQzNGQzVFQjZGRjM1RDQxQ0NDRDczNzBCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPVda7ympAovzl0IBEs3YF6o2 IKyiDxRiK5yhh+aTZ4y9av8w0Revchqv3QJDkSFfEtYPDu6TuVucupEf2LJEBF3s qqCJh5CQz/ZbkI2WNHstv9MLzBAYTHr264YbEx6MXb38THmUj2dVPIIBna2U694o ZrSL4smvLuKHW33wDDDwTMoL6A/Svf5heFDbqYzWKi69fslSUrAhn9LhnJ3hu1FR euBLrI733ocrHbLCBnEFxtQb1BfbWcKGAWGBXfJAm2/SL6oGGJdFCNS3qKGxcWcR b++g7uk+FDLrsdlILYcqQwCS2z8zuXBmM17RVm2MBY+kXL54TyZ1QO6T5m0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw6xKtk0rQMP8Xrb/NdQczNc3CyEwHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+vdZltPVvdX6vTDweYwY6umoR378BpKHhB 09sVbT/FzygjAXrXo5mr0jaP17IO/wXYjUS+/dG9D8PxUBUdGsBvqgU7Vi0KnIZ+ VnmHc84J0QPI0XM7dUyDmLO0BXbU/0FzF5i923tKcngRUR7QLwh7Pl0hlUDA9N/v lmr5l5254tBNrjRfF6Jke4pvUZbRXsDE1XWOAbRord0DblSV/+rZIdcBEpHulhMZ BIvZ3abacDJ1LvYC+KdanUU8Li+rE/CHPLKNNIJ3npfkaZcCzFbV5l6DdncxZcg+ Bauitbtl0YSeqP9oKgv8FoeyuQ72pxZNJnRE4nGfh7tyNVdjr7I= -----END CERTIFICATE-----Generated at Tue May 6 07:49:28 2025 by rpki-client