$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: nwp9HswHsTY9bTGX1i1RA0YzHgoeXc0TY28baJp5XC8= Subject key identifier: 00:A2:3D:34:D3:49:F3:DC:2A:FD:BE:CC:01:6B:31:AA:63:7D:88:C7 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 2389A77E63526911E6F8BD7BFBB3804512CD6838 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01AD Signing time: Tue 01 Jul 2025 05:01:57 +0000 Manifest this update: Tue 01 Jul 2025 04:56:57 +0000 Manifest next update: Fri 04 Jul 2025 11:12:57 +0000 Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: jCIi6xnL0X9x7d8IEkHfah2DqG8/oNDacSJSk7YacN0=) 2: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: jyJjbmil++5fLk5ihNMTodu7Z1oFo0xWerSTVOQ0zMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:89:a7:7e:63:52:69:11:e6:f8:bd:7b:fb:b3:80:45:12:cd:68:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Jul 1 04:56:57 2025 GMT Not After : Jul 4 11:12:57 2025 GMT Subject: CN=00A23D34D349F3DC2AFDBECC016B31AA637D88C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:2b:e2:76:1d:7d:81:6f:e4:07:20:5d:68: ef:cd:c9:d2:c6:0b:37:37:89:78:0a:57:9b:09:73: bf:26:03:dd:f1:55:dc:8a:35:c6:84:fd:4b:42:08: 70:f4:62:e2:13:83:9c:7c:22:55:3f:7d:63:f4:ab: 2b:af:27:8c:e3:ee:28:8c:ed:88:ed:54:1c:51:80: 51:31:44:16:2a:df:b8:6a:d7:03:a0:69:60:ee:fc: e4:b6:46:43:cf:ad:0d:fe:bf:ce:15:79:33:1b:29: 16:d4:8a:aa:da:4a:a1:c8:88:15:eb:45:b7:80:05: 92:22:3c:f7:4b:5a:e7:4e:93:99:f0:21:be:c7:02: b9:63:c2:e5:49:b4:83:b1:73:39:5e:60:2f:22:4b: 78:23:9a:96:33:38:34:fb:75:0e:fb:77:bb:ad:85: b1:af:f2:4e:43:45:7b:96:29:ed:3d:9e:1a:15:5c: aa:db:f5:cc:a7:dc:18:df:b5:da:e0:f0:d1:d8:21: 41:b3:88:1f:8b:8a:35:a1:9e:b4:22:a2:9c:6a:b8: 8e:1f:37:d9:76:24:4c:19:d3:61:91:2b:93:dd:69: cb:19:86:35:dd:dd:ca:ce:5a:c7:2a:40:a1:1e:46: 3c:e8:c9:54:3c:c7:9e:24:0d:0f:63:e4:56:2b:23: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A2:3D:34:D3:49:F3:DC:2A:FD:BE:CC:01:6B:31:AA:63:7D:88:C7 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d6:a6:18:9d:ed:8d:72:8e:8e:67:21:ba:85:b2:82:ce:ee: 20:84:3b:ca:ad:d4:66:02:c4:7b:d2:c5:47:e9:b9:02:09:d5: 49:a0:e3:2b:00:7c:db:cf:a3:78:65:94:89:74:c3:d4:2e:64: 07:1c:d0:71:a8:d7:29:8d:69:82:47:ca:b1:9c:44:f4:29:ca: ee:14:63:11:82:80:b6:d5:de:ab:19:a9:46:84:e8:23:f3:a1: 98:31:c7:ea:ce:66:46:c9:b1:ab:60:e7:93:8b:9c:6e:21:5e: 87:08:78:7b:b4:13:60:f5:80:d1:46:44:30:71:08:1a:ad:f4: 71:b7:fe:61:7d:46:44:ba:cc:cd:e2:1e:49:29:98:45:e7:14: 25:c3:59:2f:70:03:0f:83:ec:29:66:5d:62:13:09:df:12:17: cb:88:dd:96:f8:fa:ae:4c:a0:32:a0:b1:6f:6e:f6:45:91:89: 73:b3:94:c9:07:f0:d9:32:c8:7f:66:27:7e:63:fa:a5:83:4a: 2c:22:8d:95:c0:4f:01:a6:8c:30:1c:dc:3d:1c:e8:aa:09:06: 07:3e:6e:dd:8b:78:4e:01:23:e2:7c:0b:d3:32:80:3a:08:a8: 5c:4e:8c:19:20:77:77:83:24:6f:4b:bd:92:1b:a7:c0:53:3b: 9f:20:8d:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4mnfmNSaRHm+L17+7OARRLNaDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTA3MDEwNDU2NTdaFw0yNTA3MDQxMTEyNTdaMDMxMTAvBgNV BAMTKDAwQTIzRDM0RDM0OUYzREMyQUZEQkVDQzAxNkIzMUFBNjM3RDg4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9ividh19gW/kByBdaO/NydLG Czc3iXgKV5sJc78mA93xVdyKNcaE/UtCCHD0YuITg5x8IlU/fWP0qyuvJ4zj7iiM 7YjtVBxRgFExRBYq37hq1wOgaWDu/OS2RkPPrQ3+v84VeTMbKRbUiqraSqHIiBXr RbeABZIiPPdLWudOk5nwIb7HArljwuVJtIOxczleYC8iS3gjmpYzODT7dQ77d7ut hbGv8k5DRXuWKe09nhoVXKrb9cyn3Bjftdrg8NHYIUGziB+LijWhnrQiopxquI4f N9l2JEwZ02GRK5PdacsZhjXd3crOWscqQKEeRjzoyVQ8x54kDQ9j5FYrI1QRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAKI9NNNJ89wq/b7MAWsxqmN9iMcwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzWphid7Y1yjo5nIbqFsoLO7iCEO8qt1GYC xHvSxUfpuQIJ1Umg4ysAfNvPo3hllIl0w9QuZAcc0HGo1ymNaYJHyrGcRPQpyu4U YxGCgLbV3qsZqUaE6CPzoZgxx+rOZkbJsatg55OLnG4hXocIeHu0E2D1gNFGRDBx CBqt9HG3/mF9RkS6zM3iHkkpmEXnFCXDWS9wAw+D7ClmXWITCd8SF8uI3Zb4+q5M oDKgsW9u9kWRiXOzlMkH8NkyyH9mJ35j+qWDSiwijZXATwGmjDAc3D0c6KoJBgc+ bt2LeE4BI+J8C9MygDoIqFxOjBkgd3eDJG9LvZIbp8BTO58gjaM= -----END CERTIFICATE-----Generated at Tue Jul 1 13:19:38 2025 by rpki-client