$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: zAzxyp6Mg+LADHtE6VjldgzPedwk68UKoJrenoyXguI= Subject key identifier: 25:82:74:6C:F7:CA:BD:F2:5C:44:0D:2E:E2:FD:8A:5D:BF:64:B2:EE Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 4440573CCC0E422E4A8EEB89A5F27E5337CD3DD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 01D7 Signing time: Sat 28 Jun 2025 15:12:22 +0000 Manifest this update: Sat 28 Jun 2025 15:07:22 +0000 Manifest next update: Tue 01 Jul 2025 18:25:22 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 2: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 3: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 4: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: mWLsuU9lPRhxYMr3u7Hy5QWaNcIGBj8c0w56S5v4rQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:40:57:3c:cc:0e:42:2e:4a:8e:eb:89:a5:f2:7e:53:37:cd:3d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Jun 28 15:07:22 2025 GMT Not After : Jul 1 18:25:22 2025 GMT Subject: CN=2582746CF7CABDF25C440D2EE2FD8A5DBF64B2EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:ed:15:b8:c6:2a:fe:5b:a3:2e:04:ff:50: cc:da:f8:b2:02:e8:14:16:06:1f:89:db:0c:3c:39: c0:c1:10:72:63:f0:94:4c:ac:b3:0c:f9:3e:f3:95: e0:7d:b9:d7:aa:58:00:41:e4:ea:3a:45:99:2c:46: 29:7c:b2:36:1c:f1:a9:d5:fc:39:d6:49:8c:20:72: 4f:48:8e:b8:99:a0:72:1d:09:a1:94:c4:08:a4:9c: bf:1a:a4:3c:af:04:b6:e1:89:0d:37:e6:d7:40:2a: 9e:9f:a2:c1:a3:0c:4a:77:7e:b3:83:3f:e8:d1:c1: 02:61:05:f8:a0:19:45:32:62:e9:2e:95:41:b4:af: 3a:fa:db:39:40:a7:03:9a:d1:95:f2:73:0b:93:f9: 09:fa:4f:3c:a3:2c:64:9b:56:05:de:28:a5:f2:e5: 3d:bb:5d:67:d8:0e:4b:c4:ed:2c:d7:e4:f2:58:4d: 67:7c:fa:8a:8a:60:53:02:85:db:97:d4:bb:51:30: 27:6b:0a:a7:36:96:7b:22:bd:23:88:5f:50:87:bd: 56:ae:10:40:97:4c:b2:83:77:27:5f:18:28:63:9d: 86:65:46:80:26:82:16:ca:1a:c4:e6:30:ec:4d:bc: 15:59:8d:8f:9d:f3:30:aa:a7:2d:ea:4a:00:55:14: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:82:74:6C:F7:CA:BD:F2:5C:44:0D:2E:E2:FD:8A:5D:BF:64:B2:EE X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:0a:af:72:f8:b7:bf:1c:b1:a6:40:fe:6d:f9:2d:2d:bf:83: cf:ea:3e:b1:87:78:be:20:43:21:7b:2a:dc:2a:e8:aa:ef:42: f4:ff:e8:af:22:ff:e2:51:8b:bd:b2:55:f7:52:4f:db:ee:48: ff:b6:16:a1:ef:d8:d0:9a:16:12:f4:cc:ad:e4:54:ca:5d:98: 0e:d1:d0:df:83:7b:cb:4f:46:f7:da:ab:01:6f:f6:26:19:d0: e8:9a:b2:a3:66:e8:dc:9e:80:20:a1:05:ce:b4:f9:13:50:c3: a4:06:a1:6c:34:f6:c1:d1:b3:01:15:fd:4b:78:e2:60:a7:f5: e8:c4:5c:2e:bf:cf:64:d1:f6:6b:15:96:83:0f:6d:5a:10:07: c8:21:67:de:00:4c:8b:50:cb:c4:16:30:30:57:f7:40:f2:fb: 7b:0a:28:4e:ad:f5:7f:b6:2f:84:09:2e:68:48:aa:9b:5f:b9: e4:92:a3:c0:dd:42:0d:76:ae:ed:97:88:d8:5c:60:2b:43:a9: fc:8e:42:5a:d0:e9:66:12:c4:b6:17:dc:6d:23:77:95:2a:39: a4:d0:3d:83:f7:1a:0c:6b:3b:6a:5b:86:d3:a0:ef:09:70:41: 20:a2:17:77:d8:67:e8:a9:ca:08:1e:d4:90:5e:93:43:b6:48: 4c:2f:a5:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREBXPMwOQi5KjuuJpfJ+UzfNPdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTA2MjgxNTA3MjJaFw0yNTA3MDExODI1MjJaMDMxMTAvBgNV BAMTKDI1ODI3NDZDRjdDQUJERjI1QzQ0MEQyRUUyRkQ4QTVEQkY2NEIyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtu0VuMYq/lujLgT/UMza+LIC 6BQWBh+J2ww8OcDBEHJj8JRMrLMM+T7zleB9udeqWABB5Oo6RZksRil8sjYc8anV /DnWSYwgck9IjriZoHIdCaGUxAiknL8apDyvBLbhiQ035tdAKp6fosGjDEp3frOD P+jRwQJhBfigGUUyYukulUG0rzr62zlApwOa0ZXycwuT+Qn6TzyjLGSbVgXeKKXy 5T27XWfYDkvE7SzX5PJYTWd8+oqKYFMChduX1LtRMCdrCqc2lnsivSOIX1CHvVau EECXTLKDdydfGChjnYZlRoAmghbKGsTmMOxNvBVZjY+d8zCqpy3qSgBVFGyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYJ0bPfKvfJcRA0u4v2KXb9ksu4wHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAKr3L4t78csaZA/m35LS2/g8/qPrGHeL4g QyF7Ktwq6KrvQvT/6K8i/+JRi72yVfdST9vuSP+2FqHv2NCaFhL0zK3kVMpdmA7R 0N+De8tPRvfaqwFv9iYZ0OiasqNm6NyegCChBc60+RNQw6QGoWw09sHRswEV/Ut4 4mCn9ejEXC6/z2TR9msVloMPbVoQB8ghZ94ATItQy8QWMDBX90Dy+3sKKE6t9X+2 L4QJLmhIqptfueSSo8DdQg12ru2XiNhcYCtDqfyOQlrQ6WYSxLYX3G0jd5UqOaTQ PYP3GgxrO2pbhtOg7wlwQSCiF3fYZ+ipygge1JBek0O2SEwvpVM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:01 2025 by rpki-client