$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: mnj3d4A7ZKGZtAZn9qHQlnIbBCiSZ/trKNoBfL0LC6Y= Subject key identifier: FD:61:F9:EE:DE:59:37:E9:B5:8E:13:10:25:6C:CA:6D:0F:A5:C1:F0 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 23F57A82C7BC18475AC1A91FA7DD40B8162891DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 01F5 Signing time: Sat 28 Jun 2025 03:20:02 +0000 Manifest this update: Sat 28 Jun 2025 03:15:02 +0000 Manifest next update: Tue 01 Jul 2025 09:27:02 +0000 Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 3: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: 6aNZskgAFdj8TZcaz2jhjNwqUEPVc41AzE0KgCH9TvM=) 4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 09:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f5:7a:82:c7:bc:18:47:5a:c1:a9:1f:a7:dd:40:b8:16:28:91:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Jun 28 03:15:02 2025 GMT Not After : Jul 1 09:27:02 2025 GMT Subject: CN=FD61F9EEDE5937E9B58E1310256CCA6D0FA5C1F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:eb:0f:f4:32:da:19:e8:83:47:b2:78:94: 49:9f:5f:39:4c:1a:4a:75:85:21:f1:e2:7c:71:72: 45:25:69:f1:5c:4c:83:94:46:6a:65:40:29:5c:4f: a6:dd:25:f5:43:6e:b4:a9:6f:b3:9a:57:f9:36:9f: b3:49:25:69:ab:2c:31:1f:dd:76:ae:8c:af:b5:3b: 39:0c:ec:b9:f7:e9:7b:49:5c:bc:f9:9b:ab:f9:09: ef:c5:27:e6:b9:98:fd:f3:45:0a:f2:9e:36:30:4b: 3d:e1:b5:71:74:5d:37:7f:b6:13:ed:17:99:11:73: 90:71:0d:8a:16:f7:68:4a:f6:69:d1:67:59:e3:f8: c1:49:cc:ea:a7:b4:5d:18:54:39:7e:13:46:2d:01: 22:ad:7a:3a:11:a9:dc:cd:b8:e5:b3:11:10:a5:33: 4a:c3:98:1a:61:70:4c:b0:bf:a5:a6:6f:4e:06:5c: 81:82:1f:93:a6:81:c7:11:8a:13:a9:3d:3e:83:48: b2:e3:63:8a:40:12:3d:0f:4d:a1:1a:83:02:a2:b7: 0e:a1:7f:9d:0d:e1:24:ab:00:1f:8d:f9:1b:c1:d7: 97:d9:b1:bb:6a:84:a7:90:05:94:78:aa:0c:c6:9c: 8b:c4:aa:e1:df:6a:c7:88:bc:0b:d6:f8:17:7b:40: 0d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:F9:EE:DE:59:37:E9:B5:8E:13:10:25:6C:CA:6D:0F:A5:C1:F0 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:18:d2:d1:3a:53:4e:ba:81:e9:be:d9:05:f4:64:6d:97: 52:64:ec:57:bf:10:cd:4c:d9:aa:d4:09:49:93:2f:bf:60:44: 5c:ac:78:96:60:4b:37:af:21:5c:e8:85:6b:a7:20:00:e1:c6: 7f:53:b4:98:9b:c1:01:f3:54:74:0d:64:f9:6a:15:ea:6e:47: fa:f1:3a:54:d3:df:43:64:f2:52:ca:be:49:f0:9e:ab:37:d7: c9:ee:0d:29:da:10:f1:3e:80:65:ee:b4:e3:99:2c:4e:57:11: 81:a9:0e:41:34:a4:3d:bc:ed:26:5f:f8:03:b4:aa:3b:e4:d6: ec:10:3f:62:b0:70:f3:64:be:4a:23:30:2b:ad:2f:bf:f9:d5: e1:67:74:27:1a:2b:b1:a5:ff:25:8a:52:67:ae:c8:ea:ce:fb: b7:de:4e:7a:85:bb:41:2e:8b:b6:92:de:72:a3:5a:04:08:89: ac:30:9f:93:cb:4b:8c:34:3e:70:e1:dd:46:e4:d3:e5:80:9e: 3c:be:ae:85:75:ff:9f:c1:73:19:fc:08:5b:43:f5:eb:3b:54: 91:af:bc:6c:2c:06:c3:80:c6:01:3e:29:62:ac:d4:1a:cc:2c: 7e:d9:58:73:15:ad:e3:fb:72:07:1f:87:84:8f:29:6e:81:c7: 3a:db:e0:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/V6gse8GEdawakfp91AuBYokdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTA2MjgwMzE1MDJaFw0yNTA3MDEwOTI3MDJaMDMxMTAvBgNV BAMTKEZENjFGOUVFREU1OTM3RTlCNThFMTMxMDI1NkNDQTZEMEZBNUMxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLOsP9DLaGeiDR7J4lEmfXzlM Gkp1hSHx4nxxckUlafFcTIOURmplQClcT6bdJfVDbrSpb7OaV/k2n7NJJWmrLDEf 3XaujK+1OzkM7Ln36XtJXLz5m6v5Ce/FJ+a5mP3zRQrynjYwSz3htXF0XTd/thPt F5kRc5BxDYoW92hK9mnRZ1nj+MFJzOqntF0YVDl+E0YtASKtejoRqdzNuOWzERCl M0rDmBphcEywv6Wmb04GXIGCH5OmgccRihOpPT6DSLLjY4pAEj0PTaEagwKitw6h f50N4SSrAB+N+RvB15fZsbtqhKeQBZR4qgzGnIvEquHfaseIvAvW+Bd7QA3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/WH57t5ZN+m1jhMQJWzKbQ+lwfAwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJTGNLROlNOuoHpvtkF9GRtl1Jk7Fe/EM1M 2arUCUmTL79gRFyseJZgSzevIVzohWunIADhxn9TtJibwQHzVHQNZPlqFepuR/rx OlTT30Nk8lLKvknwnqs318nuDSnaEPE+gGXutOOZLE5XEYGpDkE0pD287SZf+AO0 qjvk1uwQP2KwcPNkvkojMCutL7/51eFndCcaK7Gl/yWKUmeuyOrO+7feTnqFu0Eu i7aS3nKjWgQIiawwn5PLS4w0PnDh3Ubk0+WAnjy+roV1/5/Bcxn8CFtD9es7VJGv vGwsBsOAxgE+KWKs1BrMLH7ZWHMVreP7cgcfh4SPKW6Bxzrb4BY= -----END CERTIFICATE-----Generated at Sun Jun 29 22:07:37 2025 by rpki-client