$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: 9wYRI6UEUYuSb+sqlTFNdb2dAyhvS/S3sqV77uC88BY= Subject key identifier: 58:63:BE:A5:9B:4A:06:5E:48:D8:D1:12:DB:2B:3F:3B:BD:7F:46:BC Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 782669F37C6DAD28237EE59E1A388268A5710778 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 04EE Signing time: Sat 28 Jun 2025 03:41:13 +0000 Manifest this update: Sat 28 Jun 2025 03:36:13 +0000 Manifest next update: Tue 01 Jul 2025 12:32:13 +0000 Files and hashes: 1: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) 2: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 3: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: LDGgrFJnbPUJpe0mEc9GPdz/MLHYbXusmkkvOwz6pis=) 4: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) 5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 6: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:26:69:f3:7c:6d:ad:28:23:7e:e5:9e:1a:38:82:68:a5:71:07:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Jun 28 03:36:13 2025 GMT Not After : Jul 1 12:32:13 2025 GMT Subject: CN=5863BEA59B4A065E48D8D112DB2B3F3BBD7F46BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:10:82:5a:e4:f2:3e:f4:95:3a:f1:ac:c8: db:e4:9e:e7:79:0c:e2:da:f6:85:cc:7f:14:d9:a4: 77:37:7c:e8:c6:68:cf:eb:f8:b5:c7:bf:b1:56:75: c7:90:ad:b7:c9:44:6c:48:0f:08:3a:62:96:bc:00: 51:0f:83:ee:fc:bb:7e:a4:91:cd:de:f2:85:60:70: 0c:27:3a:e3:d7:dd:9b:0c:36:ba:82:61:b9:dd:fd: 22:6d:8e:1c:7f:3d:99:e4:61:77:8e:33:d1:0b:de: 2c:22:1a:1d:ba:df:22:94:f9:dc:05:0d:bf:2a:4e: e6:bc:75:c0:28:7c:c6:16:e0:db:f1:50:95:92:8c: 58:66:14:fb:3b:3c:59:a4:58:fb:2d:91:49:3e:34: bd:ac:42:9f:a0:16:40:c2:52:5b:6a:f3:b0:f3:f3: 56:0e:e8:d6:b7:0d:33:56:9c:ab:f7:a5:84:eb:ee: 4b:46:01:92:ac:d5:25:95:8c:3a:5a:79:05:0c:d7: 7f:1b:8a:10:76:72:50:a2:c7:83:ae:64:8b:eb:b6: 01:95:c5:34:59:a7:d8:2a:1c:65:f9:c3:0e:f3:3f: 22:54:86:ce:07:2e:0f:1d:b8:6a:5e:f2:3e:33:f5: aa:36:e5:bd:b2:d0:59:00:ac:7c:0a:5c:40:4e:fb: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:63:BE:A5:9B:4A:06:5E:48:D8:D1:12:DB:2B:3F:3B:BD:7F:46:BC X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f8:82:da:f2:46:a1:65:19:c3:6f:8e:11:57:b5:e4:34:5f: 23:9e:a4:2b:ad:da:2c:cb:63:22:ba:e9:b3:d0:4e:5f:fd:b6: 5f:3b:9f:d7:1c:eb:e6:62:05:cc:90:1f:7a:7e:ee:fa:22:39: 7a:d2:5d:72:cc:8c:c3:96:fd:9a:5a:2b:cd:a2:c5:89:cb:63: 48:c7:e6:44:37:75:db:d4:27:09:0d:0f:99:89:70:5b:45:aa: cf:c9:90:c4:7d:e4:d8:ed:44:35:14:15:75:5c:8d:fd:16:c3: bc:4f:8d:2e:33:cd:6c:0f:46:d2:68:e6:e4:93:08:0d:45:e2: c7:0c:37:00:28:ee:fc:bc:4f:62:ba:61:6b:98:61:3b:7d:52: 8f:da:e9:50:a1:78:3d:c3:d5:95:8e:43:d0:72:5e:ad:e4:84: 31:31:57:8f:50:ec:6b:db:11:4e:bc:40:9a:44:75:41:5a:0d: 6f:dc:b9:66:d9:2c:e9:b1:c9:f9:96:3f:12:12:81:1a:0a:19: e7:de:83:02:c0:3c:43:e8:57:c1:4c:e6:f9:6b:05:8d:e1:b4: 34:d9:6f:17:ca:fe:a3:dc:dd:75:55:fe:2c:72:0e:c6:9b:32: 55:44:de:18:92:30:75:3c:6e:f2:39:df:8a:02:f2:bf:03:e5: 0e:7b:af:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCZp83xtrSgjfuWeGjiCaKVxB3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA2MjgwMzM2MTNaFw0yNTA3MDExMjMyMTNaMDMxMTAvBgNV BAMTKDU4NjNCRUE1OUI0QTA2NUU0OEQ4RDExMkRCMkIzRjNCQkQ3RjQ2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXxCCWuTyPvSVOvGsyNvknud5 DOLa9oXMfxTZpHc3fOjGaM/r+LXHv7FWdceQrbfJRGxIDwg6Ypa8AFEPg+78u36k kc3e8oVgcAwnOuPX3ZsMNrqCYbnd/SJtjhx/PZnkYXeOM9EL3iwiGh263yKU+dwF Db8qTua8dcAofMYW4NvxUJWSjFhmFPs7PFmkWPstkUk+NL2sQp+gFkDCUltq87Dz 81YO6Na3DTNWnKv3pYTr7ktGAZKs1SWVjDpaeQUM138bihB2clCix4OuZIvrtgGV xTRZp9gqHGX5ww7zPyJUhs4HLg8duGpe8j4z9ao25b2y0FkArHwKXEBO+0NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWGO+pZtKBl5I2NES2ys/O71/RrwwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv4gtryRqFlGcNvjhFXteQ0XyOepCut2izL YyK66bPQTl/9tl87n9cc6+ZiBcyQH3p+7voiOXrSXXLMjMOW/ZpaK82ixYnLY0jH 5kQ3ddvUJwkND5mJcFtFqs/JkMR95NjtRDUUFXVcjf0Ww7xPjS4zzWwPRtJo5uST CA1F4scMNwAo7vy8T2K6YWuYYTt9Uo/a6VCheD3D1ZWOQ9ByXq3khDExV49Q7Gvb EU68QJpEdUFaDW/cuWbZLOmxyfmWPxISgRoKGefegwLAPEPoV8FM5vlrBY3htDTZ bxfK/qPc3XVV/ixyDsabMlVE3hiSMHU8bvI534oC8r8D5Q57ryM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:34 2025 by rpki-client