$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: GkZscTFdPS3iPnIiI5mashfM6A7d2ldfCOhm2zmSVcM= Subject key identifier: 53:EF:15:AA:02:30:55:E0:80:94:AE:1D:BF:71:95:03:87:88:B4:DE Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 5A6C6C1E54FA41200B1C1E57C8D8F2B0E3F06819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 04D4 Signing time: Sun 04 May 2025 10:41:11 +0000 Manifest this update: Sun 04 May 2025 10:36:11 +0000 Manifest next update: Wed 07 May 2025 12:40:11 +0000 Files and hashes: 1: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: 8zAQ86fhc8OVdskGyzWu9yQ7r5OHZaWOc1iXuXRtqpY=) 2: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 6TEL2dsBRYwHl7j9Gt3Q8OuHg9rXDaEOjIkwVxguswU=) 3: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: gwCL3bf8ZYDEakqa3g/8jLVhUBUPIyS/P9TiFjOt9l8=) 4: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: 0Z1hyixVKIjnj8ECdxc9rChwhaKXmIXyShCAYj8xZLI=) 5: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: 8kPPHzXghQqLFdKgJ7XYByHPMXkLSq/gvTSF/ClNz60=) 6: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: m+smJFgQDts16c5oEQ+5mQQd2jCWdjsIJsNUoSqe8t0=) 7: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: c0lEeym7RdSsZ9PVuI0xHhhN0iADI7UVsii/DrQAQBY=) 8: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: fiFsvT18rLuewksf7F3KQCCD4+uQ/f/ELx/FNUK9lpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 12:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6c:6c:1e:54:fa:41:20:0b:1c:1e:57:c8:d8:f2:b0:e3:f0:68:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: May 4 10:36:11 2025 GMT Not After : May 7 12:40:11 2025 GMT Subject: CN=53EF15AA023055E08094AE1DBF7195038788B4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:36:a4:06:0d:13:37:3a:43:11:9a:d5:63: e9:41:3b:e2:b4:e1:8a:db:6d:ee:ba:ce:47:f7:e3: b4:92:8c:2c:53:ae:f8:53:f8:6b:9e:0e:2b:8c:1f: fb:13:5f:5a:41:a8:74:f6:f1:d5:6b:49:5f:41:4e: dc:3f:08:d1:ff:bb:7d:ad:a4:f9:ca:08:af:7b:c8: 58:90:da:66:8f:e9:f3:1e:e8:88:55:29:78:59:25: 78:ae:ea:89:d7:c0:9c:e7:bd:88:bf:35:de:ff:d2: 3a:96:b7:47:85:d1:76:55:0d:75:b7:36:fe:61:77: e5:77:85:a9:2d:32:ea:08:83:b8:fc:24:49:3b:79: 96:0a:d3:38:7e:70:28:42:50:56:1e:62:85:95:29: 7d:cd:1a:79:69:31:84:59:ad:9c:06:33:f6:09:46: f0:92:89:54:24:93:88:d1:5c:cf:6f:d5:b7:26:e6: 49:49:ce:32:ac:41:18:e5:7f:4f:f6:18:5f:e4:11: 09:24:8b:3f:25:b8:dd:31:31:5e:d1:08:56:5a:0b: be:80:5b:a2:58:53:8f:02:e5:34:da:1f:f9:9f:0b: f7:ef:5b:c7:2f:18:cc:e8:c9:dd:54:45:75:97:49: be:89:a7:98:31:cb:52:c9:50:34:b3:ea:8a:83:37: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EF:15:AA:02:30:55:E0:80:94:AE:1D:BF:71:95:03:87:88:B4:DE X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:65:e7:4a:f9:ab:e7:c3:7c:ff:84:46:2d:e9:8f:85:5c:eb: 66:11:fb:0b:c8:0f:a6:c4:60:81:e3:57:79:33:57:77:79:cf: c5:fd:4a:82:64:cc:1e:b7:f9:ca:97:62:76:23:b1:91:67:41: 01:c6:c1:31:e2:4b:a0:8d:72:da:c1:a0:c6:28:66:b8:82:e9: f6:54:74:9b:ea:df:d1:61:ed:0a:ed:b8:6f:e5:13:bf:8f:a3: c7:b3:ca:0f:2d:a5:79:31:63:82:3e:5b:09:57:5d:e7:52:fc: 1f:15:c4:64:e9:5d:b0:52:b8:4c:9e:6a:38:8e:fa:30:69:92: c9:d5:99:1e:03:07:57:26:31:56:b3:77:d3:d9:bc:17:5a:4f: 00:97:28:75:e5:82:b3:54:90:b7:1c:80:47:64:44:8f:c1:af: 38:a6:10:26:58:eb:0f:b8:50:48:bc:f7:0e:b7:2b:fa:5b:80: 67:05:9b:d8:90:9c:16:63:f2:de:5d:db:32:b3:26:a3:40:c1: f7:cf:32:22:e5:b5:0d:a8:cd:0d:0d:eb:7c:e1:bb:84:47:3e: bd:16:cc:76:70:88:de:5a:eb:c2:2b:d4:6f:e9:e2:27:c4:01: 70:37:b2:47:9c:40:69:48:aa:0c:79:dd:a3:59:41:98:8e:66: 19:dd:23:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmxsHlT6QSALHB5XyNjysOPwaBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA1MDQxMDM2MTFaFw0yNTA1MDcxMjQwMTFaMDMxMTAvBgNV BAMTKDUzRUYxNUFBMDIzMDU1RTA4MDk0QUUxREJGNzE5NTAzODc4OEI0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tDakBg0TNzpDEZrVY+lBO+K0 4Yrbbe66zkf347SSjCxTrvhT+GueDiuMH/sTX1pBqHT28dVrSV9BTtw/CNH/u32t pPnKCK97yFiQ2maP6fMe6IhVKXhZJXiu6onXwJznvYi/Nd7/0jqWt0eF0XZVDXW3 Nv5hd+V3haktMuoIg7j8JEk7eZYK0zh+cChCUFYeYoWVKX3NGnlpMYRZrZwGM/YJ RvCSiVQkk4jRXM9v1bcm5klJzjKsQRjlf0/2GF/kEQkkiz8luN0xMV7RCFZaC76A W6JYU48C5TTaH/mfC/fvW8cvGMzoyd1URXWXSb6Jp5gxy1LJUDSz6oqDN1QVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+8VqgIwVeCAlK4dv3GVA4eItN4wHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZl50r5q+fDfP+ERi3pj4Vc62YR+wvID6bE YIHjV3kzV3d5z8X9SoJkzB63+cqXYnYjsZFnQQHGwTHiS6CNctrBoMYoZriC6fZU dJvq39Fh7QrtuG/lE7+Po8ezyg8tpXkxY4I+WwlXXedS/B8VxGTpXbBSuEyeajiO +jBpksnVmR4DB1cmMVazd9PZvBdaTwCXKHXlgrNUkLccgEdkRI/BrzimECZY6w+4 UEi89w63K/pbgGcFm9iQnBZj8t5d2zKzJqNAwffPMiLltQ2ozQ0N63zhu4RHPr0W zHZwiN5a68Ir1G/p4ifEAXA3skecQGlIqgx53aNZQZiOZhndI9k= -----END CERTIFICATE-----Generated at Tue May 6 09:25:53 2025 by rpki-client