$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: 8N8h7nDyOUlQue85hGjTl+fiFAPgJSQdWkShMpZNWVE= Subject key identifier: A1:77:8A:3E:59:3F:EE:5D:29:0A:21:93:48:F1:44:82:17:8D:ED:DB Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 426026AA6BC5BCD26F333FE6A06E3E4B4CE0D7A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 04A4 Signing time: Fri 27 Jun 2025 15:31:53 +0000 Manifest this update: Fri 27 Jun 2025 15:26:53 +0000 Manifest next update: Mon 30 Jun 2025 18:23:53 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: W6WFo2Hu+QfbijXkpTTas8+VNp9aDLxId/mc15FAtA0=) 2: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: gIdaOIABWwOBf8kzyPSbmNuf0NHJWqoM7Eibp1/hsCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 18:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:60:26:aa:6b:c5:bc:d2:6f:33:3f:e6:a0:6e:3e:4b:4c:e0:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Jun 27 15:26:53 2025 GMT Not After : Jun 30 18:23:53 2025 GMT Subject: CN=A1778A3E593FEE5D290A219348F14482178DEDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:c1:ff:e5:8f:7b:d4:a0:06:31:68:68:ab: b2:d9:93:86:09:f2:af:61:48:bb:39:0b:e6:07:a7: bd:f6:12:2f:d7:4d:06:e0:b8:2f:44:18:20:fa:95: 71:3c:a2:f8:10:56:5b:10:2e:4d:2c:57:33:70:7e: d1:b8:35:5c:84:5b:24:97:0e:e4:a9:fe:c7:cf:23: 87:11:01:5e:c7:6e:0c:98:ca:fc:25:76:46:51:fe: 26:b3:e1:e2:3e:c8:27:59:b2:81:59:0d:04:55:38: c1:5c:48:9e:da:f6:6d:64:88:f6:09:e9:f3:7a:d3: fc:bd:d7:26:7b:3f:c3:95:8f:55:39:57:8b:45:b6: c3:71:0c:ca:39:5d:93:43:b5:ad:a5:ac:b0:66:57: ed:e5:79:45:b6:b7:59:8d:83:c8:49:0c:78:55:fb: f8:9a:b3:d2:e1:ea:f2:e6:13:f3:8d:06:9a:bc:18: 73:89:39:80:e3:66:9a:ad:6a:ed:30:27:8e:52:94: 9b:da:4a:d6:2d:ae:d3:5e:78:cb:56:50:b3:bc:54: 11:ad:9e:b4:20:7e:14:17:91:63:d4:0a:49:db:0b: 10:78:c4:2c:fb:90:d1:5c:c0:3e:a0:f8:c0:81:3d: 0a:c7:98:94:d3:ea:a8:6d:27:4a:ff:96:c0:3a:d0: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:77:8A:3E:59:3F:EE:5D:29:0A:21:93:48:F1:44:82:17:8D:ED:DB X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:10:c2:85:7a:d1:7a:52:e2:73:58:a0:f1:98:81:30:23:ae: 16:e4:9e:ed:34:58:b0:45:9a:c8:4d:f3:f8:5b:65:ea:b9:5c: 29:41:a1:84:87:0d:8c:c5:03:50:3f:5a:cd:ab:1b:fb:0b:46: 3b:04:fc:a7:0d:47:b7:4e:4b:3d:89:d3:a8:7b:50:30:10:98: 03:85:50:e2:b1:2f:c7:ae:c2:c0:09:2c:53:7d:ce:b0:ff:4f: 8b:59:e6:84:25:82:87:90:7a:27:22:f1:2b:25:bd:c4:81:f6: d3:6b:66:9d:db:81:be:dd:00:36:0b:31:fd:39:26:68:f2:d9: 95:75:e0:47:2f:d1:ae:32:7a:fc:b0:2b:db:23:f5:70:c8:04: 4b:be:cb:33:fd:0a:22:3f:cb:1a:60:ca:e7:18:b5:05:02:2d: 7f:4d:8e:4e:0f:b1:23:c0:74:39:c5:b4:ca:85:70:2b:4a:67: da:eb:2b:6d:f6:49:5a:5d:26:00:f6:28:a2:f5:94:84:43:80: 93:37:68:41:bd:59:88:d0:f8:a7:ee:3d:fa:e9:0f:ae:68:76: ea:9b:fb:c1:f8:6d:e2:d0:90:b6:e8:5e:8f:01:4a:32:5a:df: ae:16:8d:7b:60:92:13:fe:0c:88:68:41:7e:26:a7:19:55:5a: 1a:44:4f:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmAmqmvFvNJvMz/moG4+S0zg16cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNTA2MjcxNTI2NTNaFw0yNTA2MzAxODIzNTNaMDMxMTAvBgNV BAMTKEExNzc4QTNFNTkzRkVFNUQyOTBBMjE5MzQ4RjE0NDgyMTc4REVEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8P8H/5Y971KAGMWhoq7LZk4YJ 8q9hSLs5C+YHp732Ei/XTQbguC9EGCD6lXE8ovgQVlsQLk0sVzNwftG4NVyEWySX DuSp/sfPI4cRAV7HbgyYyvwldkZR/iaz4eI+yCdZsoFZDQRVOMFcSJ7a9m1kiPYJ 6fN60/y91yZ7P8OVj1U5V4tFtsNxDMo5XZNDta2lrLBmV+3leUW2t1mNg8hJDHhV +/ias9Lh6vLmE/ONBpq8GHOJOYDjZpqtau0wJ45SlJvaStYtrtNeeMtWULO8VBGt nrQgfhQXkWPUCknbCxB4xCz7kNFcwD6g+MCBPQrHmJTT6qhtJ0r/lsA60Li7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoXeKPlk/7l0pCiGTSPFEgheN7dswHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQQwoV60XpS4nNYoPGYgTAjrhbknu00WLBF mshN8/hbZeq5XClBoYSHDYzFA1A/Ws2rG/sLRjsE/KcNR7dOSz2J06h7UDAQmAOF UOKxL8euwsAJLFN9zrD/T4tZ5oQlgoeQeici8SslvcSB9tNrZp3bgb7dADYLMf05 Jmjy2ZV14Ecv0a4yevywK9sj9XDIBEu+yzP9CiI/yxpgyucYtQUCLX9Njk4PsSPA dDnFtMqFcCtKZ9rrK232SVpdJgD2KKL1lIRDgJM3aEG9WYjQ+KfuPfrpD65oduqb +8H4beLQkLboXo8BSjJa364WjXtgkhP+DIhoQX4mpxlVWhpETz4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:37 2025 by rpki-client