$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: k2SF6bKHu6LRgPPlnGMxJXC6b/A0wG0l746D9zhaYbg= Subject key identifier: 75:9E:53:79:27:96:39:58:2F:C5:65:59:79:E3:12:94:AB:40:BC:90 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 6ADC87D793CEA5AC9973340A02ECE8CA6A568744 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: A9 Signing time: Sun 29 Jun 2025 23:11:08 +0000 Manifest this update: Sun 29 Jun 2025 23:06:08 +0000 Manifest next update: Thu 03 Jul 2025 02:34:08 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: +G5QCRceXf0/deX+Ek+/oGxLQ1n0aDvYf+Mtiw+z2bc=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:dc:87:d7:93:ce:a5:ac:99:73:34:0a:02:ec:e8:ca:6a:56:87:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Jun 29 23:06:08 2025 GMT Not After : Jul 3 02:34:08 2025 GMT Subject: CN=759E5379279639582FC5655979E31294AB40BC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:4a:62:c5:a5:aa:fb:99:15:71:e0:3a:24: 48:ef:66:8b:62:53:d7:81:19:8b:86:8f:49:5e:b6: 81:8e:89:8d:b5:58:2c:32:08:9d:c6:73:a8:86:30: 85:2e:38:79:8d:3f:c2:67:24:c8:52:ff:24:d1:6f: 6f:2b:c0:c9:5a:0f:56:ac:a2:53:8a:d6:e7:31:29: c4:ed:0d:6e:1e:bd:af:bb:c7:4c:ca:9c:28:52:9e: 56:6b:76:bc:1f:71:9f:0d:c6:15:a5:2c:81:52:31: 6e:da:56:26:9e:bd:22:22:e7:ff:b2:25:1b:25:96: 27:b4:2b:a8:57:5f:ba:69:07:13:01:7d:ce:c6:e1: 07:aa:3f:03:d7:2d:1a:36:ba:ad:b7:1f:96:8b:a3: ac:f7:54:e5:5f:14:55:e5:0b:32:e3:ce:c9:98:de: 17:42:0e:dd:13:36:92:ae:d0:6c:1f:82:26:12:22: da:50:99:58:14:b1:3d:d8:7d:d0:59:ab:43:a1:8a: fa:42:de:e1:6a:aa:da:bb:48:75:9a:d9:6b:8b:80: ee:57:cf:eb:70:93:54:ed:b8:61:e6:cb:da:89:c6: 47:6d:af:79:95:6f:bd:8b:e0:a4:10:37:11:e0:99: a5:3a:58:3c:48:75:f5:46:36:df:e9:82:ac:cc:47: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9E:53:79:27:96:39:58:2F:C5:65:59:79:E3:12:94:AB:40:BC:90 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f5:fd:1c:65:70:ac:74:77:a4:2e:0b:84:e1:6d:16:74:2b: 1c:10:a7:43:91:89:db:b3:81:12:d0:3d:76:d7:52:66:48:1a: 3b:d6:ad:5e:2f:bb:72:50:e9:48:72:36:6b:bf:b8:23:6d:f7: 7c:71:59:f8:e7:82:7b:a0:21:92:8a:ca:76:e8:bc:db:9b:9a: ab:ff:7c:9a:5f:05:ed:7d:0c:6b:76:ed:3b:02:4b:75:a6:96: eb:26:a6:2a:79:29:c0:81:78:79:ab:51:e3:ff:09:91:d9:22: 92:1b:31:d9:2e:b4:ea:9b:6b:b8:84:3d:f4:82:5d:99:d7:20: 30:0c:bb:2c:33:44:19:78:ed:38:5b:55:d2:6d:6c:c8:0d:33: 89:64:f7:47:6c:cc:1d:17:a8:17:6f:42:d7:a7:a7:10:eb:9b: 95:ac:bb:fa:c2:e9:03:6c:94:9c:74:35:b7:8d:ee:e3:3d:94: 89:1d:d0:79:ca:bb:6b:c9:39:6b:42:6a:23:7e:50:33:1b:1a: 92:87:44:79:8b:f9:c5:dc:df:e4:03:69:3b:4b:a0:ed:71:8c: cc:da:a0:94:12:5e:3f:10:29:44:90:cb:c7:92:6b:87:1d:06: f5:8f:c9:78:aa:ec:20:8d:39:8a:09:32:0f:cf:76:2a:b4:f5: 7f:23:4c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatyH15POpayZczQKAuzoympWh0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA2MjkyMzA2MDhaFw0yNTA3MDMwMjM0MDhaMDMxMTAvBgNV BAMTKDc1OUU1Mzc5Mjc5NjM5NTgyRkM1NjU1OTc5RTMxMjk0QUI0MEJDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDkpixaWq+5kVceA6JEjvZoti U9eBGYuGj0letoGOiY21WCwyCJ3Gc6iGMIUuOHmNP8JnJMhS/yTRb28rwMlaD1as olOK1ucxKcTtDW4eva+7x0zKnChSnlZrdrwfcZ8NxhWlLIFSMW7aViaevSIi5/+y JRsllie0K6hXX7ppBxMBfc7G4QeqPwPXLRo2uq23H5aLo6z3VOVfFFXlCzLjzsmY 3hdCDt0TNpKu0GwfgiYSItpQmVgUsT3YfdBZq0OhivpC3uFqqtq7SHWa2WuLgO5X z+twk1TtuGHmy9qJxkdtr3mVb72L4KQQNxHgmaU6WDxIdfVGNt/pgqzMR4mFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdZ5TeSeWOVgvxWVZeeMSlKtAvJAwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAf1/RxlcKx0d6QuC4ThbRZ0KxwQp0ORiduz gRLQPXbXUmZIGjvWrV4vu3JQ6UhyNmu/uCNt93xxWfjngnugIZKKynbovNubmqv/ fJpfBe19DGt27TsCS3Wmlusmpip5KcCBeHmrUeP/CZHZIpIbMdkutOqba7iEPfSC XZnXIDAMuywzRBl47ThbVdJtbMgNM4lk90dszB0XqBdvQtenpxDrm5Wsu/rC6QNs lJx0NbeN7uM9lIkd0HnKu2vJOWtCaiN+UDMbGpKHRHmL+cXc3+QDaTtLoO1xjMza oJQSXj8QKUSQy8eSa4cdBvWPyXiq7CCNOYoJMg/Pdiq09X8jTL4= -----END CERTIFICATE-----Generated at Tue Jul 1 20:59:47 2025 by rpki-client