$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: Njf/DeS+BJqwHH9NgeWUg5BuGsHfvkPOxYKTgJHn1yg= Subject key identifier: C7:4C:51:7E:37:2A:A9:E3:9E:A7:EF:19:C9:60:50:CA:0E:DD:9E:7F Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 43EC9E8311F33B774D70EBEA34971E10CD4F90BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 0175 Signing time: Tue 01 Jul 2025 12:41:09 +0000 Manifest this update: Tue 01 Jul 2025 12:36:09 +0000 Manifest next update: Fri 04 Jul 2025 14:17:09 +0000 Files and hashes: 1: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) 2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) 3: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: e3LtMgUuVWy455k++hqaJ7izlzNjwEvCnpPnGLEnAss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 14:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ec:9e:83:11:f3:3b:77:4d:70:eb:ea:34:97:1e:10:cd:4f:90:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Jul 1 12:36:09 2025 GMT Not After : Jul 4 14:17:09 2025 GMT Subject: CN=C74C517E372AA9E39EA7EF19C96050CA0EDD9E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:86:91:4c:99:cb:07:72:95:4a:75:7c:98: 13:2d:4d:83:aa:9c:cf:63:1c:79:a1:41:80:24:69: b7:a6:5f:0f:d6:fa:50:3a:b0:82:85:10:37:d0:f1: 28:20:dc:b0:00:8c:06:2c:43:1f:20:06:a6:a3:89: cc:95:c0:5e:82:e1:a2:71:e2:f9:0a:86:2a:f2:48: a2:22:5e:27:19:32:5b:3f:ce:5a:4d:46:24:36:af: da:74:05:13:40:d9:30:4f:03:11:93:e2:ea:4d:83: 66:c0:44:7f:93:3e:48:b5:b3:00:31:f0:5f:80:35: ca:09:e8:0c:b2:c7:67:03:51:f3:32:9b:97:19:82: 51:8c:55:15:f7:40:3b:8e:55:f0:19:a3:f0:70:28: 7e:98:a5:c2:cf:b7:fd:cb:6e:2f:81:02:dc:7a:10: 2f:3a:59:e9:65:29:02:84:73:36:c9:4d:fa:9d:d6: 37:7d:41:a1:be:43:53:80:3d:e9:48:68:36:3b:d6: 53:a6:79:dd:17:93:e8:ef:94:af:96:30:59:da:a2: 47:5a:a3:66:38:8a:ca:c1:ed:4e:16:5e:60:af:b7: 5d:bf:0b:d1:ee:a6:71:ac:84:7c:17:0d:0c:b2:9b: 1f:26:11:af:bf:7e:84:fd:b4:66:5b:ab:e6:f2:7f: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:51:7E:37:2A:A9:E3:9E:A7:EF:19:C9:60:50:CA:0E:DD:9E:7F X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5f:6b:ad:8a:76:06:60:4d:23:97:28:cb:37:12:98:03:16: b4:23:5e:15:bb:3f:b7:8f:c6:5f:a0:3c:c3:7a:48:be:52:27: 31:e8:73:06:ef:3d:02:c8:03:bc:19:dc:15:e5:87:74:18:23: 1b:f0:de:9c:dc:41:33:53:7d:99:c5:f8:7b:24:57:71:3a:b1: 12:3e:07:46:a8:cc:45:6a:14:24:a5:d3:18:15:0d:e2:3d:e4: 8e:1c:e1:c7:af:e9:66:fa:10:c2:66:7a:70:e3:aa:39:18:1a: 6d:dc:c2:6d:57:6e:14:68:60:36:67:26:1c:53:24:1a:08:19: 60:61:74:e7:76:df:91:1e:24:00:b9:81:5d:e3:eb:1a:d9:74: 2c:4d:a2:c0:ff:c7:12:dc:bb:8a:d6:a3:4f:86:22:ce:ed:f4: b4:12:31:ed:34:20:3c:c2:9b:b0:94:1b:df:51:c8:4e:9c:d2: 1b:28:3c:4d:ee:3b:6e:75:9b:42:b1:98:4f:13:7b:62:8b:de: 65:09:80:51:ed:d8:eb:af:4a:aa:fd:fb:4d:83:ac:b0:c1:c2: c9:65:1a:a3:c1:4e:f2:54:99:c5:7d:ea:92:f3:86:14:f5:75: 20:9e:d2:da:36:ea:30:9b:c4:84:b2:95:fc:86:79:f4:15:8f: 63:32:18:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+yegxHzO3dNcOvqNJceEM1PkLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTA3MDExMjM2MDlaFw0yNTA3MDQxNDE3MDlaMDMxMTAvBgNV BAMTKEM3NEM1MTdFMzcyQUE5RTM5RUE3RUYxOUM5NjA1MENBMEVERDlFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5moaRTJnLB3KVSnV8mBMtTYOq nM9jHHmhQYAkabemXw/W+lA6sIKFEDfQ8Sgg3LAAjAYsQx8gBqajicyVwF6C4aJx 4vkKhirySKIiXicZMls/zlpNRiQ2r9p0BRNA2TBPAxGT4upNg2bARH+TPki1swAx 8F+ANcoJ6Ayyx2cDUfMym5cZglGMVRX3QDuOVfAZo/BwKH6YpcLPt/3Lbi+BAtx6 EC86WellKQKEczbJTfqd1jd9QaG+Q1OAPelIaDY71lOmed0Xk+jvlK+WMFnaokda o2Y4isrB7U4WXmCvt12/C9HupnGshHwXDQyymx8mEa+/foT9tGZbq+byf87XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx0xRfjcqqeOep+8ZyWBQyg7dnn8wHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNfa62KdgZgTSOXKMs3EpgDFrQjXhW7P7eP xl+gPMN6SL5SJzHocwbvPQLIA7wZ3BXlh3QYIxvw3pzcQTNTfZnF+HskV3E6sRI+ B0aozEVqFCSl0xgVDeI95I4c4cev6Wb6EMJmenDjqjkYGm3cwm1XbhRoYDZnJhxT JBoIGWBhdOd235EeJAC5gV3j6xrZdCxNosD/xxLcu4rWo0+GIs7t9LQSMe00IDzC m7CUG99RyE6c0hsoPE3uO251m0KxmE8Te2KL3mUJgFHt2OuvSqr9+02DrLDBwsll GqPBTvJUmcV96pLzhhT1dSCe0to26jCbxISylfyGefQVj2MyGAM= -----END CERTIFICATE-----Generated at Thu Jul 3 06:48:24 2025 by rpki-client