$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: NE8bZ6cL6fZfuCXpS7QbvmA1vHe4ruRtWfGYYznhbNg= Subject key identifier: 80:80:78:37:B4:48:2C:E7:94:FA:69:67:BD:D0:88:1C:99:F6:2E:C9 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 7EB2D23F7DA2B151FD88E99CACD34378586F4879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 013C Signing time: Sun 29 Jun 2025 13:40:47 +0000 Manifest this update: Sun 29 Jun 2025 13:35:47 +0000 Manifest next update: Wed 02 Jul 2025 15:39:47 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) 2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: PX0Z/Vs2Fp8bFVPsEs7XBNfeM8JS7PHZv65iKfhNvGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b2:d2:3f:7d:a2:b1:51:fd:88:e9:9c:ac:d3:43:78:58:6f:48:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Jun 29 13:35:47 2025 GMT Not After : Jul 2 15:39:47 2025 GMT Subject: CN=80807837B4482CE794FA6967BDD0881C99F62EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:27:dc:92:70:46:32:b0:aa:2c:16:59:33: b3:43:a8:38:4c:7e:8a:db:36:08:71:53:fe:34:09: 0e:77:b3:46:6e:dd:e7:27:75:0e:06:80:3a:1d:f0: 87:e9:50:c3:ca:4f:89:5c:84:42:b9:94:39:ba:ef: 22:b2:8b:a2:20:61:5e:07:4c:f2:58:76:7e:d5:1a: 40:dd:f8:22:ba:d2:36:96:3c:e8:6a:ea:47:04:7c: cf:28:de:4a:2c:68:ff:45:fc:67:6e:53:a3:e9:b5: 79:64:98:ad:2b:89:5c:e4:97:97:19:2b:fb:50:ae: cb:04:d9:e5:5f:c8:46:7a:b1:c4:b5:36:f5:b6:7b: 49:63:8c:0b:b5:e0:56:3f:14:ac:7a:43:f7:40:49: b3:e9:ad:9a:a1:60:b8:13:ad:7f:e9:a8:78:ed:aa: f9:48:e6:19:fe:ed:ea:34:48:63:dc:45:ae:5c:da: 49:d9:e9:cc:88:a2:7e:51:c8:82:2e:00:c6:3a:4a: ae:09:f9:df:2e:42:93:18:17:0a:5e:ee:2c:a2:2a: cd:fd:eb:06:bc:ad:e2:13:b3:cf:a2:8d:6d:ed:a4: 20:74:37:e5:38:f3:db:56:bd:63:b6:29:d5:0d:cf: dc:1e:e7:fb:5e:10:45:73:dd:e9:37:2e:f6:2c:8e: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:80:78:37:B4:48:2C:E7:94:FA:69:67:BD:D0:88:1C:99:F6:2E:C9 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:80:75:6d:21:a2:b6:3c:cd:03:ea:a7:e1:4f:0e:bb:c9:45: f3:7f:a1:c2:c2:8e:ee:11:4f:75:5d:9f:2e:42:71:14:45:be: 2c:f6:5d:dd:4e:f9:4c:4b:2e:02:28:90:1a:bb:43:2f:8c:66: ee:62:36:4e:74:f0:ae:78:53:36:90:60:03:fa:8c:66:14:ec: d5:79:06:e6:ef:bb:f6:8e:7e:fe:f9:67:2c:a0:17:47:a0:02: ca:62:6a:af:d2:8e:1f:63:80:7f:29:f1:2f:a8:69:81:41:b3: 5c:2c:76:4b:69:42:f8:8c:28:fe:75:9d:4e:91:30:5c:06:47: d2:55:f7:44:0f:47:c3:c8:84:a0:71:69:9b:1d:77:35:a4:17: 6b:3b:cc:6a:6c:0e:25:83:f9:77:61:f7:71:e4:1f:36:9a:bf: c1:b8:d5:94:6c:9c:d8:77:96:d9:0a:a5:75:23:85:51:ea:75: 27:42:9c:0a:89:54:47:10:3f:44:38:7f:5a:81:5f:1c:45:be: 25:56:cf:d6:32:09:7c:c3:e3:9c:97:a6:62:22:1c:23:e9:00: 60:1e:cd:d1:88:f0:19:89:0d:1f:d5:66:2e:d0:92:72:5a:f9: e4:28:64:2b:45:95:b9:1a:e8:f3:19:ca:7f:19:28:d1:08:64: 64:ec:df:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfrLSP32isVH9iOmcrNNDeFhvSHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTA2MjkxMzM1NDdaFw0yNTA3MDIxNTM5NDdaMDMxMTAvBgNV BAMTKDgwODA3ODM3QjQ0ODJDRTc5NEZBNjk2N0JERDA4ODFDOTlGNjJFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzSfcknBGMrCqLBZZM7NDqDhM forbNghxU/40CQ53s0Zu3ecndQ4GgDod8IfpUMPKT4lchEK5lDm67yKyi6IgYV4H TPJYdn7VGkDd+CK60jaWPOhq6kcEfM8o3kosaP9F/GduU6PptXlkmK0riVzkl5cZ K/tQrssE2eVfyEZ6scS1NvW2e0ljjAu14FY/FKx6Q/dASbPprZqhYLgTrX/pqHjt qvlI5hn+7eo0SGPcRa5c2knZ6cyIon5RyIIuAMY6Sq4J+d8uQpMYFwpe7iyiKs39 6wa8reITs8+ijW3tpCB0N+U489tWvWO2KdUNz9we5/teEEVz3ek3LvYsjlYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgIB4N7RILOeU+mlnvdCIHJn2LskwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6AdW0horY8zQPqp+FPDrvJRfN/ocLCju4R T3Vdny5CcRRFviz2Xd1O+UxLLgIokBq7Qy+MZu5iNk508K54UzaQYAP6jGYU7NV5 Bubvu/aOfv75ZyygF0egAspiaq/Sjh9jgH8p8S+oaYFBs1wsdktpQviMKP51nU6R MFwGR9JV90QPR8PIhKBxaZsddzWkF2s7zGpsDiWD+Xdh93HkHzaav8G41ZRsnNh3 ltkKpXUjhVHqdSdCnAqJVEcQP0Q4f1qBXxxFviVWz9YyCXzD45yXpmIiHCPpAGAe zdGI8BmJDR/VZi7QknJa+eQoZCtFlbka6PMZyn8ZKNEIZGTs3wg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:23:24 2025 by rpki-client