$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: klELvgQkJJxvUxX/fZMG4uOP3m1P/kfB8PhQNgIjp0E= Subject key identifier: 45:ED:54:D8:EB:C4:5F:8C:FC:A8:0A:43:6D:19:83:49:8D:A4:E8:E4 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 21D50E311C4C17CB00BB6BD3561D6B55E6058602 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 02D1 Signing time: Tue 01 Jul 2025 03:51:10 +0000 Manifest this update: Tue 01 Jul 2025 03:46:10 +0000 Manifest next update: Fri 04 Jul 2025 09:52:10 +0000 Files and hashes: 1: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: 6UYPyFJ45RwoCVnEO8v6dCKAgYG5jWXhQhZgT3m1rLs=) 2: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ik3JwPueGh0lC4/wMe1++inmZhlbllGr5PVZbJzidbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d5:0e:31:1c:4c:17:cb:00:bb:6b:d3:56:1d:6b:55:e6:05:86:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Jul 1 03:46:10 2025 GMT Not After : Jul 4 09:52:10 2025 GMT Subject: CN=45ED54D8EBC45F8CFCA80A436D1983498DA4E8E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:d6:09:c4:30:00:29:2e:fc:fd:8a:5f:e9: 84:1f:dd:e1:df:26:77:24:f8:e5:6d:7a:93:6d:e9: e6:bd:df:87:32:3f:a9:c4:92:43:64:b2:57:9d:8a: 1b:60:0d:7d:32:ab:83:aa:bb:d2:b1:d2:e4:c9:4f: 15:09:7b:f4:6b:98:b6:7d:2f:78:31:ea:47:a7:2e: 87:d2:41:4b:a8:5a:75:49:7d:b5:3a:91:e4:07:1d: f9:36:a5:fc:07:67:16:09:d3:4d:6a:51:7f:08:e6: e4:60:82:51:ab:dc:28:dd:58:b7:5a:ef:45:ac:0a: b0:05:94:60:6c:cf:17:4d:3b:21:c2:cb:57:f1:2d: 71:49:7c:cc:d2:4a:95:25:0b:62:58:45:8b:ef:67: e0:f7:d5:85:19:68:53:88:8c:83:6e:cd:2e:be:74: d9:27:13:a3:34:e1:8e:43:ef:d8:ab:69:39:f9:45: cb:6f:ff:5f:3c:13:bc:83:39:42:ce:ca:81:30:59: f7:e0:3f:a2:c0:24:a5:b8:fd:ba:8b:33:3b:ec:d4: aa:3b:1a:e3:6a:99:c4:37:32:b3:bf:5d:1d:2f:22: de:c1:fe:55:f3:d6:96:a1:a9:d0:79:84:d1:70:3c: 43:5b:84:c5:5c:36:69:bc:8a:23:e4:1f:14:42:64: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:ED:54:D8:EB:C4:5F:8C:FC:A8:0A:43:6D:19:83:49:8D:A4:E8:E4 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:07:70:91:75:2f:f3:a6:42:bf:37:e6:b3:84:5b:a0:4e:f2: d4:37:5d:c3:79:fd:c3:84:6f:e4:61:c7:bc:2d:b4:7d:98:f7: 8e:32:2f:6a:e2:a8:bf:d1:6b:25:1e:39:46:0e:fa:4d:6a:09: ae:97:8c:c9:79:49:54:45:11:ee:0e:7d:48:f4:60:5a:9f:6f: 84:71:10:0e:6e:7d:c1:d3:96:e7:d0:bb:b1:0e:19:8d:b7:9b: 4c:77:44:08:d9:28:e7:f7:56:91:22:d8:d4:ab:b1:f9:e3:66: cf:be:23:f2:4a:c6:a9:91:10:e9:10:a8:4b:bb:66:75:5f:e8: c8:ce:13:34:87:f9:ba:dc:3f:3d:ba:cc:42:ca:3b:69:7c:25: 14:43:cb:e5:f0:80:38:bb:bf:1b:4a:92:83:c7:79:a6:62:b4: e8:e3:26:8f:07:49:dc:30:93:81:2c:8b:92:26:4e:6c:73:bc: 3a:21:d0:fd:c2:68:41:27:08:07:77:83:55:11:88:1e:2c:11: e9:14:d4:50:32:66:db:05:03:7a:07:7e:3e:64:70:ce:da:e1: 9f:0a:5f:7d:4b:df:40:b7:b6:f8:08:62:e8:7b:c4:45:a7:07: ec:10:a7:f3:c7:7e:a9:b2:26:8a:2f:0a:2b:0a:91:69:a3:a5: 6f:35:44:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdUOMRxMF8sAu2vTVh1rVeYFhgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTA3MDEwMzQ2MTBaFw0yNTA3MDQwOTUyMTBaMDMxMTAvBgNV BAMTKDQ1RUQ1NEQ4RUJDNDVGOENGQ0E4MEE0MzZEMTk4MzQ5OERBNEU4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7U9YJxDAAKS78/Ypf6YQf3eHf Jnck+OVtepNt6ea934cyP6nEkkNksledihtgDX0yq4Oqu9Kx0uTJTxUJe/RrmLZ9 L3gx6kenLofSQUuoWnVJfbU6keQHHfk2pfwHZxYJ001qUX8I5uRgglGr3CjdWLda 70WsCrAFlGBszxdNOyHCy1fxLXFJfMzSSpUlC2JYRYvvZ+D31YUZaFOIjINuzS6+ dNknE6M04Y5D79iraTn5Rctv/188E7yDOULOyoEwWffgP6LAJKW4/bqLMzvs1Ko7 GuNqmcQ3MrO/XR0vIt7B/lXz1pahqdB5hNFwPENbhMVcNmm8iiPkHxRCZHhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURe1U2OvEX4z8qApDbRmDSY2k6OQwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwHcJF1L/OmQr835rOEW6BO8tQ3XcN5/cOE b+Rhx7wttH2Y944yL2riqL/RayUeOUYO+k1qCa6XjMl5SVRFEe4OfUj0YFqfb4Rx EA5ufcHTlufQu7EOGY23m0x3RAjZKOf3VpEi2NSrsfnjZs++I/JKxqmREOkQqEu7 ZnVf6MjOEzSH+brcPz26zELKO2l8JRRDy+XwgDi7vxtKkoPHeaZitOjjJo8HSdww k4Esi5ImTmxzvDoh0P3CaEEnCAd3g1URiB4sEekU1FAyZtsFA3oHfj5kcM7a4Z8K X31L30C3tvgIYuh7xEWnB+wQp/PHfqmyJoovCisKkWmjpW81RP4= -----END CERTIFICATE-----Generated at Tue Jul 1 18:19:56 2025 by rpki-client