$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: Wl9tTvG7hv3CCEYVvp+wLotl3EekN9zIK3ubyLe4yHI= Subject key identifier: BA:40:D3:B3:01:FF:92:FA:D2:E3:09:88:1A:40:4F:7D:23:C6:C4:E1 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 5FCD2FBDA59B3304683EBE41C74662640A9FD413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0220 Signing time: Fri 09 May 2025 08:11:14 +0000 Manifest this update: Fri 09 May 2025 08:06:14 +0000 Manifest next update: Mon 12 May 2025 15:11:14 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: gdmxuVunf8NDoUjLFkG5Lr0/n/SmdVbV/Bg6DJVlQhE=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cd:2f:bd:a5:9b:33:04:68:3e:be:41:c7:46:62:64:0a:9f:d4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: May 9 08:06:14 2025 GMT Not After : May 12 15:11:14 2025 GMT Subject: CN=BA40D3B301FF92FAD2E309881A404F7D23C6C4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:cc:aa:b4:79:ed:df:90:e3:6e:2b:1d:e9: 2e:15:91:48:fa:0a:e4:cf:b3:2d:0d:0e:e3:a2:c0: 5f:d0:05:59:6f:68:4a:35:9a:2a:dd:c2:eb:12:ef: 25:19:96:19:24:b1:e4:66:a9:c0:3e:b8:4e:5c:9d: ab:2c:d7:2b:22:93:43:d4:1a:63:4e:5b:24:e2:83: ce:79:73:52:76:1d:6b:22:3b:bf:38:89:38:30:55: 8b:23:89:60:3c:01:cf:2a:17:b5:f4:0b:70:38:2c: de:ef:8d:e8:27:4f:ee:3c:b9:e7:db:0c:8a:bd:58: 29:7e:5d:58:18:50:43:44:d4:b7:98:4f:1f:19:ce: 9c:69:7d:66:e2:fc:c6:22:20:e6:5f:82:00:d2:b2: f4:04:f9:76:5e:ba:7a:f4:f4:8d:26:92:c7:6b:16: 79:2f:61:e1:be:53:67:e8:00:b8:0e:9b:82:0a:5a: 53:47:39:89:56:b8:a6:a7:bb:20:ce:aa:be:b3:61: a7:ca:03:f9:77:f3:b4:69:81:4b:2f:08:6c:15:38: 35:60:e1:f4:3f:1c:7b:e4:42:05:3d:bb:87:9c:15: a4:c8:8c:c7:62:27:ab:a0:87:bf:bf:72:89:30:1c: 38:16:96:59:0c:c3:ae:07:a6:a6:76:96:64:e9:1a: 7c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:D3:B3:01:FF:92:FA:D2:E3:09:88:1A:40:4F:7D:23:C6:C4:E1 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:40:71:2f:bc:77:2c:ee:a4:9c:a8:44:a2:62:a1:0f:b8:fb: 1d:c3:14:e0:82:05:2d:49:d0:10:8d:ac:91:5f:74:22:59:f5: 45:3d:d4:d2:d8:70:d5:de:52:06:15:a8:3e:ff:43:03:a3:c2: e0:2d:df:f6:e7:ce:f3:c1:53:f9:14:c2:18:34:f8:13:cf:bd: c9:6e:37:f3:2c:9f:1a:90:5f:c5:9a:cb:3c:30:ea:5a:7d:6d: 7c:43:1c:18:64:56:06:d8:6b:4a:0b:0c:be:15:2a:0c:35:a0: ae:b2:c2:95:34:16:61:c5:ec:e5:0b:27:ca:23:9c:53:3d:f5: 74:5e:45:db:04:07:d9:9b:b6:4f:91:39:51:74:c7:e1:da:f4: 90:19:dc:24:8b:46:fd:73:9a:30:66:b2:67:9b:21:e4:66:43: 9c:63:a5:2a:5c:92:cc:c3:fa:6a:b4:35:3c:9d:ae:ba:b5:6e: b3:68:b7:d7:6e:da:cf:7f:be:03:26:f5:24:e5:16:b1:57:5f: 95:e5:98:b9:76:92:d2:53:78:e8:30:dd:ae:11:5d:9a:fc:76: f6:77:86:f4:3c:75:b9:f5:db:48:ee:eb:f0:56:1d:be:e1:e6: cb:f8:18:93:04:65:09:da:5f:69:bb:5e:16:d6:a0:9b:ff:83: 03:e5:f4:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX80vvaWbMwRoPr5Bx0ZiZAqf1BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTA1MDkwODA2MTRaFw0yNTA1MTIxNTExMTRaMDMxMTAvBgNV BAMTKEJBNDBEM0IzMDFGRjkyRkFEMkUzMDk4ODFBNDA0RjdEMjNDNkM0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JMyqtHnt35Djbisd6S4VkUj6 CuTPsy0NDuOiwF/QBVlvaEo1mirdwusS7yUZlhkkseRmqcA+uE5cnass1ysik0PU GmNOWyTig855c1J2HWsiO784iTgwVYsjiWA8Ac8qF7X0C3A4LN7vjegnT+48uefb DIq9WCl+XVgYUENE1LeYTx8ZzpxpfWbi/MYiIOZfggDSsvQE+XZeunr09I0mksdr FnkvYeG+U2foALgOm4IKWlNHOYlWuKanuyDOqr6zYafKA/l387RpgUsvCGwVODVg 4fQ/HHvkQgU9u4ecFaTIjMdiJ6ugh7+/cokwHDgWllkMw64HpqZ2lmTpGnwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUukDTswH/kvrS4wmIGkBPfSPGxOEwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVAcS+8dyzupJyoRKJioQ+4+x3DFOCCBS1J 0BCNrJFfdCJZ9UU91NLYcNXeUgYVqD7/QwOjwuAt3/bnzvPBU/kUwhg0+BPPvclu N/MsnxqQX8Wayzww6lp9bXxDHBhkVgbYa0oLDL4VKgw1oK6ywpU0FmHF7OULJ8oj nFM99XReRdsEB9mbtk+ROVF0x+Ha9JAZ3CSLRv1zmjBmsmebIeRmQ5xjpSpckszD +mq0NTydrrq1brNot9du2s9/vgMm9STlFrFXX5XlmLl2ktJTeOgw3a4RXZr8dvZ3 hvQ8dbn120ju6/BWHb7h5sv4GJMEZQnaX2m7XhbWoJv/gwPl9IQ= -----END CERTIFICATE-----Generated at Sat May 10 08:18:29 2025 by rpki-client