$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: 0wvw/pgOWrJTF0AHukTCokXoxffC5A5b4vH5a3j/o6s= Subject key identifier: BF:BB:09:5B:38:B2:04:9F:E8:0C:AA:C6:27:D8:ED:12:C7:8A:53:AE Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 34C894659B0C35D2F95276540225BE1F6AFEBB77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0104 Signing time: Tue 01 Jul 2025 15:41:23 +0000 Manifest this update: Tue 01 Jul 2025 15:36:23 +0000 Manifest next update: Fri 04 Jul 2025 21:05:23 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: Sh2ahHo2vx0VefU0fIGxJdD6J9/Blbf3sv24iCZWiw4=) 2: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: +K8jSaIKdbMKlRZezce5Skmxiv7bfa87zyk2FeDmj90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 21:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c8:94:65:9b:0c:35:d2:f9:52:76:54:02:25:be:1f:6a:fe:bb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Jul 1 15:36:23 2025 GMT Not After : Jul 4 21:05:23 2025 GMT Subject: CN=BFBB095B38B2049FE80CAAC627D8ED12C78A53AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:56:be:0c:b7:d2:b7:48:3a:72:04:75:71: 7d:bd:38:1a:8e:d5:bb:4f:aa:76:8d:f8:91:e9:e9: ba:af:e2:0b:0e:74:a5:d3:d7:8e:4d:d1:ee:a7:94: b2:76:33:55:b4:ba:96:f4:5a:e2:11:ce:0c:68:e9: 1c:9f:11:cc:bb:6d:d3:90:70:54:dd:de:19:75:a8: 70:be:a4:5b:fa:4e:21:55:ac:d6:03:a8:5f:f6:85: 15:b9:f7:33:2d:97:6c:76:90:09:ef:92:0c:0c:eb: b2:22:c4:e1:1b:19:0a:b3:aa:35:16:87:f8:20:79: 47:0a:04:c7:be:8d:ee:a4:ac:66:04:ef:5a:70:91: 80:2e:ec:40:d3:06:1e:00:48:88:a4:cf:af:de:2d: 2d:2f:0e:d1:31:94:08:e4:d5:a4:ad:80:ac:97:fd: b5:8b:21:e4:88:84:a8:34:1a:8d:02:1e:25:04:1d: 06:e0:f8:6e:83:a0:19:19:bc:4d:bf:1a:89:e1:fe: 53:fb:f5:d8:30:6b:4f:bb:7f:d6:75:15:69:4c:68: a4:ab:0b:3c:c0:81:25:5d:0b:ae:ae:45:8c:d0:06: 5e:bb:2d:b5:48:b8:31:89:01:ed:69:85:68:9a:fd: 9f:81:24:7e:91:ff:ba:1d:d3:95:f1:fc:1f:e2:f8: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BB:09:5B:38:B2:04:9F:E8:0C:AA:C6:27:D8:ED:12:C7:8A:53:AE X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ea:50:d6:be:28:31:d9:bd:ff:4f:52:0e:a1:68:18:39:00: de:f6:c8:21:ff:26:55:bc:26:a6:cd:06:51:3e:b7:e0:8b:a4: 31:b3:d4:7f:4f:0c:c6:22:37:da:fe:fa:1c:c8:5a:ae:d0:c2: e1:05:7b:de:dd:3d:58:9c:f7:d1:b7:4b:dc:53:36:7b:d9:1a: ad:a0:d5:39:e3:74:49:c0:c4:54:9f:4f:22:69:11:9c:ce:a4: b7:45:bd:9f:13:0f:29:53:70:f6:0a:83:d3:7b:6f:d6:77:01: c2:bb:f8:c9:b8:7b:dc:51:cc:bf:a7:43:dc:66:e8:62:40:49: 81:8e:96:05:17:01:71:3b:cb:59:c0:59:97:4c:ed:51:be:68: 30:4f:2d:01:33:b8:33:bf:07:bc:50:9d:3e:37:4c:ea:88:b3: 3e:eb:b4:cd:04:61:1b:d6:5b:d9:4c:62:cb:31:9a:7b:f2:99: c5:dd:70:4b:d5:f0:fa:39:0e:68:da:e7:db:6c:49:5b:0e:47: 45:c5:50:92:bb:a5:1a:33:85:8b:2e:aa:c1:d0:2f:6d:1f:7c: 08:1c:2f:89:f4:bc:0f:03:b7:32:34:83:88:0c:71:9b:9b:0c: 71:df:5f:b8:14:67:a6:4f:ff:9d:9b:7d:bf:bd:f0:8e:58:2f: a7:06:cf:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMiUZZsMNdL5UnZUAiW+H2r+u3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTA3MDExNTM2MjNaFw0yNTA3MDQyMTA1MjNaMDMxMTAvBgNV BAMTKEJGQkIwOTVCMzhCMjA0OUZFODBDQUFDNjI3RDhFRDEyQzc4QTUzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSV1a+DLfSt0g6cgR1cX29OBqO 1btPqnaN+JHp6bqv4gsOdKXT145N0e6nlLJ2M1W0upb0WuIRzgxo6RyfEcy7bdOQ cFTd3hl1qHC+pFv6TiFVrNYDqF/2hRW59zMtl2x2kAnvkgwM67IixOEbGQqzqjUW h/ggeUcKBMe+je6krGYE71pwkYAu7EDTBh4ASIikz6/eLS0vDtExlAjk1aStgKyX /bWLIeSIhKg0Go0CHiUEHQbg+G6DoBkZvE2/Gonh/lP79dgwa0+7f9Z1FWlMaKSr CzzAgSVdC66uRYzQBl67LbVIuDGJAe1phWia/Z+BJH6R/7od05Xx/B/i+BudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7sJWziyBJ/oDKrGJ9jtEseKU64wHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLqUNa+KDHZvf9PUg6haBg5AN72yCH/JlW8 JqbNBlE+t+CLpDGz1H9PDMYiN9r++hzIWq7QwuEFe97dPVic99G3S9xTNnvZGq2g 1TnjdEnAxFSfTyJpEZzOpLdFvZ8TDylTcPYKg9N7b9Z3AcK7+Mm4e9xRzL+nQ9xm 6GJASYGOlgUXAXE7y1nAWZdM7VG+aDBPLQEzuDO/B7xQnT43TOqIsz7rtM0EYRvW W9lMYssxmnvymcXdcEvV8Po5Dmja59tsSVsOR0XFUJK7pRozhYsuqsHQL20ffAgc L4n0vA8DtzI0g4gMcZubDHHfX7gUZ6ZP/52bfb+98I5YL6cGz0o= -----END CERTIFICATE-----Generated at Thu Jul 3 03:46:05 2025 by rpki-client