$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: 7NgdMYUB9P986PdITT1HhmKkCAAPBuBiJppntt8M+WI= Subject key identifier: AF:A7:3C:DE:93:00:4C:E8:69:43:0C:92:EC:D4:FC:BF:36:6B:F9:9A Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 17FD078F46B81F2C0A91D28A0FAE0D12E33B7BB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01A6 Signing time: Fri 27 Jun 2025 18:11:28 +0000 Manifest this update: Fri 27 Jun 2025 18:06:28 +0000 Manifest next update: Tue 01 Jul 2025 06:00:28 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: S0D78RNIEoKGiryIRLwJXRzQU1/Rec0Z/6nnlQ3E/Zg=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fd:07:8f:46:b8:1f:2c:0a:91:d2:8a:0f:ae:0d:12:e3:3b:7b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Jun 27 18:06:28 2025 GMT Not After : Jul 1 06:00:28 2025 GMT Subject: CN=AFA73CDE93004CE869430C92ECD4FCBF366BF99A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:80:0f:8c:fc:19:c4:0c:aa:bf:eb:a5:b2: 61:11:21:bb:4a:ad:98:39:39:71:15:a1:d6:a3:66: df:f4:95:d8:dd:2b:d3:c2:1f:17:3e:62:41:6b:e9: 0d:62:52:73:fe:5d:01:4b:4f:b1:18:9c:a5:d9:80: db:2d:3a:18:51:09:f4:69:88:a2:62:63:73:bb:72: 4d:a9:84:d8:10:35:8e:ad:c1:4b:10:08:0a:fd:48: 26:09:87:25:5a:9e:4f:1f:0e:04:0e:07:ee:cf:59: e9:62:7d:fb:75:52:cd:a4:b9:c3:d7:58:91:5e:f5: 7b:38:9a:58:05:55:7d:e6:0b:3b:ab:2c:dc:8e:a5: ff:bf:20:63:39:9e:8d:9e:a1:c8:56:8d:0d:97:f0: 27:df:7d:a2:e2:2d:32:91:cb:81:61:2d:79:de:39: b5:a4:48:02:ae:33:6f:3c:77:99:30:7b:e0:c7:b0: 7c:e7:39:a7:2b:47:b6:3a:79:a1:5b:29:b6:5e:2f: 37:b3:06:f8:c2:5e:c2:4e:66:dd:94:50:c3:0b:6e: b4:ce:af:ff:a2:a5:23:8d:e1:c8:50:a0:53:1a:fa: 10:0d:03:c3:4e:cf:63:2c:25:c6:70:39:3d:92:a3: 29:81:0b:49:a7:4c:3b:88:ea:75:dc:a5:38:aa:b6: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:3C:DE:93:00:4C:E8:69:43:0C:92:EC:D4:FC:BF:36:6B:F9:9A X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:12:16:8a:b4:71:32:6b:f7:eb:b6:6d:e1:70:0a:1b:69:3c: b5:83:70:a9:bc:e7:47:06:2e:eb:0c:33:8d:00:5a:d5:b3:38: 99:70:2e:9e:4e:63:01:a0:4c:04:a0:a8:9d:ef:33:13:12:d9: 6e:85:4d:d0:d7:ac:16:31:92:89:39:63:80:9f:d3:e8:a0:76: 3e:1f:b1:d7:7f:5d:38:fd:79:6c:76:71:84:eb:a2:33:8b:b2: 32:c6:5c:92:bb:18:2c:7f:b8:19:0a:f0:da:98:2a:fa:ad:bd: 1e:d2:49:22:20:d5:36:30:5b:9b:70:56:81:e1:9b:75:98:95: ce:66:da:4a:c7:5c:a9:3d:e1:94:a6:73:18:76:d5:a0:3d:50: d2:7e:98:b6:e9:cf:38:ef:67:ba:2e:d6:f8:9c:ee:ce:bd:09: 95:af:44:7b:f1:26:88:51:2a:b0:29:1f:90:7e:8a:77:06:f0: 20:4d:bf:6c:da:11:b3:fd:5d:81:a8:84:10:e5:a6:f6:4f:b7: ee:b3:f0:fa:cc:c9:03:8d:2e:76:f1:a8:c6:8e:35:09:f3:f3: af:09:e6:a5:6d:e2:7d:8a:01:a7:28:d7:af:44:37:a6:c9:50: 0f:c5:90:3c:96:31:c1:57:17:4f:64:3a:6d:3d:42:8a:b8:05: 28:fb:6e:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/0Hj0a4HywKkdKKD64NEuM7e7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA2MjcxODA2MjhaFw0yNTA3MDEwNjAwMjhaMDMxMTAvBgNV BAMTKEFGQTczQ0RFOTMwMDRDRTg2OTQzMEM5MkVDRDRGQ0JGMzY2QkY5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYjoAPjPwZxAyqv+ulsmERIbtK rZg5OXEVodajZt/0ldjdK9PCHxc+YkFr6Q1iUnP+XQFLT7EYnKXZgNstOhhRCfRp iKJiY3O7ck2phNgQNY6twUsQCAr9SCYJhyVank8fDgQOB+7PWelifft1Us2kucPX WJFe9Xs4mlgFVX3mCzurLNyOpf+/IGM5no2eochWjQ2X8CfffaLiLTKRy4FhLXne ObWkSAKuM288d5kwe+DHsHznOacrR7Y6eaFbKbZeLzezBvjCXsJOZt2UUMMLbrTO r/+ipSON4chQoFMa+hANA8NOz2MsJcZwOT2SoymBC0mnTDuI6nXcpTiqtl73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6c83pMATOhpQwyS7NT8vzZr+ZowHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABASFoq0cTJr9+u2beFwChtpPLWDcKm850cG LusMM40AWtWzOJlwLp5OYwGgTASgqJ3vMxMS2W6FTdDXrBYxkok5Y4Cf0+igdj4f sdd/XTj9eWx2cYTrojOLsjLGXJK7GCx/uBkK8NqYKvqtvR7SSSIg1TYwW5twVoHh m3WYlc5m2krHXKk94ZSmcxh21aA9UNJ+mLbpzzjvZ7ou1vic7s69CZWvRHvxJohR KrApH5B+incG8CBNv2zaEbP9XYGohBDlpvZPt+6z8PrMyQONLnbxqMaONQnz868J 5qVt4n2KAaco169EN6bJUA/FkDyWMcFXF09kOm09Qoq4BSj7bmc= -----END CERTIFICATE-----Generated at Mon Jun 30 00:49:58 2025 by rpki-client