$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json) Hash identifier: 3E20Rp7+/hj4arLpk0KifgwvKQO8SeVUsaq0SJX3bUU= Subject key identifier: 34:0C:DE:DA:7E:69:80:FA:06:C9:8B:AD:EC:9D:EF:DF:E1:36:AF:27 Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Certificate serial: 3D393EDDCD9896CE0836D04A109B27471723C7A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft Manifest number: 64 Signing time: Sat 28 Jun 2025 17:40:46 +0000 Manifest this update: Sat 28 Jun 2025 17:35:46 +0000 Manifest next update: Tue 01 Jul 2025 23:39:46 +0000 Files and hashes: 1: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: qcx0izukpfY53l80vtUR6G79kkXnhz1n/w7w1mlqvKA=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: nvp6aBQxjtptGYgUeLEHjxMFltaz+YvY0H1/2W6JEXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:39:3e:dd:cd:98:96:ce:08:36:d0:4a:10:9b:27:47:17:23:c7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Validity Not Before: Jun 28 17:35:46 2025 GMT Not After : Jul 1 23:39:46 2025 GMT Subject: CN=340CDEDA7E6980FA06C98BADEC9DEFDFE136AF27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:e7:bd:d9:01:d0:32:61:38:90:23:0d:c8: 8c:c7:71:14:e5:3c:40:d4:16:47:e4:77:d6:a2:b1: 67:24:a7:a1:b9:51:03:f2:3d:30:29:11:fa:4d:06: d7:c3:11:5d:b1:f9:c2:e0:71:13:16:d4:56:4d:c6: 69:c0:8e:34:24:8b:eb:e8:27:6b:1f:0c:3b:d9:03: 41:2f:db:c0:51:97:a5:89:5b:44:6f:70:0b:2f:52: 57:be:cc:69:35:a3:1c:c0:6f:d0:04:a3:fb:ae:bb: a2:ec:96:30:83:36:1f:55:a5:c0:70:a3:24:a6:b0: c6:5a:47:bc:b8:67:a9:83:5f:66:7a:4b:bf:76:3d: e8:11:d3:30:6b:0e:e3:3c:e1:0d:39:62:89:99:ed: 6c:24:70:b0:d9:93:33:b4:2d:38:0c:e3:0d:95:ea: af:75:7e:48:83:1f:bf:fd:46:3e:0d:c5:23:7e:15: af:d8:d9:2c:d7:3f:44:20:92:78:a6:c1:47:f7:2a: 4f:f4:3a:cb:73:df:59:4a:86:a1:6a:ee:d5:77:b9: e0:ef:2e:a4:cc:b2:90:81:af:0c:9d:82:95:5a:50: 58:f1:0d:c3:64:61:e7:9f:c5:ea:34:3b:18:30:91: 90:9d:81:0d:8c:94:94:9f:c6:d3:fe:1e:aa:09:8c: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0C:DE:DA:7E:69:80:FA:06:C9:8B:AD:EC:9D:EF:DF:E1:36:AF:27 X509v3 Authority Key Identifier: keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e6:77:36:44:35:77:46:41:95:f0:af:61:97:59:18:3a:64: 1c:75:62:21:84:b7:2c:0d:e4:8a:d7:e6:01:ff:0d:d8:b8:74: ad:dd:f7:bb:0c:ec:16:24:88:c5:dd:4c:24:a3:df:4a:52:41: 88:91:da:3b:8f:4d:7e:29:87:18:35:3d:f4:28:9e:30:36:0e: 7c:9a:c0:a0:2d:f3:48:bd:ac:ea:2a:8f:d1:f1:7c:d9:b7:a1: 6f:bc:99:80:2b:7a:5b:b5:08:85:b0:53:2e:61:e9:2f:fb:86: 76:a8:0f:8c:75:fa:2d:84:1b:1a:35:ad:c3:c2:19:dd:44:e4: 48:85:10:48:02:09:ab:4d:93:05:2a:c2:03:0a:fa:76:6c:ec: 59:80:fb:2f:ed:7f:29:fe:0d:5d:4b:dc:ef:7f:f0:d8:1c:c9: e3:68:16:d2:43:44:7d:46:8b:d3:e6:1a:9f:e6:b6:15:54:10: f2:df:d5:64:b5:1b:79:ab:e2:cb:c4:72:7f:af:05:87:78:77: 81:79:c4:c9:79:36:72:15:4d:b2:e0:b1:13:49:48:32:dd:3f: e9:bf:02:4c:77:d0:c8:51:97:c4:e0:54:24:88:53:2a:91:cc: e1:57:68:ce:9c:a0:0f:78:e0:d9:ca:d2:0d:4e:ef:f4:f0:5d: 7e:62:a7:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTk+3c2Yls4INtBKEJsnRxcjx6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEy RTE1Nzc4MjAeFw0yNTA2MjgxNzM1NDZaFw0yNTA3MDEyMzM5NDZaMDMxMTAvBgNV BAMTKDM0MENERURBN0U2OTgwRkEwNkM5OEJBREVDOURFRkRGRTEzNkFGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS+e92QHQMmE4kCMNyIzHcRTl PEDUFkfkd9aisWckp6G5UQPyPTApEfpNBtfDEV2x+cLgcRMW1FZNxmnAjjQki+vo J2sfDDvZA0Ev28BRl6WJW0RvcAsvUle+zGk1oxzAb9AEo/uuu6LsljCDNh9VpcBw oySmsMZaR7y4Z6mDX2Z6S792PegR0zBrDuM84Q05YomZ7WwkcLDZkzO0LTgM4w2V 6q91fkiDH7/9Rj4NxSN+Fa/Y2SzXP0QgknimwUf3Kk/0Ostz31lKhqFq7tV3ueDv LqTMspCBrwydgpVaUFjxDcNkYeefxeo0OxgwkZCdgQ2MlJSfxtP+HqoJjC/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAze2n5pgPoGyYut7J3v3+E2rycwHwYDVR0j BBgwFoAUqOZJK17+k2LCzNscJdoCKi4Vd4IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMS9BOEU2NDkyQjVF RkU5MzYyQzJDQ0RCMUMyNURBMDIyQTJFMTU3NzgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEyRTE1 Nzc4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAy MkEyRTE1Nzc4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzmdzZENXdGQZXwr2GXWRg6ZBx1YiGEtywN 5IrX5gH/Ddi4dK3d97sM7BYkiMXdTCSj30pSQYiR2juPTX4phxg1PfQonjA2Dnya wKAt80i9rOoqj9HxfNm3oW+8mYArelu1CIWwUy5h6S/7hnaoD4x1+i2EGxo1rcPC Gd1E5EiFEEgCCatNkwUqwgMK+nZs7FmA+y/tfyn+DV1L3O9/8NgcyeNoFtJDRH1G i9PmGp/mthVUEPLf1WS1G3mr4svEcn+vBYd4d4F5xMl5NnIVTbLgsRNJSDLdP+m/ Akx30MhRl8TgVCSIUyqRzOFXaM6coA944NnK0g1O7/TwXX5ip/w= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:27 2025 by rpki-client