$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: 7HShou2lMw4SXRrKWZ2oaDCUAPRgUCadiaFHKRxFY3w= Subject key identifier: 37:BB:1F:3A:9A:71:A4:B3:0F:F4:89:78:44:2B:4C:3D:38:7F:96:E2 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 2EA9C6A7BE2A5BB6F80BE66A1DF243606C18AF61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 01C0 Signing time: Tue 01 Jul 2025 23:40:40 +0000 Manifest this update: Tue 01 Jul 2025 23:35:40 +0000 Manifest next update: Sat 05 Jul 2025 11:02:40 +0000 Files and hashes: 1: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: y6miBr2/Q/6FjAaUxIVaG6IM7xdw/W+RQyBEcpIe9Hs=) 2: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: VEGQ96RWQqZFWdsMC5rPZ07rp9QmnGtSO63CEA/1uX8=) 3: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: wFcTN5q0akpA85ftilf2bM28sOD4DLpoHmPxOzWP6Zw=) 4: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: P+DYY7cn/xSEO8OwtxnFgZUnYx+K7NZV1lWcalSNMX4=) 5: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: E2BwWAg97KsRT1fRMxJbFZgljPAT+b9xgUo78GpD2t8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a9:c6:a7:be:2a:5b:b6:f8:0b:e6:6a:1d:f2:43:60:6c:18:af:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Jul 1 23:35:40 2025 GMT Not After : Jul 5 11:02:40 2025 GMT Subject: CN=37BB1F3A9A71A4B30FF48978442B4C3D387F96E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:a0:40:d6:34:75:13:e9:40:ee:da:36:69: 48:3c:55:97:8b:81:1a:6b:f2:3b:fd:c7:5c:45:e4: e8:ec:c1:7d:b2:5e:79:a6:b1:c1:78:1c:9a:dd:9c: 58:03:f9:cf:3b:e0:f0:79:64:ba:7f:92:9f:b2:f6: f7:5b:22:0d:76:60:70:ab:4d:ca:af:42:83:46:42: 83:10:3f:16:a8:05:05:cb:1f:72:4c:14:7a:df:ee: 1f:06:3b:5d:76:5d:95:d7:be:80:4a:c3:5f:5b:0a: 17:d7:b8:87:ec:d0:a0:37:00:07:2f:d9:8c:c1:1e: 07:6e:6f:88:f4:ca:7b:c6:cd:9d:7d:1b:b3:04:75: ce:1a:7b:c2:78:da:04:7b:c4:b9:0a:2d:d0:d3:56: 2f:35:62:48:af:fd:a6:83:c5:20:2b:07:3c:f0:b0: 79:d9:7f:21:f4:19:78:b7:f2:a4:91:3c:8b:32:14: 6e:8a:67:eb:2f:e7:07:b7:8d:77:97:cd:22:f9:27: 60:15:f9:43:50:f1:04:9d:07:17:ce:87:9c:4e:a1: 60:cd:09:ed:1a:0d:c8:b6:fc:ff:5e:08:66:46:e5: 32:f4:25:9d:b9:e7:8b:bd:3f:91:05:fd:63:9e:94: 57:c1:04:ca:eb:b5:28:f7:d9:60:4f:52:30:58:19: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BB:1F:3A:9A:71:A4:B3:0F:F4:89:78:44:2B:4C:3D:38:7F:96:E2 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:db:5f:61:18:53:a8:36:25:f6:6d:10:66:49:c0:84:cd:d1: 52:74:aa:c8:b0:6e:f4:46:a4:69:0e:3e:7e:73:47:74:e1:3e: e5:7a:c8:0f:ee:9c:fc:c7:1a:1a:0b:80:18:cb:3c:c6:f5:5e: 05:63:63:af:67:25:a4:82:bd:42:ed:60:4d:84:8f:72:29:ac: 51:ce:fb:a7:28:6f:39:85:d8:67:f9:47:05:80:23:61:00:b1: 93:05:c3:9f:a2:eb:93:db:1e:c6:48:06:92:b9:93:24:23:a6: 10:c3:b7:08:63:6c:1c:6d:54:23:a9:55:83:e7:84:27:36:0b: dc:1a:85:29:e3:66:19:2d:49:d4:e1:e8:d3:30:72:93:d3:24: b0:b2:2e:25:af:66:53:5e:08:8b:85:db:1d:86:be:7d:f3:e1: 61:11:b8:36:a4:7a:c0:3a:64:76:04:38:79:b5:fb:df:41:34: 04:91:2a:c6:73:5e:68:03:04:d0:b4:f3:ca:81:db:20:6c:c7: b5:87:8a:ed:66:b6:f3:0b:37:52:cc:84:dc:66:6e:d4:88:89: 32:c6:cb:75:4c:c8:63:26:1e:0d:d3:68:cd:c1:a0:54:aa:83: 96:f4:c7:be:78:76:58:5c:23:35:1d:0d:46:78:63:46:2b:a8: c2:cb:37:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqnGp74qW7b4C+ZqHfJDYGwYr2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNTA3MDEyMzM1NDBaFw0yNTA3MDUxMTAyNDBaMDMxMTAvBgNV BAMTKDM3QkIxRjNBOUE3MUE0QjMwRkY0ODk3ODQ0MkI0QzNEMzg3Rjk2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIH6BA1jR1E+lA7to2aUg8VZeL gRpr8jv9x1xF5OjswX2yXnmmscF4HJrdnFgD+c874PB5ZLp/kp+y9vdbIg12YHCr TcqvQoNGQoMQPxaoBQXLH3JMFHrf7h8GO112XZXXvoBKw19bChfXuIfs0KA3AAcv 2YzBHgdub4j0ynvGzZ19G7MEdc4ae8J42gR7xLkKLdDTVi81Ykiv/aaDxSArBzzw sHnZfyH0GXi38qSRPIsyFG6KZ+sv5we3jXeXzSL5J2AV+UNQ8QSdBxfOh5xOoWDN Ce0aDci2/P9eCGZG5TL0JZ2554u9P5EF/WOelFfBBMrrtSj32WBPUjBYGaztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN7sfOppxpLMP9Il4RCtMPTh/luIwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXbX2EYU6g2JfZtEGZJwITN0VJ0qsiwbvRG pGkOPn5zR3ThPuV6yA/unPzHGhoLgBjLPMb1XgVjY69nJaSCvULtYE2Ej3IprFHO +6cobzmF2Gf5RwWAI2EAsZMFw5+i65PbHsZIBpK5kyQjphDDtwhjbBxtVCOpVYPn hCc2C9wahSnjZhktSdTh6NMwcpPTJLCyLiWvZlNeCIuF2x2Gvn3z4WERuDakesA6 ZHYEOHm1+99BNASRKsZzXmgDBNC088qB2yBsx7WHiu1mtvMLN1LMhNxmbtSIiTLG y3VMyGMmHg3TaM3BoFSqg5b0x754dlhcIzUdDUZ4Y0YrqMLLN3A= -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:18 2025 by rpki-client