$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: SgJqYGUF1f9uIrOSQ7WvkOrwXYvMeWiJVaWynQEvxKY= Subject key identifier: 25:62:8A:ED:B3:EA:26:8B:65:D2:24:0B:12:CC:AA:AA:C3:F5:7C:DC Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 249DAE5788B257E541B535D7BFBC1C92A59E6E09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 0483 Signing time: Wed 02 Jul 2025 17:01:02 +0000 Manifest this update: Wed 02 Jul 2025 16:56:02 +0000 Manifest next update: Sat 05 Jul 2025 22:05:02 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 2: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: 2YvpTiUUlY3ypV1xcaJYgVSSvmgWAoIivEu7Pjx9q/I=) 3: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: r4bbE3J74imEfGNc3Yq/RkOZJXcnua5imBb7qm1BGas=) 4: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=) 5: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: T2dV9ECct1Ud7fOAgoF7v8UJVDJx36l7KpwFXhp6Z8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9d:ae:57:88:b2:57:e5:41:b5:35:d7:bf:bc:1c:92:a5:9e:6e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Jul 2 16:56:02 2025 GMT Not After : Jul 5 22:05:02 2025 GMT Subject: CN=25628AEDB3EA268B65D2240B12CCAAAAC3F57CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:a7:0d:4e:2b:0d:88:5e:7b:bd:51:4d:9b: 66:55:97:89:aa:be:9a:fc:c0:3b:d4:1b:83:2c:fa: 22:a2:99:57:3d:91:07:cd:18:0b:06:aa:41:18:77: ce:93:e2:99:49:89:b0:83:fd:90:a5:3f:c5:c6:c9: 25:85:8a:02:2a:0a:92:75:d1:98:ee:1d:f1:55:05: 76:c5:2c:9e:74:4f:63:dd:b5:f0:c9:77:f0:2f:0d: 97:d2:63:6b:89:45:e0:4e:53:58:14:00:15:39:e0: e3:19:ad:2f:b6:d6:79:d2:d1:06:1f:de:73:27:18: 14:0b:6d:a1:ba:63:a2:3f:1e:22:84:c5:53:66:7a: 37:61:dd:04:c3:ae:d3:6f:51:5e:51:e2:8a:7a:5b: 55:b4:eb:01:a7:dc:21:bd:4d:b5:c4:9a:52:73:05: e0:bc:cb:36:01:44:6a:55:17:81:f2:0b:da:59:d7: bf:46:ac:28:89:4f:54:bb:54:ee:db:7a:66:2b:c6: 7a:4e:75:d4:ff:85:f1:29:aa:10:5d:cb:13:21:1b: 95:f7:d2:39:82:db:a1:92:39:81:04:ed:16:4c:c5: 23:1e:53:29:0a:46:2d:44:64:a9:16:9c:a8:a9:53: 0a:4c:6f:f7:ad:65:eb:76:15:1b:33:9a:f2:51:c0: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:8A:ED:B3:EA:26:8B:65:D2:24:0B:12:CC:AA:AA:C3:F5:7C:DC X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:10:8a:e9:b1:d3:bb:26:2b:a2:02:34:71:06:df:c5:65:04: 3f:02:a6:fa:fc:fc:01:f0:b0:2b:7b:32:23:53:62:11:18:7e: 5c:cb:3e:24:af:f7:d6:c6:1c:e8:37:31:86:ec:90:ae:8c:13: e8:c8:e1:62:84:16:e4:00:a5:c7:b7:2c:db:41:47:dd:1c:05: 60:36:cf:99:fe:ad:0f:27:21:b6:9e:e6:aa:76:0a:e8:a0:46: 75:ec:79:84:05:58:60:c7:db:09:d8:3a:19:a0:c5:e6:59:b9: 41:fd:b5:93:c2:e3:f8:d6:b8:fd:e4:b5:9b:f3:3b:c8:55:78: 18:06:eb:b3:71:b8:35:50:6c:3a:ec:83:b8:47:06:38:bb:ba: 1c:be:4d:d9:aa:fd:47:ea:64:16:6d:d4:42:85:63:cd:59:f8: 48:13:28:a6:52:7b:47:a4:a2:ca:c1:13:d1:e3:66:e7:65:92: 5b:36:ee:b4:8e:2d:78:b5:98:34:b7:b1:19:5c:38:26:b2:5e: 8e:2b:9c:1f:50:b7:18:14:c6:9a:50:f7:4e:ce:1e:52:7a:c7: 89:51:e7:1e:54:7c:a2:53:0c:2c:6c:f8:97:6d:6f:13:0c:aa: 40:89:50:24:08:fe:87:30:00:ff:bc:32:b8:0b:bb:2c:c6:5f: fc:08:00:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJ2uV4iyV+VBtTXXv7wckqWebgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA3MDIxNjU2MDJaFw0yNTA3MDUyMjA1MDJaMDMxMTAvBgNV BAMTKDI1NjI4QUVEQjNFQTI2OEI2NUQyMjQwQjEyQ0NBQUFBQzNGNTdDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMKcNTisNiF57vVFNm2ZVl4mq vpr8wDvUG4Ms+iKimVc9kQfNGAsGqkEYd86T4plJibCD/ZClP8XGySWFigIqCpJ1 0ZjuHfFVBXbFLJ50T2PdtfDJd/AvDZfSY2uJReBOU1gUABU54OMZrS+21nnS0QYf 3nMnGBQLbaG6Y6I/HiKExVNmejdh3QTDrtNvUV5R4op6W1W06wGn3CG9TbXEmlJz BeC8yzYBRGpVF4HyC9pZ179GrCiJT1S7VO7bemYrxnpOddT/hfEpqhBdyxMhG5X3 0jmC26GSOYEE7RZMxSMeUykKRi1EZKkWnKipUwpMb/etZet2FRszmvJRwKsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJWKK7bPqJotl0iQLEsyqqsP1fNwwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYQiumx07smK6ICNHEG38VlBD8Cpvr8/AHw sCt7MiNTYhEYflzLPiSv99bGHOg3MYbskK6ME+jI4WKEFuQApce3LNtBR90cBWA2 z5n+rQ8nIbae5qp2CuigRnXseYQFWGDH2wnYOhmgxeZZuUH9tZPC4/jWuP3ktZvz O8hVeBgG67NxuDVQbDrsg7hHBji7uhy+Tdmq/UfqZBZt1EKFY81Z+EgTKKZSe0ek osrBE9HjZudlkls27rSOLXi1mDS3sRlcOCayXo4rnB9QtxgUxppQ907OHlJ6x4lR 5x5UfKJTDCxs+JdtbxMMqkCJUCQI/ocwAP+8MrgLuyzGX/wIAMI= -----END CERTIFICATE-----Generated at Thu Jul 3 03:34:20 2025 by rpki-client