$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: nBjo4mXGwCxtBMyXs7VI/whBo7Ga4j4w/yScguck7sg= Subject key identifier: 9C:26:51:46:FC:B4:99:68:4A:E0:5D:63:19:D5:18:FF:19:24:C9:8A Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 1A819C44E1791D83DD0C04743031E3BBF775FB59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: B5 Signing time: Tue 05 Aug 2025 06:01:05 +0000 Manifest this update: Tue 05 Aug 2025 05:56:05 +0000 Manifest next update: Fri 08 Aug 2025 12:02:05 +0000 Files and hashes: 1: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: 0aoBwt+h97D/BWgv9F1UKeVjETegL18nlQ0MJHeXSDM=) 2: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: Z4LRNVaLQ1hi8Ydy7xrl21o+50Pt9MglpRIcPSCMBxs=) 3: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: j9s9ZJrj6lzd4k3U1NyWfdr1Cr0+NppmmvuWeM8Pi+8=) 4: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: MDwoleiTA2jdD+y/VY0jacPWG8rB0y82arQs3fIvfxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:81:9c:44:e1:79:1d:83:dd:0c:04:74:30:31:e3:bb:f7:75:fb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Aug 5 05:56:05 2025 GMT Not After : Aug 8 12:02:05 2025 GMT Subject: CN=9C265146FCB499684AE05D6319D518FF1924C98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:69:62:c1:e4:d8:db:ab:9b:2a:4a:72:1f: 59:cc:3c:20:b1:f8:c5:7f:4c:90:66:56:f2:0f:79: f4:f5:9f:00:0c:8a:43:a5:be:28:3f:2b:fe:45:d6: 01:38:11:8d:e4:91:c4:dc:a5:ea:85:c2:64:f7:47: c6:30:63:2b:19:cf:a7:54:b0:43:3d:e4:36:00:29: 19:66:2f:a2:3f:c1:0f:7c:97:68:9a:5c:aa:2d:61: 11:de:a0:d0:17:90:8b:66:e6:89:4e:e9:6a:1e:f5: 08:d5:d6:8b:c2:15:92:b6:cb:8e:ac:70:5a:34:83: 03:5f:d5:ae:46:36:8a:7e:dc:a3:68:66:c0:5a:e7: bc:10:32:d1:92:69:47:9f:6a:f9:91:8f:f4:f3:37: 6d:e7:1f:ef:36:f6:73:37:27:15:8c:f2:90:b5:42: 93:6e:3f:9e:90:b1:78:84:51:d2:93:ab:c8:a9:be: f1:32:85:33:fb:39:9a:36:be:af:1c:4d:3f:28:3e: 61:79:23:1c:56:49:22:e1:3e:15:2a:ed:f8:8a:b0: d9:35:0e:5e:bc:ae:03:9f:4e:cc:a8:b3:82:e2:52: 3b:46:63:2c:35:e3:cc:ab:29:59:94:53:85:47:94: a5:f9:17:fc:2f:cd:d7:d3:11:f4:08:a6:53:a2:7c: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:51:46:FC:B4:99:68:4A:E0:5D:63:19:D5:18:FF:19:24:C9:8A X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:18:82:08:e9:ef:8d:3d:47:41:72:d3:db:b0:6f:5c:5f:e0: e2:04:6b:73:ec:78:f3:77:80:93:4d:4f:e6:f7:0c:ce:99:0f: ee:d0:1f:46:6e:26:92:12:9d:0e:99:2d:b2:03:2c:4c:d9:fa: 77:79:23:cc:02:50:2c:7e:1d:1f:20:a5:9f:33:0a:68:b8:a3: f7:0c:85:44:f9:2d:a8:d3:7a:38:3b:4c:76:90:ea:2f:89:15: 63:da:e4:52:64:ac:94:92:d2:70:43:c2:6f:bc:f0:13:e5:c7: f2:a2:a7:6e:7b:39:61:c4:34:c4:2e:4f:f6:c8:09:76:3f:9c: 3e:29:38:fa:ee:b1:91:16:2b:92:5e:5b:db:21:34:e9:11:fc: 3d:98:ef:c7:86:39:60:fb:b8:88:4c:47:6a:30:cf:3f:94:2b: 10:0a:5c:61:64:4a:3a:f7:fb:2b:97:5a:b8:44:4e:2b:ca:9e: c3:b0:4c:3b:42:54:3a:1a:bd:69:f0:73:48:34:3d:99:f5:8f: e4:85:c2:2d:0b:c3:7b:73:b7:f8:29:66:77:37:a1:2f:92:ca: c3:43:bb:1c:2b:29:e5:52:80:96:8d:9e:f9:9a:9f:e8:19:d1: 99:44:e2:cd:fc:b0:41:ad:9f:bd:27:e8:97:5d:76:94:8d:32: b4:dd:59:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoGcROF5HYPdDAR0MDHju/d1+1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTA4MDUwNTU2MDVaFw0yNTA4MDgxMjAyMDVaMDMxMTAvBgNV BAMTKDlDMjY1MTQ2RkNCNDk5Njg0QUUwNUQ2MzE5RDUxOEZGMTkyNEM5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/c2liweTY26ubKkpyH1nMPCCx +MV/TJBmVvIPefT1nwAMikOlvig/K/5F1gE4EY3kkcTcpeqFwmT3R8YwYysZz6dU sEM95DYAKRlmL6I/wQ98l2iaXKotYRHeoNAXkItm5olO6Woe9QjV1ovCFZK2y46s cFo0gwNf1a5GNop+3KNoZsBa57wQMtGSaUefavmRj/TzN23nH+829nM3JxWM8pC1 QpNuP56QsXiEUdKTq8ipvvEyhTP7OZo2vq8cTT8oPmF5IxxWSSLhPhUq7fiKsNk1 Dl68rgOfTsyos4LiUjtGYyw148yrKVmUU4VHlKX5F/wvzdfTEfQIplOifCfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCZRRvy0mWhK4F1jGdUY/xkkyYowHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMYggjp7409R0Fy09uwb1xf4OIEa3PsePN3 gJNNT+b3DM6ZD+7QH0ZuJpISnQ6ZLbIDLEzZ+nd5I8wCUCx+HR8gpZ8zCmi4o/cM hUT5LajTejg7THaQ6i+JFWPa5FJkrJSS0nBDwm+88BPlx/Kip257OWHENMQuT/bI CXY/nD4pOPrusZEWK5JeW9shNOkR/D2Y78eGOWD7uIhMR2owzz+UKxAKXGFkSjr3 +yuXWrhETivKnsOwTDtCVDoavWnwc0g0PZn1j+SFwi0Lw3tzt/gpZnc3oS+SysND uxwrKeVSgJaNnvman+gZ0ZlE4s38sEGtn70n6JdddpSNMrTdWeA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:02:28 2025 by rpki-client