$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: cWfbFZTxJAPWibBiKFKHv2ntNmuxIeAWJNT7CxDmJRM= Subject key identifier: 7D:3D:5D:59:16:B4:EA:CB:39:3E:F0:97:E8:DF:74:CA:EB:F1:41:5F Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 69A4273592282F8D9A431C16447A85CD34C5599B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: B5 Signing time: Tue 05 Aug 2025 16:31:18 +0000 Manifest this update: Tue 05 Aug 2025 16:26:18 +0000 Manifest next update: Sat 09 Aug 2025 03:26:18 +0000 Files and hashes: 1: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 2: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: /LrqvB60a0SXEIt7UY9WA5fITjy9hX8cXfzQSzV22Ys=) 3: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 4: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a4:27:35:92:28:2f:8d:9a:43:1c:16:44:7a:85:cd:34:c5:59:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Aug 5 16:26:18 2025 GMT Not After : Aug 9 03:26:18 2025 GMT Subject: CN=7D3D5D5916B4EACB393EF097E8DF74CAEBF1415F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:78:d8:d6:6a:22:44:76:fb:b2:77:65:30: 1f:15:12:41:0a:44:58:89:e2:a9:ce:ce:00:0b:d9: 76:a3:77:e3:4e:3d:53:00:83:d7:b5:30:41:2f:b9: 74:f1:f7:cf:21:02:9b:67:75:3d:6f:eb:d1:b4:d7: d3:44:dd:24:96:3d:95:91:37:c7:28:86:bd:8e:7c: 3a:40:d8:1c:ff:b7:7d:0a:dc:3e:67:17:19:a4:a1: 8b:94:d7:44:72:fc:27:42:dd:93:19:75:97:8b:4c: 7b:af:18:0a:d9:02:ea:63:3e:b3:9b:3c:5d:01:4f: 87:a2:1c:3f:c1:52:5c:1d:16:13:0e:25:92:df:f9: 9e:72:c6:5f:a8:58:b9:61:30:d6:a4:09:15:7b:1e: 8a:b4:cd:a0:18:68:74:6d:83:78:d7:71:93:cd:7d: 5c:2e:2e:af:4b:4b:ad:1e:14:24:41:8d:91:c2:d1: a3:f9:2f:74:c2:0f:03:71:e8:9b:a6:a0:cb:b5:97: f7:a4:47:e4:49:7a:1a:26:03:d6:cd:73:43:24:16: 9e:01:9e:51:2d:e4:25:51:db:6a:0e:c2:5c:90:02: ff:a0:b3:e3:1b:30:0a:30:5c:4b:91:9f:27:ab:26: 26:de:79:f0:79:41:5a:40:b0:c2:37:ef:b1:91:4f: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3D:5D:59:16:B4:EA:CB:39:3E:F0:97:E8:DF:74:CA:EB:F1:41:5F X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0d:83:ce:a6:24:9b:0c:74:83:eb:aa:94:0c:7f:85:6f:49: 91:05:a5:73:9c:86:58:e2:de:ee:74:e5:63:4e:40:01:71:c0: 2c:64:0b:62:23:08:2f:52:7c:9e:1b:00:ef:66:5b:53:85:f4: 77:2b:e6:be:45:55:c3:56:a1:ae:1f:7e:60:81:11:c1:80:1d: dc:60:d4:fc:ae:8d:26:4b:75:45:1a:d8:3c:04:f6:aa:34:e7: 42:77:99:bb:8a:b9:8d:d8:d4:2a:9c:38:94:15:a3:77:20:e7: 71:03:43:3f:80:9a:0d:7f:25:54:f2:67:58:b5:6c:10:58:0e: 1f:1d:6c:da:1a:11:20:1c:0a:82:03:30:b6:19:a9:88:93:97: ab:a0:26:7a:42:8c:4d:b0:98:f1:44:fa:c2:df:91:3e:a7:fc: 1d:42:37:59:0f:65:b9:61:03:15:74:fa:ad:02:60:68:0d:05: 9a:45:26:23:07:51:7e:c4:ba:89:0f:52:c9:2e:6f:fe:47:3d: 0b:c4:ad:e5:bd:25:bb:c4:fd:7f:01:07:f6:5c:ef:e9:d8:ac: 49:ae:d5:7f:0d:e0:0d:b3:e0:2a:42:65:7f:f3:71:39:37:d3: b7:31:77:65:c8:7e:36:db:3c:bc:4c:37:29:e6:b4:71:4e:d1: bf:11:42:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaQnNZIoL42aQxwWRHqFzTTFWZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTA4MDUxNjI2MThaFw0yNTA4MDkwMzI2MThaMDMxMTAvBgNV BAMTKDdEM0Q1RDU5MTZCNEVBQ0IzOTNFRjA5N0U4REY3NENBRUJGMTQxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bnjY1moiRHb7sndlMB8VEkEK RFiJ4qnOzgAL2Xajd+NOPVMAg9e1MEEvuXTx988hAptndT1v69G019NE3SSWPZWR N8cohr2OfDpA2Bz/t30K3D5nFxmkoYuU10Ry/CdC3ZMZdZeLTHuvGArZAupjPrOb PF0BT4eiHD/BUlwdFhMOJZLf+Z5yxl+oWLlhMNakCRV7Hoq0zaAYaHRtg3jXcZPN fVwuLq9LS60eFCRBjZHC0aP5L3TCDwNx6JumoMu1l/ekR+RJehomA9bNc0MkFp4B nlEt5CVR22oOwlyQAv+gs+MbMAowXEuRnyerJibeefB5QVpAsMI377GRT/ytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfT1dWRa06ss5PvCX6N90yuvxQV8wHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALANg86mJJsMdIPrqpQMf4VvSZEFpXOchlji 3u505WNOQAFxwCxkC2IjCC9SfJ4bAO9mW1OF9Hcr5r5FVcNWoa4ffmCBEcGAHdxg 1PyujSZLdUUa2DwE9qo050J3mbuKuY3Y1CqcOJQVo3cg53EDQz+Amg1/JVTyZ1i1 bBBYDh8dbNoaESAcCoIDMLYZqYiTl6ugJnpCjE2wmPFE+sLfkT6n/B1CN1kPZblh AxV0+q0CYGgNBZpFJiMHUX7EuokPUskub/5HPQvEreW9JbvE/X8BB/Zc7+nYrEmu 1X8N4A2z4CpCZX/zcTk307cxd2XIfjbbPLxMNynmtHFO0b8RQqY= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:56 2025 by rpki-client