$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: o8uy1YVyJieVEK16pj9jhi2CsSaWMwxKq7Z9veolpI0= Subject key identifier: 78:48:21:8B:88:57:A2:AA:87:99:27:34:F3:15:9E:90:97:F1:97:32 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 1CC3338DB2E6FA89AAA4E2431C6FC46CBC390BAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 048E Signing time: Wed 06 Aug 2025 01:51:42 +0000 Manifest this update: Wed 06 Aug 2025 01:46:42 +0000 Manifest next update: Sat 09 Aug 2025 02:27:42 +0000 Files and hashes: 1: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=) 2: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: r8ADNUXtI0juiYzUGWZFkaTaoOuCGwL3ytrQp6XTers=) 3: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: NgCvE1hp44YLC96n/lodIlhmLB1FaaOx9l0TuasHSug=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c3:33:8d:b2:e6:fa:89:aa:a4:e2:43:1c:6f:c4:6c:bc:39:0b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Aug 6 01:46:42 2025 GMT Not After : Aug 9 02:27:42 2025 GMT Subject: CN=7848218B8857A2AA87992734F3159E9097F19732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:a2:4a:51:04:82:4b:aa:3b:7d:d0:5d:a6: 9b:ca:ba:c8:9a:f3:d0:6a:e0:4a:ce:0e:18:5f:a5: 14:b5:9d:16:a5:95:b5:1f:f9:cc:3f:08:72:ca:5b: 19:71:66:6c:e7:85:1b:74:f1:34:e4:0d:3e:89:e4: 83:1a:af:ed:6a:c2:6e:75:f0:7f:41:66:29:0e:79: 0f:95:8f:1e:9a:58:27:a8:90:ec:cc:ad:bb:34:0f: c1:99:6a:03:2d:4a:00:66:8a:12:00:fb:f6:91:d6: 69:7a:54:f2:b7:70:1b:c1:ea:cd:9b:91:04:49:eb: 76:15:23:5e:2b:f1:70:02:12:34:4b:48:38:ce:6a: e7:4d:4c:d5:48:a8:1e:18:ec:30:b5:ee:3a:56:09: 5c:bd:4b:bd:18:77:90:b6:86:8d:26:50:3a:5b:c2: 6c:84:7e:ae:09:d3:71:24:3e:fc:c5:2f:a0:58:1d: e2:e0:0a:2d:b4:a3:75:7d:4d:a1:70:a8:13:0c:3e: 12:fd:6a:c5:6a:36:eb:53:7e:fa:14:47:f6:5e:a4: 0e:dd:d0:9e:df:a2:13:58:16:45:f7:24:76:8e:3e: 74:8a:cc:33:37:0b:da:17:bc:80:8d:28:0d:8e:2e: 6d:e8:47:0f:88:83:99:46:57:af:51:db:5b:91:de: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:21:8B:88:57:A2:AA:87:99:27:34:F3:15:9E:90:97:F1:97:32 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:91:73:57:3c:9e:3e:0d:f5:52:bf:ec:1f:1a:37:16:c0:a0: dd:a5:26:9c:22:a8:38:29:3f:aa:b0:76:31:a1:0f:ee:a9:0a: b1:c4:2f:bb:5b:b1:21:eb:d7:49:cc:18:07:f8:c2:ba:87:d0: 3f:09:97:fc:a1:6d:18:e7:80:04:10:2f:02:cd:49:0f:39:1e: f0:d5:57:69:fc:bc:db:62:8a:9c:46:55:79:64:2b:43:ef:44: 99:03:ad:c7:b3:99:90:0e:93:ab:d3:71:19:8b:5f:22:bf:99: ba:7d:b9:0a:37:27:c3:af:81:81:f4:a7:4c:97:48:0a:9c:6a: de:9c:a0:85:92:7f:f0:89:91:a6:37:5a:17:d0:c6:b1:cf:93: 07:38:25:94:3e:e6:c8:88:99:67:7e:d4:c1:4e:16:f4:10:f0: 12:01:54:41:f6:d6:72:77:e2:3f:04:c5:5b:3c:7d:71:ec:f4: 80:25:68:e3:c5:23:d7:1a:57:64:02:b1:53:e1:e3:1e:0e:7b: 4d:17:a2:9f:90:40:70:31:0d:1a:d9:20:37:c1:f8:9a:89:10: 63:7d:eb:26:33:18:0e:53:a6:be:05:f8:89:bf:97:a4:90:e9: e7:09:f1:fe:a7:34:b0:34:eb:b5:aa:47:5c:db:59:3f:5d:e0: 48:be:73:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMMzjbLm+omqpOJDHG/EbLw5C6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTA4MDYwMTQ2NDJaFw0yNTA4MDkwMjI3NDJaMDMxMTAvBgNV BAMTKDc4NDgyMThCODg1N0EyQUE4Nzk5MjczNEYzMTU5RTkwOTdGMTk3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+baJKUQSCS6o7fdBdppvKusia 89Bq4ErODhhfpRS1nRallbUf+cw/CHLKWxlxZmznhRt08TTkDT6J5IMar+1qwm51 8H9BZikOeQ+Vjx6aWCeokOzMrbs0D8GZagMtSgBmihIA+/aR1ml6VPK3cBvB6s2b kQRJ63YVI14r8XACEjRLSDjOaudNTNVIqB4Y7DC17jpWCVy9S70Yd5C2ho0mUDpb wmyEfq4J03EkPvzFL6BYHeLgCi20o3V9TaFwqBMMPhL9asVqNutTfvoUR/ZepA7d 0J7fohNYFkX3JHaOPnSKzDM3C9oXvICNKA2OLm3oRw+Ig5lGV69R21uR3jvlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEghi4hXoqqHmSc08xWekJfxlzIwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2Rc1c8nj4N9VK/7B8aNxbAoN2lJpwiqDgp P6qwdjGhD+6pCrHEL7tbsSHr10nMGAf4wrqH0D8Jl/yhbRjngAQQLwLNSQ85HvDV V2n8vNtiipxGVXlkK0PvRJkDrcezmZAOk6vTcRmLXyK/mbp9uQo3J8OvgYH0p0yX SAqcat6coIWSf/CJkaY3WhfQxrHPkwc4JZQ+5siImWd+1MFOFvQQ8BIBVEH21nJ3 4j8ExVs8fXHs9IAlaOPFI9caV2QCsVPh4x4Oe00Xop+QQHAxDRrZIDfB+JqJEGN9 6yYzGA5Tpr4F+Im/l6SQ6ecJ8f6nNLA067WqR1zbWT9d4Ei+c7Q= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:56 2025 by rpki-client