$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: y0VBaFyRQaTPye1XvK2/fgmqziSw0YSiofA2IGPy4ls= Subject key identifier: 6B:B6:BF:11:FC:D3:2C:D8:E3:9D:D1:5B:F6:2F:7D:71:89:A3:83:6C Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 4751D2160F85C1C1BE32825B805B3FA5CB59B3E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 01D2 Signing time: Wed 06 Aug 2025 02:31:33 +0000 Manifest this update: Wed 06 Aug 2025 02:26:33 +0000 Manifest next update: Sat 09 Aug 2025 08:18:33 +0000 Files and hashes: 1: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: 8gEG32ABgyc/3AzfvddIQZ49PTRJGNVJkLBa/7X4Kio=) 2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:51:d2:16:0f:85:c1:c1:be:32:82:5b:80:5b:3f:a5:cb:59:b3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Aug 6 02:26:33 2025 GMT Not After : Aug 9 08:18:33 2025 GMT Subject: CN=6BB6BF11FCD32CD8E39DD15BF62F7D7189A3836C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:7b:70:54:7c:ab:d1:84:75:11:38:c6:05: 63:54:ec:b1:bf:5e:cb:f1:6b:f0:45:b4:59:67:f9: 17:5d:ed:8a:f0:0a:08:9d:f8:d7:f3:a4:05:78:5a: c3:b1:b8:c4:75:76:d1:51:f7:b1:2c:47:26:17:fa: fb:a4:f7:c1:a3:e8:2f:ed:7b:b3:73:06:7b:64:3c: 5f:da:15:4c:c0:06:2e:bb:b7:6d:9b:fc:6b:c9:bd: 2b:1e:de:97:69:70:9c:77:c3:48:dd:e0:4b:03:f2: 86:24:15:20:1c:63:84:5b:ea:14:a1:5e:a5:40:e9: c6:47:b8:2b:f3:c6:83:ea:1c:5a:1c:1d:69:50:de: fa:84:b4:c9:b0:a8:46:a4:0b:66:5e:38:31:74:a6: 3f:79:c0:3b:44:96:7f:77:95:07:a7:68:dd:5f:00: 3d:ad:7c:52:17:eb:63:86:1a:44:de:f8:87:32:0f: be:2d:9f:4d:00:f7:7c:2c:a0:8b:4e:5d:d1:b6:c1: e8:bc:19:76:21:8f:26:e1:19:05:3f:f8:e5:c7:9c: 70:d9:fd:a0:8f:c4:7d:d2:9b:01:26:c5:04:0d:c7: 2f:38:1a:92:d0:c7:e0:54:44:1d:5f:e5:c5:bd:b6: 70:d1:a1:9d:e9:3a:c7:da:d7:2e:10:2a:9a:ae:69: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B6:BF:11:FC:D3:2C:D8:E3:9D:D1:5B:F6:2F:7D:71:89:A3:83:6C X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ec:0c:a5:bc:d3:7c:32:53:d8:35:24:77:19:e2:e1:20:62: 7b:b5:6c:d8:95:33:f9:e9:db:96:de:15:07:f1:6e:a1:cc:17: 26:8b:8b:23:c0:0f:bf:29:a4:70:d8:c1:45:a5:64:35:35:03: f3:f7:52:99:be:7b:7b:36:f1:8b:2b:db:59:43:64:d6:0a:47: 2d:13:31:58:8d:5c:a6:e5:fe:5b:ec:44:53:1f:dd:9a:5a:95: 95:e3:88:55:e3:5e:3c:27:97:37:c0:3d:57:06:60:ee:42:9e: b4:d0:29:c9:bd:a2:a5:2a:4a:d5:80:90:a2:ef:1a:00:ce:1b: 2c:dd:d0:bb:21:ea:61:51:96:62:d5:f2:56:7b:fd:63:57:72: 63:ad:6d:80:36:6e:d4:e8:66:28:8d:51:99:14:f3:a8:d1:ff: 23:bd:d8:7a:5f:1c:6e:5f:86:d0:d1:6e:3e:25:89:20:f1:5a: 15:24:fe:74:e7:85:71:5e:cb:e7:24:87:67:cd:f1:b6:ec:03: 01:b9:87:5b:ac:82:b9:a2:e3:14:ef:b1:fc:56:96:0f:c9:60: 1d:27:8c:ad:a6:b5:29:26:52:59:a1:07:bd:22:96:6b:f0:66: b1:ab:45:2f:4c:e4:0c:2c:b5:29:d3:27:d2:e6:80:85:21:a9: cf:f3:5f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1HSFg+FwcG+MoJbgFs/pctZs+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTA4MDYwMjI2MzNaFw0yNTA4MDkwODE4MzNaMDMxMTAvBgNV BAMTKDZCQjZCRjExRkNEMzJDRDhFMzlERDE1QkY2MkY3RDcxODlBMzgzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvXtwVHyr0YR1ETjGBWNU7LG/ Xsvxa/BFtFln+Rdd7YrwCgid+NfzpAV4WsOxuMR1dtFR97EsRyYX+vuk98Gj6C/t e7NzBntkPF/aFUzABi67t22b/GvJvSse3pdpcJx3w0jd4EsD8oYkFSAcY4Rb6hSh XqVA6cZHuCvzxoPqHFocHWlQ3vqEtMmwqEakC2ZeODF0pj95wDtEln93lQenaN1f AD2tfFIX62OGGkTe+IcyD74tn00A93wsoItOXdG2wei8GXYhjybhGQU/+OXHnHDZ /aCPxH3SmwEmxQQNxy84GpLQx+BURB1f5cW9tnDRoZ3pOsfa1y4QKpquaXz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa7a/EfzTLNjjndFb9i99cYmjg2wwHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzsDKW803wyU9g1JHcZ4uEgYnu1bNiVM/np 25beFQfxbqHMFyaLiyPAD78ppHDYwUWlZDU1A/P3Upm+e3s28Ysr21lDZNYKRy0T MViNXKbl/lvsRFMf3ZpalZXjiFXjXjwnlzfAPVcGYO5CnrTQKcm9oqUqStWAkKLv GgDOGyzd0Lsh6mFRlmLV8lZ7/WNXcmOtbYA2btToZiiNUZkU86jR/yO92HpfHG5f htDRbj4liSDxWhUk/nTnhXFey+ckh2fN8bbsAwG5h1usgrmi4xTvsfxWlg/JYB0n jK2mtSkmUlmhB70ilmvwZrGrRS9M5AwstSnTJ9LmgIUhqc/zX7k= -----END CERTIFICATE-----Generated at Thu Aug 7 11:16:43 2025 by rpki-client