$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: oKHDGYvVTxV+BhwDeoriXcBgFYOyqmlb7w1Ifaw+Mcs= Subject key identifier: 54:CF:82:D7:E1:5E:20:F5:C9:9C:3B:1B:6A:C3:F0:DF:D5:E1:11:33 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 1AE2856BE47EDEDB74443BE8E5490BE224975E24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: DD Signing time: Tue 05 Aug 2025 15:12:20 +0000 Manifest this update: Tue 05 Aug 2025 15:07:20 +0000 Manifest next update: Sat 09 Aug 2025 01:25:20 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 2: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 3: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) 4: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: /KOObHyXliVGnzoA5VCB8FqScu19J2v7kzUsySIj6XQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e2:85:6b:e4:7e:de:db:74:44:3b:e8:e5:49:0b:e2:24:97:5e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Aug 5 15:07:20 2025 GMT Not After : Aug 9 01:25:20 2025 GMT Subject: CN=54CF82D7E15E20F5C99C3B1B6AC3F0DFD5E11133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:55:c8:4d:10:81:db:6c:64:bc:25:71:7c: 30:9c:d6:0c:b2:43:9b:f2:18:61:fc:78:e1:e5:93: 0b:ff:ca:ea:21:52:dc:0c:29:05:4e:b6:e9:45:82: 77:bc:dc:53:e8:34:09:59:c6:a6:e3:e0:62:a9:c9: 7f:da:4d:21:c5:06:69:dc:93:46:42:21:8d:79:1f: 5c:e9:1a:61:82:9a:dc:07:93:75:d3:ef:5b:e3:4d: 23:44:f4:24:11:15:7f:c9:58:e3:9d:b8:46:93:38: c3:8a:af:c3:83:c2:14:08:e4:0e:4b:51:08:7e:02: c5:d2:9a:ed:db:1a:5b:7f:d7:04:aa:1b:a6:28:af: 30:07:1b:3d:a3:f5:c3:86:30:39:1d:1e:3a:81:5c: d5:3a:21:94:b0:ae:de:d7:a1:4c:b7:79:f4:8c:7f: 7c:ca:90:ba:4c:6e:6f:be:d0:4d:79:9c:89:7b:73: 16:d0:39:24:0d:23:38:3a:cf:ac:48:ec:8b:e6:79: ef:9d:32:93:b6:7f:0d:a3:f6:14:ff:f4:47:be:9e: 09:53:bc:9c:b4:6a:5f:f7:25:27:f6:26:a1:d9:f3: 17:8e:04:aa:01:eb:25:a6:4f:fb:b7:d7:8c:25:45: ae:e8:9e:57:1f:35:ec:b9:4d:b4:83:2a:92:7e:16: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CF:82:D7:E1:5E:20:F5:C9:9C:3B:1B:6A:C3:F0:DF:D5:E1:11:33 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:47:d8:4f:ab:66:b8:47:66:d5:58:1c:7a:23:de:11:a9:37: 2c:e2:cc:5a:b6:a3:ba:10:5d:14:74:62:08:be:3e:af:af:0c: 4a:ae:d6:89:68:27:7a:bd:81:a4:ac:26:de:0e:7d:3e:39:0f: 8b:2a:a6:1b:79:c3:e0:9b:c8:fc:e4:85:b9:0d:cd:b2:9d:3b: 8c:fd:67:ca:f8:41:70:c4:1a:4c:0b:89:c6:d9:fa:54:6d:b4: 51:15:62:e1:9f:01:e2:0a:26:81:7f:16:a2:bb:e7:51:49:25: 99:48:19:71:ca:b7:95:30:04:1c:b0:bf:0e:77:ca:f5:e2:bf: ef:4c:ab:be:26:ec:89:ee:67:b6:3e:09:aa:92:35:f1:d9:5d: 28:6a:77:ab:ef:00:ed:57:63:f9:2e:ee:55:70:98:fc:f7:28: 10:be:57:00:d9:0b:ca:66:87:2b:d5:5f:dd:23:0b:39:f3:7a: 56:7d:53:8f:17:f4:b8:6a:1a:87:76:69:04:c8:a8:dc:14:23: fb:7c:8a:d1:02:9e:48:d1:5e:c8:9a:cc:79:4a:99:3d:d9:85: 61:bb:41:7b:b5:c9:3d:31:97:a8:e2:c6:55:1e:dd:47:54:cb: cb:30:6c:65:34:89:fc:d1:31:f7:96:5f:7e:eb:32:c2:e9:dc: 71:7f:a8:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuKFa+R+3tt0RDvo5UkL4iSXXiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTA4MDUxNTA3MjBaFw0yNTA4MDkwMTI1MjBaMDMxMTAvBgNV BAMTKDU0Q0Y4MkQ3RTE1RTIwRjVDOTlDM0IxQjZBQzNGMERGRDVFMTExMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkVXITRCB22xkvCVxfDCc1gyy Q5vyGGH8eOHlkwv/yuohUtwMKQVOtulFgne83FPoNAlZxqbj4GKpyX/aTSHFBmnc k0ZCIY15H1zpGmGCmtwHk3XT71vjTSNE9CQRFX/JWOOduEaTOMOKr8ODwhQI5A5L UQh+AsXSmu3bGlt/1wSqG6YorzAHGz2j9cOGMDkdHjqBXNU6IZSwrt7XoUy3efSM f3zKkLpMbm++0E15nIl7cxbQOSQNIzg6z6xI7Ivmee+dMpO2fw2j9hT/9Ee+nglT vJy0al/3JSf2JqHZ8xeOBKoB6yWmT/u314wlRa7onlcfNey5TbSDKpJ+FmnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVM+C1+FeIPXJnDsbasPw39XhETMwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1H2E+rZrhHZtVYHHoj3hGpNyzizFq2o7oQ XRR0Ygi+Pq+vDEqu1oloJ3q9gaSsJt4OfT45D4sqpht5w+CbyPzkhbkNzbKdO4z9 Z8r4QXDEGkwLicbZ+lRttFEVYuGfAeIKJoF/FqK751FJJZlIGXHKt5UwBBywvw53 yvXiv+9Mq74m7InuZ7Y+CaqSNfHZXShqd6vvAO1XY/ku7lVwmPz3KBC+VwDZC8pm hyvVX90jCznzelZ9U48X9LhqGod2aQTIqNwUI/t8itECnkjRXsiazHlKmT3ZhWG7 QXu1yT0xl6jixlUe3UdUy8swbGU0ifzRMfeWX37rMsLp3HF/qGg= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:48 2025 by rpki-client