$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: 0RRu4ucIFGOGs8hdbaqY5Im0JvVKVGS9WS3M2NLShOs= Subject key identifier: F0:8A:A4:EA:60:83:1C:14:1B:98:54:9A:92:C5:24:70:DE:56:EE:60 Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 23B88C6365ECD80C89C0A5D616BCAEBF8EA57CC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 0452 Signing time: Fri 08 Aug 2025 11:20:00 +0000 Manifest this update: Fri 08 Aug 2025 11:15:00 +0000 Manifest next update: Mon 11 Aug 2025 20:25:00 +0000 Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: qIkZtUPswOLSzAKIW4faoAC7V/pmv5To5cLrgWfUSjA=) 2: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: zy1FsygYpqVSi+EobJmzQBacILHei9rJG6O6n0f0i9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b8:8c:63:65:ec:d8:0c:89:c0:a5:d6:16:bc:ae:bf:8e:a5:7c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Aug 8 11:15:00 2025 GMT Not After : Aug 11 20:25:00 2025 GMT Subject: CN=F08AA4EA60831C141B98549A92C52470DE56EE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:cf:98:c7:a0:ed:ec:40:32:a1:cf:ef:a1: 79:c4:77:8a:ef:4d:fe:40:9f:d2:cd:8f:c9:08:fe: e4:20:4d:25:82:7a:cb:7d:7c:52:01:37:e0:27:75: bf:31:ee:69:31:47:19:9c:75:e8:b9:1f:7b:d6:f4: d9:4f:d8:0b:6a:d1:cb:d8:b6:48:15:0e:c1:86:6b: af:44:47:3c:66:e0:67:aa:53:f7:c3:52:ff:a4:fd: 31:f6:58:e6:83:8d:b0:f6:72:88:8e:8a:28:41:42: 54:b7:fe:81:9b:00:09:c6:fa:ec:45:d8:76:a7:f2: e2:6c:4a:24:3d:11:ba:da:7e:3d:c6:c3:f6:c5:61: a3:02:f8:2c:26:ac:b9:da:89:87:a5:49:69:cc:79: 4a:65:88:e1:15:d2:2d:a9:02:95:17:1c:84:1c:58: 14:72:d7:e1:69:aa:53:62:62:53:9b:ef:fa:37:3f: e5:98:35:b9:22:d6:a8:20:5d:22:85:de:4c:43:5c: 7e:73:e5:36:0f:9b:91:73:2d:0d:ed:c6:bd:bb:63: 26:70:9f:a4:b3:2a:b2:d4:01:91:6b:9d:09:e7:fb: 29:0e:95:78:f7:b2:d8:4a:cb:d4:62:e7:c8:ee:dc: c7:c1:fe:cb:d0:f6:ba:78:c1:d3:74:83:df:57:15: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8A:A4:EA:60:83:1C:14:1B:98:54:9A:92:C5:24:70:DE:56:EE:60 X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:2c:67:69:5f:8c:40:b4:4f:aa:33:32:9d:9c:c5:3a:7f: 69:82:90:d7:c0:a1:7f:b7:b5:b6:bf:40:22:3f:79:4b:f6:64: d2:93:5b:d3:89:68:c7:a6:3b:37:4e:4d:93:c0:d8:d5:90:c5: dd:24:d8:c9:be:9c:d6:e9:f8:bf:6f:6f:47:70:93:cb:52:54: d5:32:7e:2d:dd:71:c6:f2:60:0f:3b:d5:4d:91:38:3b:12:9c: c6:ca:d4:aa:09:8c:26:34:84:1d:2f:09:a3:ad:a5:33:ef:b0: a9:48:cd:4a:4c:6a:c5:f5:ac:12:c1:e5:42:cf:96:ef:63:ba: 2a:ba:34:b4:82:2c:ad:f2:fc:16:8b:c2:de:e8:83:9a:62:81: 94:6c:7c:9d:1f:7a:e5:21:03:72:2f:37:a5:95:17:6f:36:63: 21:fc:fd:c4:db:bb:b5:92:01:49:e8:65:b4:13:cc:1d:7f:01: fa:bd:54:f4:d2:6e:e3:16:19:80:bf:e0:46:88:2a:ce:fa:d6: e8:c7:94:75:f0:d2:f2:ca:18:d7:47:b2:04:81:ae:26:1a:cd: 71:9c:9f:f0:2f:cb:91:09:65:23:9f:86:43:44:88:4e:82:f5: b7:da:03:33:a4:f8:b9:be:69:72:cd:8e:34:1d:30:5b:15:de: c5:46:f2:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7iMY2Xs2AyJwKXWFryuv46lfMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTA4MDgxMTE1MDBaFw0yNTA4MTEyMDI1MDBaMDMxMTAvBgNV BAMTKEYwOEFBNEVBNjA4MzFDMTQxQjk4NTQ5QTkyQzUyNDcwREU1NkVFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6M+Yx6Dt7EAyoc/voXnEd4rv Tf5An9LNj8kI/uQgTSWCest9fFIBN+Andb8x7mkxRxmcdei5H3vW9NlP2Atq0cvY tkgVDsGGa69ERzxm4GeqU/fDUv+k/TH2WOaDjbD2coiOiihBQlS3/oGbAAnG+uxF 2Han8uJsSiQ9Ebrafj3Gw/bFYaMC+CwmrLnaiYelSWnMeUpliOEV0i2pApUXHIQc WBRy1+FpqlNiYlOb7/o3P+WYNbki1qggXSKF3kxDXH5z5TYPm5FzLQ3txr27YyZw n6SzKrLUAZFrnQnn+ykOlXj3sthKy9Ri58ju3MfB/svQ9rp4wdN0g99XFWMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Iqk6mCDHBQbmFSaksUkcN5W7mAwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITnLGdpX4xAtE+qMzKdnMU6f2mCkNfAoX+3 tba/QCI/eUv2ZNKTW9OJaMemOzdOTZPA2NWQxd0k2Mm+nNbp+L9vb0dwk8tSVNUy fi3dccbyYA871U2RODsSnMbK1KoJjCY0hB0vCaOtpTPvsKlIzUpMasX1rBLB5ULP lu9juiq6NLSCLK3y/BaLwt7og5pigZRsfJ0feuUhA3IvN6WVF282YyH8/cTbu7WS AUnoZbQTzB1/Afq9VPTSbuMWGYC/4EaIKs761ujHlHXw0vLKGNdHsgSBriYazXGc n/Avy5EJZSOfhkNEiE6C9bfaAzOk+Lm+aXLNjjQdMFsV3sVG8uA= -----END CERTIFICATE-----Generated at Sun Aug 10 18:14:07 2025 by rpki-client