$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: QHkxfqCwVULeyxtG8R6a+PIiTnejcLozdyCwK+OspIw= Subject key identifier: DD:53:E3:1C:F0:33:D7:CA:E9:C0:D6:74:C8:12:CE:79:B1:41:1A:69 Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 443D6EA12F41F2DAD041248AC50D959E24315214 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 0187 Signing time: Tue 05 Aug 2025 21:20:40 +0000 Manifest this update: Tue 05 Aug 2025 21:15:40 +0000 Manifest next update: Sat 09 Aug 2025 01:04:40 +0000 Files and hashes: 1: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=) 2: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=) 3: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 4: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=) 5: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=) 6: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: m/E0qcLSeWrMthQt70SV0Iu00YlA6PRB6b9ilNJNtgk=) 7: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3d:6e:a1:2f:41:f2:da:d0:41:24:8a:c5:0d:95:9e:24:31:52:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Aug 5 21:15:40 2025 GMT Not After : Aug 9 01:04:40 2025 GMT Subject: CN=DD53E31CF033D7CAE9C0D674C812CE79B1411A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:8b:67:88:39:df:e3:81:c7:92:4f:0f:e6: 94:de:8c:8f:f7:b7:bf:2d:95:13:09:78:0b:08:d6: 86:b5:75:9f:00:65:a8:bc:9f:76:e0:3d:a4:d3:71: ae:e4:4c:8f:1d:90:96:a8:8f:8f:24:c4:70:17:98: b1:64:c4:db:02:4e:35:25:b1:c0:b4:f2:22:50:27: 98:7f:d2:bf:b7:c2:bc:f8:ac:ae:34:3d:ea:e6:bd: d7:59:f2:b0:98:cc:58:e2:4e:83:f7:66:fc:19:dd: f7:d1:a5:d7:f8:4a:ea:71:6d:00:87:65:4a:25:6a: 6f:41:f6:5d:3f:99:61:7b:12:45:4a:16:85:b8:a3: 16:78:18:3d:e8:d1:2b:24:1e:9e:ea:b2:94:39:a7: 7e:23:04:69:c5:a8:40:cf:7f:18:2b:87:12:d7:2e: 11:11:35:9d:5d:d4:19:41:61:76:e2:85:3b:15:c7: 66:90:e3:ac:05:38:b0:f8:5a:8f:f8:d4:2d:bd:39: 01:0b:d7:28:01:33:f7:61:16:7c:49:ee:56:7c:a7: 01:90:8c:57:13:da:de:49:22:8f:01:75:fc:09:6c: 27:e3:9d:58:7e:79:11:c1:02:bd:53:f9:80:d0:c3: f6:58:99:85:03:de:c2:dc:4e:47:92:6f:02:5f:c6: 01:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:E3:1C:F0:33:D7:CA:E9:C0:D6:74:C8:12:CE:79:B1:41:1A:69 X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f4:a5:c1:a6:3b:0f:f8:c1:a0:b2:90:91:49:4c:72:b8:98: 8b:e9:94:97:b7:c8:a4:59:c2:df:d3:cb:ce:c8:25:c5:30:ad: c3:03:0d:9a:be:99:8f:6d:91:a7:46:0d:6e:18:f4:e9:f4:b4: 4f:fb:1d:1e:33:c2:57:e0:7c:35:78:71:02:e9:51:6a:fc:2e: de:12:97:eb:88:f8:6e:3a:0a:dd:c1:3d:2f:d9:29:06:e7:a6: 20:22:cf:b4:5c:a5:4c:58:39:1b:69:67:eb:7c:b3:a0:fa:45: ef:ca:e3:08:9a:b1:ad:48:85:f6:9a:b5:ff:45:4e:34:c7:9c: 2a:77:39:c5:2e:54:ea:e6:11:82:5f:2c:34:5f:ab:63:d1:13: d8:d1:fc:f2:92:2d:fb:bd:6c:21:10:2f:e7:44:6f:d1:38:f0: 49:ba:82:b4:ac:60:93:26:2f:de:1d:38:61:6a:30:3e:8b:d8: a4:df:7b:9d:6b:ca:1e:29:7f:0e:de:bc:bc:3b:15:78:4c:c5: 3e:b2:6e:e7:b9:6c:e6:78:ed:96:aa:4a:cc:e2:7b:85:54:9c: 3c:56:96:65:27:9e:9f:6e:4c:46:fc:d5:41:c8:28:dd:08:65: e8:81:00:0c:7a:6c:72:d4:07:e9:c3:b4:6c:f5:76:72:a5:e6: 9a:30:b6:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURD1uoS9B8trQQSSKxQ2VniQxUhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNTA4MDUyMTE1NDBaFw0yNTA4MDkwMTA0NDBaMDMxMTAvBgNV BAMTKERENTNFMzFDRjAzM0Q3Q0FFOUMwRDY3NEM4MTJDRTc5QjE0MTFBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjg4tniDnf44HHkk8P5pTejI/3 t78tlRMJeAsI1oa1dZ8AZai8n3bgPaTTca7kTI8dkJaoj48kxHAXmLFkxNsCTjUl scC08iJQJ5h/0r+3wrz4rK40PermvddZ8rCYzFjiToP3ZvwZ3ffRpdf4SupxbQCH ZUolam9B9l0/mWF7EkVKFoW4oxZ4GD3o0SskHp7qspQ5p34jBGnFqEDPfxgrhxLX LhERNZ1d1BlBYXbihTsVx2aQ46wFOLD4Wo/41C29OQEL1ygBM/dhFnxJ7lZ8pwGQ jFcT2t5JIo8BdfwJbCfjnVh+eRHBAr1T+YDQw/ZYmYUD3sLcTkeSbwJfxgFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3VPjHPAz18rpwNZ0yBLOebFBGmkwHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKT0pcGmOw/4waCykJFJTHK4mIvplJe3yKRZ wt/Ty87IJcUwrcMDDZq+mY9tkadGDW4Y9On0tE/7HR4zwlfgfDV4cQLpUWr8Lt4S l+uI+G46Ct3BPS/ZKQbnpiAiz7RcpUxYORtpZ+t8s6D6Re/K4wiasa1Ihfaatf9F TjTHnCp3OcUuVOrmEYJfLDRfq2PRE9jR/PKSLfu9bCEQL+dEb9E48Em6grSsYJMm L94dOGFqMD6L2KTfe51ryh4pfw7evLw7FXhMxT6ybue5bOZ47ZaqSszie4VUnDxW lmUnnp9uTEb81UHIKN0IZeiBAAx6bHLUB+nDtGz1dnKl5powtjw= -----END CERTIFICATE-----Generated at Thu Aug 7 05:13:27 2025 by rpki-client