$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json) Hash identifier: imfepqTOm99vus7XfMi5YW7EVs4TARvrht2aebtCuJY= Subject key identifier: 9C:C1:BB:F5:64:54:0B:39:B4:B9:50:ED:2D:80:18:8E:CD:F4:4B:08 Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Certificate serial: 6E2EF6B9491840BEB64808D988325AF426DF84DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft Manifest number: 0221 Signing time: Tue 12 Aug 2025 03:11:52 +0000 Manifest this update: Tue 12 Aug 2025 03:06:52 +0000 Manifest next update: Fri 15 Aug 2025 06:31:52 +0000 Files and hashes: 1: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: 6F/+m53CI+OBq/k1F+jb2qhZ0UKG610wF81rsZOA7iw=) 2: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: kvdlVtsshNUGzU37eBi8okQIchxyc/CApGNPwuPN6ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 06:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2e:f6:b9:49:18:40:be:b6:48:08:d9:88:32:5a:f4:26:df:84:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Validity Not Before: Aug 12 03:06:52 2025 GMT Not After : Aug 15 06:31:52 2025 GMT Subject: CN=9CC1BBF564540B39B4B950ED2D80188ECDF44B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:49:c5:d3:9a:ee:24:17:54:e1:dc:16:d4: e0:fb:51:3b:d3:9d:d0:e0:ad:45:7f:5a:9c:d0:6d: d2:56:1d:e9:c0:e4:3f:ae:fe:14:89:60:c6:6a:09: d4:14:15:b8:53:69:bd:e3:fc:8a:ef:9e:f4:cc:b7: 9e:23:9b:6b:5b:45:7c:43:e5:b0:5f:e1:ce:dd:cf: b7:75:85:32:62:42:34:62:4b:a7:63:86:76:25:c8: df:38:99:97:da:20:a9:57:bc:4f:dc:0d:35:12:d2: a4:c0:f6:93:3a:01:ca:59:d4:42:d7:43:12:04:94: d6:4d:ec:99:8e:45:b8:cd:81:dd:f8:f3:f6:33:f5: 50:4d:b0:d2:d1:03:b6:a5:51:39:e5:59:77:7e:fc: e4:15:53:e2:b6:11:73:b6:47:f1:2f:25:51:7b:68: 60:e7:95:05:b9:4c:f1:0e:a0:39:37:4c:f3:19:4b: 09:23:f6:6c:b3:5b:c9:38:da:cf:fb:8a:e9:41:36: fa:04:c6:d7:7e:89:0b:75:f2:dd:77:4b:74:6b:4b: b9:35:6f:c2:d2:0b:98:97:ac:d2:a6:a4:bf:b6:7e: d0:6d:a8:28:02:61:9a:2c:50:11:33:c8:4e:54:80: 56:35:07:2b:f3:04:d6:6a:2e:a7:be:3f:53:79:44: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:BB:F5:64:54:0B:39:B4:B9:50:ED:2D:80:18:8E:CD:F4:4B:08 X509v3 Authority Key Identifier: keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1b:c0:24:8f:67:69:e2:45:05:bc:52:bf:d9:2d:3c:4a:fa: 61:0d:c7:ea:ab:12:8d:4c:7e:54:e7:34:f5:c7:98:ce:f6:cf: 85:bd:15:f7:1b:1d:f6:b0:f8:c1:70:00:9e:c2:8a:7f:31:29: 19:51:8c:7b:ff:4b:14:fe:7a:2f:6b:8a:3a:7a:ae:69:a9:37: fc:10:b8:7f:49:ca:f4:3d:c2:58:f2:07:03:35:41:9f:9f:83: a8:c6:85:95:52:fc:b2:34:af:71:05:c9:be:8d:e2:2d:f9:f5: 00:f5:4a:2a:af:0e:30:0e:c5:a3:01:39:a1:e1:d0:26:b4:bd: 3b:eb:b9:ca:fe:41:6e:86:e1:6f:9b:5c:d4:ed:4b:87:59:c6: 0a:98:b3:21:e6:28:2a:8d:22:bb:23:60:4b:b2:fb:31:28:73: b9:3a:82:b6:ee:25:45:6a:d2:71:ba:0a:a2:c0:4f:b0:25:22: fe:07:e0:44:64:81:65:a2:01:4b:16:1e:45:ff:76:dd:15:a3: 30:99:34:34:b6:d1:71:19:cd:fa:43:5b:96:34:6c:2b:be:59: 95:09:77:67:7c:aa:ca:c4:87:b3:63:4f:49:8d:06:c0:a9:18: 72:29:97:39:32:ae:f3:74:2c:a1:5c:5c:20:17:ff:54:84:44: a0:cf:8a:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbi72uUkYQL62SAjZiDJa9CbfhNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1 QzY4NTA5QTAeFw0yNTA4MTIwMzA2NTJaFw0yNTA4MTUwNjMxNTJaMDMxMTAvBgNV BAMTKDlDQzFCQkY1NjQ1NDBCMzlCNEI5NTBFRDJEODAxODhFQ0RGNDRCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPN0nF05ruJBdU4dwW1OD7UTvT ndDgrUV/WpzQbdJWHenA5D+u/hSJYMZqCdQUFbhTab3j/IrvnvTMt54jm2tbRXxD 5bBf4c7dz7d1hTJiQjRiS6djhnYlyN84mZfaIKlXvE/cDTUS0qTA9pM6AcpZ1ELX QxIElNZN7JmORbjNgd348/Yz9VBNsNLRA7alUTnlWXd+/OQVU+K2EXO2R/EvJVF7 aGDnlQW5TPEOoDk3TPMZSwkj9myzW8k42s/7iulBNvoExtd+iQt18t13S3RrS7k1 b8LSC5iXrNKmpL+2ftBtqCgCYZosUBEzyE5UgFY1ByvzBNZqLqe+P1N5RO3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnMG79WRUCzm0uVDtLYAYjs30SwgwHwYDVR0j BBgwFoAUpKTEJqT0KimCljb7MiP6f1xoUJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMC9BNEE0QzQyNkE0 RjQyQTI5ODI5NjM2RkIzMjIzRkE3RjVDNjg1MDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1QzY4 NTA5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZB N0Y1QzY4NTA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJobwCSPZ2niRQW8Ur/ZLTxK+mENx+qrEo1M flTnNPXHmM72z4W9FfcbHfaw+MFwAJ7Cin8xKRlRjHv/SxT+ei9rijp6rmmpN/wQ uH9JyvQ9wljyBwM1QZ+fg6jGhZVS/LI0r3EFyb6N4i359QD1SiqvDjAOxaMBOaHh 0Ca0vTvrucr+QW6G4W+bXNTtS4dZxgqYsyHmKCqNIrsjYEuy+zEoc7k6grbuJUVq 0nG6CqLAT7AlIv4H4ERkgWWiAUsWHkX/dt0VozCZNDS20XEZzfpDW5Y0bCu+WZUJ d2d8qsrEh7NjT0mNBsCpGHIplzkyrvN0LKFcXCAX/1SERKDPinA= -----END CERTIFICATE-----Generated at Wed Aug 13 04:26:17 2025 by rpki-client