$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: YjlhM9D7QwjI/XtmBHhxiVuICp+Jx2uMroEULoq+pcc= Subject key identifier: 3C:C0:20:ED:7B:29:E9:64:CC:DB:EB:C0:49:01:40:B9:BA:D0:97:11 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 122CFF41A32A34BCE7DBD2D7C3039BA5E54A5E3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 020D Signing time: Wed 06 Aug 2025 16:41:40 +0000 Manifest this update: Wed 06 Aug 2025 16:36:40 +0000 Manifest next update: Sun 10 Aug 2025 03:33:40 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: r0pPBqPD6L1XRTDApGNk7+VSEh7TDSxAA+tbu5t5/+Y=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2c:ff:41:a3:2a:34:bc:e7:db:d2:d7:c3:03:9b:a5:e5:4a:5e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Aug 6 16:36:40 2025 GMT Not After : Aug 10 03:33:40 2025 GMT Subject: CN=3CC020ED7B29E964CCDBEBC0490140B9BAD09711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:80:30:38:f8:26:13:73:9e:30:35:6c:13:ca: 32:c5:6c:84:0a:3c:dc:05:79:52:13:74:9a:e2:8f: 58:6e:62:93:c3:bc:cd:f2:8a:06:dd:e0:cf:1b:cd: fc:18:e3:14:3f:22:cf:d1:45:9a:5c:b3:76:06:e3: cd:ce:d1:01:4b:bd:d9:d7:f5:e9:95:6a:92:91:a5: 6c:32:08:63:6d:af:18:a5:be:5c:5a:a7:db:13:b8: 14:7b:1d:85:5d:10:6b:77:91:03:fe:67:86:ca:62: 2d:39:55:95:5a:dc:da:1d:12:88:ec:a1:36:25:0f: b0:07:9f:7a:90:4c:74:40:5c:ca:31:50:4c:6b:85: 37:ef:66:3c:d2:cd:56:bd:de:6e:8c:7b:30:d0:2c: 14:9d:2f:7e:94:f7:2f:3e:25:68:10:b5:73:1d:2d: cc:2d:50:37:ff:29:63:4a:77:b0:39:ca:6e:25:22: 90:59:f7:b2:49:8d:17:49:4a:3f:15:5b:92:5f:6b: d7:e6:f8:56:74:32:50:55:78:a9:46:8c:c5:cb:ee: 10:fb:18:56:a2:6c:78:ad:37:42:58:a8:dc:20:aa: cc:ea:85:dc:aa:86:08:0c:f7:9e:4e:40:0b:c8:f4: 09:c7:60:e9:cf:d2:8b:7c:18:22:90:86:79:68:cc: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C0:20:ED:7B:29:E9:64:CC:DB:EB:C0:49:01:40:B9:BA:D0:97:11 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a1:66:8c:b0:cc:87:cd:60:85:da:67:c2:6e:67:67:25:bd: 1a:2e:2d:a0:93:83:27:ec:a2:f5:a4:62:2a:f3:82:08:6b:65: b6:6b:56:7f:d1:e8:bb:39:ff:4e:2f:b7:2e:2d:fa:f7:39:49: 58:0b:1c:2a:e3:5d:29:bc:f7:59:8d:b3:21:87:4e:d1:d2:71: d7:3e:c6:07:5c:37:a0:92:e8:b0:13:61:3b:48:d2:c7:95:c9: cc:aa:10:47:3f:b5:ce:5d:f2:52:6f:97:c3:15:96:92:d8:50: 8f:4f:6e:a2:dd:37:80:e6:b0:c3:a0:53:bd:9a:15:48:fe:5b: c8:a8:dc:d7:18:60:77:b4:87:e9:d9:fa:32:7a:76:06:6f:d7: 35:c4:0b:4b:ec:21:f3:77:c5:9a:bd:50:02:f9:60:6f:c0:6c: 6b:34:14:fb:59:60:1b:56:b8:43:3e:c2:f0:72:8b:54:34:3a: 52:73:7f:6c:c9:26:ae:3f:34:6b:f1:cd:67:67:b1:18:54:8d: f9:6f:89:43:07:47:08:d4:30:10:c7:58:db:a9:aa:a1:e6:8c: 0b:95:eb:5f:56:52:8d:e3:ba:df:b4:22:2e:d0:57:ef:52:d7: 4a:47:e7:0a:5a:8f:5d:d6:3f:7d:d3:59:4e:ee:5e:64:16:9c: fc:41:ae:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiz/QaMqNLzn29LXwwObpeVKXj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTA4MDYxNjM2NDBaFw0yNTA4MTAwMzMzNDBaMDMxMTAvBgNV BAMTKDNDQzAyMEVEN0IyOUU5NjRDQ0RCRUJDMDQ5MDE0MEI5QkFEMDk3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqgDA4+CYTc54wNWwTyjLFbIQK PNwFeVITdJrij1huYpPDvM3yigbd4M8bzfwY4xQ/Is/RRZpcs3YG483O0QFLvdnX 9emVapKRpWwyCGNtrxilvlxap9sTuBR7HYVdEGt3kQP+Z4bKYi05VZVa3NodEojs oTYlD7AHn3qQTHRAXMoxUExrhTfvZjzSzVa93m6MezDQLBSdL36U9y8+JWgQtXMd LcwtUDf/KWNKd7A5ym4lIpBZ97JJjRdJSj8VW5Jfa9fm+FZ0MlBVeKlGjMXL7hD7 GFaibHitN0JYqNwgqszqhdyqhggM955OQAvI9AnHYOnP0ot8GCKQhnlozLaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMAg7Xsp6WTM2+vASQFAubrQlxEwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADehZoywzIfNYIXaZ8JuZ2clvRouLaCTgyfs ovWkYirzgghrZbZrVn/R6Ls5/04vty4t+vc5SVgLHCrjXSm891mNsyGHTtHScdc+ xgdcN6CS6LATYTtI0seVycyqEEc/tc5d8lJvl8MVlpLYUI9PbqLdN4DmsMOgU72a FUj+W8io3NcYYHe0h+nZ+jJ6dgZv1zXEC0vsIfN3xZq9UAL5YG/AbGs0FPtZYBtW uEM+wvByi1Q0OlJzf2zJJq4/NGvxzWdnsRhUjflviUMHRwjUMBDHWNupqqHmjAuV 619WUo3jut+0Ii7QV+9S10pH5wpaj13WP33TWU7uXmQWnPxBrsw= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:47 2025 by rpki-client