$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: UWtKXE9BIlTIAiFOR1K5SLSo297VScyHgdp26L2u1BM= Subject key identifier: E4:9E:39:10:CD:AA:C6:D6:F9:E8:A1:0E:C5:7A:69:E5:B0:35:FE:0A Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 42C7B3B18D33D823915041BC3D25BACB6D2215AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 0155 Signing time: Sat 09 Aug 2025 00:22:16 +0000 Manifest this update: Sat 09 Aug 2025 00:17:16 +0000 Manifest next update: Tue 12 Aug 2025 04:47:16 +0000 Files and hashes: 1: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: daBcekiItkLHbXYzwqiTtGzbyLRRUwZCb6AL6buCk2s=) 2: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c7:b3:b1:8d:33:d8:23:91:50:41:bc:3d:25:ba:cb:6d:22:15:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Aug 9 00:17:16 2025 GMT Not After : Aug 12 04:47:16 2025 GMT Subject: CN=E49E3910CDAAC6D6F9E8A10EC57A69E5B035FE0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:b8:d1:0c:07:42:4e:0c:b4:e5:2b:24:9a: 92:14:f8:1f:94:38:34:a0:a8:82:66:3a:a1:e6:25: 45:af:3d:2e:10:72:c3:6b:2b:ca:89:23:ce:ce:66: 47:2d:ee:08:88:26:ed:e9:de:89:eb:5c:2b:31:48: 41:ed:85:1f:18:12:6a:03:64:15:de:82:6b:e2:d7: c8:05:5a:01:a9:7c:ab:30:4a:9e:a8:59:c4:4e:3a: ec:ba:35:db:00:01:78:3a:bc:8e:9a:fd:1b:b6:ce: 74:ef:bb:38:df:9e:29:12:b4:e8:32:67:db:43:54: d8:fc:a3:c2:fe:96:f8:b7:20:54:4d:41:d5:35:9c: 97:ea:86:f3:17:92:f5:40:5f:8e:16:ea:02:29:2d: 19:88:af:a3:52:06:2d:fc:36:b4:10:ee:ed:02:8e: 8a:52:c8:88:6d:0a:d5:26:bf:20:a1:78:85:2f:c0: 59:e3:72:b2:6d:cb:6d:69:80:60:3d:c6:3c:36:55: 87:24:74:a9:d5:51:cb:24:ed:c5:d5:f9:27:fb:d6: be:0d:e7:7c:71:85:60:f9:92:b7:f8:09:8a:7c:45: 22:7c:35:68:5d:23:98:63:66:27:3e:80:43:7d:f9: 5a:35:17:aa:08:18:f7:2b:bf:5e:7e:f8:1f:9d:2c: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:39:10:CD:AA:C6:D6:F9:E8:A1:0E:C5:7A:69:E5:B0:35:FE:0A X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:15:53:13:60:28:c1:4c:01:b4:df:6f:e2:08:a8:63:51: 37:a8:8b:9d:9b:df:1f:9b:99:17:7c:27:d3:2b:80:eb:b9:1e: f4:87:e0:1d:60:1a:d1:6f:e3:b0:75:ac:07:c6:4e:5b:5a:e0: 37:9c:6c:14:2b:12:5e:23:c6:09:ae:ef:54:9f:90:a5:14:80: b2:60:56:57:3f:1d:b6:59:f5:fb:13:84:db:54:28:8b:30:a1: 65:09:6f:37:ed:91:af:88:2f:70:b8:7e:2c:38:9a:77:92:2b: bd:7c:b3:45:d6:b2:7a:28:0b:73:0d:f0:c8:b8:13:fb:22:a8: d2:5a:0d:76:47:43:1d:af:d7:56:fa:0f:ef:17:51:3a:62:5c: 23:b1:e9:31:54:1c:77:36:6d:8b:88:4d:77:f5:d8:55:f0:7e: c4:26:7d:8d:78:fd:eb:66:59:64:97:c4:86:c1:84:e1:5d:2b: 8f:1d:ea:c7:27:dc:8b:d3:6a:2c:33:d2:c0:f6:af:8a:b9:b2: 1a:df:d6:c8:8a:a9:79:77:38:b8:63:1b:59:5a:23:3e:e3:41: c3:3c:41:08:08:17:2c:f4:51:cf:d8:a5:ad:0b:7a:52:e4:50: e5:ae:ad:8c:16:58:f4:a7:a7:61:89:36:b1:33:55:2a:e8:8a: f5:6a:e4:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQsezsY0z2CORUEG8PSW6y20iFawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNTA4MDkwMDE3MTZaFw0yNTA4MTIwNDQ3MTZaMDMxMTAvBgNV BAMTKEU0OUUzOTEwQ0RBQUM2RDZGOUU4QTEwRUM1N0E2OUU1QjAzNUZFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGLjRDAdCTgy05SskmpIU+B+U ODSgqIJmOqHmJUWvPS4QcsNrK8qJI87OZkct7giIJu3p3onrXCsxSEHthR8YEmoD ZBXegmvi18gFWgGpfKswSp6oWcROOuy6NdsAAXg6vI6a/Ru2znTvuzjfnikStOgy Z9tDVNj8o8L+lvi3IFRNQdU1nJfqhvMXkvVAX44W6gIpLRmIr6NSBi38NrQQ7u0C jopSyIhtCtUmvyCheIUvwFnjcrJty21pgGA9xjw2VYckdKnVUcsk7cXV+Sf71r4N 53xxhWD5krf4CYp8RSJ8NWhdI5hjZic+gEN9+Vo1F6oIGPcrv15++B+dLC+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5J45EM2qxtb56KEOxXpp5bA1/gowHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPsFVMTYCjBTAG032/iCKhjUTeoi52b3x+b mRd8J9MrgOu5HvSH4B1gGtFv47B1rAfGTlta4DecbBQrEl4jxgmu71SfkKUUgLJg Vlc/HbZZ9fsThNtUKIswoWUJbzftka+IL3C4fiw4mneSK718s0XWsnooC3MN8Mi4 E/siqNJaDXZHQx2v11b6D+8XUTpiXCOx6TFUHHc2bYuITXf12FXwfsQmfY14/etm WWSXxIbBhOFdK48d6scn3IvTaiwz0sD2r4q5shrf1siKqXl3OLhjG1laIz7jQcM8 QQgIFyz0Uc/Ypa0LelLkUOWurYwWWPSnp2GJNrEzVSroivVq5Cs= -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:57 2025 by rpki-client