$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: vW1ElnD4tTcmeL+UpRDcRtAj8CUG8018ixcQ/LOZNSI= Subject key identifier: B3:1D:A0:5C:37:6F:19:76:20:C8:6C:61:A4:5B:D6:F4:6F:1A:29:CF Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 3CACFF9E13BA49E562AE91138194D4C9948F95B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: BE Signing time: Thu 07 Aug 2025 22:52:24 +0000 Manifest this update: Thu 07 Aug 2025 22:47:24 +0000 Manifest next update: Mon 11 Aug 2025 01:58:24 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: zAwV/SgzwYcyvfPtGb5NnRnnMsbH6DnZ1WhYCF/4P68=) 2: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ac:ff:9e:13:ba:49:e5:62:ae:91:13:81:94:d4:c9:94:8f:95:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Aug 7 22:47:24 2025 GMT Not After : Aug 11 01:58:24 2025 GMT Subject: CN=B31DA05C376F197620C86C61A45BD6F46F1A29CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:64:84:c1:ff:93:f4:d9:5e:f5:70:42:a3: 7c:54:96:55:76:07:a1:46:2e:50:27:80:dd:1c:94: 86:c1:5d:c7:55:a4:be:c4:b7:4e:a6:45:c9:6a:00: 24:e9:20:20:82:7b:3a:e8:7e:97:57:38:09:ce:54: 68:48:f4:19:36:16:64:f0:d2:06:74:99:04:59:a7: 05:4d:54:fc:95:15:6c:55:37:fd:2a:1f:c3:6b:45: 4f:c5:88:73:f8:10:62:22:7f:93:fe:08:fa:4c:d6: bb:0d:21:55:3b:2b:e1:4b:80:97:1d:04:9d:4e:d9: 63:19:64:ca:5b:a7:41:dc:1b:5e:eb:5c:f6:8f:64: 8c:2c:7f:66:26:89:ce:87:b1:62:ad:07:10:9b:76: f7:e0:b1:e8:25:50:28:5a:82:13:c5:2e:93:d3:1c: 7b:07:af:49:34:8e:a6:c1:76:20:07:d3:df:41:1c: af:97:48:99:0d:26:de:91:4a:c7:14:20:c9:16:2c: a1:bb:2f:f8:90:fd:a9:27:59:73:0d:36:25:c3:22: 06:01:4e:38:dd:d1:91:ea:1e:3e:07:f8:cf:74:03: cc:90:91:03:a2:20:b2:84:f3:77:b1:91:a1:2d:65: 73:08:e8:c9:06:2f:11:00:65:61:c9:00:99:1d:b9: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1D:A0:5C:37:6F:19:76:20:C8:6C:61:A4:5B:D6:F4:6F:1A:29:CF X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:4c:03:c8:bf:33:6c:cf:f5:8c:be:32:f1:79:76:91:fa:e9: 3f:f9:67:96:4b:a7:41:3b:a0:98:31:4f:c2:a3:7e:6f:f2:23: e1:91:52:e1:7d:09:3a:75:3d:05:21:5a:4a:2b:b0:f4:67:b0: ff:3e:8e:af:95:5b:ef:5f:80:35:e4:c0:c2:77:25:e3:38:ae: 57:01:38:cb:05:d3:2b:be:cd:32:95:15:44:61:60:22:7c:4f: cb:54:39:23:a5:b3:00:cd:b9:7c:cf:85:1b:cb:30:b2:c7:35: c2:cd:e8:d1:59:9f:79:47:76:e6:b3:5a:db:3b:c9:28:65:32: 5c:05:b3:30:d7:61:7b:63:16:5a:db:f6:57:38:02:17:8b:28: 6d:95:d8:94:07:8e:dc:ea:73:c7:93:7f:94:b6:66:70:61:69: 77:5a:38:f3:fe:0e:c7:21:9c:18:b6:0f:7a:c7:a5:2d:15:0e: 61:b8:c5:70:ee:b2:30:25:36:ba:41:88:99:fa:17:0c:12:9c: 51:a8:59:ea:a0:21:ee:95:83:2f:80:c5:9e:79:a5:6f:8d:8e: 1d:71:34:df:c0:ad:39:86:90:75:e1:48:03:2d:f0:a2:8d:5f: 31:45:a2:4d:35:65:ee:24:e2:6e:f8:de:d6:e5:f4:bd:09:d3: 81:1f:68:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKz/nhO6SeVirpETgZTUyZSPlbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTA4MDcyMjQ3MjRaFw0yNTA4MTEwMTU4MjRaMDMxMTAvBgNV BAMTKEIzMURBMDVDMzc2RjE5NzYyMEM4NkM2MUE0NUJENkY0NkYxQTI5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7WSEwf+T9Nle9XBCo3xUllV2 B6FGLlAngN0clIbBXcdVpL7Et06mRclqACTpICCCezrofpdXOAnOVGhI9Bk2FmTw 0gZ0mQRZpwVNVPyVFWxVN/0qH8NrRU/FiHP4EGIif5P+CPpM1rsNIVU7K+FLgJcd BJ1O2WMZZMpbp0HcG17rXPaPZIwsf2Ymic6HsWKtBxCbdvfgseglUChaghPFLpPT HHsHr0k0jqbBdiAH099BHK+XSJkNJt6RSscUIMkWLKG7L/iQ/aknWXMNNiXDIgYB Tjjd0ZHqHj4H+M90A8yQkQOiILKE83exkaEtZXMI6MkGLxEAZWHJAJkduZvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsx2gXDdvGXYgyGxhpFvW9G8aKc8wHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJMA8i/M2zP9Yy+MvF5dpH66T/5Z5ZLp0E7 oJgxT8Kjfm/yI+GRUuF9CTp1PQUhWkorsPRnsP8+jq+VW+9fgDXkwMJ3JeM4rlcB OMsF0yu+zTKVFURhYCJ8T8tUOSOlswDNuXzPhRvLMLLHNcLN6NFZn3lHduazWts7 yShlMlwFszDXYXtjFlrb9lc4AheLKG2V2JQHjtzqc8eTf5S2ZnBhaXdaOPP+Dsch nBi2D3rHpS0VDmG4xXDusjAlNrpBiJn6FwwSnFGoWeqgIe6Vgy+AxZ55pW+Njh1x NN/ArTmGkHXhSAMt8KKNXzFFok01Ze4k4m743tbl9L0J04EfaJg= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:22 2025 by rpki-client