$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: caN3zw+cS3ypnyTMDsO4uBpuLOntp1Dsf0OvWYevtSY= Subject key identifier: 1E:7E:75:84:30:3F:F4:AF:88:37:66:F6:CF:7A:CD:58:88:A6:4F:C2 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 012FBA029D1A197DBB1B363C414FA1BE38AE68C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 0264 Signing time: Sat 09 Aug 2025 10:01:27 +0000 Manifest this update: Sat 09 Aug 2025 09:56:27 +0000 Manifest next update: Tue 12 Aug 2025 16:27:27 +0000 Files and hashes: 1: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: 3f3urXgM0Hm+cvV2rAOZExh+AZQwi+cZLueYjQuJXRA=) 2: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 16:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2f:ba:02:9d:1a:19:7d:bb:1b:36:3c:41:4f:a1:be:38:ae:68:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Aug 9 09:56:27 2025 GMT Not After : Aug 12 16:27:27 2025 GMT Subject: CN=1E7E7584303FF4AF883766F6CF7ACD5888A64FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:b9:b9:88:53:ba:70:02:46:da:53:8c:ae: bc:3e:43:eb:22:d4:78:df:e8:4b:bb:29:08:e4:f9: f2:d1:c6:f1:71:94:4e:3c:fc:ba:46:a3:1a:0f:01: 12:fb:28:b1:d7:6a:48:a6:c4:c2:60:0e:bd:04:25: c9:4f:75:9c:52:9b:59:db:0f:62:02:b1:43:35:2f: 04:be:f2:99:b9:ae:39:e0:ea:65:ca:02:92:40:04: 54:6d:21:41:a3:c3:c3:44:66:30:d6:cd:63:65:a2: b7:a4:86:4c:55:50:ed:c9:c6:19:e7:6a:eb:97:58: 18:9e:a3:b1:0c:2e:4c:f7:3c:c4:d3:8b:8d:4b:fe: 6c:5b:ee:2d:3c:95:a4:18:59:56:de:c1:3e:3c:5b: 7d:19:79:a2:c4:08:25:e2:34:71:5d:78:32:58:1d: 9b:c3:ef:04:c5:dd:87:21:3c:c4:ca:33:3e:54:e5: 9c:ad:1c:25:aa:c0:58:12:23:71:87:bb:ef:18:7a: 74:1c:ca:d5:3b:ac:5b:65:3f:13:3a:e4:b4:9c:6f: d9:73:6e:41:46:35:2b:23:5f:5b:c8:36:53:bd:e1: ff:d1:c2:e0:d5:77:cc:16:a7:2a:6e:07:41:b4:0f: 49:48:65:4a:8d:ab:f0:c0:5c:11:a0:7f:6c:6c:85: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7E:75:84:30:3F:F4:AF:88:37:66:F6:CF:7A:CD:58:88:A6:4F:C2 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c3:31:2f:5a:2f:cd:02:7e:08:51:f9:35:9d:d8:39:8c:93: 0e:eb:13:d1:48:f6:2b:16:38:3d:c6:28:9a:5f:ee:0a:a1:c6: 16:8b:2e:09:2a:9b:88:9f:d0:ee:30:fb:68:3b:7c:1f:fe:91: 44:b8:8b:7f:a2:3e:5f:e9:48:16:f0:41:77:7b:82:37:12:ab: 6e:f3:01:bf:5d:2f:b1:99:ad:71:ee:f6:d2:03:d3:ef:df:8f: 29:c4:b0:30:ee:f1:67:dd:fb:e4:ff:1a:8a:0d:88:87:a9:61: 44:54:00:db:e0:84:56:8d:6d:99:e8:f4:a6:bc:95:bb:65:a7: c6:50:69:62:38:cf:e2:16:9f:0f:ff:01:b1:33:51:e0:b0:b6: b0:bb:9b:9c:3b:f3:b0:32:bc:17:56:4d:ba:1b:eb:58:f7:9a: 7e:77:4f:14:d5:71:b3:f2:f4:4e:bb:eb:af:e2:77:ee:c0:5c: 98:42:9f:7e:ef:34:af:a4:2c:31:49:e4:3e:fe:a6:39:c0:06: 1d:61:93:31:53:97:10:90:4d:e5:63:5e:28:9e:51:56:06:49: 82:d6:8d:b5:46:d6:f1:40:f7:94:db:38:ff:0e:29:13:66:57: 52:d0:3d:ef:b1:95:77:bc:f5:a7:8d:cc:73:da:ab:78:79:6d: c5:e4:a3:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAS+6Ap0aGX27GzY8QU+hvjiuaMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA4MDkwOTU2MjdaFw0yNTA4MTIxNjI3MjdaMDMxMTAvBgNV BAMTKDFFN0U3NTg0MzAzRkY0QUY4ODM3NjZGNkNGN0FDRDU4ODhBNjRGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNaLm5iFO6cAJG2lOMrrw+Q+si 1Hjf6Eu7KQjk+fLRxvFxlE48/LpGoxoPARL7KLHXakimxMJgDr0EJclPdZxSm1nb D2ICsUM1LwS+8pm5rjng6mXKApJABFRtIUGjw8NEZjDWzWNlorekhkxVUO3Jxhnn auuXWBieo7EMLkz3PMTTi41L/mxb7i08laQYWVbewT48W30ZeaLECCXiNHFdeDJY HZvD7wTF3YchPMTKMz5U5ZytHCWqwFgSI3GHu+8YenQcytU7rFtlPxM65LScb9lz bkFGNSsjX1vINlO94f/RwuDVd8wWpypuB0G0D0lIZUqNq/DAXBGgf2xshXjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHn51hDA/9K+IN2b2z3rNWIimT8IwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3DMS9aL80CfghR+TWd2DmMkw7rE9FI9isW OD3GKJpf7gqhxhaLLgkqm4if0O4w+2g7fB/+kUS4i3+iPl/pSBbwQXd7gjcSq27z Ab9dL7GZrXHu9tID0+/fjynEsDDu8Wfd++T/GooNiIepYURUANvghFaNbZno9Ka8 lbtlp8ZQaWI4z+IWnw//AbEzUeCwtrC7m5w787AyvBdWTbob61j3mn53TxTVcbPy 9E6766/id+7AXJhCn37vNK+kLDFJ5D7+pjnABh1hkzFTlxCQTeVjXiieUVYGSYLW jbVG1vFA95TbOP8OKRNmV1LQPe+xlXe89aeNzHPaq3h5bcXko5s= -----END CERTIFICATE-----Generated at Sun Aug 10 03:44:22 2025 by rpki-client