$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: o0lPb1+GgtWaRHwKm5yI506MCHPRyU3cvbWiqqUqdE4= Subject key identifier: 88:AD:09:BB:B6:E4:2F:E4:B7:14:C8:F7:9C:2C:6A:38:1A:93:FD:C0 Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 617759B12600D040F36F193E546490B811AABF6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 01E8 Signing time: Wed 06 Aug 2025 07:32:33 +0000 Manifest this update: Wed 06 Aug 2025 07:27:33 +0000 Manifest next update: Sat 09 Aug 2025 17:32:33 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 2: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 4: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: dpVozgzZQszAiBsTzbeWaKUODbIM62Po7+xzGHe062o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:77:59:b1:26:00:d0:40:f3:6f:19:3e:54:64:90:b8:11:aa:bf:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Aug 6 07:27:33 2025 GMT Not After : Aug 9 17:32:33 2025 GMT Subject: CN=88AD09BBB6E42FE4B714C8F79C2C6A381A93FDC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:d3:63:e3:50:75:de:9c:7e:e3:49:ee:15: 0d:59:94:3b:6a:5e:18:c1:23:12:23:64:3c:ee:a8: af:03:ed:41:63:c2:2e:5e:7f:91:8e:49:b0:08:ee: 48:ad:7a:7a:2a:a2:77:9a:60:f9:3d:0b:ba:03:46: fe:dc:c3:1b:27:3c:a7:a5:c1:87:e7:7e:9c:a2:0f: 2f:93:24:17:77:e6:5f:e7:18:82:50:16:87:d4:e1: 20:fb:5d:15:4f:6c:f8:38:89:34:13:a4:e9:2a:38: 64:06:21:45:0b:0a:38:b4:d0:55:29:6c:d8:35:91: 4d:65:a7:2c:38:d2:18:d7:91:31:11:c7:ab:a8:2b: a3:01:e3:c7:df:6a:79:ae:d4:66:5e:69:8b:83:9e: 42:7c:59:95:ff:21:f5:41:2b:e3:38:13:7d:a2:ec: fd:14:35:bf:d3:bf:30:36:9f:19:de:60:72:4a:ba: 43:a3:77:93:c2:34:7b:c0:88:67:ae:6f:54:e6:d8: 0c:00:cf:79:72:a2:de:00:70:4a:ba:5f:27:52:7d: bf:7b:51:85:32:fd:27:16:40:9c:46:eb:df:04:6b: e1:dc:b2:0f:1f:be:70:61:7b:ed:40:55:a0:03:2a: 95:86:65:74:f4:d4:48:27:c4:38:b0:62:da:cc:c8: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AD:09:BB:B6:E4:2F:E4:B7:14:C8:F7:9C:2C:6A:38:1A:93:FD:C0 X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:54:94:7c:67:80:d7:53:29:0a:0a:e6:31:d8:10:58:55:c3: f0:eb:f0:af:87:0e:01:6e:80:c0:f5:c6:6f:92:ea:e9:4e:2d: eb:3c:8e:05:cc:13:1a:b1:36:58:9f:53:25:a4:8e:f8:fc:a8: 29:39:4f:12:59:e0:46:e2:31:c7:98:02:8c:74:26:6e:aa:c9: 6d:37:5d:db:02:7b:cc:d9:a6:fd:4d:b5:70:94:11:d8:85:21: aa:f6:2c:8d:30:78:0d:b2:2c:de:0b:fe:26:cb:f9:4f:d4:21: 89:1e:63:74:c4:c4:51:2f:53:02:20:c7:6e:6f:82:b1:65:13: 7c:b0:27:92:61:d7:f9:02:dd:4a:0c:c8:3b:db:f8:fd:02:77: 63:dc:ed:5d:f5:dc:3c:38:89:7c:0f:40:c0:c6:3d:9e:0c:fb: 18:10:25:6d:f0:f1:7f:84:fe:d6:f0:aa:47:c4:88:9e:a5:b1: 0d:19:19:18:d5:8b:82:5c:b6:06:70:4d:bd:21:42:b0:c9:86: ff:ff:b0:4f:6c:c9:0b:d1:9b:9d:18:c9:7e:96:d5:65:1d:b8: 14:a6:25:12:05:02:e0:09:29:07:94:4e:dd:f4:12:af:15:10: 6b:17:25:9d:07:5d:2b:1d:c8:53:57:39:d0:12:c0:25:65:08: b0:6f:59:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXdZsSYA0EDzbxk+VGSQuBGqv2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTA4MDYwNzI3MzNaFw0yNTA4MDkxNzMyMzNaMDMxMTAvBgNV BAMTKDg4QUQwOUJCQjZFNDJGRTRCNzE0QzhGNzlDMkM2QTM4MUE5M0ZEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3NNj41B13px+40nuFQ1ZlDtq XhjBIxIjZDzuqK8D7UFjwi5ef5GOSbAI7kitenoqoneaYPk9C7oDRv7cwxsnPKel wYfnfpyiDy+TJBd35l/nGIJQFofU4SD7XRVPbPg4iTQTpOkqOGQGIUULCji00FUp bNg1kU1lpyw40hjXkTERx6uoK6MB48ffanmu1GZeaYuDnkJ8WZX/IfVBK+M4E32i 7P0UNb/TvzA2nxneYHJKukOjd5PCNHvAiGeub1Tm2AwAz3lyot4AcEq6XydSfb97 UYUy/ScWQJxG698Ea+Hcsg8fvnBhe+1AVaADKpWGZXT01EgnxDiwYtrMyCrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiK0Ju7bkL+S3FMj3nCxqOBqT/cAwHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOxUlHxngNdTKQoK5jHYEFhVw/Dr8K+HDgFu gMD1xm+S6ulOLes8jgXMExqxNlifUyWkjvj8qCk5TxJZ4EbiMceYAox0Jm6qyW03 XdsCe8zZpv1NtXCUEdiFIar2LI0weA2yLN4L/ibL+U/UIYkeY3TExFEvUwIgx25v grFlE3ywJ5Jh1/kC3UoMyDvb+P0Cd2Pc7V313Dw4iXwPQMDGPZ4M+xgQJW3w8X+E /tbwqkfEiJ6lsQ0ZGRjVi4JctgZwTb0hQrDJhv//sE9syQvRm50YyX6W1WUduBSm JRIFAuAJKQeUTt30Eq8VEGsXJZ0HXSsdyFNXOdASwCVlCLBvWTE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:53 2025 by rpki-client