$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: 4I397fUQ3i4AFKO40uuYwOyKgpWHLsba7eU+Au6nSV8= Subject key identifier: 9D:19:F4:3C:99:DE:14:8B:68:AA:BF:F6:72:E8:E9:4E:A6:84:4E:BE Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 74B92A7767FC28F296F73E0FD5187557752F8011 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 0206 Signing time: Mon 04 Aug 2025 21:50:03 +0000 Manifest this update: Mon 04 Aug 2025 21:45:03 +0000 Manifest next update: Fri 08 Aug 2025 05:03:03 +0000 Files and hashes: 1: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: g4pB2roR+xATMfTfrb6tB5tb76OXYzHkibz9LdWlWRA=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 4: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b9:2a:77:67:fc:28:f2:96:f7:3e:0f:d5:18:75:57:75:2f:80:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Aug 4 21:45:03 2025 GMT Not After : Aug 8 05:03:03 2025 GMT Subject: CN=9D19F43C99DE148B68AABFF672E8E94EA6844EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:ca:e8:67:74:b7:2c:d2:c9:e0:7d:f4:85: e5:11:a7:5a:29:25:fa:9e:ae:4b:cf:18:50:17:1d: c8:0b:f5:be:32:ff:b8:c6:c2:ca:7b:e0:05:77:cf: fb:b9:20:5d:cf:2e:15:30:a5:c1:ec:5a:b7:d3:fc: d9:5c:42:d8:d1:75:f3:46:b3:24:04:b1:84:c0:ba: 11:5d:03:13:ef:d8:72:5c:47:30:00:be:ae:3d:de: 7a:78:89:cf:ea:ff:0b:07:a2:6c:e4:3c:82:9c:76: 4a:91:0b:3d:5c:5d:b3:7d:1c:11:be:54:68:4c:89: 80:62:f4:0f:6b:21:27:9e:be:42:78:1d:63:86:a5: d8:d9:43:54:dd:75:7b:71:de:0a:38:1c:3a:9f:88: 14:e4:92:68:9d:2d:1d:51:81:b0:23:8f:6a:fa:6f: 68:72:21:d9:7d:6a:21:39:f4:0b:37:88:f0:2f:e4: 05:76:23:80:1a:79:4b:e6:f7:c7:ea:bd:8f:a5:68: f5:09:90:8c:aa:f4:55:40:b5:3b:97:38:43:37:e8: 06:86:54:d5:7a:eb:01:14:a3:60:19:ba:2d:e5:e7: bf:f3:2b:91:5a:18:8d:6d:36:03:bd:e3:aa:89:a4: a3:56:b7:75:98:d5:41:d9:3a:79:99:5b:e7:a5:62: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:19:F4:3C:99:DE:14:8B:68:AA:BF:F6:72:E8:E9:4E:A6:84:4E:BE X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4b:95:5f:a0:e7:a3:d1:68:c2:85:43:ca:f4:93:e2:d4:0d: b5:dd:d4:3e:7e:4b:35:25:33:24:77:1a:fd:a4:15:d6:05:0d: 56:6b:85:03:a1:d9:16:84:48:ae:be:b3:54:ba:b7:e4:d1:e5: d8:e1:af:50:92:a5:46:a2:e5:44:ca:2e:8d:98:b1:c6:4a:22: 20:d0:bc:43:19:a3:1d:c5:dc:ef:3d:c8:00:ed:c0:9e:70:9a: 03:4e:c3:21:cb:07:fb:2e:97:cd:b1:e7:44:11:33:f4:9b:51: 4b:c5:29:e9:1a:19:35:99:6c:55:b9:ff:52:32:67:f3:d9:98: 21:0b:ac:71:e8:89:bb:75:58:50:38:b8:87:f6:f3:ba:b3:45: bb:50:e6:df:ce:a0:8a:f3:47:01:f1:c8:fc:ce:4e:2c:0f:31: 80:5d:b7:d8:e1:2b:9b:68:09:f8:c7:e0:77:da:28:06:8c:d2: 5a:86:c3:8c:51:f3:d4:ac:86:85:b1:97:ba:58:19:f3:a0:12: 8d:e2:7f:9e:1b:fe:07:4d:45:5e:eb:20:23:29:3b:0b:a0:a9: ac:ad:ee:77:28:38:f6:f0:d0:dc:b6:a7:d5:6d:d3:d8:30:f5: bd:b8:24:8a:e2:ec:c4:a6:52:47:7d:d3:23:3f:31:14:36:12: 28:b3:4a:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLkqd2f8KPKW9z4P1Rh1V3UvgBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTA4MDQyMTQ1MDNaFw0yNTA4MDgwNTAzMDNaMDMxMTAvBgNV BAMTKDlEMTlGNDNDOTlERTE0OEI2OEFBQkZGNjcyRThFOTRFQTY4NDRFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qcroZ3S3LNLJ4H30heURp1op JfqerkvPGFAXHcgL9b4y/7jGwsp74AV3z/u5IF3PLhUwpcHsWrfT/NlcQtjRdfNG syQEsYTAuhFdAxPv2HJcRzAAvq493np4ic/q/wsHomzkPIKcdkqRCz1cXbN9HBG+ VGhMiYBi9A9rISeevkJ4HWOGpdjZQ1TddXtx3go4HDqfiBTkkmidLR1RgbAjj2r6 b2hyIdl9aiE59As3iPAv5AV2I4AaeUvm98fqvY+laPUJkIyq9FVAtTuXOEM36AaG VNV66wEUo2AZui3l57/zK5FaGI1tNgO946qJpKNWt3WY1UHZOnmZW+elYpxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnRn0PJneFItoqr/2cujpTqaETr4wHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVLlV+g56PRaMKFQ8r0k+LUDbXd1D5+SzUl MyR3Gv2kFdYFDVZrhQOh2RaESK6+s1S6t+TR5djhr1CSpUai5UTKLo2YscZKIiDQ vEMZox3F3O89yADtwJ5wmgNOwyHLB/sul82x50QRM/SbUUvFKekaGTWZbFW5/1Iy Z/PZmCELrHHoibt1WFA4uIf287qzRbtQ5t/OoIrzRwHxyPzOTiwPMYBdt9jhK5to CfjH4HfaKAaM0lqGw4xR89SshoWxl7pYGfOgEo3if54b/gdNRV7rICMpOwugqayt 7ncoOPbw0Ny2p9Vt09gw9b24JIri7MSmUkd90yM/MRQ2EiizSiE= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:35 2025 by rpki-client