$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: 8i+F7SBiGynZKhc0o1YMZ1FsyU6QarGpmtcK7gXYS6U= Subject key identifier: EF:4E:25:49:D2:70:BF:DB:3E:D6:0D:79:35:6D:36:8E:28:52:77:D5 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 3E17800B93AC16ADFC7ABE59DCD096822E42EA4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 010E Signing time: Sat 09 Aug 2025 12:20:00 +0000 Manifest this update: Sat 09 Aug 2025 12:15:00 +0000 Manifest next update: Tue 12 Aug 2025 23:20:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: R7KKwegkANpJ/WTaWrayDgmlwwyVBkfbOY9XEfQPZCU=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: ePs+7QNvRzMlIpdqEG5AJcQ/7oSXOlNvEWF18TjLRwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 23:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:17:80:0b:93:ac:16:ad:fc:7a:be:59:dc:d0:96:82:2e:42:ea:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Aug 9 12:15:00 2025 GMT Not After : Aug 12 23:20:00 2025 GMT Subject: CN=EF4E2549D270BFDB3ED60D79356D368E285277D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:88:2b:ce:c7:84:41:e7:5b:11:f2:5f:f6: ef:a4:bd:ab:58:f9:48:a8:d3:76:3e:b9:1a:f6:49: 5a:e5:96:3a:e1:f3:37:a8:ef:63:65:89:a7:a0:3d: 7c:46:77:89:b9:23:1d:e8:9e:42:25:74:5e:ee:5f: 49:e3:b6:af:c9:38:47:12:6f:22:35:aa:f4:f5:30: b2:a8:50:4a:d8:c8:25:59:86:86:13:19:a5:52:d3: 6c:bb:20:b8:63:73:5a:5a:f2:d5:28:e5:e6:d6:e6: 08:cf:dc:2e:70:ec:d3:b6:9d:31:c3:7c:fd:74:53: dc:4d:c0:86:2c:c8:c1:c6:92:54:d0:15:8e:e4:62: a2:99:0b:6c:c6:f0:ab:23:de:ab:91:8f:6f:35:fb: 82:5b:3d:c4:c7:ed:7c:cc:ce:06:fc:c7:1a:59:d7: 0c:a0:58:60:de:ca:b3:89:8b:eb:19:59:fd:57:ca: 50:2b:e4:cf:c7:58:db:07:d4:7a:db:c1:fa:23:48: 79:15:26:03:18:3a:0b:15:66:9f:80:50:2b:8f:65: d9:55:b2:90:e6:ec:f3:83:f5:0a:55:1a:de:7f:c7: 0f:ed:a2:65:63:5b:2d:94:cb:27:01:aa:7f:06:23: db:06:83:1e:20:5f:c9:aa:29:0a:34:77:25:d1:82: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4E:25:49:D2:70:BF:DB:3E:D6:0D:79:35:6D:36:8E:28:52:77:D5 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0d:96:49:ac:43:64:25:54:04:ca:ac:39:47:f3:81:cd:a8: ee:04:2b:c8:7a:2a:36:36:3a:02:38:d6:83:90:af:11:d3:ba: cf:30:62:dc:83:56:ce:49:07:73:fb:e1:88:b4:19:2f:e0:fd: d3:a4:b1:9c:38:dd:32:b3:de:39:e5:cb:68:6d:f2:e3:2d:53: 4e:13:9a:9d:a8:37:8e:1c:73:37:71:86:87:36:dc:06:2d:6f: 98:fd:7f:c8:d5:3b:b8:be:2e:bc:07:53:df:83:65:94:2b:e2: 6c:8b:7e:e5:99:56:98:3e:56:31:a6:db:c7:79:7f:23:ac:15: 63:77:50:11:30:ff:d4:da:ee:e9:99:ba:d1:f5:95:aa:fc:51: e8:6d:b8:d7:90:a2:c0:2a:a7:b8:e8:6c:2b:e1:a6:b6:a1:2c: 86:56:71:47:25:25:fe:f5:6a:5c:4e:70:d8:d8:f3:73:49:62: 95:02:a3:0d:d3:58:1d:41:db:3e:ef:a2:a0:d4:ed:f7:fc:df: 57:15:8a:f8:b3:9a:84:42:b5:22:bc:11:e1:a0:c6:0c:45:9e: ec:5d:4f:41:d8:a1:ae:a0:b3:85:ea:1d:fa:d4:bf:46:88:c5: 18:d7:f2:86:63:f6:4e:ac:f1:e4:32:8e:a0:ca:c6:32:c6:79: ba:ce:80:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPheAC5OsFq38er5Z3NCWgi5C6kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTA4MDkxMjE1MDBaFw0yNTA4MTIyMzIwMDBaMDMxMTAvBgNV BAMTKEVGNEUyNTQ5RDI3MEJGREIzRUQ2MEQ3OTM1NkQzNjhFMjg1Mjc3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBG4grzseEQedbEfJf9u+kvatY +Uio03Y+uRr2SVrlljrh8zeo72NliaegPXxGd4m5Ix3onkIldF7uX0njtq/JOEcS byI1qvT1MLKoUErYyCVZhoYTGaVS02y7ILhjc1pa8tUo5ebW5gjP3C5w7NO2nTHD fP10U9xNwIYsyMHGklTQFY7kYqKZC2zG8Ksj3quRj281+4JbPcTH7XzMzgb8xxpZ 1wygWGDeyrOJi+sZWf1XylAr5M/HWNsH1HrbwfojSHkVJgMYOgsVZp+AUCuPZdlV spDm7POD9QpVGt5/xw/tomVjWy2UyycBqn8GI9sGgx4gX8mqKQo0dyXRgvftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU704lSdJwv9s+1g15NW02jihSd9UwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoNlkmsQ2QlVATKrDlH84HNqO4EK8h6KjY2 OgI41oOQrxHTus8wYtyDVs5JB3P74Yi0GS/g/dOksZw43TKz3jnly2ht8uMtU04T mp2oN44cczdxhoc23AYtb5j9f8jVO7i+LrwHU9+DZZQr4myLfuWZVpg+VjGm28d5 fyOsFWN3UBEw/9Ta7umZutH1lar8UehtuNeQosAqp7jobCvhprahLIZWcUclJf71 alxOcNjY83NJYpUCow3TWB1B2z7voqDU7ff831cVivizmoRCtSK8EeGgxgxFnuxd T0HYoa6gs4XqHfrUv0aIxRjX8oZj9k6s8eQyjqDKxjLGebrOgKE= -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:46 2025 by rpki-client