$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: 8bNq2ZC6eW3+rk3fzV3wolSBvUJynDMC0oPd6Z3TY9s= Subject key identifier: 4D:05:B0:B8:06:40:D3:40:9E:B6:2F:92:95:1C:01:D0:CC:09:E0:20 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 7A0E062E9B5F685E71B95EA3A535D0D82640D5F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 04FF Signing time: Tue 05 Aug 2025 13:01:16 +0000 Manifest this update: Tue 05 Aug 2025 12:56:16 +0000 Manifest next update: Fri 08 Aug 2025 20:30:16 +0000 Files and hashes: 1: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) 2: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) 3: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) 4: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: ktlUKn3ZlP54aXEPPgYT6pjejtIr7HXDBKdCyCTIcBQ=) 5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 6: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 7: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 8: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0e:06:2e:9b:5f:68:5e:71:b9:5e:a3:a5:35:d0:d8:26:40:d5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Aug 5 12:56:16 2025 GMT Not After : Aug 8 20:30:16 2025 GMT Subject: CN=4D05B0B80640D3409EB62F92951C01D0CC09E020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:34:e4:05:33:b5:45:36:d3:78:e3:8b:fc: 45:f4:90:d2:5c:f1:84:03:43:e6:8f:52:41:9e:ec: 54:d4:47:3a:d4:55:04:16:38:3c:23:fe:e3:da:a5: 44:89:eb:6b:a9:ec:64:30:cb:03:75:75:57:b2:4e: e2:98:02:d1:81:68:36:d9:20:d5:df:3d:29:50:82: c2:2f:b8:dc:6a:1f:8a:67:b7:ef:ad:90:cd:b3:f2: 36:2d:c3:91:c8:9d:58:09:63:5e:c7:be:d3:fa:70: bf:ce:3f:96:b6:73:f2:c1:37:4f:ef:03:04:3c:6e: f1:0b:b7:38:59:f2:96:a3:81:9c:53:51:01:44:ee: 13:bc:d7:23:75:b8:80:a0:8c:82:b1:ba:b8:a1:76: 9f:0f:9d:76:47:de:e0:c6:69:0c:e9:05:0c:04:99: c5:a7:07:03:2a:86:26:ff:46:59:0a:55:2b:2f:34: 71:6c:6e:01:b8:77:d7:1a:55:0a:49:4e:93:71:af: 2a:0e:66:25:db:fc:ec:30:a2:71:90:cd:34:0e:5b: 47:ed:96:11:7b:0a:4e:4b:ce:02:ea:85:fe:1f:ff: a1:a9:25:f4:fe:06:c1:b8:8c:71:30:e6:88:e6:ca: 1a:2c:c6:40:43:2d:cc:be:51:34:9f:77:90:bd:54: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:B0:B8:06:40:D3:40:9E:B6:2F:92:95:1C:01:D0:CC:09:E0:20 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:31:31:c6:15:14:79:db:a8:44:41:5f:51:dc:bf:dc:df:3d: 6c:38:6c:24:45:91:66:16:88:56:fa:5b:fe:9f:1b:2c:69:cc: 92:d8:0d:d2:db:ae:6e:c0:28:9c:5b:f5:23:28:3c:66:b4:ce: dc:97:57:b0:3b:b8:9d:e7:ca:e8:14:91:4d:65:9b:e8:2c:a3: c0:91:fe:f7:4a:61:c5:ff:5d:4c:06:18:16:86:86:9c:96:b7: 71:f0:3e:63:43:c7:32:32:c3:a8:f0:29:9d:75:3c:1f:79:09: f8:93:c9:5c:71:bc:b1:c1:7c:9e:60:1e:45:e2:5a:57:cd:19: 7a:20:0a:e9:a4:ed:97:8c:04:59:9e:03:ea:dc:c4:f8:51:53: 27:e4:5f:38:b0:e2:93:33:87:45:05:73:e4:26:f0:4b:22:38: 97:b1:2e:06:c9:ba:2f:ce:21:5f:2b:7b:87:6e:63:40:53:5b: 27:7d:ff:a8:df:e7:7c:a3:1f:c3:60:25:b1:b1:73:a5:34:20: a1:17:a5:bc:37:ae:ae:40:a1:56:3e:d7:b1:e1:3b:07:53:97: 60:b8:89:94:1e:ba:93:5c:14:3e:8a:f0:50:51:b9:3c:34:f3: 94:34:df:f3:13:cf:b8:c6:08:4d:61:60:4e:54:b2:b9:e3:e0: cb:c0:de:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeg4GLptfaF5xuV6jpTXQ2CZA1fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA4MDUxMjU2MTZaFw0yNTA4MDgyMDMwMTZaMDMxMTAvBgNV BAMTKDREMDVCMEI4MDY0MEQzNDA5RUI2MkY5Mjk1MUMwMUQwQ0MwOUUwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmTTkBTO1RTbTeOOL/EX0kNJc 8YQDQ+aPUkGe7FTURzrUVQQWODwj/uPapUSJ62up7GQwywN1dVeyTuKYAtGBaDbZ INXfPSlQgsIvuNxqH4pnt++tkM2z8jYtw5HInVgJY17HvtP6cL/OP5a2c/LBN0/v AwQ8bvELtzhZ8pajgZxTUQFE7hO81yN1uICgjIKxurihdp8PnXZH3uDGaQzpBQwE mcWnBwMqhib/RlkKVSsvNHFsbgG4d9caVQpJTpNxryoOZiXb/OwwonGQzTQOW0ft lhF7Ck5LzgLqhf4f/6GpJfT+BsG4jHEw5ojmyhosxkBDLcy+UTSfd5C9VFYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQWwuAZA00Ceti+SlRwB0MwJ4CAwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYxMcYVFHnbqERBX1Hcv9zfPWw4bCRFkWYW iFb6W/6fGyxpzJLYDdLbrm7AKJxb9SMoPGa0ztyXV7A7uJ3nyugUkU1lm+gso8CR /vdKYcX/XUwGGBaGhpyWt3HwPmNDxzIyw6jwKZ11PB95CfiTyVxxvLHBfJ5gHkXi WlfNGXogCumk7ZeMBFmeA+rcxPhRUyfkXziw4pMzh0UFc+Qm8EsiOJexLgbJui/O IV8re4duY0BTWyd9/6jf53yjH8NgJbGxc6U0IKEXpbw3rq5AoVY+17HhOwdTl2C4 iZQeupNcFD6K8FBRuTw085Q03/MTz7jGCE1hYE5Usrnj4MvA3jU= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:51 2025 by rpki-client