$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: gmZhxaN3nsKlmHXHjBMbb0vaJT9CDdvxYVKUodEuGm4= Subject key identifier: 37:A7:B9:83:30:85:A7:58:80:09:87:0E:07:28:58:99:E5:8E:41:91 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 2D7F8E2D832B3706E13283DEC32847DA38FE7C30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: BA Signing time: Sun 10 Aug 2025 17:41:34 +0000 Manifest this update: Sun 10 Aug 2025 17:36:34 +0000 Manifest next update: Thu 14 Aug 2025 02:55:34 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: MNPqp9mh/zhqWsHi2YjRONPSkRJqoVdFerRdbEaXrgk=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7f:8e:2d:83:2b:37:06:e1:32:83:de:c3:28:47:da:38:fe:7c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Aug 10 17:36:34 2025 GMT Not After : Aug 14 02:55:34 2025 GMT Subject: CN=37A7B9833085A7588009870E07285899E58E4191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:24:0d:26:ac:6a:0c:42:10:ea:30:6e:0b: da:1d:5a:1a:3b:59:30:57:a3:f4:e4:e5:45:f6:ea: 9a:35:1f:2c:11:87:8d:d2:99:13:f9:2b:f6:e8:10: a0:f5:df:4c:94:49:e0:3d:3a:04:31:da:ab:bf:da: c6:b0:0f:b3:4c:cf:1b:99:66:5e:df:ce:75:64:6e: ea:cf:78:1b:4e:53:bc:c1:9f:01:bb:87:81:b4:38: 5e:6f:3b:fd:3b:72:23:8d:f1:09:65:4c:68:cf:20: e7:b6:df:fd:ec:54:c5:e6:1c:5c:34:df:33:a0:bd: 20:1c:75:57:4f:7d:96:80:d7:ca:9f:78:4b:3c:c3: d6:ba:72:ad:97:1f:7e:d0:cb:33:66:33:a8:f8:5c: 3a:07:7c:cb:87:c6:93:e5:35:44:4a:25:4b:98:9e: db:2b:35:78:66:3c:58:6f:6d:14:e2:27:a4:5e:26: e0:aa:9f:df:a6:3c:48:30:1c:63:9b:ed:a8:cf:30: cb:9d:84:be:f2:bf:3b:7e:7d:ea:2e:82:89:3e:93: be:16:4d:a4:d4:b3:b0:d1:cb:89:67:d5:23:5c:01: 6a:fe:1d:b0:2d:2b:2d:fb:2a:0b:d0:20:f3:d9:7c: e5:f1:3d:84:a7:84:ba:a3:8a:64:a7:09:55:3a:56: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A7:B9:83:30:85:A7:58:80:09:87:0E:07:28:58:99:E5:8E:41:91 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a1:94:d3:97:38:da:53:63:21:1b:27:e6:2f:44:7a:9a:b8: e4:5b:20:a2:43:22:c6:2f:29:b5:2c:cb:6a:0c:cf:60:19:ab: 50:1e:6a:25:7c:f4:a7:78:8c:05:e2:a9:6d:0c:30:7f:41:5b: c8:1c:eb:fb:55:2a:42:d5:d7:9c:ed:f1:8b:10:de:09:01:f7: 60:85:a2:a4:e9:bc:09:e8:cb:f0:8f:31:02:66:6d:0c:98:49: c4:0b:11:b9:50:3b:72:fe:67:e1:63:47:5a:6d:85:6c:be:80: 96:60:51:b7:18:d3:26:f1:74:fb:fe:ac:e9:94:46:42:4d:61: a1:4c:2d:e2:10:e8:49:0b:b6:e5:f4:90:f0:90:8d:e5:27:3f: 17:ec:48:93:69:8d:ca:04:fa:4e:7f:37:de:0e:9b:b3:d6:aa: a2:58:ce:6a:3d:94:7e:7e:5b:b6:41:4c:a9:c0:d6:d0:86:b4: 0b:b9:9c:44:98:7a:50:b0:6d:a2:51:83:c6:c7:fc:bb:b0:20: 8e:06:d4:38:cf:70:80:8c:0a:47:9a:d7:a2:a0:95:39:cb:4c: 64:19:4d:f1:39:6a:c3:a4:d9:fc:50:b1:17:66:94:7e:ac:a5: 20:8f:35:f9:b1:bc:af:dd:4e:96:bf:89:61:75:96:8b:fb:17: 36:58:61:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULX+OLYMrNwbhMoPewyhH2jj+fDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTA4MTAxNzM2MzRaFw0yNTA4MTQwMjU1MzRaMDMxMTAvBgNV BAMTKDM3QTdCOTgzMzA4NUE3NTg4MDA5ODcwRTA3Mjg1ODk5RTU4RTQxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdVyQNJqxqDEIQ6jBuC9odWho7 WTBXo/Tk5UX26po1HywRh43SmRP5K/boEKD130yUSeA9OgQx2qu/2sawD7NMzxuZ Zl7fznVkburPeBtOU7zBnwG7h4G0OF5vO/07ciON8QllTGjPIOe23/3sVMXmHFw0 3zOgvSAcdVdPfZaA18qfeEs8w9a6cq2XH37QyzNmM6j4XDoHfMuHxpPlNURKJUuY ntsrNXhmPFhvbRTiJ6ReJuCqn9+mPEgwHGOb7ajPMMudhL7yvzt+feougok+k74W TaTUs7DRy4ln1SNcAWr+HbAtKy37KgvQIPPZfOXxPYSnhLqjimSnCVU6VtG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN6e5gzCFp1iACYcOByhYmeWOQZEwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmhlNOXONpTYyEbJ+YvRHqauORbIKJDIsYv KbUsy2oMz2AZq1AeaiV89Kd4jAXiqW0MMH9BW8gc6/tVKkLV15zt8YsQ3gkB92CF oqTpvAnoy/CPMQJmbQyYScQLEblQO3L+Z+FjR1pthWy+gJZgUbcY0ybxdPv+rOmU RkJNYaFMLeIQ6EkLtuX0kPCQjeUnPxfsSJNpjcoE+k5/N94Om7PWqqJYzmo9lH5+ W7ZBTKnA1tCGtAu5nESYelCwbaJRg8bH/LuwII4G1DjPcICMCkea16KglTnLTGQZ TfE5asOk2fxQsRdmlH6spSCPNfmxvK/dTpa/iWF1lov7FzZYYUg= -----END CERTIFICATE-----Generated at Wed Aug 13 02:10:44 2025 by rpki-client