$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: pCjdUrwPsr01F6dHrzGVFAb8h/Z5qj5+oUowgcaP8jM= Subject key identifier: 7D:AC:57:6E:C0:AD:2C:7D:2E:35:32:5F:CA:8A:E8:7F:AC:32:EF:CE Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 11918CCB6AFB2D9BDCF45B271C8D69410D7C2664 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 0187 Signing time: Sat 09 Aug 2025 20:01:14 +0000 Manifest this update: Sat 09 Aug 2025 19:56:14 +0000 Manifest next update: Tue 12 Aug 2025 23:50:14 +0000 Files and hashes: 1: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) 2: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) 3: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: hhvOMb5z6H5PZSY5a0u4MB8h5wipBQuu9pK1fxaLkNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 23:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:91:8c:cb:6a:fb:2d:9b:dc:f4:5b:27:1c:8d:69:41:0d:7c:26:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Aug 9 19:56:14 2025 GMT Not After : Aug 12 23:50:14 2025 GMT Subject: CN=7DAC576EC0AD2C7D2E35325FCA8AE87FAC32EFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:25:35:30:41:a3:47:f1:bc:a1:46:7f:13:bb: 81:9d:bc:3d:95:ec:0b:2c:b9:8d:41:6e:66:4b:5a: 06:b5:03:af:42:6c:b1:9e:28:d1:52:1a:6b:b2:84: c7:1c:ff:6b:2b:aa:e5:30:46:5c:24:51:70:51:a1: 8d:07:10:8e:e7:b4:d6:48:b8:07:85:fb:45:9f:2a: 57:53:77:1f:7e:45:65:4b:e5:10:4e:01:c8:98:6f: ca:93:79:4d:e6:63:8f:7a:7c:f7:47:4a:90:8e:dd: 5b:7e:7d:a1:b4:95:08:ca:b3:97:82:23:0a:30:0b: d0:92:ef:5c:e1:dd:6f:ef:12:dc:ca:39:bf:80:63: d9:cd:86:00:f2:2b:21:47:a5:45:08:f7:dd:1a:bd: f5:48:62:e0:dd:ea:4a:6e:ef:43:c0:3a:c1:f7:21: ae:a8:a4:6c:d8:29:f7:69:d8:48:5b:74:69:6c:ef: 45:d6:d4:c4:1a:b4:06:3c:e9:85:2d:53:0f:69:5c: 69:d2:8a:1a:8b:65:7e:6c:69:54:a0:00:04:b8:d8: 88:82:71:76:58:50:c4:54:c6:69:78:72:97:88:4d: a3:1f:58:2c:a8:81:3e:4a:cd:2e:85:9f:1d:31:23: 6c:29:93:06:ac:b6:39:fc:15:83:a8:82:b8:4a:44: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AC:57:6E:C0:AD:2C:7D:2E:35:32:5F:CA:8A:E8:7F:AC:32:EF:CE X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b4:9e:32:81:05:ad:e6:61:a1:95:7b:96:79:a5:39:84:e3: 0e:75:eb:c4:01:df:e8:94:d2:6c:6d:e8:f7:45:7a:9a:80:06: d7:33:69:04:85:dd:1d:27:2c:06:49:e3:81:1f:53:24:59:de: e6:d1:3e:c7:ca:52:3b:d0:07:d0:7a:6e:bb:e0:ca:bd:79:88: 71:1d:da:ec:cc:75:7b:a1:fc:22:a3:a9:44:a4:75:7b:fb:c0: a9:4e:2a:b2:42:65:ea:ea:1f:c2:de:b1:aa:c2:d2:b1:71:b9: 43:5d:8b:97:ce:f8:e9:e3:31:ce:c8:c2:ed:a8:73:7c:87:6a: 3c:ee:21:1b:10:49:8d:00:cb:3a:5c:37:de:b0:83:44:0c:14: d0:c6:d1:03:7f:d9:28:3e:08:72:a0:b5:df:e3:6f:71:d3:ad: 1b:b7:f0:01:6f:55:f4:f5:dc:fb:47:86:a3:a6:62:b9:ac:9d: 53:ae:3f:b7:ea:3c:05:62:35:b2:86:cd:d8:df:56:91:05:d9: 77:f9:f6:01:20:d5:8d:b6:2a:aa:f9:c6:38:d3:0e:e6:70:60: 6e:21:3f:81:d5:79:f5:6a:3a:1e:eb:71:64:2d:fc:8e:ca:8a: 0e:41:f1:3c:c7:fb:e3:88:45:e7:b6:7a:ea:15:93:0c:b3:e3: 0d:a1:9d:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZGMy2r7LZvc9FsnHI1pQQ18JmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTA4MDkxOTU2MTRaFw0yNTA4MTIyMzUwMTRaMDMxMTAvBgNV BAMTKDdEQUM1NzZFQzBBRDJDN0QyRTM1MzI1RkNBOEFFODdGQUMzMkVGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJTUwQaNH8byhRn8Tu4GdvD2V 7AssuY1BbmZLWga1A69CbLGeKNFSGmuyhMcc/2srquUwRlwkUXBRoY0HEI7ntNZI uAeF+0WfKldTdx9+RWVL5RBOAciYb8qTeU3mY496fPdHSpCO3Vt+faG0lQjKs5eC IwowC9CS71zh3W/vEtzKOb+AY9nNhgDyKyFHpUUI990avfVIYuDd6kpu70PAOsH3 Ia6opGzYKfdp2EhbdGls70XW1MQatAY86YUtUw9pXGnSihqLZX5saVSgAAS42IiC cXZYUMRUxml4cpeITaMfWCyogT5KzS6Fnx0xI2wpkwastjn8FYOogrhKRMJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaxXbsCtLH0uNTJfyorof6wy784wHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO0njKBBa3mYaGVe5Z5pTmE4w5168QB3+iU 0mxt6PdFepqABtczaQSF3R0nLAZJ44EfUyRZ3ubRPsfKUjvQB9B6brvgyr15iHEd 2uzMdXuh/CKjqUSkdXv7wKlOKrJCZerqH8LesarC0rFxuUNdi5fO+OnjMc7Iwu2o c3yHajzuIRsQSY0AyzpcN96wg0QMFNDG0QN/2Sg+CHKgtd/jb3HTrRu38AFvVfT1 3PtHhqOmYrmsnVOuP7fqPAViNbKGzdjfVpEF2Xf59gEg1Y22Kqr5xjjTDuZwYG4h P4HVefVqOh7rcWQt/I7Kig5B8TzH++OIRee2euoVkwyz4w2hnbI= -----END CERTIFICATE-----Generated at Sun Aug 10 15:56:58 2025 by rpki-client