$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: PXA+V/7Abth9XyoLbeRdAWTh6XKNfyMrpUvuAxQw8a0= Subject key identifier: 8D:F3:82:0B:D8:70:44:23:FC:29:2F:1C:B5:D2:D2:77:E9:32:D3:B2 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 5B02974BB6560C28DC9D2BD6ED806E7A91ED1385 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 014D Signing time: Wed 06 Aug 2025 12:00:47 +0000 Manifest this update: Wed 06 Aug 2025 11:55:47 +0000 Manifest next update: Sat 09 Aug 2025 21:44:47 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: Cydvd0Jl/pzBIkYewR48mD183/QGNZ6BKnHGavC7GDE=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:02:97:4b:b6:56:0c:28:dc:9d:2b:d6:ed:80:6e:7a:91:ed:13:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Aug 6 11:55:47 2025 GMT Not After : Aug 9 21:44:47 2025 GMT Subject: CN=8DF3820BD8704423FC292F1CB5D2D277E932D3B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:8f:13:23:c6:28:ae:58:7e:3a:9c:1d:cd: 4c:8f:48:01:e0:82:b0:18:52:7b:f8:f1:64:fa:ab: 5a:e7:14:d6:25:00:df:54:c4:ee:84:7c:2b:c0:cf: 74:a9:32:26:df:e0:1f:bb:0c:aa:12:ac:a1:64:55: 09:18:9d:d9:0f:91:af:8d:50:a6:2a:16:b9:f2:e7: a1:44:f3:9c:c6:50:12:f3:60:be:c8:f4:0d:aa:aa: 04:fe:5d:03:5c:04:61:2c:84:7d:4d:ce:e3:16:cb: 4c:43:21:db:82:9a:d6:c3:9a:22:d2:c9:de:65:ca: 05:d1:b3:70:a7:18:31:c7:d0:70:4e:c1:ad:b0:f5: ee:5d:6b:cf:4f:c0:71:ac:7d:41:7f:e2:4b:0b:8c: 5d:27:5a:44:82:da:3d:6c:10:05:54:b0:f3:8f:b0: 08:3f:fb:69:bb:cb:6b:05:92:5a:6b:42:ee:a1:24: d0:66:1c:68:bc:0d:d1:04:e1:15:71:8c:eb:ff:fd: be:f0:cf:a4:3a:82:44:21:27:38:ca:8b:5d:9e:ed: 63:a0:db:d8:a3:7e:1f:75:dc:33:c9:ce:4d:da:9b: 6c:1b:27:b7:fa:6d:38:ba:f9:b0:fe:5b:d0:24:e7: fd:cd:98:ef:b6:4c:e0:21:8a:73:5d:10:f2:f0:75: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:82:0B:D8:70:44:23:FC:29:2F:1C:B5:D2:D2:77:E9:32:D3:B2 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e1:68:5a:4f:fd:b4:0c:29:01:72:7a:67:65:c2:5a:74:4f: 9f:87:21:1d:43:d0:1c:df:81:a2:5c:aa:aa:cc:e5:01:ad:0b: 7c:8e:38:79:4e:2b:14:50:2a:e2:d8:b5:88:a7:77:24:27:f1: fd:7b:8c:3a:dd:3e:18:0e:0e:fd:ae:ec:60:5d:eb:13:f4:74: 34:06:41:ca:68:7a:0d:33:23:07:ee:8b:2d:74:e6:47:0c:5d: 67:bf:9f:4f:d6:60:99:a8:f1:b3:bc:6b:09:e1:16:6f:f7:37: e0:17:e3:d6:c8:dd:d6:f1:1a:61:97:cd:b7:03:55:49:c1:05: 9a:71:50:be:59:e6:f3:5a:9b:7f:aa:33:d8:25:82:38:60:3f: 93:04:36:4b:fc:88:4a:33:df:60:fe:3a:49:46:3d:f0:22:e4: b8:57:c9:2c:ad:3f:63:71:d8:f2:1b:5f:84:0a:09:1b:cb:21: 1c:2e:87:f0:6f:12:fc:f8:ed:8f:ee:8e:b9:c7:c5:59:0a:5c: b2:f2:af:a6:f1:7d:89:df:c1:f8:08:79:a4:f5:e4:06:3f:2f: 84:91:d1:80:47:78:cd:e1:00:7a:80:1c:a2:73:43:a0:cb:30: 75:c3:1d:68:2a:b9:68:b8:72:83:e8:31:15:84:47:f4:6d:68: bb:d4:d4:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwKXS7ZWDCjcnSvW7YBuepHtE4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTA4MDYxMTU1NDdaFw0yNTA4MDkyMTQ0NDdaMDMxMTAvBgNV BAMTKDhERjM4MjBCRDg3MDQ0MjNGQzI5MkYxQ0I1RDJEMjc3RTkzMkQzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8o8TI8Yorlh+OpwdzUyPSAHg grAYUnv48WT6q1rnFNYlAN9UxO6EfCvAz3SpMibf4B+7DKoSrKFkVQkYndkPka+N UKYqFrny56FE85zGUBLzYL7I9A2qqgT+XQNcBGEshH1NzuMWy0xDIduCmtbDmiLS yd5lygXRs3CnGDHH0HBOwa2w9e5da89PwHGsfUF/4ksLjF0nWkSC2j1sEAVUsPOP sAg/+2m7y2sFklprQu6hJNBmHGi8DdEE4RVxjOv//b7wz6Q6gkQhJzjKi12e7WOg 29ijfh913DPJzk3am2wbJ7f6bTi6+bD+W9Ak5/3NmO+2TOAhinNdEPLwdaMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjfOCC9hwRCP8KS8ctdLSd+ky07IwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3haFpP/bQMKQFyemdlwlp0T5+HIR1D0Bzf gaJcqqrM5QGtC3yOOHlOKxRQKuLYtYindyQn8f17jDrdPhgODv2u7GBd6xP0dDQG Qcpoeg0zIwfuiy105kcMXWe/n0/WYJmo8bO8awnhFm/3N+AX49bI3dbxGmGXzbcD VUnBBZpxUL5Z5vNam3+qM9glgjhgP5MENkv8iEoz32D+OklGPfAi5LhXySytP2Nx 2PIbX4QKCRvLIRwuh/BvEvz47Y/ujrnHxVkKXLLyr6bxfYnfwfgIeaT15AY/L4SR 0YBHeM3hAHqAHKJzQ6DLMHXDHWgquWi4coPoMRWER/RtaLvU1O4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:25 2025 by rpki-client