$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: yF0nDvnh2tZNCoZhU64DpIdUsahxCJal9bAEEWLEECI= Subject key identifier: 37:67:C0:34:31:C7:86:4C:B5:E6:F3:A0:BE:3F:71:F7:C1:D0:63:0E Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 171EFAFBE1341C5A5A87DA2AE28CF36A274105 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 02E3 Signing time: Sat 09 Aug 2025 06:41:12 +0000 Manifest this update: Sat 09 Aug 2025 06:36:12 +0000 Manifest next update: Tue 12 Aug 2025 10:30:12 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: Z1tGWFEjU6+Gt3zLjm1kyQrIJ2QvnjBbeJw3y7l63DU=) 2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: KorOHSQy78sZQGyBNL78iixhL7QIZGnehwef1WZ++tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 10:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1e:fa:fb:e1:34:1c:5a:5a:87:da:2a:e2:8c:f3:6a:27:41:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Aug 9 06:36:12 2025 GMT Not After : Aug 12 10:30:12 2025 GMT Subject: CN=3767C03431C7864CB5E6F3A0BE3F71F7C1D0630E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:75:fa:98:57:27:59:0b:35:17:c7:6b:e8: 9b:34:ec:e2:44:20:bb:65:25:b5:68:49:48:d7:23: ed:a9:a7:68:9f:ad:40:d6:2f:9f:c8:6e:15:8a:21: 9d:3d:c0:c4:0b:6d:8a:a7:f5:07:bd:df:dd:ec:de: 7f:af:07:dd:41:1c:50:84:87:95:53:eb:a6:d1:d3: 52:5a:67:7d:67:13:01:c9:77:bb:21:55:22:f0:ae: a7:d7:eb:fb:b4:3f:81:44:08:a7:1a:f1:2d:ce:b8: b8:7d:90:0c:a2:da:a7:f4:46:24:80:c6:e0:9d:18: 10:ce:ad:1b:fc:b4:92:f0:91:f3:83:72:fd:6e:64: 7e:c1:49:b8:20:a8:36:d8:94:26:74:4e:e6:ea:7b: b2:79:eb:e0:e9:d1:f6:de:fb:78:f9:47:29:42:ef: c4:5d:ae:1b:54:cb:78:6f:ce:8c:9d:a3:35:42:38: 58:39:17:14:6f:31:e2:81:8d:46:0a:10:7b:38:c0: 4a:0c:43:3c:83:83:88:43:dd:0c:23:e8:3e:e2:74: e0:97:2a:48:7e:a3:06:58:78:ee:be:21:cf:49:f7: 15:66:b6:8a:93:bd:92:b3:7b:ad:d7:5a:ea:df:80: 8e:f6:15:64:1c:83:ad:75:25:cb:2c:d3:22:7e:6d: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:67:C0:34:31:C7:86:4C:B5:E6:F3:A0:BE:3F:71:F7:C1:D0:63:0E X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:85:7c:9f:0b:f6:71:e0:98:a7:f5:ef:f4:53:20:6d:96:5a: 71:32:e0:82:21:29:7b:fc:00:ab:d5:bc:5d:a8:72:9b:9f:06: c2:4d:f2:46:7c:c2:96:2e:d5:fe:ce:ee:ed:58:fe:78:74:41: 9b:9b:d7:05:39:f2:bf:e5:93:48:ee:a6:8f:5d:49:0c:99:82: b7:88:06:e5:92:02:bf:8b:e7:cf:cc:79:37:e7:0b:f4:98:86: 92:c4:4c:79:d3:0b:84:1e:cd:c5:94:34:20:10:7c:85:9f:f6: 91:70:48:ab:77:fc:91:35:58:e9:29:1c:89:36:27:d7:11:3f: e3:7b:23:90:e8:e4:b6:29:b0:ac:96:9e:fc:9e:29:fa:ef:33: f1:b5:95:bc:7d:fc:eb:1e:e7:2d:27:18:b0:d0:a2:bc:7d:ca: 43:4a:c4:c5:4a:a5:43:72:1b:70:38:7f:87:74:8a:9b:a6:09: 15:e6:13:67:03:3c:ee:06:14:0e:69:6e:ba:e4:a5:2d:6d:c3: e3:5a:50:7f:3a:5e:80:26:77:4d:52:f9:c2:a7:c8:10:b0:af: dd:60:3c:55:60:9a:e3:90:bc:f2:c0:40:a2:55:e7:67:90:de: 58:11:57:85:f1:2a:41:57:a0:e4:20:0c:2a:69:f0:98:29:85: 64:6f:6a:9f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITFx76++E0HFpah9oq4ozzaidBBTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDQTEzQTlCQUMyOTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJB RDZFNTkyMB4XDTI1MDgwOTA2MzYxMloXDTI1MDgxMjEwMzAxMlowMzExMC8GA1UE AxMoMzc2N0MwMzQzMUM3ODY0Q0I1RTZGM0EwQkUzRjcxRjdDMUQwNjMwRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxgdfqYVydZCzUXx2vomzTs4kQg u2UltWhJSNcj7amnaJ+tQNYvn8huFYohnT3AxAttiqf1B73f3ezef68H3UEcUISH lVPrptHTUlpnfWcTAcl3uyFVIvCup9fr+7Q/gUQIpxrxLc64uH2QDKLap/RGJIDG 4J0YEM6tG/y0kvCR84Ny/W5kfsFJuCCoNtiUJnRO5up7snnr4OnR9t77ePlHKULv xF2uG1TLeG/OjJ2jNUI4WDkXFG8x4oGNRgoQezjASgxDPIODiEPdDCPoPuJ04Jcq SH6jBlh47r4hz0n3FWa2ipO9krN7rdda6t+AjvYVZByDrXUlyyzTIn5tyj8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ3Z8A0MceGTLXm86C+P3H3wdBjDjAfBgNVHSME GDAWgBTKE6m6wpMV5cXazwvHOIw0KtblkjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Mz OTdjZmM1LWUwYjAtNDgyMC1iODU5LTc5NjI1MjAxZWNhZi8wL0NBMTNBOUJBQzI5 MzE1RTVDNURBQ0YwQkM3Mzg4QzM0MkFENkU1OTIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DQTEzQTlCQUMyOTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZF NTkyLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9jMzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1 OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMyOTMxNUU1QzVEQUNGMEJDNzM4OEMz NDJBRDZFNTkyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAAoV8nwv2ceCYp/Xv9FMgbZZacTLggiEpe/wA q9W8Xahym58Gwk3yRnzCli7V/s7u7Vj+eHRBm5vXBTnyv+WTSO6mj11JDJmCt4gG 5ZICv4vnz8x5N+cL9JiGksRMedMLhB7NxZQ0IBB8hZ/2kXBIq3f8kTVY6SkciTYn 1xE/43sjkOjktimwrJae/J4p+u8z8bWVvH386x7nLScYsNCivH3KQ0rExUqlQ3Ib cDh/h3SKm6YJFeYTZwM87gYUDmluuuSlLW3D41pQfzpegCZ3TVL5wqfIELCv3WA8 VWCa45C88sBAolXnZ5DeWBFXhfEqQVeg5CAMKmnwmCmFZG9qnw== -----END CERTIFICATE-----Generated at Sun Aug 10 05:33:35 2025 by rpki-client