$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: /T8La3OP3+ucK4no9lwEZcann5WVz7ppd0YohpRcSP0= Subject key identifier: 9E:EF:85:D1:C1:E7:9E:E5:57:A6:70:3D:41:2A:3B:9A:0D:41:97:28 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 591A5DD99432AA1EE1D97044B9F0A97C61C4A845 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0115 Signing time: Fri 08 Aug 2025 06:21:25 +0000 Manifest this update: Fri 08 Aug 2025 06:16:25 +0000 Manifest next update: Mon 11 Aug 2025 09:58:25 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: Sh2ahHo2vx0VefU0fIGxJdD6J9/Blbf3sv24iCZWiw4=) 2: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: zNlsLtXyhQ5hyrXKxePb46bESXhC6VrGFQ1dqL4agGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1a:5d:d9:94:32:aa:1e:e1:d9:70:44:b9:f0:a9:7c:61:c4:a8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Aug 8 06:16:25 2025 GMT Not After : Aug 11 09:58:25 2025 GMT Subject: CN=9EEF85D1C1E79EE557A6703D412A3B9A0D419728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:7c:01:94:6f:f7:21:3c:f2:37:5e:dc:60: 9a:fb:9c:e6:17:ea:b5:c7:88:60:bd:c3:6f:96:07: c8:9c:35:3a:64:ee:bc:38:6e:21:d9:a5:65:50:3c: c3:eb:03:e2:d2:76:76:36:be:6c:44:95:f1:4f:ea: d0:17:9b:f8:b4:c3:f4:36:cd:51:60:d5:a0:cb:9f: 47:90:17:ac:1d:c9:2e:69:ff:33:e4:2d:a9:18:e9: 67:b3:f0:63:8e:27:a0:ac:48:bf:96:12:6f:cb:e5: 0d:de:a4:48:84:9d:5b:af:a6:ec:68:cd:aa:71:39: ff:b7:6a:01:a8:fd:48:56:08:27:d2:78:17:75:bd: ad:82:f3:2f:a5:a3:2c:00:a2:87:8b:1e:e0:2a:d3: a8:2c:a7:87:78:2b:28:df:04:5c:31:d4:be:22:78: ea:02:6d:f6:72:7e:0f:bd:85:80:f5:87:3f:9d:0e: 60:f8:9b:4a:8b:43:cd:2e:3b:b8:1b:31:45:66:80: 50:62:75:e2:3f:a7:54:55:96:a2:3b:66:7e:d3:70: 37:37:30:3b:ca:54:9d:6b:78:c9:0b:ac:e8:25:b3: 42:db:1c:38:9a:3c:d8:36:b6:e9:82:f0:3b:48:27: 8d:76:73:c5:b0:f0:d0:1f:e7:57:71:b8:25:23:c5: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:85:D1:C1:E7:9E:E5:57:A6:70:3D:41:2A:3B:9A:0D:41:97:28 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:49:7a:88:f8:2a:5c:3d:39:fc:72:fc:0a:1f:85:25:43:e7: c2:d8:d5:a1:72:e0:5b:aa:73:66:16:49:5d:d5:4d:88:b7:8c: 6b:a8:e4:4d:94:09:9b:ae:12:86:b0:f2:e4:41:b0:87:25:a6: 00:42:15:57:31:4c:8e:a6:ba:f4:fe:f6:fc:2f:e7:1e:47:b7: 61:19:a7:8a:a1:7a:cd:70:47:45:7f:2a:ef:24:6e:f4:ca:8e: 4d:c0:89:d6:6b:5b:b2:8e:3e:5c:e7:a3:15:83:c5:70:9a:e0: fd:8b:22:8f:c5:74:7f:7f:71:65:18:6a:d3:eb:0c:41:86:be: fd:ff:37:a5:64:93:65:a7:6f:5a:b1:92:1f:e4:a5:04:ba:42: 07:76:ed:d2:9f:68:e1:be:0c:9c:a2:3b:78:d0:bd:45:9d:6a: 9d:81:5f:65:f3:8b:63:80:82:ec:78:85:34:25:11:74:e3:07: 08:c1:c6:53:6b:b3:fb:21:4c:50:d3:78:a2:94:96:f6:00:f3: 4a:18:d2:03:00:92:01:28:83:bc:47:8e:14:2c:d1:b0:f9:d1: 34:85:34:ce:4a:cc:18:3b:6a:26:20:4b:70:3e:e9:21:d5:35: e7:c6:6f:fa:50:5d:12:37:0b:16:c8:97:47:e0:c8:6d:83:1a: 80:60:b5:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRpd2ZQyqh7h2XBEufCpfGHEqEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTA4MDgwNjE2MjVaFw0yNTA4MTEwOTU4MjVaMDMxMTAvBgNV BAMTKDlFRUY4NUQxQzFFNzlFRTU1N0E2NzAzRDQxMkEzQjlBMEQ0MTk3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRXwBlG/3ITzyN17cYJr7nOYX 6rXHiGC9w2+WB8icNTpk7rw4biHZpWVQPMPrA+LSdnY2vmxElfFP6tAXm/i0w/Q2 zVFg1aDLn0eQF6wdyS5p/zPkLakY6Wez8GOOJ6CsSL+WEm/L5Q3epEiEnVuvpuxo zapxOf+3agGo/UhWCCfSeBd1va2C8y+loywAooeLHuAq06gsp4d4KyjfBFwx1L4i eOoCbfZyfg+9hYD1hz+dDmD4m0qLQ80uO7gbMUVmgFBideI/p1RVlqI7Zn7TcDc3 MDvKVJ1reMkLrOgls0LbHDiaPNg2tumC8DtIJ412c8Ww8NAf51dxuCUjxfVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnu+F0cHnnuVXpnA9QSo7mg1BlygwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNJeoj4Klw9Ofxy/AofhSVD58LY1aFy4Fuq c2YWSV3VTYi3jGuo5E2UCZuuEoaw8uRBsIclpgBCFVcxTI6muvT+9vwv5x5Ht2EZ p4qhes1wR0V/Ku8kbvTKjk3AidZrW7KOPlznoxWDxXCa4P2LIo/FdH9/cWUYatPr DEGGvv3/N6Vkk2Wnb1qxkh/kpQS6Qgd27dKfaOG+DJyiO3jQvUWdap2BX2Xzi2OA gux4hTQlEXTjBwjBxlNrs/shTFDTeKKUlvYA80oY0gMAkgEog7xHjhQs0bD50TSF NM5KzBg7aiYgS3A+6SHVNefGb/pQXRI3CxbIl0fgyG2DGoBgtSM= -----END CERTIFICATE-----Generated at Fri Aug 8 10:18:33 2025 by rpki-client