$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: vnmspn9QVURQe5Uwlv4FLDRINzYwJPDqHeKxDFmOzZA= Subject key identifier: 29:B9:30:9F:1E:0A:CD:4D:7F:6E:E6:86:6B:50:16:AF:F4:3F:6E:E6 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 62B4A310890DC9C17775A7DA2146899CEAC5DF2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01B7 Signing time: Mon 04 Aug 2025 18:21:31 +0000 Manifest this update: Mon 04 Aug 2025 18:16:31 +0000 Manifest next update: Fri 08 Aug 2025 05:57:31 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: jlkjJY+C1AA+EThjoRFub6TeX1Zp7C7W9WLDsB3jnOI=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b4:a3:10:89:0d:c9:c1:77:75:a7:da:21:46:89:9c:ea:c5:df:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Aug 4 18:16:31 2025 GMT Not After : Aug 8 05:57:31 2025 GMT Subject: CN=29B9309F1E0ACD4D7F6EE6866B5016AFF43F6EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:70:fe:65:ee:0c:77:d4:22:7b:69:85:9b:35: ca:63:43:a3:dd:7e:5d:d1:f1:b5:84:bb:ed:cf:f6: dd:67:03:b8:0f:d9:c3:ed:11:d3:c2:1e:b7:51:61: 67:e5:d3:dc:ad:0d:cf:a2:c7:dc:8e:55:4d:8c:bc: 23:f8:10:f5:06:6f:16:9d:f6:aa:10:8a:34:a2:f6: cb:79:a3:5c:44:4d:21:72:7e:a4:15:f3:3e:ca:38: 93:3e:68:27:55:39:89:ca:d8:f9:93:2d:b6:ed:93: 94:28:99:69:1b:cb:3b:8d:f0:6c:e7:78:4a:0a:7c: 7a:cc:20:21:66:a4:d7:31:90:6e:75:c7:ba:72:52: 0e:a3:e0:24:54:ea:07:09:ed:3c:97:21:2d:da:8d: 87:5e:8b:8f:67:49:ee:c7:10:40:35:c8:ec:3c:08: 4d:4a:e6:31:a6:fa:52:ab:f6:70:fa:13:f8:09:8a: db:3f:a5:1a:fd:e7:e8:4e:d0:2e:35:08:d7:5a:a7: ff:d1:28:17:b0:2a:17:ef:2d:6f:39:01:cd:b6:61: 2d:61:9b:44:b1:85:0f:73:9a:2e:10:50:f8:a7:f1: 0f:dd:da:cb:7e:37:2d:19:dc:5f:ac:ec:1a:59:67: 91:f3:fe:eb:da:31:a4:44:73:04:9b:27:f1:4e:fe: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:30:9F:1E:0A:CD:4D:7F:6E:E6:86:6B:50:16:AF:F4:3F:6E:E6 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3b:06:4a:31:d5:10:a4:6c:00:06:45:5c:df:05:d2:c3:6f: 98:fb:5d:7e:4a:a6:5d:4a:20:d5:83:e8:ee:e0:d6:7e:4d:eb: a1:1e:2c:44:56:17:97:35:b3:aa:a4:17:87:24:59:cb:27:df: 7e:cf:9c:18:c3:f5:97:79:c7:a1:2d:26:84:ce:a4:65:ee:fa: 86:9d:76:91:14:40:37:a9:92:7e:4b:df:52:fd:ac:e4:94:45: 60:7f:fc:31:a0:c1:ec:c7:95:28:75:dd:35:7d:de:08:39:8a: 41:9d:54:92:96:ae:5f:e3:c7:e7:83:b9:22:11:d2:ff:7b:5c: 66:e8:eb:74:5b:ac:53:7f:1a:f7:46:d5:1f:dd:b0:72:dd:9c: 6b:81:06:89:1a:e0:07:07:7b:5e:a3:31:19:7d:e8:cb:ec:96: 52:7d:bd:27:85:cd:b9:55:71:79:9e:f2:9a:bf:18:7a:92:d7: 91:a0:67:8b:9d:03:5f:c3:cf:e5:c4:31:26:f6:9f:bc:fa:28: f6:0a:2e:f3:e4:53:e1:57:fb:a8:46:c8:6b:e7:16:fb:2a:33: 15:00:3e:d0:9a:c5:ee:9a:dc:94:43:66:d7:8c:8c:f4:bc:3c: d6:8b:ca:46:45:3a:c0:65:c4:0a:54:ee:23:87:5f:dc:a3:2d: 9f:dd:8e:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrSjEIkNycF3dafaIUaJnOrF3yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA4MDQxODE2MzFaFw0yNTA4MDgwNTU3MzFaMDMxMTAvBgNV BAMTKDI5QjkzMDlGMUUwQUNENEQ3RjZFRTY4NjZCNTAxNkFGRjQzRjZFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcP5l7gx31CJ7aYWbNcpjQ6Pd fl3R8bWEu+3P9t1nA7gP2cPtEdPCHrdRYWfl09ytDc+ix9yOVU2MvCP4EPUGbxad 9qoQijSi9st5o1xETSFyfqQV8z7KOJM+aCdVOYnK2PmTLbbtk5QomWkbyzuN8Gzn eEoKfHrMICFmpNcxkG51x7pyUg6j4CRU6gcJ7TyXIS3ajYdei49nSe7HEEA1yOw8 CE1K5jGm+lKr9nD6E/gJits/pRr95+hO0C41CNdap//RKBewKhfvLW85Ac22YS1h m0SxhQ9zmi4QUPin8Q/d2st+Ny0Z3F+s7BpZZ5Hz/uvaMaREcwSbJ/FO/rnFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKbkwnx4KzU1/buaGa1AWr/Q/buYwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM7Bkox1RCkbAAGRVzfBdLDb5j7XX5Kpl1K INWD6O7g1n5N66EeLERWF5c1s6qkF4ckWcsn337PnBjD9Zd5x6EtJoTOpGXu+oad dpEUQDepkn5L31L9rOSURWB//DGgwezHlSh13TV93gg5ikGdVJKWrl/jx+eDuSIR 0v97XGbo63RbrFN/GvdG1R/dsHLdnGuBBoka4AcHe16jMRl96MvsllJ9vSeFzblV cXme8pq/GHqS15GgZ4udA1/Dz+XEMSb2n7z6KPYKLvPkU+FX+6hGyGvnFvsqMxUA PtCaxe6a3JRDZteMjPS8PNaLykZFOsBlxApU7iOHX9yjLZ/djhs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:52 2025 by rpki-client