$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: b0toUROtLHppY295mzsP+8aUf2SXBX+lcchl7nZtXyg= Subject key identifier: 43:19:3C:52:D5:34:9E:BB:9E:E7:29:3F:E3:22:F8:DB:68:D5:B4:FB Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 1EB7D1A4326342A18A08CA43F565BEEB5BD1E01E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 036C Signing time: Tue 05 Aug 2025 17:11:31 +0000 Manifest this update: Tue 05 Aug 2025 17:06:31 +0000 Manifest next update: Sat 09 Aug 2025 04:01:31 +0000 Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) 2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: 1ql5CeP6RrnOWK+w+p5V1unTj7zLUAC+MSJ+MuCMYO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b7:d1:a4:32:63:42:a1:8a:08:ca:43:f5:65:be:eb:5b:d1:e0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Aug 5 17:06:31 2025 GMT Not After : Aug 9 04:01:31 2025 GMT Subject: CN=43193C52D5349EBB9EE7293FE322F8DB68D5B4FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9e:cb:bc:c6:c5:f9:00:84:66:3c:92:4f:88: ca:f1:f4:db:8d:8c:49:62:16:21:22:b1:9d:89:7e: 1d:0c:c8:b3:56:7f:2f:eb:a3:e6:3b:d5:cd:34:10: 32:90:e3:da:42:44:8a:13:15:f8:4c:de:4a:bd:c1: cf:f1:14:e3:e5:5a:53:69:c8:00:f7:45:91:2e:8b: 08:14:65:74:c2:0f:41:8f:38:7f:07:f0:ae:12:c8: 81:07:81:71:4f:0c:50:98:d3:50:45:2a:e7:49:c0: 44:9e:d9:3f:52:71:4e:e0:71:49:7a:47:c9:bf:f3: 56:ed:48:13:b7:b7:3c:88:c6:d8:77:44:7d:29:c1: 84:2e:f7:af:b2:c4:83:a8:69:3a:d4:cc:a0:99:da: e2:68:98:92:21:19:81:53:f8:2c:01:f9:4b:52:cc: 55:14:4c:b1:46:d4:79:06:fa:b6:0e:64:bc:c7:38: b8:a2:8e:23:58:fb:72:a6:a2:c1:56:8e:30:3a:5d: 22:f2:ae:d7:d3:68:8d:c7:44:00:7d:ec:2f:66:9c: a8:cc:1e:2f:1e:d8:08:b4:2a:66:6d:fa:c7:09:f6: d0:8d:41:5a:bc:a6:70:04:b7:40:e2:8a:d1:c1:8f: 98:b0:05:0b:7b:cd:45:8b:fb:69:8b:cc:3c:14:0c: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:19:3C:52:D5:34:9E:BB:9E:E7:29:3F:E3:22:F8:DB:68:D5:B4:FB X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8b:de:d7:30:f3:c5:69:c5:83:d0:bf:eb:fc:64:c6:cb:97: 36:a3:55:9d:da:13:0d:72:74:20:ea:0f:4c:cf:7c:88:fc:8b: e9:ad:8f:61:b3:b4:0a:0a:67:a7:bb:da:56:11:82:de:92:2a: 5b:79:b9:b1:0d:3c:b8:2e:db:db:5b:07:db:23:53:28:49:53: e5:c3:3c:26:2f:20:8d:56:a9:d1:69:f3:7a:9f:65:66:6c:3f: f5:54:f1:a3:a0:7e:e7:94:3d:cd:2c:0e:ab:f4:ee:bd:06:32: 05:a7:38:36:e3:a2:27:60:06:9c:e5:19:87:77:8a:ff:8b:a6: e5:8c:05:d6:e7:da:56:ca:09:90:91:c6:f6:57:5d:29:71:f1: 45:47:77:4e:6b:5c:64:ea:08:0c:9d:b5:4c:30:3a:0f:5a:4a: 2a:71:cb:a1:bf:ee:4f:27:c4:19:db:f1:17:c4:a2:a2:a3:6b: eb:21:0d:d9:0c:7a:b9:ae:cf:58:d6:e3:8b:12:79:f4:1d:9d: dc:c2:83:0f:61:d2:df:b9:8b:f2:09:57:80:6a:65:a9:31:00: 25:f7:42:dd:38:ca:e8:17:90:b2:35:cc:a4:9e:5c:1a:ff:c3: 0e:42:4c:5c:b0:54:70:6a:74:f9:fd:09:a3:2b:31:73:77:c2: 22:05:84:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrfRpDJjQqGKCMpD9WW+61vR4B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTA4MDUxNzA2MzFaFw0yNTA4MDkwNDAxMzFaMDMxMTAvBgNV BAMTKDQzMTkzQzUyRDUzNDlFQkI5RUU3MjkzRkUzMjJGOERCNjhENUI0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4nsu8xsX5AIRmPJJPiMrx9NuN jEliFiEisZ2Jfh0MyLNWfy/ro+Y71c00EDKQ49pCRIoTFfhM3kq9wc/xFOPlWlNp yAD3RZEuiwgUZXTCD0GPOH8H8K4SyIEHgXFPDFCY01BFKudJwESe2T9ScU7gcUl6 R8m/81btSBO3tzyIxth3RH0pwYQu96+yxIOoaTrUzKCZ2uJomJIhGYFT+CwB+UtS zFUUTLFG1HkG+rYOZLzHOLiijiNY+3KmosFWjjA6XSLyrtfTaI3HRAB97C9mnKjM Hi8e2Ai0KmZt+scJ9tCNQVq8pnAEt0DiitHBj5iwBQt7zUWL+2mLzDwUDI8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxk8UtU0nrue5yk/4yL422jVtPswHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaL3tcw88VpxYPQv+v8ZMbLlzajVZ3aEw1y dCDqD0zPfIj8i+mtj2GztAoKZ6e72lYRgt6SKlt5ubENPLgu29tbB9sjUyhJU+XD PCYvII1WqdFp83qfZWZsP/VU8aOgfueUPc0sDqv07r0GMgWnODbjoidgBpzlGYd3 iv+LpuWMBdbn2lbKCZCRxvZXXSlx8UVHd05rXGTqCAydtUwwOg9aSipxy6G/7k8n xBnb8RfEoqKja+shDdkMermuz1jW44sSefQdndzCgw9h0t+5i/IJV4BqZakxACX3 Qt04yugXkLI1zKSeXBr/ww5CTFywVHBqdPn9CaMrMXN3wiIFhK8= -----END CERTIFICATE-----Generated at Fri Aug 8 00:00:45 2025 by rpki-client