$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json) Hash identifier: ai0hRstP8jfzBUxDqxbT+vZidrRhAN4MaVSTpiDXMQs= Subject key identifier: 2E:DE:4A:0E:BA:77:C7:19:40:56:CE:F0:1D:2F:C7:6D:62:69:20:69 Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Certificate serial: 2D75603471FDE4B3FA1A06847923C5AD7990E6FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft Manifest number: 75 Signing time: Wed 06 Aug 2025 17:40:48 +0000 Manifest this update: Wed 06 Aug 2025 17:35:48 +0000 Manifest next update: Sun 10 Aug 2025 01:05:48 +0000 Files and hashes: 1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: nvp6aBQxjtptGYgUeLEHjxMFltaz+YvY0H1/2W6JEXw=) 2: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: vHomWNp5dS3j+WoD6RF9RntoeEoFhy2yZl3U17Meo9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:75:60:34:71:fd:e4:b3:fa:1a:06:84:79:23:c5:ad:79:90:e6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Validity Not Before: Aug 6 17:35:48 2025 GMT Not After : Aug 10 01:05:48 2025 GMT Subject: CN=2EDE4A0EBA77C7194056CEF01D2FC76D62692069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b0:33:22:07:3a:83:5b:02:b9:1d:31:2d:29: 15:1c:55:59:df:c3:79:f5:56:8b:c5:90:37:2b:b9: f5:7f:e8:e8:66:14:d5:46:17:91:e2:38:db:ae:36: 1f:04:f0:09:20:3d:b0:2b:89:88:a9:e5:c2:13:49: 3d:53:18:d5:6b:08:08:c0:77:12:8f:e3:49:7d:99: 71:58:4c:f1:69:b2:8e:1f:4b:ba:d0:62:5e:aa:57: 47:c6:66:78:4c:72:46:d8:45:fe:00:89:d9:6d:53: e1:3e:4e:19:bb:b5:7e:f2:c9:10:e2:6c:b5:16:e6: e9:7a:31:43:b0:7f:d0:b5:fc:23:2c:ff:8c:55:7c: 76:42:bb:64:2d:89:fa:02:55:5b:e0:58:73:8a:5e: ad:70:d6:57:53:ca:fb:66:f0:80:5a:9f:fb:34:74: b4:d9:69:ec:fd:95:32:17:06:01:2f:d9:eb:f6:d7: 1f:0d:66:99:fd:90:43:f1:19:bf:e0:29:62:34:2f: 17:56:7d:e3:b1:0f:f3:0e:47:81:84:28:28:a5:79: 1f:6d:5f:ab:b3:cd:7b:82:79:6f:9f:ae:19:ea:18: 5f:f7:8d:65:12:9c:6f:1b:23:b5:33:d1:c2:a7:e7: 94:a0:81:51:ab:9e:86:ce:61:0f:ce:41:90:19:ba: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DE:4A:0E:BA:77:C7:19:40:56:CE:F0:1D:2F:C7:6D:62:69:20:69 X509v3 Authority Key Identifier: keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cd:62:51:96:fa:3a:b3:24:2c:2f:e8:32:cc:48:02:f5:dd: 4e:c5:ac:a7:1e:c7:09:d5:0b:56:28:77:76:a6:9f:28:86:d1: 4a:69:00:46:77:e5:11:64:46:55:5b:8f:d1:7a:72:fc:9f:42: 7d:ba:4d:5c:bc:da:e3:cb:40:ac:88:c8:bc:02:69:78:5c:1e: 51:88:82:ba:bb:54:3a:f4:e7:94:7c:a9:a8:c1:61:73:70:a8: e7:26:22:f3:22:cf:1d:5c:c0:ed:7c:eb:2a:aa:2c:fa:a4:c3: 6f:7e:16:8b:5f:15:5f:99:30:b7:9a:b9:58:09:e5:9f:b8:99: fb:7d:29:ff:b6:5f:27:ef:6a:c9:88:09:fa:84:cc:5e:30:32: 50:4e:6a:09:71:21:d6:55:ad:55:4f:e2:10:6f:c7:46:5f:3f: d7:93:49:54:08:25:91:30:e2:0d:7a:97:53:e0:49:6a:dd:70: 64:6f:95:ac:0d:64:25:42:12:d0:ba:ed:db:da:8c:5d:bb:98: e9:5d:c0:0c:1a:9f:8f:5f:26:f6:b1:0a:9b:df:6c:d5:6f:24: 3b:1f:3b:6a:2b:be:bf:80:2f:21:f8:82:b4:79:91:93:bb:14: dc:37:64:c1:c4:f1:42:87:33:43:18:5e:70:f7:e6:5f:ee:ee: 53:f9:6d:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXVgNHH95LP6GgaEeSPFrXmQ5vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEy RTE1Nzc4MjAeFw0yNTA4MDYxNzM1NDhaFw0yNTA4MTAwMTA1NDhaMDMxMTAvBgNV BAMTKDJFREU0QTBFQkE3N0M3MTk0MDU2Q0VGMDFEMkZDNzZENjI2OTIwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzsDMiBzqDWwK5HTEtKRUcVVnf w3n1VovFkDcrufV/6OhmFNVGF5HiONuuNh8E8AkgPbAriYip5cITST1TGNVrCAjA dxKP40l9mXFYTPFpso4fS7rQYl6qV0fGZnhMckbYRf4AidltU+E+Thm7tX7yyRDi bLUW5ul6MUOwf9C1/CMs/4xVfHZCu2QtifoCVVvgWHOKXq1w1ldTyvtm8IBan/s0 dLTZaez9lTIXBgEv2ev21x8NZpn9kEPxGb/gKWI0LxdWfeOxD/MOR4GEKCileR9t X6uzzXuCeW+frhnqGF/3jWUSnG8bI7Uz0cKn55SggVGrnobOYQ/OQZAZurbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULt5KDrp3xxlAVs7wHS/HbWJpIGkwHwYDVR0j BBgwFoAUqOZJK17+k2LCzNscJdoCKi4Vd4IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMS9BOEU2NDkyQjVF RkU5MzYyQzJDQ0RCMUMyNURBMDIyQTJFMTU3NzgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEyRTE1 Nzc4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAy MkEyRTE1Nzc4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTNYlGW+jqzJCwv6DLMSAL13U7FrKcexwnV C1Yod3amnyiG0UppAEZ35RFkRlVbj9F6cvyfQn26TVy82uPLQKyIyLwCaXhcHlGI grq7VDr055R8qajBYXNwqOcmIvMizx1cwO186yqqLPqkw29+FotfFV+ZMLeauVgJ 5Z+4mft9Kf+2XyfvasmICfqEzF4wMlBOaglxIdZVrVVP4hBvx0ZfP9eTSVQIJZEw 4g16l1PgSWrdcGRvlawNZCVCEtC67dvajF27mOldwAwan49fJvaxCpvfbNVvJDsf O2orvr+ALyH4grR5kZO7FNw3ZMHE8UKHM0MYXnD35l/u7lP5bcg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:49 2025 by rpki-client