$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: TvkyRWHTQTb1r0s/DP/pA2A0STXCOnumPAm1AI61Qd0= Subject key identifier: A5:08:D0:69:73:84:83:85:C9:73:8C:4E:66:3A:0F:9E:C8:34:BA:C4 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 6329D07E7379C0D5B83A380223BDB4C21A71154B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 01B4 Signing time: Tue 05 Aug 2025 16:51:10 +0000 Manifest this update: Tue 05 Aug 2025 16:46:10 +0000 Manifest next update: Fri 08 Aug 2025 23:44:10 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: v3eVC2QBkinjNlFMrnxTgi/5IdtlqGeyNvtXTsNTBPw=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: J8hK76n9jAxJfoZwmgnUWZPJmdbHYnBHcHNL1o/2t5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:29:d0:7e:73:79:c0:d5:b8:3a:38:02:23:bd:b4:c2:1a:71:15:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Aug 5 16:46:10 2025 GMT Not After : Aug 8 23:44:10 2025 GMT Subject: CN=A508D06973848385C9738C4E663A0F9EC834BAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:69:a3:cc:4e:07:e6:a6:d6:3c:5f:6b:c0: 2d:c9:7d:3d:fa:8d:20:23:67:ee:d2:82:1f:ad:1f: a3:bb:59:65:cf:cd:65:84:3e:4c:e7:6a:4e:e6:03: d9:a6:86:a1:d4:08:5a:b5:25:a7:68:9f:50:9e:10: bc:7a:f8:8f:2c:2c:81:2c:bc:89:83:66:be:47:a2: 47:4c:e7:51:88:7f:ba:8f:06:06:e6:1a:0f:2f:43: f9:0c:37:d4:ac:6d:ed:3e:14:dc:f5:8d:32:26:44: da:e4:51:24:47:22:02:70:04:75:03:ff:b4:18:49: 60:47:29:3e:22:c9:9f:10:e1:16:03:47:66:ca:92: 09:5b:9e:66:e5:71:39:f4:ae:a2:5d:07:29:10:e7: c1:2d:b9:be:51:cb:b0:8e:24:2f:75:f6:6c:e8:e5: b0:f2:2d:47:10:b6:62:83:24:8f:99:e4:2e:d6:8b: 08:54:a3:ef:64:5b:36:8f:ea:0a:a1:a7:a2:8d:da: 81:3e:d8:01:bd:5f:86:24:97:f7:0e:5a:be:5c:bf: 61:e1:82:5e:11:ed:6d:e0:17:91:c5:ec:4a:76:f7: 94:61:8d:0f:c8:1c:e3:da:b1:be:5d:f9:a4:74:1d: 85:1d:26:5a:a7:5d:d4:c6:03:e0:7f:fe:bc:48:d1: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:08:D0:69:73:84:83:85:C9:73:8C:4E:66:3A:0F:9E:C8:34:BA:C4 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:6c:b7:d3:53:87:f7:98:c9:ca:96:8b:6a:cb:68:e9:2c:f1: 71:fc:bb:25:27:60:49:03:b9:28:66:3a:90:98:3e:ab:34:b4: 52:42:bc:a2:74:5a:11:af:95:3d:2f:6f:cf:e3:b0:a8:d7:67: 92:41:3e:59:4a:ff:a5:3e:9d:fe:12:23:f2:60:26:d2:52:51: 2f:bc:9f:8c:fb:61:76:7a:cb:7f:fc:b7:15:8e:12:73:3d:1f: a4:f5:0f:99:f2:76:e4:30:63:84:75:fa:57:90:6a:5b:b6:3d: 88:c2:d0:54:a5:5e:86:12:aa:f3:7e:03:6c:d4:81:48:18:81: e8:65:6f:72:e7:7d:a9:cb:b3:0e:04:18:ee:d2:2c:56:c4:c0: c5:c8:28:b6:36:67:4a:e2:e0:36:15:23:9f:0a:fa:52:1a:39: 71:cd:c4:94:de:e9:72:c3:35:2c:74:15:36:7e:c5:3b:46:c2: 06:ce:20:3d:b1:59:f1:d3:c8:0c:e4:8b:b5:28:cf:03:43:e6: 5e:1e:94:4e:b4:66:fa:72:06:06:b2:cd:a9:03:13:6c:71:12: 0c:68:36:cf:57:00:88:e6:20:71:77:61:14:de:19:1b:69:40: e1:19:77:10:7c:9e:e3:47:48:b8:a3:54:5f:4e:02:44:dd:35: 47:20:ce:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYynQfnN5wNW4OjgCI720whpxFUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNTA4MDUxNjQ2MTBaFw0yNTA4MDgyMzQ0MTBaMDMxMTAvBgNV BAMTKEE1MDhEMDY5NzM4NDgzODVDOTczOEM0RTY2M0EwRjlFQzgzNEJBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoGmjzE4H5qbWPF9rwC3JfT36 jSAjZ+7Sgh+tH6O7WWXPzWWEPkznak7mA9mmhqHUCFq1Jadon1CeELx6+I8sLIEs vImDZr5HokdM51GIf7qPBgbmGg8vQ/kMN9Ssbe0+FNz1jTImRNrkUSRHIgJwBHUD /7QYSWBHKT4iyZ8Q4RYDR2bKkglbnmblcTn0rqJdBykQ58Etub5Ry7COJC919mzo 5bDyLUcQtmKDJI+Z5C7WiwhUo+9kWzaP6gqhp6KN2oE+2AG9X4Ykl/cOWr5cv2Hh gl4R7W3gF5HF7Ep295RhjQ/IHOPasb5d+aR0HYUdJlqnXdTGA+B//rxI0VaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQjQaXOEg4XJc4xOZjoPnsg0usQwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1st9NTh/eYycqWi2rLaOks8XH8uyUnYEkD uShmOpCYPqs0tFJCvKJ0WhGvlT0vb8/jsKjXZ5JBPllK/6U+nf4SI/JgJtJSUS+8 n4z7YXZ6y3/8txWOEnM9H6T1D5nyduQwY4R1+leQalu2PYjC0FSlXoYSqvN+A2zU gUgYgehlb3LnfanLsw4EGO7SLFbEwMXIKLY2Z0ri4DYVI58K+lIaOXHNxJTe6XLD NSx0FTZ+xTtGwgbOID2xWfHTyAzki7UozwND5l4elE60ZvpyBgayzakDE2xxEgxo Ns9XAIjmIHF3YRTeGRtpQOEZdxB8nuNHSLijVF9OAkTdNUcgzmQ= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:07 2025 by rpki-client