$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: UuSZFS/85bE3p1IorciOmY9omgQsjAWrf/JsJBF58bQ= Subject key identifier: B6:B8:B9:25:3E:6C:27:D4:F9:30:32:02:B9:1F:BD:01:FD:8B:6E:8A Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 015F1DBC2C65FAB0901A138B8AC4D861667F9DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 01D4 Signing time: Tue 12 Aug 2025 04:20:42 +0000 Manifest this update: Tue 12 Aug 2025 04:15:42 +0000 Manifest next update: Fri 15 Aug 2025 09:19:42 +0000 Files and hashes: 1: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) 2: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: 5EtsyiklH424OlZnjUzD44mVZFo/CzLPtNEdDyE+DFA=) 3: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: VEGQ96RWQqZFWdsMC5rPZ07rp9QmnGtSO63CEA/1uX8=) 4: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: P+DYY7cn/xSEO8OwtxnFgZUnYx+K7NZV1lWcalSNMX4=) 5: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 09:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5f:1d:bc:2c:65:fa:b0:90:1a:13:8b:8a:c4:d8:61:66:7f:9d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Aug 12 04:15:42 2025 GMT Not After : Aug 15 09:19:42 2025 GMT Subject: CN=B6B8B9253E6C27D4F9303202B91FBD01FD8B6E8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:4c:bb:a2:2b:ce:74:ef:4c:e0:9c:a6:fc: 81:e3:e3:71:cc:b4:f2:08:29:1a:46:05:c3:e1:93: b5:df:71:27:76:12:71:c1:e2:f7:d0:26:1a:60:bf: 7c:40:d9:c1:16:b0:c5:15:ac:8c:54:a7:6f:ce:81: 83:b4:37:2e:32:b6:9d:dd:fe:7f:54:f0:e3:97:2d: 51:78:e5:dc:70:df:59:22:d8:04:86:b0:63:74:20: 9e:7f:cd:cd:d0:24:15:9a:65:8b:1b:8f:11:e5:44: 4a:1a:59:f8:8a:49:d2:b5:b7:89:89:6a:68:cd:a4: 60:c3:04:be:d2:fe:d3:9b:2c:7a:56:f3:53:71:f2: 29:e9:96:04:9e:9c:88:1b:d2:66:17:1c:b3:59:26: ef:a3:9d:a2:13:d6:89:4d:b3:bd:ca:b5:88:c8:45: d4:d4:4b:96:3d:3f:61:37:9d:b6:35:6b:51:b6:58: 4d:e3:48:b8:f1:20:ce:8d:8d:91:dd:72:ef:7e:0e: 6d:01:f2:32:b1:1b:3f:9d:2b:d2:af:4a:a4:b6:d1: cf:ed:c0:3a:78:19:18:64:0f:52:dc:02:c9:d7:78: 7d:08:49:c1:02:1c:8a:34:87:6e:ca:50:1e:d7:24: 4d:91:8d:c4:76:86:8c:cd:05:04:47:6b:d7:f4:7c: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B8:B9:25:3E:6C:27:D4:F9:30:32:02:B9:1F:BD:01:FD:8B:6E:8A X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1f:04:c1:da:66:f9:77:c0:fe:ea:63:30:d6:61:94:d5:98: 96:d5:1b:e3:80:d0:45:16:0e:94:b6:78:ee:15:01:52:51:da: 50:32:0b:a9:97:9b:38:b8:af:e5:0f:38:a6:a7:3b:fd:eb:33: 9c:cb:f3:b7:1d:44:cc:c9:7d:93:b4:d2:4c:bd:2c:3f:d7:2d: 46:07:a1:51:e9:be:48:a3:d8:a5:58:ab:34:49:26:92:8b:b2: 6d:08:70:27:db:53:e4:1d:c9:f7:63:f0:23:dc:df:fd:90:ac: 44:05:15:e6:53:a4:16:35:44:26:04:79:fc:72:44:89:e2:65: 5f:c8:70:dd:a5:38:6b:b3:86:bf:9a:bf:a1:55:77:b3:4a:f8: fb:7d:c0:d8:34:85:07:c6:c3:f4:4d:4c:9f:47:ce:95:7b:cf: dd:5f:55:08:e5:e9:4b:a0:93:6c:75:a9:52:22:7d:ea:00:97: 49:bc:1e:2c:0a:16:83:79:b2:19:dd:9f:4a:f5:b1:e5:11:01: ee:99:ed:96:09:ee:07:3a:c6:5b:cb:ee:c6:53:09:ba:61:bc: 77:15:62:51:98:2e:5d:30:d7:3e:96:f8:02:25:bd:24:ff:c2: a8:5a:d9:2d:5a:01:14:04:41:04:37:fa:21:aa:0c:75:a9:08: 32:3a:3a:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAV8dvCxl+rCQGhOLisTYYWZ/nd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNTA4MTIwNDE1NDJaFw0yNTA4MTUwOTE5NDJaMDMxMTAvBgNV BAMTKEI2QjhCOTI1M0U2QzI3RDRGOTMwMzIwMkI5MUZCRDAxRkQ4QjZFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5ky7oivOdO9M4Jym/IHj43HM tPIIKRpGBcPhk7XfcSd2EnHB4vfQJhpgv3xA2cEWsMUVrIxUp2/OgYO0Ny4ytp3d /n9U8OOXLVF45dxw31ki2ASGsGN0IJ5/zc3QJBWaZYsbjxHlREoaWfiKSdK1t4mJ amjNpGDDBL7S/tObLHpW81Nx8inplgSenIgb0mYXHLNZJu+jnaIT1olNs73KtYjI RdTUS5Y9P2E3nbY1a1G2WE3jSLjxIM6NjZHdcu9+Dm0B8jKxGz+dK9KvSqS20c/t wDp4GRhkD1LcAsnXeH0IScECHIo0h27KUB7XJE2RjcR2hozNBQRHa9f0fJuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtri5JT5sJ9T5MDICuR+9Af2LboowHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0fBMHaZvl3wP7qYzDWYZTVmJbVG+OA0EUW DpS2eO4VAVJR2lAyC6mXmzi4r+UPOKanO/3rM5zL87cdRMzJfZO00ky9LD/XLUYH oVHpvkij2KVYqzRJJpKLsm0IcCfbU+Qdyfdj8CPc3/2QrEQFFeZTpBY1RCYEefxy RIniZV/IcN2lOGuzhr+av6FVd7NK+Pt9wNg0hQfGw/RNTJ9HzpV7z91fVQjl6Uug k2x1qVIifeoAl0m8HiwKFoN5shndn0r1seURAe6Z7ZYJ7gc6xlvL7sZTCbphvHcV YlGYLl0w1z6W+AIlvST/wqha2S1aARQEQQQ3+iGqDHWpCDI6Omo= -----END CERTIFICATE-----Generated at Tue Aug 12 18:53:33 2025 by rpki-client