$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: d2nQgQGpglPc7AcOPwUwQmS1VSLqLRqaa4Lp5MASVsU= Subject key identifier: 1D:51:C4:F1:F8:C4:79:23:39:13:A3:3C:AC:8E:F6:14:F4:AC:63:72 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 0E709598E9344345C887CDD88741D1A527FD62FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 0494 Signing time: Sat 09 Aug 2025 01:31:03 +0000 Manifest this update: Sat 09 Aug 2025 01:26:03 +0000 Manifest next update: Tue 12 Aug 2025 04:02:03 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 2: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: uwhD27vYy3uflgKqYKWMx9BkpFcIo1zxxIZzkCIKlMI=) 3: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: r4bbE3J74imEfGNc3Yq/RkOZJXcnua5imBb7qm1BGas=) 4: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: T2dV9ECct1Ud7fOAgoF7v8UJVDJx36l7KpwFXhp6Z8U=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:70:95:98:e9:34:43:45:c8:87:cd:d8:87:41:d1:a5:27:fd:62:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Aug 9 01:26:03 2025 GMT Not After : Aug 12 04:02:03 2025 GMT Subject: CN=1D51C4F1F8C479233913A33CAC8EF614F4AC6372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:60:aa:04:3f:80:8f:4e:a9:19:5d:c9:e0:ea: 3e:d5:2e:fd:f0:41:db:74:92:44:f1:7c:4a:63:11: d3:e6:f4:8d:e7:2f:cd:71:98:ee:e3:71:65:bb:ca: f4:ee:18:51:22:00:79:da:b8:89:19:9d:03:12:8a: 48:80:9c:b2:4e:99:74:f6:0c:c3:70:7c:44:5a:d2: 1a:dc:9c:34:e4:8a:90:6e:ab:8b:db:9e:58:7a:97: 7a:02:35:73:6a:27:4b:4e:51:a6:e8:61:ad:44:9c: 87:fa:b3:c3:8f:4f:83:60:6e:9c:e6:fa:9a:61:a2: 5e:14:d7:28:12:b6:20:9e:a6:83:e5:35:fc:47:6b: d1:e6:10:96:91:80:a6:34:b8:8f:00:66:fc:02:23: d5:0b:13:b1:fd:8d:74:e8:41:af:a3:0c:7a:1e:04: 88:f5:ea:2b:76:45:b9:15:a9:4f:99:04:f2:63:a5: 1a:d1:40:fd:30:b0:ad:29:c9:46:96:87:b0:c0:01: d1:89:be:e0:1e:cd:d2:79:48:e2:c2:a4:19:26:64: 28:19:61:7a:98:d1:11:bc:c6:a9:55:b3:ea:79:3a: 34:1b:76:9d:12:d7:20:54:62:6e:b0:f6:0e:f7:f5: 16:61:ec:1a:48:05:50:56:16:39:6f:51:2e:18:18: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:51:C4:F1:F8:C4:79:23:39:13:A3:3C:AC:8E:F6:14:F4:AC:63:72 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6d:de:6d:3c:c2:7b:56:8d:ed:26:e8:70:98:17:f9:db:fc: 05:dc:69:4b:b1:94:d4:cf:25:3a:44:d8:25:95:c9:d5:4e:40: 68:69:60:fb:2b:dd:35:6d:48:a8:09:47:07:ed:cb:43:10:65: a3:49:8d:16:e8:be:48:fb:7a:65:3d:48:07:9f:17:c4:a8:a1: 51:f8:25:94:fd:52:c6:f5:27:86:58:4b:bb:db:bf:01:26:90: 71:6d:c7:0b:43:17:d2:9b:d3:10:1e:a4:eb:d1:3a:ca:25:a4: 51:9e:4d:d6:50:3c:8d:db:47:d5:dd:3b:ac:8e:fa:a9:13:e4: f6:78:41:c0:e7:17:64:9f:d4:ff:9c:fb:b0:24:8c:dc:3d:90: d0:86:14:53:64:6b:f2:2f:a9:7b:3f:07:8a:37:8c:22:16:2d: ec:df:36:87:82:14:2e:84:a4:ec:14:0e:3b:5c:73:a7:48:9c: 03:f1:d1:1b:42:99:6f:54:3e:38:79:9b:3d:1b:c8:ba:b6:49: dc:86:74:16:65:2f:9a:4d:4b:d7:85:ed:07:a2:86:1d:9c:cb: 7a:f7:8b:e8:12:f5:f6:25:a3:7d:38:9f:20:ad:eb:ea:5f:b4: ba:07:7f:21:af:f1:be:26:95:9f:5f:7a:ce:b8:84:27:b4:42: 23:f0:5c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnCVmOk0Q0XIh83Yh0HRpSf9YvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA4MDkwMTI2MDNaFw0yNTA4MTIwNDAyMDNaMDMxMTAvBgNV BAMTKDFENTFDNEYxRjhDNDc5MjMzOTEzQTMzQ0FDOEVGNjE0RjRBQzYzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWYKoEP4CPTqkZXcng6j7VLv3w Qdt0kkTxfEpjEdPm9I3nL81xmO7jcWW7yvTuGFEiAHnauIkZnQMSikiAnLJOmXT2 DMNwfERa0hrcnDTkipBuq4vbnlh6l3oCNXNqJ0tOUaboYa1EnIf6s8OPT4Ngbpzm +pphol4U1ygStiCepoPlNfxHa9HmEJaRgKY0uI8AZvwCI9ULE7H9jXToQa+jDHoe BIj16it2RbkVqU+ZBPJjpRrRQP0wsK0pyUaWh7DAAdGJvuAezdJ5SOLCpBkmZCgZ YXqY0RG8xqlVs+p5OjQbdp0S1yBUYm6w9g739RZh7BpIBVBWFjlvUS4YGOLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHVHE8fjEeSM5E6M8rI72FPSsY3IwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFt3m08wntWje0m6HCYF/nb/AXcaUuxlNTP JTpE2CWVydVOQGhpYPsr3TVtSKgJRwfty0MQZaNJjRbovkj7emU9SAefF8SooVH4 JZT9Usb1J4ZYS7vbvwEmkHFtxwtDF9Kb0xAepOvROsolpFGeTdZQPI3bR9XdO6yO +qkT5PZ4QcDnF2Sf1P+c+7AkjNw9kNCGFFNka/IvqXs/B4o3jCIWLezfNoeCFC6E pOwUDjtcc6dInAPx0RtCmW9UPjh5mz0byLq2SdyGdBZlL5pNS9eF7Qeihh2cy3r3 i+gS9fYlo304nyCt6+pftLoHfyGv8b4mlZ9fes64hCe0QiPwXCc= -----END CERTIFICATE-----Generated at Sat Aug 9 20:32:29 2025 by rpki-client