$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: L6HjndAL+RBb6Yc9hIdYRtquaJ7nl3cSWMG/4xJSqhg= Subject key identifier: D5:71:76:53:D7:A3:0F:9D:02:A1:4A:BE:68:2F:62:C8:5A:75:AF:9A Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 3D3FE7753B56AAB821DAFDC9B8196BFFB4EC00CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0211 Signing time: Thu 21 Aug 2025 13:42:17 +0000 Manifest this update: Thu 21 Aug 2025 13:37:17 +0000 Manifest next update: Sun 24 Aug 2025 23:43:17 +0000 Files and hashes: 1: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: /kFaIQKRfploMOCEZM7gs/Bg/hj5Jykc3cv4x+BOuIw=) 2: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 4: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 5: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3f:e7:75:3b:56:aa:b8:21:da:fd:c9:b8:19:6b:ff:b4:ec:00:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Aug 21 13:37:17 2025 GMT Not After : Aug 24 23:43:17 2025 GMT Subject: CN=D5717653D7A30F9D02A14ABE682F62C85A75AF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:b1:28:d0:02:9f:42:53:c2:80:69:c0:3d: 2f:5c:3e:4e:54:a4:7f:ef:40:5c:28:31:9a:2b:6c: 8a:91:a0:4b:1a:cc:43:59:9c:05:46:30:2f:eb:59: 21:57:7a:7c:d2:49:8a:4c:b5:b0:d5:b8:4d:9c:b4: 4b:70:14:45:81:b8:e9:32:f2:c8:9f:4c:cd:b8:de: b8:95:f5:1e:c7:d2:27:7a:9b:ab:a5:c9:83:48:65: b8:22:98:c4:da:2c:3b:c5:3b:27:1f:ec:e0:91:2d: c0:cb:db:cd:ca:93:5c:5e:6e:4a:fc:80:3d:11:f2: 83:4a:88:23:5e:a0:10:b3:b8:30:24:00:e5:9c:23: 5f:f1:d4:89:54:94:b8:2c:0d:80:82:29:1e:3f:a6: f6:d3:5f:23:4a:13:74:23:2c:a2:51:f7:3d:7e:4e: 71:3d:dc:ed:fb:bf:19:6c:78:d0:84:8f:a5:bc:0f: ff:2b:3c:50:1f:e0:71:2d:75:b3:6b:12:93:75:a9: df:a2:14:d0:b9:7f:35:f9:2f:83:02:4f:87:b9:82: 0b:8a:24:24:03:3e:3a:2c:63:90:10:75:6f:d3:7e: 4c:e4:7d:d6:ef:a0:0f:a5:1a:18:cf:92:d5:5c:c5: 9b:ac:bb:2f:2f:61:71:70:96:3a:72:35:aa:ed:17: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:71:76:53:D7:A3:0F:9D:02:A1:4A:BE:68:2F:62:C8:5A:75:AF:9A X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2a:8b:7b:23:6b:cc:28:70:ba:31:0a:b8:ad:5c:b2:b6:c9: 75:db:5c:6f:56:23:74:d3:d1:ee:25:a3:ff:1c:22:d8:9f:13: bf:6b:f9:f9:60:ff:fa:f8:a4:15:92:71:f4:c1:88:87:e4:58: b3:25:4e:c2:27:48:02:9a:9f:4c:1e:d0:54:60:2d:88:2a:a1: 4f:cd:81:d4:f8:24:52:90:7d:fd:4e:db:ee:a6:da:68:ce:66: 45:48:8a:74:d5:17:3d:55:68:11:30:6d:b6:2c:43:01:cb:76: ef:64:d4:07:42:bf:43:52:d5:50:e5:50:ea:c9:59:92:75:73: c3:ab:35:1d:02:fa:88:f6:d5:d3:bc:bf:69:13:45:6f:ce:54: 4e:23:d8:db:dd:39:df:8e:ab:a7:a0:93:66:91:0a:74:b2:97: 9a:22:27:53:49:77:1a:34:12:c1:48:24:38:e9:8b:4a:6c:bc: 80:5f:6b:4e:69:42:d9:82:08:e5:08:09:ce:9b:e5:fb:03:0e: 1c:f1:80:7b:33:12:6f:0a:1b:7a:90:2f:88:ba:ad:16:00:19: c3:f8:d6:14:5d:d1:7c:01:5c:ed:8c:83:4c:53:66:7f:b1:15: 38:6d:dc:c2:43:d0:42:44:2c:fe:53:a7:93:a9:72:48:de:57: fe:81:8d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPT/ndTtWqrgh2v3JuBlr/7TsAMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA4MjExMzM3MTdaFw0yNTA4MjQyMzQzMTdaMDMxMTAvBgNV BAMTKEQ1NzE3NjUzRDdBMzBGOUQwMkExNEFCRTY4MkY2MkM4NUE3NUFGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWrEo0AKfQlPCgGnAPS9cPk5U pH/vQFwoMZorbIqRoEsazENZnAVGMC/rWSFXenzSSYpMtbDVuE2ctEtwFEWBuOky 8sifTM243riV9R7H0id6m6ulyYNIZbgimMTaLDvFOycf7OCRLcDL283Kk1xebkr8 gD0R8oNKiCNeoBCzuDAkAOWcI1/x1IlUlLgsDYCCKR4/pvbTXyNKE3QjLKJR9z1+ TnE93O37vxlseNCEj6W8D/8rPFAf4HEtdbNrEpN1qd+iFNC5fzX5L4MCT4e5gguK JCQDPjosY5AQdW/TfkzkfdbvoA+lGhjPktVcxZusuy8vYXFwljpyNartFzIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1XF2U9ejD50CoUq+aC9iyFp1r5owHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcqi3sja8wocLoxCritXLK2yXXbXG9WI3TT 0e4lo/8cItifE79r+flg//r4pBWScfTBiIfkWLMlTsInSAKan0we0FRgLYgqoU/N gdT4JFKQff1O2+6m2mjOZkVIinTVFz1VaBEwbbYsQwHLdu9k1AdCv0NS1VDlUOrJ WZJ1c8OrNR0C+oj21dO8v2kTRW/OVE4j2NvdOd+Oq6egk2aRCnSyl5oiJ1NJdxo0 EsFIJDjpi0psvIBfa05pQtmCCOUICc6b5fsDDhzxgHszEm8KG3qQL4i6rRYAGcP4 1hRd0XwBXO2Mg0xTZn+xFTht3MJD0EJELP5Tp5OpckjeV/6Bjcw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:04 2025 by rpki-client