$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: fSCc4g6tcVAUW3KLmaL5BTiVlTecPoP3Ss/qas6ndxk= Subject key identifier: 6F:EC:16:20:1D:90:7F:1D:86:13:EF:D3:81:F8:E3:FD:A3:24:0C:06 Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 216B0A23277B9BAB8DB3DDC4384867DB512B2B59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: BC Signing time: Thu 21 Aug 2025 02:21:06 +0000 Manifest this update: Thu 21 Aug 2025 02:16:06 +0000 Manifest next update: Sun 24 Aug 2025 11:08:06 +0000 Files and hashes: 1: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: QZAeDM7zT385pE/PoHF08UrByL0TRtRa7zvwjWIXDm4=) 2: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: 0aoBwt+h97D/BWgv9F1UKeVjETegL18nlQ0MJHeXSDM=) 3: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: Z4LRNVaLQ1hi8Ydy7xrl21o+50Pt9MglpRIcPSCMBxs=) 4: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: MDwoleiTA2jdD+y/VY0jacPWG8rB0y82arQs3fIvfxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6b:0a:23:27:7b:9b:ab:8d:b3:dd:c4:38:48:67:db:51:2b:2b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Aug 21 02:16:06 2025 GMT Not After : Aug 24 11:08:06 2025 GMT Subject: CN=6FEC16201D907F1D8613EFD381F8E3FDA3240C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:dc:36:3e:d4:60:50:e9:32:98:ed:54:90: d5:b0:96:26:e0:ee:9e:a5:5d:d1:14:6d:6e:d6:09: 61:1a:e1:71:32:03:91:09:11:03:48:1c:9a:ba:2d: 15:2b:aa:41:79:c0:93:ba:14:19:8e:33:00:19:26: 0f:12:75:a3:19:d9:90:41:5e:1c:bc:7f:cd:11:3a: 98:a0:ef:d5:07:ba:1a:d2:a4:1c:78:06:43:45:2a: 2a:b9:63:0c:d6:cb:b6:60:08:69:af:89:4f:07:e6: 82:aa:2d:7d:12:eb:9a:1d:ac:57:dd:e3:d9:52:48: 8b:c8:10:73:42:0c:fd:51:6c:f7:c8:63:19:7f:b4: f4:24:0c:da:11:4a:93:36:7c:80:8f:5c:ae:4e:d0: 3f:2d:2d:66:75:f9:c1:dd:68:9e:da:2b:c5:5e:f1: fe:db:c8:b6:d8:de:aa:6a:2d:a3:58:af:1f:3c:23: 65:62:d1:40:4e:26:5b:e0:bc:c0:71:9b:6d:8c:be: ab:96:af:6b:6c:0c:3a:65:ba:b6:d6:10:b6:f7:0b: 55:00:e3:09:7c:b5:a7:37:3e:75:cd:86:23:2d:a9: e3:dc:a1:31:4f:2b:d2:25:42:14:7e:9b:b7:ef:d9: 39:08:18:21:26:af:b9:47:88:30:90:bb:66:ad:07: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EC:16:20:1D:90:7F:1D:86:13:EF:D3:81:F8:E3:FD:A3:24:0C:06 X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3f:d8:cc:90:50:e8:d3:f9:fa:97:6d:a3:ce:10:35:c3:1c: 2d:f8:8d:96:90:28:24:dd:5f:4d:8f:bb:2a:50:b3:1c:7d:56: 0c:b1:4f:00:0e:7e:3b:0c:1e:7b:a3:94:a4:5e:e5:16:9f:b5: b3:a4:f6:a2:e8:ec:0d:00:10:1b:fe:c9:c5:2d:f4:ba:eb:b8: bc:ba:21:59:7e:af:96:01:69:01:a2:40:71:80:18:c2:c2:b8: e1:64:a9:03:44:39:e5:f3:f1:b9:33:08:67:31:6d:98:bc:96: 2e:47:8f:90:4a:00:82:2c:24:84:fd:a9:a6:57:e7:d6:a8:ef: a8:26:19:cb:73:66:e5:99:37:d1:f3:22:29:5c:c2:fc:3a:bf: f4:1d:4e:32:1a:be:bb:ff:d9:a0:f0:2c:bd:e6:da:ff:3a:48: 94:f4:fb:41:59:2c:67:18:6a:f8:f4:cc:67:10:22:b7:4f:2e: b0:19:b1:6d:52:12:59:5e:a8:83:3d:1d:7e:f7:00:5c:da:37: 60:db:9a:b0:e6:53:73:4f:f7:18:39:29:c3:e5:31:59:c4:5f: ba:4f:d2:85:9a:57:6c:f8:92:94:54:8e:2f:62:38:6a:37:ff: ba:83:97:24:a3:cc:61:76:90:08:61:79:8d:e4:9a:f5:ed:5f: a4:d0:b1:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWsKIyd7m6uNs93EOEhn21ErK1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTA4MjEwMjE2MDZaFw0yNTA4MjQxMTA4MDZaMDMxMTAvBgNV BAMTKDZGRUMxNjIwMUQ5MDdGMUQ4NjEzRUZEMzgxRjhFM0ZEQTMyNDBDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqtw2PtRgUOkymO1UkNWwlibg 7p6lXdEUbW7WCWEa4XEyA5EJEQNIHJq6LRUrqkF5wJO6FBmOMwAZJg8SdaMZ2ZBB Xhy8f80ROpig79UHuhrSpBx4BkNFKiq5YwzWy7ZgCGmviU8H5oKqLX0S65odrFfd 49lSSIvIEHNCDP1RbPfIYxl/tPQkDNoRSpM2fICPXK5O0D8tLWZ1+cHdaJ7aK8Ve 8f7byLbY3qpqLaNYrx88I2Vi0UBOJlvgvMBxm22MvquWr2tsDDplurbWELb3C1UA 4wl8tac3PnXNhiMtqePcoTFPK9IlQhR+m7fv2TkIGCEmr7lHiDCQu2atB3vnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+wWIB2Qfx2GE+/Tgfjj/aMkDAYwHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY/2MyQUOjT+fqXbaPOEDXDHC34jZaQKCTd X02PuypQsxx9VgyxTwAOfjsMHnujlKRe5RaftbOk9qLo7A0AEBv+ycUt9LrruLy6 IVl+r5YBaQGiQHGAGMLCuOFkqQNEOeXz8bkzCGcxbZi8li5Hj5BKAIIsJIT9qaZX 59ao76gmGctzZuWZN9HzIilcwvw6v/QdTjIavrv/2aDwLL3m2v86SJT0+0FZLGcY avj0zGcQIrdPLrAZsW1SElleqIM9HX73AFzaN2DbmrDmU3NP9xg5KcPlMVnEX7pP 0oWaV2z4kpRUji9iOGo3/7qDlySjzGF2kAhheY3kmvXtX6TQsYw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:18 2025 by rpki-client