$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: s8IL9NrGiYNx9vMPFvMbVcos+/iBph6rrdYOsKak5uA= Subject key identifier: C6:02:3D:8B:72:3F:25:3D:55:F6:A2:4B:C9:15:9B:B8:42:42:0D:E9 Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 2E9FFD124D8ADF33CAA073D74E303CB7F0B4D276 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: BC Signing time: Fri 22 Aug 2025 04:11:17 +0000 Manifest this update: Fri 22 Aug 2025 04:06:17 +0000 Manifest next update: Mon 25 Aug 2025 15:38:17 +0000 Files and hashes: 1: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 2: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) 3: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 4: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: bvkXkbEdXAjJZ++1uSVa3yh3aVhgwDa98OwjycGXld4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9f:fd:12:4d:8a:df:33:ca:a0:73:d7:4e:30:3c:b7:f0:b4:d2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Aug 22 04:06:17 2025 GMT Not After : Aug 25 15:38:17 2025 GMT Subject: CN=C6023D8B723F253D55F6A24BC9159BB842420DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:34:2c:db:e5:2e:5a:d5:aa:3f:3e:44:79: 55:17:59:28:d4:81:7e:bb:33:7b:79:79:eb:b7:43: ad:32:d9:44:84:82:36:48:4d:93:fa:37:f8:24:56: b8:7d:7f:76:92:d7:0a:a5:76:cc:ac:52:db:67:64: 23:91:45:8a:7a:50:82:3d:b3:ed:63:93:6e:ed:65: e8:0c:0b:d3:71:9d:ee:84:ec:01:49:d7:6c:4b:d8: cb:c2:e8:08:a8:ce:ff:80:aa:d1:60:73:60:46:9a: fd:25:e4:fa:c7:8f:f5:33:4f:5c:40:7f:09:23:8f: 01:d1:7f:62:22:99:35:bf:e6:52:21:cd:db:d5:8f: 54:5c:79:4b:1b:f7:bd:90:34:73:a6:36:e5:d5:a9: bf:c4:e2:7e:e7:4c:05:a9:11:e9:1f:8b:e7:9c:b3: b4:8e:d3:16:2e:1b:d5:45:fd:cc:74:28:a1:7b:6a: fa:a4:d1:95:56:75:f6:44:ca:b4:11:27:9e:c2:54: 81:f6:bf:f4:37:85:a1:0c:05:dd:b0:4c:9e:06:d6: d0:ba:e2:c4:9d:09:82:36:74:24:3a:13:e5:58:48: d4:bb:5a:df:a3:d2:8a:11:de:26:e1:00:03:83:7d: 9d:c3:9f:30:7a:a4:61:02:50:7c:d3:76:f4:64:c8: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:02:3D:8B:72:3F:25:3D:55:F6:A2:4B:C9:15:9B:B8:42:42:0D:E9 X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:bc:db:42:87:2b:07:fb:70:bd:6c:43:d1:50:7f:52:9b:f5: 5b:c6:2b:6b:c4:51:79:62:a5:03:91:db:3e:c7:3e:5d:70:f5: 10:5b:f1:3d:1e:d9:19:2f:19:30:c3:9c:ae:ed:c5:51:8d:73: 42:85:3a:2b:58:26:36:ed:87:d3:3c:3f:1b:dc:66:7a:a9:1e: 49:57:ea:3c:cc:e8:e1:20:e8:48:3f:8b:ad:3b:22:68:e4:85: e0:0b:68:3a:9f:04:60:5f:d2:74:b6:f1:59:d3:0c:8c:4f:ba: b3:92:ad:b2:87:be:62:e6:70:4a:a3:67:68:b3:36:3c:f3:7d: 1f:be:65:f6:18:b0:99:53:6c:51:d2:9b:eb:5d:30:56:27:71: 40:2a:f5:a9:96:2e:03:49:f2:22:4a:ab:a5:5e:01:b1:3c:cd: 51:a3:2b:bd:9c:dd:dd:09:2e:e8:05:1e:6e:ca:d9:c8:a4:90: b1:5d:84:71:f5:55:0f:bf:65:5b:3b:11:85:50:21:4a:86:b5: 21:60:66:74:36:42:53:1e:ff:52:b4:4c:71:b5:90:96:16:14: c5:82:bb:d1:05:d1:4a:b2:b3:10:44:3c:6b:7c:81:e0:6f:2b: 67:c5:fa:08:55:ca:49:23:15:31:bd:0c:47:19:c4:c6:06:94: c3:02:ce:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULp/9Ek2K3zPKoHPXTjA8t/C00nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTA4MjIwNDA2MTdaFw0yNTA4MjUxNTM4MTdaMDMxMTAvBgNV BAMTKEM2MDIzRDhCNzIzRjI1M0Q1NUY2QTI0QkM5MTU5QkI4NDI0MjBERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqzQs2+UuWtWqPz5EeVUXWSjU gX67M3t5eeu3Q60y2USEgjZITZP6N/gkVrh9f3aS1wqldsysUttnZCORRYp6UII9 s+1jk27tZegMC9Nxne6E7AFJ12xL2MvC6Aiozv+AqtFgc2BGmv0l5PrHj/UzT1xA fwkjjwHRf2IimTW/5lIhzdvVj1RceUsb972QNHOmNuXVqb/E4n7nTAWpEekfi+ec s7SO0xYuG9VF/cx0KKF7avqk0ZVWdfZEyrQRJ57CVIH2v/Q3haEMBd2wTJ4G1tC6 4sSdCYI2dCQ6E+VYSNS7Wt+j0ooR3ibhAAODfZ3DnzB6pGECUHzTdvRkyB1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxgI9i3I/JT1V9qJLyRWbuEJCDekwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm820KHKwf7cL1sQ9FQf1Kb9VvGK2vEUXli pQOR2z7HPl1w9RBb8T0e2RkvGTDDnK7txVGNc0KFOitYJjbth9M8PxvcZnqpHklX 6jzM6OEg6Eg/i607ImjkheALaDqfBGBf0nS28VnTDIxPurOSrbKHvmLmcEqjZ2iz NjzzfR++ZfYYsJlTbFHSm+tdMFYncUAq9amWLgNJ8iJKq6VeAbE8zVGjK72c3d0J LugFHm7K2cikkLFdhHH1VQ+/ZVs7EYVQIUqGtSFgZnQ2QlMe/1K0THG1kJYWFMWC u9EF0UqysxBEPGt8geBvK2fF+ghVykkjFTG9DEcZxMYGlMMCznA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:47:45 2025 by rpki-client