$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: m88r61f45GbMII1mUKsngMs9o9rbjwUs+OlwluKA7ZY= Subject key identifier: 05:02:D8:67:4B:59:C9:4A:7B:CF:15:24:89:AE:C3:96:0C:F7:25:31 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 420D6BEE12715EF115E5917870F5779BBFD6B16B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 0496 Signing time: Fri 22 Aug 2025 05:21:40 +0000 Manifest this update: Fri 22 Aug 2025 05:16:40 +0000 Manifest next update: Mon 25 Aug 2025 09:03:40 +0000 Files and hashes: 1: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) 2: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: tQHT1E9RqGZrcd0Ka9ULt+chPgb1FUjSlxL474rezO8=) 3: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0d:6b:ee:12:71:5e:f1:15:e5:91:78:70:f5:77:9b:bf:d6:b1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Aug 22 05:16:40 2025 GMT Not After : Aug 25 09:03:40 2025 GMT Subject: CN=0502D8674B59C94A7BCF152489AEC3960CF72531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:09:26:53:00:cc:d2:13:a9:93:e1:56:34: cb:57:2a:2b:32:82:ac:51:d5:0a:a9:db:89:78:49: 3d:a8:14:cb:56:96:28:0e:78:32:9e:bb:59:c8:fd: 6d:22:7a:46:17:a7:6c:52:1d:d5:ea:9a:60:6d:2e: 35:63:3b:1e:29:6b:d8:77:2f:b4:23:5d:44:cc:0f: 21:89:e6:d3:1e:1c:62:9e:6e:9d:bf:55:24:86:73: f7:a6:7c:da:23:6c:47:ee:a6:de:40:04:a4:33:cb: 2b:85:77:b1:38:44:8f:79:da:cb:51:f8:3a:e6:2e: 0f:39:9e:14:60:a7:53:a1:60:15:b3:d0:2d:d2:5b: 73:3d:fb:fd:8f:b4:bb:5a:09:5a:69:08:d3:4e:9b: 3b:57:07:83:0a:2d:c6:3b:2f:79:df:e7:ce:7e:5c: 0b:82:58:33:f8:c7:d0:a2:fc:14:7b:22:d4:c5:7b: e0:69:02:2f:b8:9c:d9:f6:db:13:50:e0:0a:ca:ea: 39:b3:a1:bf:86:77:73:3f:01:fb:4c:cb:3c:60:ee: ce:36:cd:9a:d2:89:d7:93:a0:e8:55:6e:01:81:e7: 3c:93:0e:92:85:02:c3:33:c8:94:0c:f1:6e:4e:d1: f4:6c:94:87:28:70:37:33:84:e3:7a:85:27:0a:81: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:02:D8:67:4B:59:C9:4A:7B:CF:15:24:89:AE:C3:96:0C:F7:25:31 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:de:82:92:7c:85:c1:59:aa:36:ce:cc:a2:6e:de:d3:3c:23: 36:5b:a7:d1:00:68:e4:cb:b9:2a:9d:87:ce:33:6c:88:53:d0: e8:32:fd:cb:e4:21:73:2b:51:49:77:1c:b0:8a:23:34:d7:f9: 3a:72:df:22:ef:cb:49:2a:af:b7:a4:d1:09:64:65:25:0d:1c: 83:c6:20:e2:80:d0:d7:4b:a1:86:e3:47:44:59:6a:f1:9f:4d: 52:ca:2f:de:3b:16:ca:38:85:93:f3:6a:d0:de:b1:4f:8c:0f: 9e:7a:4b:03:f9:28:64:26:c2:53:a4:c4:7d:ea:8f:49:af:a2: 84:2e:f1:37:95:dc:11:f7:57:cb:4c:3c:d1:f3:4f:fc:16:4a: 96:8c:da:21:10:01:1d:4b:d2:21:9a:c8:a4:b7:4e:d5:98:e8: 4c:4f:70:0c:00:86:53:7a:7f:6e:7f:1a:47:b3:a5:f4:5c:f7: 4a:a0:c8:92:76:ed:db:b1:52:51:64:1c:aa:7e:7e:eb:e9:40: a0:3d:47:bf:61:8a:09:08:a4:41:35:51:02:df:03:6c:6a:10: 9a:07:5e:3b:62:c9:c7:39:f4:a3:b1:40:c3:18:8c:f0:ac:f3: 61:51:c1:7e:5d:b3:be:ce:e9:23:38:88:09:0b:89:56:c3:a2: 21:4e:0a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQg1r7hJxXvEV5ZF4cPV3m7/WsWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTA4MjIwNTE2NDBaFw0yNTA4MjUwOTAzNDBaMDMxMTAvBgNV BAMTKDA1MDJEODY3NEI1OUM5NEE3QkNGMTUyNDg5QUVDMzk2MENGNzI1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqQkmUwDM0hOpk+FWNMtXKisy gqxR1Qqp24l4ST2oFMtWligOeDKeu1nI/W0iekYXp2xSHdXqmmBtLjVjOx4pa9h3 L7QjXUTMDyGJ5tMeHGKebp2/VSSGc/emfNojbEfupt5ABKQzyyuFd7E4RI952stR +DrmLg85nhRgp1OhYBWz0C3SW3M9+/2PtLtaCVppCNNOmztXB4MKLcY7L3nf585+ XAuCWDP4x9Ci/BR7ItTFe+BpAi+4nNn22xNQ4ArK6jmzob+Gd3M/AftMyzxg7s42 zZrSideToOhVbgGB5zyTDpKFAsMzyJQM8W5O0fRslIcocDczhON6hScKgZ+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBQLYZ0tZyUp7zxUkia7Dlgz3JTEwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbegpJ8hcFZqjbOzKJu3tM8IzZbp9EAaOTL uSqdh84zbIhT0Ogy/cvkIXMrUUl3HLCKIzTX+Tpy3yLvy0kqr7ek0QlkZSUNHIPG IOKA0NdLoYbjR0RZavGfTVLKL947Fso4hZPzatDesU+MD556SwP5KGQmwlOkxH3q j0mvooQu8TeV3BH3V8tMPNHzT/wWSpaM2iEQAR1L0iGayKS3TtWY6ExPcAwAhlN6 f25/GkezpfRc90qgyJJ27duxUlFkHKp+fuvpQKA9R79higkIpEE1UQLfA2xqEJoH Xjtiycc59KOxQMMYjPCs82FRwX5ds77O6SM4iAkLiVbDoiFOCt0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:49 2025 by rpki-client