$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: KXPPjpyx+rQ4+XwMtdvli8pknQ+IgrT34M7UtCnryCs= Subject key identifier: AD:58:FA:3B:71:18:71:45:00:DE:A4:81:55:5F:F9:F8:4D:04:58:59 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 5A1C1DAB70F3EEFA6467F75E78AD25C77C39142C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 0105 Signing time: Fri 22 Aug 2025 16:31:00 +0000 Manifest this update: Fri 22 Aug 2025 16:26:00 +0000 Manifest next update: Mon 25 Aug 2025 16:41:00 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: 3LunEsfK2MPG38/EMZi6SObaw6LCsLSxU1fnbpoEoGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1c:1d:ab:70:f3:ee:fa:64:67:f7:5e:78:ad:25:c7:7c:39:14:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Aug 22 16:26:00 2025 GMT Not After : Aug 25 16:41:00 2025 GMT Subject: CN=AD58FA3B7118714500DEA481555FF9F84D045859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:15:38:5e:44:3c:b4:58:ac:f7:0c:bd:b3:d7: 66:c9:e7:a5:d7:c6:68:eb:14:38:94:f8:7a:dd:f9: b8:64:62:46:5f:c1:62:4c:b7:06:66:9e:af:9c:7c: b5:29:db:5e:80:87:cf:c3:f3:d2:48:13:ca:8a:f8: b9:63:fe:99:70:76:c4:c2:09:50:e1:e4:8b:79:8d: 0b:41:da:30:d1:cf:0c:3a:c6:04:b3:cf:28:2f:c4: 7c:b7:2f:b0:da:bd:20:5d:1e:df:57:4e:34:76:6e: c8:c7:7b:51:46:6d:f1:61:6d:b3:87:ad:8e:be:7a: 97:f2:8d:8e:b8:df:44:3b:3e:bf:c9:fb:43:bc:3c: 17:74:8c:d8:39:5b:78:f5:ed:70:60:1b:15:b3:36: a7:93:63:3c:5f:b3:bf:5e:7c:e4:f3:cc:07:d1:f0: 47:01:0f:24:d5:7f:fd:fb:57:fa:50:a6:6a:52:3c: d3:21:00:0d:71:9a:05:7a:19:8e:33:93:f1:e5:ba: 4d:3f:d0:66:7f:86:a8:26:e9:26:8b:9d:b4:d2:45: e8:f5:77:a3:ff:76:16:73:e2:26:d1:21:c7:9b:a5: 87:d2:7a:51:f0:9a:71:6d:c9:d6:01:2f:7e:ef:a8: 58:cd:71:f5:70:5a:48:20:78:e4:fa:b3:66:4a:bf: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:58:FA:3B:71:18:71:45:00:DE:A4:81:55:5F:F9:F8:4D:04:58:59 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:41:c9:b2:74:18:00:c2:a8:7f:18:bc:39:dd:07:7e:43: 19:11:f3:d6:5c:f3:37:f1:83:bd:c2:95:8f:9d:cb:29:6f:e9: b3:60:1c:26:b3:07:71:42:ff:d2:c2:87:0e:0f:08:d5:24:39: 3f:b2:32:b1:77:88:7b:9e:64:93:be:75:ee:08:b1:72:e5:52: 06:e2:49:d9:98:c4:57:4a:11:e4:e4:d4:8f:77:ed:ea:e9:10: 23:b6:83:4c:a4:46:df:a5:cd:22:df:af:39:7e:68:cf:5a:cb: 41:47:82:e1:4e:9d:62:d5:97:6c:91:e1:db:8e:2a:07:8d:3c: fd:c3:73:01:0c:40:ba:2b:d0:6c:58:36:55:4b:70:dc:85:ea: aa:e8:48:33:c3:60:f0:39:30:44:ac:d6:1e:0a:a3:cb:33:57: 5e:1d:57:fa:a2:97:9d:2a:88:2b:83:19:59:e8:56:b9:21:d1: d2:8b:41:ce:cd:41:8e:24:9c:e8:f3:09:39:4a:f3:6c:c2:28: 65:54:0d:5e:40:e7:93:4e:f4:01:da:06:7b:ca:c7:b5:81:b9: 86:36:84:13:5e:02:79:c4:9f:2b:d6:45:88:38:a1:d9:e0:51: 11:0d:a3:cf:22:3f:2a:fd:eb:44:b0:f4:ea:eb:30:d5:3d:07: d2:d3:17:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhwdq3Dz7vpkZ/deeK0lx3w5FCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA4MjIxNjI2MDBaFw0yNTA4MjUxNjQxMDBaMDMxMTAvBgNV BAMTKEFENThGQTNCNzExODcxNDUwMERFQTQ4MTU1NUZGOUY4NEQwNDU4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/FTheRDy0WKz3DL2z12bJ56XX xmjrFDiU+Hrd+bhkYkZfwWJMtwZmnq+cfLUp216Ah8/D89JIE8qK+Llj/plwdsTC CVDh5It5jQtB2jDRzww6xgSzzygvxHy3L7DavSBdHt9XTjR2bsjHe1FGbfFhbbOH rY6+epfyjY6430Q7Pr/J+0O8PBd0jNg5W3j17XBgGxWzNqeTYzxfs79efOTzzAfR 8EcBDyTVf/37V/pQpmpSPNMhAA1xmgV6GY4zk/Hluk0/0GZ/hqgm6SaLnbTSRej1 d6P/dhZz4ibRIcebpYfSelHwmnFtydYBL37vqFjNcfVwWkggeOT6s2ZKv//bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVj6O3EYcUUA3qSBVV/5+E0EWFkwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjAQcmydBgAwqh/GLw53Qd+QxkR89Zc8zfx g73ClY+dyylv6bNgHCazB3FC/9LChw4PCNUkOT+yMrF3iHueZJO+de4IsXLlUgbi SdmYxFdKEeTk1I937erpECO2g0ykRt+lzSLfrzl+aM9ay0FHguFOnWLVl2yR4duO KgeNPP3DcwEMQLor0GxYNlVLcNyF6qroSDPDYPA5MESs1h4Ko8szV14dV/qil50q iCuDGVnoVrkh0dKLQc7NQY4knOjzCTlK82zCKGVUDV5A55NO9AHaBnvKx7WBuYY2 hBNeAnnEnyvWRYg4odngURENo88iPyr960Sw9OrrMNU9B9LTF+8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:16 2025 by rpki-client