$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: ZKmcrFeqjg2A/IdfDxD9LMMfFjrHp8bfj0GAB8G1b8A= Subject key identifier: 72:54:03:63:68:FC:D5:FB:BF:70:5E:F3:2B:72:AF:1B:59:EA:A0:B2 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 3A12B040E3162BA072EE6CDA7DE7B496C5DC8C80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 03:44:24 +0000 Manifest this update: Fri 22 Aug 2025 03:39:24 +0000 Manifest next update: Mon 25 Aug 2025 10:02:24 +0000 Files and hashes: 1: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) 2: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 3: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) 4: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: e+Lz2po//OljQv3AQ5RkD5mHPIXFez+GjmdXyPzX+oA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:12:b0:40:e3:16:2b:a0:72:ee:6c:da:7d:e7:b4:96:c5:dc:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Aug 22 03:39:24 2025 GMT Not After : Aug 25 10:02:24 2025 GMT Subject: CN=7254036368FCD5FBBF705EF32B72AF1B59EAA0B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:40:99:78:b6:b0:ef:e8:6c:5e:a8:8a:63: 3b:c4:17:00:29:4a:53:f3:40:f5:20:a7:35:a4:fc: 11:99:c6:c9:43:cd:dd:05:18:ba:b3:7a:b1:62:f2: 20:87:4c:28:f9:b4:80:6c:ee:86:c2:dd:3d:42:4e: 82:fb:88:5c:20:04:b4:12:21:f1:3d:a5:65:0f:24: 61:d2:fb:4f:f5:e1:9b:9b:ca:f6:e6:02:c0:c6:96: 09:67:2c:3d:f9:47:ff:82:7f:48:7c:65:21:d3:6d: 0b:a9:64:84:11:6a:91:86:c8:c5:aa:20:95:77:f2: f5:6d:d3:eb:43:8c:f5:18:99:cc:27:4f:d1:aa:df: 92:2b:d0:da:6b:26:bf:7c:9d:2e:19:db:5d:4e:58: 8a:4d:08:8e:71:08:24:0f:a9:1f:2c:b2:04:93:e8: 14:9c:cf:bb:eb:18:72:fc:d0:97:12:a3:e4:a3:32: 83:58:f8:0c:d3:0c:02:45:04:9f:4a:bd:93:63:1a: 6e:4a:63:29:75:30:8b:32:f5:40:5d:03:13:3b:ae: 55:0d:c9:a5:50:6c:18:a8:45:b9:40:5d:c2:fd:22: 1a:8f:a1:ae:eb:dc:0d:40:a0:f7:ea:11:86:6b:2a: fc:80:7e:58:a1:39:32:65:c9:6e:9d:80:b7:98:d6: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:03:63:68:FC:D5:FB:BF:70:5E:F3:2B:72:AF:1B:59:EA:A0:B2 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fb:52:63:99:c9:4e:32:23:30:c6:20:f6:b2:2e:55:dc:0e: e3:c4:d6:ae:1e:b7:b5:1c:7e:51:6f:48:b7:bc:c9:69:f6:0c: 8b:fa:6d:42:ce:e1:01:5e:69:f4:1b:f6:42:fa:bd:7f:c9:92: 33:5d:6c:43:76:93:c1:80:fd:19:b3:fb:00:9a:3f:4b:33:a2: b7:fb:25:13:bc:e7:9b:22:dd:10:78:ce:c0:6f:17:7e:f4:c7: 63:df:0c:36:07:2c:82:3d:9c:f7:27:3f:f9:ef:3b:ac:c4:c5: 26:36:d4:ae:05:60:84:ff:e3:d1:5a:f5:f1:11:6e:00:e2:87: 42:ed:35:11:b5:c5:c9:6f:a4:40:a9:5b:e7:19:a4:05:19:7d: c4:27:a5:0d:4b:c1:5a:f5:31:e2:c3:cd:38:5f:ff:29:20:6e: 3a:f8:d1:d3:29:ba:cd:16:07:60:b9:d6:7b:b5:c1:a9:d8:90: c5:b2:8b:43:80:31:8e:50:86:47:c4:32:1f:91:c0:e4:96:b4: 57:62:de:a4:b4:96:dc:a9:23:4c:5b:1b:7b:23:bc:c6:35:4f: 4f:af:85:88:31:3f:7b:d4:a2:b1:f2:d6:ed:a5:99:5a:85:b7: 11:13:73:61:72:77:ad:45:cf:07:6b:41:41:34:63:3b:99:66: 9f:ac:82:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhKwQOMWK6By7mzafee0lsXcjIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTA4MjIwMzM5MjRaFw0yNTA4MjUxMDAyMjRaMDMxMTAvBgNV BAMTKDcyNTQwMzYzNjhGQ0Q1RkJCRjcwNUVGMzJCNzJBRjFCNTlFQUEwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHUCZeLaw7+hsXqiKYzvEFwAp SlPzQPUgpzWk/BGZxslDzd0FGLqzerFi8iCHTCj5tIBs7obC3T1CToL7iFwgBLQS IfE9pWUPJGHS+0/14ZubyvbmAsDGlglnLD35R/+Cf0h8ZSHTbQupZIQRapGGyMWq IJV38vVt0+tDjPUYmcwnT9Gq35Ir0NprJr98nS4Z211OWIpNCI5xCCQPqR8ssgST 6BScz7vrGHL80JcSo+SjMoNY+AzTDAJFBJ9KvZNjGm5KYyl1MIsy9UBdAxM7rlUN yaVQbBioRblAXcL9IhqPoa7r3A1AoPfqEYZrKvyAflihOTJlyW6dgLeY1pAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUclQDY2j81fu/cF7zK3KvG1nqoLIwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF37UmOZyU4yIzDGIPayLlXcDuPE1q4et7Uc flFvSLe8yWn2DIv6bULO4QFeafQb9kL6vX/JkjNdbEN2k8GA/Rmz+wCaP0szorf7 JRO855si3RB4zsBvF370x2PfDDYHLII9nPcnP/nvO6zExSY21K4FYIT/49Fa9fER bgDih0LtNRG1xclvpECpW+cZpAUZfcQnpQ1LwVr1MeLDzThf/ykgbjr40dMpus0W B2C51nu1wanYkMWyi0OAMY5QhkfEMh+RwOSWtFdi3qS0ltypI0xbG3sjvMY1T0+v hYgxP3vUorHy1u2lmVqFtxETc2Fyd61FzwdrQUE0YzuZZp+sgqY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:19 2025 by rpki-client