$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: qzYYFGHEq4XQsDC8pZC+VVOWFwLtoMiluRC+8/lIlMs= Subject key identifier: EA:B3:2E:68:9D:71:21:15:7E:73:EF:CA:CF:5C:F5:53:46:0B:6F:58 Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 40A66E6ACA84D547CB0ACBEF1FBD169EC322F2AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 018E Signing time: Sat 23 Aug 2025 04:01:08 +0000 Manifest this update: Sat 23 Aug 2025 03:56:08 +0000 Manifest next update: Tue 26 Aug 2025 15:41:08 +0000 Files and hashes: 1: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: 8FhNrsz5QZbEr/4A0tShEMjLr6S2MnBWywR1Rvv9ktQ=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a6:6e:6a:ca:84:d5:47:cb:0a:cb:ef:1f:bd:16:9e:c3:22:f2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Aug 23 03:56:08 2025 GMT Not After : Aug 26 15:41:08 2025 GMT Subject: CN=EAB32E689D7121157E73EFCACF5CF553460B6F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:af:cd:fb:6e:bc:9c:88:94:b0:f8:6c:53: ec:4e:44:b9:c7:51:58:7b:52:59:a8:9a:a1:3b:0e: e1:10:2e:8a:3c:c0:0b:78:63:47:b6:92:d9:93:d7: 01:04:b0:ee:c0:45:b2:d1:df:6a:9a:39:00:81:95: 97:f9:b3:7e:83:2e:6c:b6:8e:bf:70:7f:7c:8c:1f: df:57:27:e3:7b:20:64:b8:c6:83:ad:4a:73:2c:f0: cb:af:ab:dd:90:24:7e:36:c5:a7:fc:81:fd:7c:8f: a3:70:32:83:64:5c:46:d9:d0:fe:c9:a2:41:4d:4c: 92:c4:60:de:6a:0b:0b:c9:e5:37:26:af:4c:64:83: d1:35:e3:5e:a8:93:c3:68:5e:f7:e1:c9:cd:f2:b3: 1c:9f:ac:5a:93:d8:ed:c5:2b:67:8f:c2:15:56:cc: 98:96:ee:e0:ec:c9:2e:6c:b6:cb:34:39:0b:f5:0f: ac:62:a5:50:5b:a3:e8:2b:44:52:f0:6b:a8:f1:ab: 03:26:c2:f2:ee:db:f6:fa:5c:8b:c5:e9:e9:d4:48: 89:84:da:0e:4f:bd:5b:1a:1f:a8:50:2f:48:f5:db: d7:45:ca:ff:ca:3e:5f:a1:92:c5:02:b7:f0:ee:e5: df:8c:27:33:ad:0e:18:ab:d6:87:77:9f:0e:ef:54: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:2E:68:9D:71:21:15:7E:73:EF:CA:CF:5C:F5:53:46:0B:6F:58 X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:04:40:f7:f3:64:73:bd:1f:8b:e4:aa:6a:bb:21:9b:8a:32: 3d:ed:a8:f5:8a:44:b9:80:99:96:55:17:93:01:75:00:be:63: 90:a3:65:22:e2:f7:7e:0f:ea:53:21:61:7d:dc:3c:b7:a5:8d: c7:b8:ee:b2:54:1f:cc:6a:1e:d5:79:cf:56:2c:63:67:3e:f0: 3d:73:11:5e:79:04:36:cd:6d:b9:e9:bf:76:36:cf:f3:e2:64: cf:49:f6:3b:ef:14:46:72:61:07:98:5d:17:92:ac:a5:df:31: 9d:22:54:c1:87:b3:50:92:c5:49:1a:fa:52:ba:57:b8:bd:9a: 10:90:ee:5b:30:19:3a:f4:52:c4:ec:73:0e:e0:07:a5:2c:fa: 9f:0f:cf:71:f0:42:b1:dc:f7:e3:c9:3d:24:be:50:06:b4:cb: 6e:d1:81:9b:ac:a8:75:1d:72:17:b3:b5:27:7a:94:55:f8:8f: d4:85:32:17:be:0d:bb:c3:87:fa:e6:9a:06:ca:2a:44:da:35: 43:5e:cd:c9:69:4a:26:02:06:8e:5f:17:f6:22:69:0b:79:d7: 7b:46:0a:39:ae:24:9c:98:bd:74:08:b1:01:0f:6f:08:72:f4: d5:86:66:a3:16:83:e0:e0:db:33:7c:a2:ff:83:a5:2f:e8:9b: 07:33:ae:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKZuasqE1UfLCsvvH70WnsMi8q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTA4MjMwMzU2MDhaFw0yNTA4MjYxNTQxMDhaMDMxMTAvBgNV BAMTKEVBQjMyRTY4OUQ3MTIxMTU3RTczRUZDQUNGNUNGNTUzNDYwQjZGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GK/N+268nIiUsPhsU+xORLnH UVh7UlmomqE7DuEQLoo8wAt4Y0e2ktmT1wEEsO7ARbLR32qaOQCBlZf5s36DLmy2 jr9wf3yMH99XJ+N7IGS4xoOtSnMs8Muvq92QJH42xaf8gf18j6NwMoNkXEbZ0P7J okFNTJLEYN5qCwvJ5Tcmr0xkg9E1416ok8NoXvfhyc3ysxyfrFqT2O3FK2ePwhVW zJiW7uDsyS5stss0OQv1D6xipVBbo+grRFLwa6jxqwMmwvLu2/b6XIvF6enUSImE 2g5PvVsaH6hQL0j129dFyv/KPl+hksUCt/Du5d+MJzOtDhir1od3nw7vVK4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6rMuaJ1xIRV+c+/Kz1z1U0YLb1gwHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUEQPfzZHO9H4vkqmq7IZuKMj3tqPWKRLmA mZZVF5MBdQC+Y5CjZSLi934P6lMhYX3cPLeljce47rJUH8xqHtV5z1YsY2c+8D1z EV55BDbNbbnpv3Y2z/PiZM9J9jvvFEZyYQeYXReSrKXfMZ0iVMGHs1CSxUka+lK6 V7i9mhCQ7lswGTr0UsTscw7gB6Us+p8Pz3HwQrHc9+PJPSS+UAa0y27RgZusqHUd cheztSd6lFX4j9SFMhe+DbvDh/rmmgbKKkTaNUNezclpSiYCBo5fF/YiaQt513tG CjmuJJyYvXQIsQEPbwhy9NWGZqMWg+Dg2zN8ov+DpS/omwczrjY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:20 2025 by rpki-client