$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json) Hash identifier: pAsdRnzfBElJk6bTIf2txBcOPt+7ZNpMF5aBjYRUjeE= Subject key identifier: 29:A0:63:4A:4C:D0:B0:1F:5C:F3:81:1C:2C:8F:D7:2C:3E:45:5E:BB Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Certificate serial: 20AA72D14396C00BADADFAADBE948F0BD82B328F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft Manifest number: 0118 Signing time: Sat 23 Aug 2025 04:30:45 +0000 Manifest this update: Sat 23 Aug 2025 04:25:45 +0000 Manifest next update: Tue 26 Aug 2025 14:25:45 +0000 Files and hashes: 1: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: r5ejFAt7DPGxPXGZ471yD6fzIU1txO3jsml9iF52Gbk=) 2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: Ziyg0D5V2s9TzgtFXhxrBwlw2/DAp6aRN3+gPcC29v4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:aa:72:d1:43:96:c0:0b:ad:ad:fa:ad:be:94:8f:0b:d8:2b:32:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Validity Not Before: Aug 23 04:25:45 2025 GMT Not After : Aug 26 14:25:45 2025 GMT Subject: CN=29A0634A4CD0B01F5CF3811C2C8FD72C3E455EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:cd:43:82:d3:ab:25:55:88:c6:9a:49:c2: ef:45:23:a7:a7:f3:dc:5f:2c:6f:13:d5:ff:9b:5f: a9:87:04:cf:2d:16:02:2d:13:4b:cf:90:ba:76:18: ba:86:33:46:6b:b1:88:1f:d6:11:3e:02:14:94:83: 81:de:b9:64:41:d5:02:80:00:a9:73:13:5b:87:0a: ff:d1:0b:3f:86:7b:e8:ba:1c:30:69:ef:f5:ab:75: 3c:ae:ed:3f:fe:88:f8:d3:6e:9c:0b:ed:0d:f2:23: 70:62:96:ed:e9:71:f6:f9:a7:51:04:59:3a:45:90: af:dc:74:cc:e4:ba:b7:6b:ad:5d:0b:06:06:2e:b3: ac:ff:8a:2d:d4:e1:64:9b:a7:eb:d5:53:a7:39:dc: 5e:78:7b:3a:cd:44:c5:1f:1f:94:2f:07:79:d3:25: e3:e4:2e:e9:5f:36:a3:a6:7c:ce:94:86:fa:67:fe: dc:93:73:4b:67:fa:44:85:27:dd:97:a0:3a:66:fb: 61:88:1f:5c:79:93:20:c1:54:d6:39:4e:2d:41:11: a1:bc:63:03:7f:87:48:c5:aa:96:64:27:61:2a:10: 96:1f:97:a4:ed:35:b3:6a:29:51:15:16:8c:2a:f1: a6:b9:1c:81:77:ff:ac:ec:f1:61:3a:c7:b3:96:c9: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A0:63:4A:4C:D0:B0:1F:5C:F3:81:1C:2C:8F:D7:2C:3E:45:5E:BB X509v3 Authority Key Identifier: keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:52:f1:ce:60:8e:fd:31:6c:62:eb:52:19:30:87:43:a4:d2: a9:92:de:73:5a:87:98:07:b0:be:ee:3f:4c:1b:e3:1f:9a:bd: a3:41:44:e9:3e:67:fa:2d:da:dc:c5:87:80:51:82:7f:88:b8: 4b:9c:71:d7:39:be:0d:bc:fa:9b:4d:a8:95:a5:ba:a6:88:a8: 0f:4a:cc:c2:30:78:4f:91:33:26:8e:c9:56:36:52:74:1a:a8: a5:0f:90:ed:f8:a2:86:43:e6:6b:d7:fa:c9:d2:fb:1e:a3:92: 72:a6:04:7a:23:30:e5:f4:48:76:73:fe:5d:d9:5c:3e:09:7e: 2a:74:26:ab:4e:bd:89:a9:72:a8:85:1e:00:7f:fd:a1:73:ef: 79:a0:0d:db:d9:1e:f8:44:9b:69:48:92:08:30:60:77:ec:42: 1d:d7:25:d5:e7:d4:69:cb:4d:46:1c:46:9d:0c:5b:84:02:1a: 95:1e:03:35:85:b2:ae:d8:26:97:c6:3f:18:59:e3:e5:76:96: e2:c9:9c:a8:77:fd:93:4a:e8:c9:57:be:5e:b7:f0:c5:06:24: cf:aa:4e:52:a7:89:8f:44:72:28:fc:10:44:88:7f:5b:82:28: 21:12:dc:a8:fd:c0:a4:d6:3f:5f:f6:f0:86:a5:ac:0f:1f:79: 74:0e:14:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKpy0UOWwAutrfqtvpSPC9grMo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0 RDVDQTY4NzAeFw0yNTA4MjMwNDI1NDVaFw0yNTA4MjYxNDI1NDVaMDMxMTAvBgNV BAMTKDI5QTA2MzRBNENEMEIwMUY1Q0YzODExQzJDOEZENzJDM0U0NTVFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXM1DgtOrJVWIxppJwu9FI6en 89xfLG8T1f+bX6mHBM8tFgItE0vPkLp2GLqGM0ZrsYgf1hE+AhSUg4HeuWRB1QKA AKlzE1uHCv/RCz+Ge+i6HDBp7/WrdTyu7T/+iPjTbpwL7Q3yI3Bilu3pcfb5p1EE WTpFkK/cdMzkurdrrV0LBgYus6z/ii3U4WSbp+vVU6c53F54ezrNRMUfH5QvB3nT JePkLulfNqOmfM6Uhvpn/tyTc0tn+kSFJ92XoDpm+2GIH1x5kyDBVNY5Ti1BEaG8 YwN/h0jFqpZkJ2EqEJYfl6TtNbNqKVEVFowq8aa5HIF3/6zs8WE6x7OWyVzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaBjSkzQsB9c84EcLI/XLD5FXrswHwYDVR0j BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4 QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1 ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlS8c5gjv0xbGLrUhkwh0Ok0qmS3nNah5gH sL7uP0wb4x+avaNBROk+Z/ot2tzFh4BRgn+IuEuccdc5vg28+ptNqJWluqaIqA9K zMIweE+RMyaOyVY2UnQaqKUPkO34ooZD5mvX+snS+x6jknKmBHojMOX0SHZz/l3Z XD4Jfip0JqtOvYmpcqiFHgB//aFz73mgDdvZHvhEm2lIkggwYHfsQh3XJdXn1GnL TUYcRp0MW4QCGpUeAzWFsq7YJpfGPxhZ4+V2luLJnKh3/ZNK6MlXvl638MUGJM+q TlKniY9Ecij8EESIf1uCKCES3Kj9wKTWP1/28IalrA8feXQOFIY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:12:41 2025 by rpki-client