$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: FkpLoLJyuBNE5kS4b0C/R/pb/wjJuaTofDDLVMdYSDM= Subject key identifier: 4D:04:98:FF:79:F5:31:8C:A7:6B:CA:52:E2:E9:7D:52:AD:CA:05:6F Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 7D38E1A55ABDEC1D30DF2763272B3AFA9D2D3D5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 0458 Signing time: Thu 21 Aug 2025 22:20:00 +0000 Manifest this update: Thu 21 Aug 2025 22:15:00 +0000 Manifest next update: Sun 24 Aug 2025 23:37:00 +0000 Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: qIkZtUPswOLSzAKIW4faoAC7V/pmv5To5cLrgWfUSjA=) 2: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: a7ts1lQmSTvC+gcen+UGlWLXYBdAXtOWFQhNE3J4VjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:38:e1:a5:5a:bd:ec:1d:30:df:27:63:27:2b:3a:fa:9d:2d:3d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Aug 21 22:15:00 2025 GMT Not After : Aug 24 23:37:00 2025 GMT Subject: CN=4D0498FF79F5318CA76BCA52E2E97D52ADCA056F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3d:3d:0b:f0:2f:e3:f1:22:2b:97:79:5e:ca: d3:2b:d1:0c:2b:02:3b:ec:0e:f6:10:2a:72:38:55: 89:e2:f3:f3:3b:11:33:aa:af:e3:a4:ff:6c:3b:78: ca:ca:71:78:e0:a3:0d:37:98:78:9c:34:84:90:49: 67:f9:a5:b7:bf:4c:de:74:01:c2:2e:af:94:d9:4a: 7d:6f:84:05:8e:94:45:c0:da:3a:a0:99:61:04:2a: 37:04:6f:c1:23:33:60:5c:09:e9:80:4e:a2:68:87: 57:5e:03:29:e5:dc:11:27:5b:ed:4a:2b:a1:71:0a: df:19:04:15:3f:fa:3b:3c:52:8d:c4:a8:4d:ee:14: 43:26:c7:10:15:fb:68:38:5b:bb:27:a1:4f:81:74: 2f:7e:2a:d8:27:5f:8d:2c:02:eb:46:90:36:21:c3: 0b:31:1d:46:89:be:2c:ee:89:55:12:b3:05:cf:6c: 50:5f:86:65:a2:13:84:64:af:96:37:6d:d4:a7:e6: 03:31:44:dc:9f:4d:63:29:14:79:89:7e:71:dc:74: bd:4b:75:6b:1a:08:dd:6a:3d:f1:07:3c:82:9c:cd: 03:36:17:de:78:72:ef:1f:bf:27:98:f4:78:34:23: 02:e8:3d:61:41:0d:b0:70:63:17:33:5b:7c:d8:74: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:04:98:FF:79:F5:31:8C:A7:6B:CA:52:E2:E9:7D:52:AD:CA:05:6F X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ee:4e:65:52:5f:34:b4:89:c8:e5:48:3f:9f:96:41:79:e0: 77:7b:57:67:57:ee:43:33:fe:c5:a9:72:af:ea:e5:92:07:52: 60:61:8e:ad:55:86:80:64:ff:2e:74:de:98:d5:38:38:93:8d: ca:60:67:c5:71:4c:a8:5e:4d:6b:17:26:b7:c4:3e:a0:62:10: 4d:d9:74:1f:1b:e5:89:60:89:3a:0a:b7:b5:bb:40:70:49:92: a5:38:93:ef:9c:18:40:ae:22:25:44:61:3e:01:51:bb:c6:d2: cb:2a:bc:14:04:72:90:84:7c:c9:b8:6d:db:61:c2:76:cf:0a: 15:be:51:f5:97:1c:dd:69:a5:95:a9:b3:12:b7:3c:77:2d:a8: ab:ae:bd:10:c3:7b:06:cc:e8:36:ee:45:e7:31:b7:f5:7c:69: 23:a7:98:cb:39:fb:40:54:a6:2f:c7:73:a8:d5:30:5a:29:fe: 78:a4:0f:1c:55:7e:5b:ec:ed:ac:6c:00:35:b9:ff:01:81:0a: 68:28:61:e3:c8:29:bb:8e:ef:64:46:b8:3f:ed:a9:70:7f:6f: 1f:0e:c0:8a:4c:66:c1:61:12:ba:bb:3c:ba:14:f9:f6:b0:a7: 56:ee:f9:73:c7:b5:9e:80:c8:dd:63:40:2a:15:33:47:b3:e9: aa:25:af:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTjhpVq97B0w3ydjJys6+p0tPVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTA4MjEyMjE1MDBaFw0yNTA4MjQyMzM3MDBaMDMxMTAvBgNV BAMTKDREMDQ5OEZGNzlGNTMxOENBNzZCQ0E1MkUyRTk3RDUyQURDQTA1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnPT0L8C/j8SIrl3leytMr0Qwr AjvsDvYQKnI4VYni8/M7ETOqr+Ok/2w7eMrKcXjgow03mHicNISQSWf5pbe/TN50 AcIur5TZSn1vhAWOlEXA2jqgmWEEKjcEb8EjM2BcCemATqJoh1deAynl3BEnW+1K K6FxCt8ZBBU/+js8Uo3EqE3uFEMmxxAV+2g4W7snoU+BdC9+KtgnX40sAutGkDYh wwsxHUaJvizuiVUSswXPbFBfhmWiE4Rkr5Y3bdSn5gMxRNyfTWMpFHmJfnHcdL1L dWsaCN1qPfEHPIKczQM2F954cu8fvyeY9Hg0IwLoPWFBDbBwYxczW3zYdPZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQSY/3n1MYyna8pS4ul9Uq3KBW8wHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATuTmVSXzS0icjlSD+flkF54Hd7V2dX7kMz /sWpcq/q5ZIHUmBhjq1VhoBk/y503pjVODiTjcpgZ8VxTKheTWsXJrfEPqBiEE3Z dB8b5YlgiToKt7W7QHBJkqU4k++cGECuIiVEYT4BUbvG0ssqvBQEcpCEfMm4bdth wnbPChW+UfWXHN1ppZWpsxK3PHctqKuuvRDDewbM6DbuRecxt/V8aSOnmMs5+0BU pi/Hc6jVMFop/nikDxxVflvs7axsADW5/wGBCmgoYePIKbuO72RGuD/tqXB/bx8O wIpMZsFhErq7PLoU+fawp1bu+XPHtZ6AyN1jQCoVM0ez6aolr7o= -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:54 2025 by rpki-client