$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: CQOe9X6qxb1EvBZjU8rxjGApdo/kWFCuDTNOujpI/tc= Subject key identifier: 88:AB:84:8A:6A:FA:D0:97:37:9E:75:2D:EF:2C:B6:A2:47:26:12:AD Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 1C9CA6FAFB0A07CED49FA37A310957DB33621FE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 018F Signing time: Sat 23 Aug 2025 19:10:43 +0000 Manifest this update: Sat 23 Aug 2025 19:05:43 +0000 Manifest next update: Wed 27 Aug 2025 06:49:43 +0000 Files and hashes: 1: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=) 2: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: yUc/rbvT1DnNaWlgjXJIYRouBM96AXapLjJFLcd99TI=) 3: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=) 4: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=) 5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 6: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=) 7: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 06:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9c:a6:fa:fb:0a:07:ce:d4:9f:a3:7a:31:09:57:db:33:62:1f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Aug 23 19:05:43 2025 GMT Not After : Aug 27 06:49:43 2025 GMT Subject: CN=88AB848A6AFAD097379E752DEF2CB6A2472612AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:86:4e:31:96:aa:2d:ed:9a:09:c5:f2:5f: eb:88:39:4d:97:5f:ad:84:98:03:3d:4c:9e:0f:12: 8c:ba:06:ef:80:ac:10:55:58:23:bc:5b:9b:14:88: 57:4d:3b:6b:7b:76:5d:c7:99:16:54:8c:2d:a5:b9: 2f:47:55:49:4e:a2:5c:3a:85:f0:61:66:25:c1:34: 34:05:5b:52:aa:35:d0:00:3e:1a:d2:8e:b0:35:fe: 65:8c:94:82:2d:3c:04:76:96:4c:a2:8f:1b:38:e8: 48:95:4a:ee:ba:9c:32:6a:98:98:f5:1d:e3:55:d7: ae:1e:b2:89:61:c8:c0:52:ed:e5:f7:1a:3c:76:86: 22:10:37:71:06:65:e1:8b:d1:92:6d:96:69:32:d0: 38:35:3f:22:2c:da:5b:57:82:55:87:c4:a8:8c:dd: b9:f5:60:b5:a0:84:cd:8b:54:0a:e4:ba:9e:38:ad: 20:79:dc:52:a4:52:eb:25:25:5c:02:25:10:1a:4a: 4e:8d:bb:3e:ef:9f:eb:1f:ed:53:0c:a6:0c:11:34: af:97:dc:b4:fb:47:0d:7e:4a:57:5a:69:9f:0a:bf: b8:38:cf:ef:34:94:55:d2:dd:82:b1:7d:64:4b:1a: 35:31:95:ac:28:99:45:56:45:90:26:c1:d8:54:41: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:84:8A:6A:FA:D0:97:37:9E:75:2D:EF:2C:B6:A2:47:26:12:AD X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:bb:b0:f9:b5:f8:58:36:d5:d2:8a:4f:d1:de:ce:34:28:a5: 2a:96:71:17:6c:70:53:e6:bd:e9:94:7a:ea:90:e4:2f:a8:93: 50:e1:37:5f:70:d2:62:a7:8f:35:60:50:cd:cc:90:12:c6:8f: 67:6a:94:71:f3:c1:e7:b7:d0:a1:aa:b6:dd:de:7a:c5:57:f8: d7:3d:08:5d:c9:f4:f3:68:91:52:68:9f:54:b3:eb:31:e5:a4: bb:93:b1:75:21:e2:a6:9b:58:7c:84:1d:b0:a5:e1:f2:bb:64: 79:28:31:89:c7:b7:06:42:24:19:ea:21:15:b9:b7:85:df:2f: fa:70:16:14:df:94:4d:fd:e8:a2:60:df:9f:2a:4d:19:51:18: 5b:58:2b:33:66:d9:89:cb:80:b9:8d:ff:09:f6:b6:b1:30:95: 73:71:ef:db:9a:f8:af:0c:83:12:36:16:ac:b7:dd:13:05:da: ef:6d:db:70:b6:b5:f2:4e:7e:37:18:c9:fa:d8:1c:36:61:9d: e5:75:20:c1:0c:d2:ca:0d:18:ec:1e:eb:fd:58:14:12:a6:45: 1b:f9:62:c9:37:5a:53:46:dd:3c:e7:aa:91:1d:86:48:28:80: 12:7b:51:5d:37:11:48:55:df:e3:91:90:79:29:55:de:70:9c: 42:27:4d:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJym+vsKB87Un6N6MQlX2zNiH+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNTA4MjMxOTA1NDNaFw0yNTA4MjcwNjQ5NDNaMDMxMTAvBgNV BAMTKDg4QUI4NDhBNkFGQUQwOTczNzlFNzUyREVGMkNCNkEyNDcyNjEyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPoZOMZaqLe2aCcXyX+uIOU2X X62EmAM9TJ4PEoy6Bu+ArBBVWCO8W5sUiFdNO2t7dl3HmRZUjC2luS9HVUlOolw6 hfBhZiXBNDQFW1KqNdAAPhrSjrA1/mWMlIItPAR2lkyijxs46EiVSu66nDJqmJj1 HeNV164esolhyMBS7eX3Gjx2hiIQN3EGZeGL0ZJtlmky0Dg1PyIs2ltXglWHxKiM 3bn1YLWghM2LVArkup44rSB53FKkUuslJVwCJRAaSk6Nuz7vn+sf7VMMpgwRNK+X 3LT7Rw1+SldaaZ8Kv7g4z+80lFXS3YKxfWRLGjUxlawomUVWRZAmwdhUQY59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiKuEimr60Jc3nnUt7yy2okcmEq0wHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK67sPm1+Fg21dKKT9HezjQopSqWcRdscFPm vemUeuqQ5C+ok1DhN19w0mKnjzVgUM3MkBLGj2dqlHHzwee30KGqtt3eesVX+Nc9 CF3J9PNokVJon1Sz6zHlpLuTsXUh4qabWHyEHbCl4fK7ZHkoMYnHtwZCJBnqIRW5 t4XfL/pwFhTflE396KJg358qTRlRGFtYKzNm2YnLgLmN/wn2trEwlXNx79ua+K8M gxI2Fqy33RMF2u9t23C2tfJOfjcYyfrYHDZhneV1IMEM0soNGOwe6/1YFBKmRRv5 Ysk3WlNG3TznqpEdhkgogBJ7UV03EUhV3+ORkHkpVd5wnEInTQ8= -----END CERTIFICATE-----Generated at Sun Aug 24 06:28:18 2025 by rpki-client