$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json) Hash identifier: omSDTwMQhfy5EwVXKTJgI+t3QczD6PC4m5RmUTwnxJU= Subject key identifier: 8F:B3:D0:CA:6D:95:52:22:DB:E2:DB:22:97:93:B0:68:7B:AD:90:9A Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Certificate serial: 0B657E549DED9A1CEF97F71C869B66FB6F969153 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft Manifest number: 0226 Signing time: Sat 23 Aug 2025 11:31:54 +0000 Manifest this update: Sat 23 Aug 2025 11:26:54 +0000 Manifest next update: Tue 26 Aug 2025 14:02:54 +0000 Files and hashes: 1: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: H6kPzd2RRf7XiO9fbSK1C5byanRbVsY8IBXUwaBJKKA=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: 6F/+m53CI+OBq/k1F+jb2qhZ0UKG610wF81rsZOA7iw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:65:7e:54:9d:ed:9a:1c:ef:97:f7:1c:86:9b:66:fb:6f:96:91:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Validity Not Before: Aug 23 11:26:54 2025 GMT Not After : Aug 26 14:02:54 2025 GMT Subject: CN=8FB3D0CA6D955222DBE2DB229793B0687BAD909A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:40:16:84:5e:8d:00:58:b2:c4:25:8d:4d: 54:ab:c4:39:7e:a9:60:1b:40:f8:f0:d4:a8:f7:81: 99:ef:68:c9:b6:36:d2:d0:73:81:67:12:50:5a:f8: 2e:cb:4b:0c:d8:81:f2:75:61:85:14:0e:df:75:5a: 8b:22:53:f3:ec:64:07:db:ee:d2:da:9d:51:2c:62: c0:57:9d:10:0f:fa:70:8b:c7:3c:ef:9a:ce:bb:0d: 54:05:8d:87:bc:0a:c7:c8:a8:72:53:be:e9:03:08: be:19:ca:d6:a0:74:ec:93:bb:0e:9a:27:a8:49:db: d0:bd:3a:49:db:48:b8:56:63:0e:6d:be:0e:a4:7c: ec:1a:5d:57:cc:4a:50:29:be:3c:36:30:02:2e:d8: 69:f7:01:a2:ae:2f:cf:20:41:40:d1:05:2d:e7:87: 87:c1:6b:60:b0:66:52:7f:fc:6a:1f:d8:d2:e2:7c: 8b:61:5e:a2:3b:30:9a:7c:69:d7:40:e5:48:24:f7: 10:50:d4:e5:e2:d2:7b:1d:e7:59:97:df:01:a5:b1: a7:46:d9:86:b4:02:e6:1e:ff:84:00:82:07:96:a8: 70:9f:11:d9:85:13:33:ae:01:86:e0:cf:3f:13:ed: 19:11:bc:43:11:2f:25:cc:05:5e:37:05:bd:92:a3: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B3:D0:CA:6D:95:52:22:DB:E2:DB:22:97:93:B0:68:7B:AD:90:9A X509v3 Authority Key Identifier: keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:ff:c2:2e:26:0f:f3:a8:16:e4:bd:70:77:8a:79:6c:42:e6: 3b:05:c3:f3:4b:89:87:4f:72:f9:29:01:12:72:80:63:d0:49: 48:8a:61:05:ea:3b:62:c1:9d:ba:7a:c6:70:7d:68:ba:80:82: 14:36:45:81:82:36:dd:cc:42:15:94:9a:46:28:0b:c3:07:59: 51:6c:33:b1:ec:50:e0:b7:b1:b0:65:01:98:57:e0:64:5d:21: 27:32:1e:a3:d7:e1:76:b3:4e:ff:3c:d9:c6:17:69:6c:1a:b9: 0d:0c:3e:31:f2:d1:22:56:91:0e:f3:6a:81:3c:93:c0:8d:96: 5b:9f:b1:63:ea:5c:d9:e6:dd:72:ea:bc:ed:00:2f:a5:21:ce: 4e:1b:78:fb:79:db:7b:3c:18:81:8f:a0:7d:80:a7:02:f9:5f: 21:a3:af:03:39:3c:78:44:6c:d4:30:ea:74:87:d4:85:f0:60: 64:b4:3c:1d:93:7c:31:ad:c3:ed:ed:13:af:cf:62:66:6d:39: 11:33:87:2c:c0:70:07:c6:9f:10:12:20:11:fb:38:1f:e2:d3: 32:a7:ab:c7:25:7e:cf:3f:40:22:11:35:06:42:27:3c:0a:97: a4:0c:b3:91:32:53:cc:11:32:97:ed:db:ab:37:2c:9a:5a:e7: 97:eb:80:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2V+VJ3tmhzvl/cchptm+2+WkVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1 QzY4NTA5QTAeFw0yNTA4MjMxMTI2NTRaFw0yNTA4MjYxNDAyNTRaMDMxMTAvBgNV BAMTKDhGQjNEMENBNkQ5NTUyMjJEQkUyREIyMjk3OTNCMDY4N0JBRDkwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lUAWhF6NAFiyxCWNTVSrxDl+ qWAbQPjw1Kj3gZnvaMm2NtLQc4FnElBa+C7LSwzYgfJ1YYUUDt91WosiU/PsZAfb 7tLanVEsYsBXnRAP+nCLxzzvms67DVQFjYe8CsfIqHJTvukDCL4ZytagdOyTuw6a J6hJ29C9OknbSLhWYw5tvg6kfOwaXVfMSlApvjw2MAIu2Gn3AaKuL88gQUDRBS3n h4fBa2CwZlJ//Gof2NLifIthXqI7MJp8addA5Ugk9xBQ1OXi0nsd51mX3wGlsadG 2Ya0AuYe/4QAggeWqHCfEdmFEzOuAYbgzz8T7RkRvEMRLyXMBV43Bb2So6WTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7PQym2VUiLb4tsil5OwaHutkJowHwYDVR0j BBgwFoAUpKTEJqT0KimCljb7MiP6f1xoUJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMC9BNEE0QzQyNkE0 RjQyQTI5ODI5NjM2RkIzMjIzRkE3RjVDNjg1MDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1QzY4 NTA5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZB N0Y1QzY4NTA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3/wi4mD/OoFuS9cHeKeWxC5jsFw/NLiYdP cvkpARJygGPQSUiKYQXqO2LBnbp6xnB9aLqAghQ2RYGCNt3MQhWUmkYoC8MHWVFs M7HsUOC3sbBlAZhX4GRdIScyHqPX4XazTv882cYXaWwauQ0MPjHy0SJWkQ7zaoE8 k8CNllufsWPqXNnm3XLqvO0AL6Uhzk4bePt523s8GIGPoH2ApwL5XyGjrwM5PHhE bNQw6nSH1IXwYGS0PB2TfDGtw+3tE6/PYmZtOREzhyzAcAfGnxASIBH7OB/i0zKn q8clfs8/QCIRNQZCJzwKl6QMs5EyU8wRMpft26s3LJpa55frgEY= -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:03 2025 by rpki-client