$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: Nver/Y/gK6b5hb1LRdrW7j19+yTuQ6JRW9FTMYuj4jg= Subject key identifier: 62:E5:17:DA:62:05:B5:C8:A4:E4:1C:1C:AF:EF:CF:A6:A3:17:36:19 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 53B24481F63D8B248F334DCC94F64E9153942D8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0214 Signing time: Fri 22 Aug 2025 11:51:38 +0000 Manifest this update: Fri 22 Aug 2025 11:46:38 +0000 Manifest next update: Mon 25 Aug 2025 15:13:38 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: CLiT1oY4iBEolB4Ge0aXhFMsv04F+Wwb0tWof8uzDtk=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b2:44:81:f6:3d:8b:24:8f:33:4d:cc:94:f6:4e:91:53:94:2d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Aug 22 11:46:38 2025 GMT Not After : Aug 25 15:13:38 2025 GMT Subject: CN=62E517DA6205B5C8A4E41C1CAFEFCFA6A3173619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:63:2e:ce:c9:4f:f5:f8:7f:e7:27:4f:c2: ff:88:c0:06:41:09:0e:61:d5:36:63:28:6e:81:51: 69:14:ce:f9:b9:26:2e:ac:2d:67:c3:a5:a6:9b:25: 88:65:ee:77:c4:63:84:cc:98:83:a0:34:3a:f3:d0: 1a:a4:f8:0c:57:c4:e7:f4:96:c6:ca:0c:b5:25:37: 2a:e8:92:af:1e:1d:91:9b:c2:e6:f0:01:b7:46:6e: dc:cd:c2:e2:77:93:e0:5f:9e:5f:26:53:d7:d2:7d: df:7e:6d:68:06:91:62:fe:69:da:c2:bc:12:9d:8d: 34:13:e3:c9:0a:2b:37:ae:f4:02:b6:94:03:46:2b: 50:04:bf:87:bd:71:76:9b:1f:1c:53:2f:ce:9a:f2: 73:dd:57:ac:aa:6b:b7:06:4d:89:11:4d:f5:90:3f: da:fd:11:40:f8:30:6e:47:d9:a9:a4:16:dd:31:aa: 0f:fa:a1:84:9c:77:25:c9:38:30:d4:56:41:8d:42: c0:37:9c:1c:fd:f7:b7:c8:b2:69:fa:e5:ba:47:f0: c3:d0:3f:f7:28:0c:2b:a6:06:d0:d1:0d:78:4e:c5: c9:f7:1c:7c:92:c0:5f:5c:14:9f:13:d6:9d:7b:5a: 03:00:7c:9d:7a:fc:60:55:7c:0f:b2:b2:48:29:40: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E5:17:DA:62:05:B5:C8:A4:E4:1C:1C:AF:EF:CF:A6:A3:17:36:19 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2f:cc:54:21:93:91:c0:0c:14:f7:56:42:54:9f:45:b9:2c: ac:26:4d:d4:b9:b9:7e:de:15:a6:4e:9c:9d:87:3c:c4:b1:40: e0:c5:94:bc:6e:08:89:1f:f4:82:7b:62:35:9d:fe:5c:53:8f: 9c:0a:70:4b:ed:74:15:10:74:e3:b2:e8:62:47:53:12:09:5c: 72:7a:fd:b6:70:c9:b7:fa:5d:8a:8c:dc:88:c8:05:36:a7:a9: 87:1a:9b:f8:fc:41:44:8e:a9:c5:df:53:93:cf:29:b4:52:73: ea:b0:c2:65:5d:cb:dd:af:2f:ec:ed:e6:8e:1c:14:c9:07:7e: e7:01:2a:c2:f1:67:ad:72:bb:e1:da:e8:0d:41:0f:a4:0b:1b: 74:47:51:e9:96:65:ba:21:c3:be:e7:d5:b2:c2:ec:77:da:bb: ee:30:b4:e0:ac:6b:dc:8a:5c:9c:9e:85:e1:ff:ac:eb:0f:c8: c7:da:39:9d:b4:4c:04:4a:e6:88:05:e2:81:df:b7:fe:be:3b: 4b:45:5a:9f:2a:d9:95:30:6e:46:a8:40:6c:85:4f:61:b4:44: 44:81:c9:03:d3:74:84:9c:0f:92:d9:b9:d8:14:f4:ab:08:0d: c5:b2:21:45:61:50:a8:a9:ac:a2:21:10:9d:e4:a8:81:f0:3b: 2c:fa:e6:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7JEgfY9iySPM03MlPZOkVOULYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTA4MjIxMTQ2MzhaFw0yNTA4MjUxNTEzMzhaMDMxMTAvBgNV BAMTKDYyRTUxN0RBNjIwNUI1QzhBNEU0MUMxQ0FGRUZDRkE2QTMxNzM2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDueWMuzslP9fh/5ydPwv+IwAZB CQ5h1TZjKG6BUWkUzvm5Ji6sLWfDpaabJYhl7nfEY4TMmIOgNDrz0Bqk+AxXxOf0 lsbKDLUlNyrokq8eHZGbwubwAbdGbtzNwuJ3k+Bfnl8mU9fSfd9+bWgGkWL+adrC vBKdjTQT48kKKzeu9AK2lANGK1AEv4e9cXabHxxTL86a8nPdV6yqa7cGTYkRTfWQ P9r9EUD4MG5H2amkFt0xqg/6oYScdyXJODDUVkGNQsA3nBz997fIsmn65bpH8MPQ P/coDCumBtDRDXhOxcn3HHySwF9cFJ8T1p17WgMAfJ16/GBVfA+yskgpQBdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYuUX2mIFtcik5Bwcr+/PpqMXNhkwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcvzFQhk5HADBT3VkJUn0W5LKwmTdS5uX7e FaZOnJ2HPMSxQODFlLxuCIkf9IJ7YjWd/lxTj5wKcEvtdBUQdOOy6GJHUxIJXHJ6 /bZwybf6XYqM3IjIBTanqYcam/j8QUSOqcXfU5PPKbRSc+qwwmVdy92vL+zt5o4c FMkHfucBKsLxZ61yu+Ha6A1BD6QLG3RHUemWZbohw77n1bLC7Hfau+4wtOCsa9yK XJyeheH/rOsPyMfaOZ20TARK5ogF4oHft/6+O0tFWp8q2ZUwbkaoQGyFT2G0RESB yQPTdIScD5LZudgU9KsIDcWyIUVhUKiprKIhEJ3kqIHwOyz65uU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:52:41 2025 by rpki-client