$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: IXlPb9AjHSm8dxgoh+t3EP0dxlNCNbpYTbWMp0GM/O4= Subject key identifier: 4D:43:10:36:71:79:27:08:7A:0E:62:97:AD:0C:29:70:2A:56:80:89 Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: AF2F6E380A36A5B359FAE4FF266CE5178B2BE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 011E Signing time: Fri 22 Aug 2025 01:42:09 +0000 Manifest this update: Fri 22 Aug 2025 01:37:09 +0000 Manifest next update: Mon 25 Aug 2025 02:50:09 +0000 Files and hashes: 1: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: C35SXikIhaDLGx2DtTCZTY1tvAiWcqvbFOy+lIenj/0=) 2: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: dXDZy3qlNF6NDXMKZSSGXZqu4b0zKAf+ToRZ8IBISBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: af:2f:6e:38:0a:36:a5:b3:59:fa:e4:ff:26:6c:e5:17:8b:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Aug 22 01:37:09 2025 GMT Not After : Aug 25 02:50:09 2025 GMT Subject: CN=4D431036717927087A0E6297AD0C29702A568089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:37:8d:82:5d:d4:15:6a:74:45:70:1d:d8:5e: 56:a9:f3:31:0b:f1:b5:f9:6b:32:02:52:d8:02:5c: 09:36:0c:b4:ce:d1:46:c5:ac:23:37:d2:08:13:66: ee:81:36:77:b0:42:74:5e:ed:e7:87:35:64:bb:5f: 4c:24:d2:ab:47:e5:57:66:63:79:2b:0c:76:c4:93: 38:05:32:c2:55:42:9b:ac:65:6d:c0:94:c3:23:49: d6:ed:eb:03:7d:5b:cd:2f:17:86:cf:57:ed:3f:17: f8:06:3d:85:69:1c:2b:1e:29:6b:98:34:84:ee:2e: 24:b1:46:63:d6:98:48:47:7b:f5:4c:5a:26:1d:4f: 4e:6a:4b:17:ab:31:b7:03:03:6c:ec:68:3d:1d:2a: eb:51:5a:d3:6e:98:fa:67:c9:fc:04:b4:1b:d3:32: 00:ff:c0:4b:18:48:51:b4:e7:1e:d1:f8:7f:cb:f4: b2:d7:5e:0d:de:53:c0:d4:66:d1:0f:1a:8e:70:a1: 4b:34:b6:19:34:6a:13:4d:75:0b:5f:9a:1c:a2:9a: f3:15:5f:fc:c0:6a:ea:9e:46:22:27:96:e2:cf:b7: 44:c4:e1:71:81:e2:b5:1d:bb:ef:4c:3c:b7:ea:0b: fc:fa:81:23:05:89:25:42:9c:7e:7d:a5:4e:ad:08: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:43:10:36:71:79:27:08:7A:0E:62:97:AD:0C:29:70:2A:56:80:89 X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bd:6e:7c:bd:4c:65:cf:e4:6b:f9:54:9c:d6:4b:22:9e:15: ba:79:e3:16:0d:cf:95:22:66:c0:ad:00:7b:a8:13:bd:5b:50: 14:4f:b9:da:48:a1:ef:08:48:fe:d1:0d:ec:1c:1c:ab:a1:0f: 9b:78:17:a3:c0:1f:15:cd:78:5e:be:11:73:33:42:1f:b7:c7: 7e:4e:a0:88:47:16:4c:dd:cc:d3:8b:6a:2f:0e:5b:b2:7a:2f: 07:55:0d:b6:4c:ad:79:73:e4:95:c8:c7:bd:ee:f1:42:8a:08: 9d:18:30:1f:f2:a9:05:b2:4c:70:c1:04:9f:b6:94:2f:e7:0c: a2:11:c3:5a:16:90:a0:0f:6a:8e:36:98:9f:a8:27:0a:85:34: fe:95:c7:be:17:a1:85:ec:5a:de:c6:f7:7b:f5:8e:4d:c4:9d: d8:29:37:e1:47:96:6c:ee:11:52:35:5a:10:68:a2:34:0d:18: 47:62:67:f1:a4:fa:e4:e5:74:a3:1c:49:36:7c:6c:e5:c4:e8: 6d:b4:cd:3b:f3:ed:17:d6:04:62:43:c1:eb:68:d4:c2:bb:fb: 87:56:15:3a:e5:e6:df:af:c6:e9:c5:2c:d6:48:4b:a3:1d:6b: 98:52:0e:72:4d:cb:f7:0f:a8:55:37:ab:53:10:0c:91:e1:90: c3:d1:ce:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAK8vbjgKNqWzWfrk/yZs5ReLK+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNTA4MjIwMTM3MDlaFw0yNTA4MjUwMjUwMDlaMDMxMTAvBgNV BAMTKDRENDMxMDM2NzE3OTI3MDg3QTBFNjI5N0FEMEMyOTcwMkE1NjgwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcN42CXdQVanRFcB3YXlap8zEL 8bX5azICUtgCXAk2DLTO0UbFrCM30ggTZu6BNnewQnRe7eeHNWS7X0wk0qtH5Vdm Y3krDHbEkzgFMsJVQpusZW3AlMMjSdbt6wN9W80vF4bPV+0/F/gGPYVpHCseKWuY NITuLiSxRmPWmEhHe/VMWiYdT05qSxerMbcDA2zsaD0dKutRWtNumPpnyfwEtBvT MgD/wEsYSFG05x7R+H/L9LLXXg3eU8DUZtEPGo5woUs0thk0ahNNdQtfmhyimvMV X/zAauqeRiInluLPt0TE4XGB4rUdu+9MPLfqC/z6gSMFiSVCnH59pU6tCKxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTUMQNnF5Jwh6DmKXrQwpcCpWgIkwHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK9bny9TGXP5Gv5VJzWSyKeFbp54xYNz5Ui ZsCtAHuoE71bUBRPudpIoe8ISP7RDewcHKuhD5t4F6PAHxXNeF6+EXMzQh+3x35O oIhHFkzdzNOLai8OW7J6LwdVDbZMrXlz5JXIx73u8UKKCJ0YMB/yqQWyTHDBBJ+2 lC/nDKIRw1oWkKAPao42mJ+oJwqFNP6Vx74XoYXsWt7G93v1jk3EndgpN+FHlmzu EVI1WhBoojQNGEdiZ/Gk+uTldKMcSTZ8bOXE6G20zTvz7RfWBGJDweto1MK7+4dW FTrl5t+vxunFLNZIS6Mda5hSDnJNy/cPqFU3q1MQDJHhkMPRzio= -----END CERTIFICATE-----Generated at Sat Aug 23 20:00:07 2025 by rpki-client