$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: /N5rL6KnFRD/8+w02/H1mJ57Xgi+/8XsWIkvIpOdmTw= Subject key identifier: 37:7C:B1:47:01:19:9F:F5:0A:53:48:00:F2:61:F9:71:AD:99:A5:06 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 4B6846B7C1746AD1B76E8838BBD3B26AFE7B66FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 0227 Signing time: Sat 23 Aug 2025 09:50:48 +0000 Manifest this update: Sat 23 Aug 2025 09:45:48 +0000 Manifest next update: Tue 26 Aug 2025 13:18:48 +0000 Files and hashes: 1: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: j0lcRKDX7Zai080pL+d3IVmhJOqrL+V2aEhEgUdciuo=) 2: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: PJJflVEuAqU1x1bzzs4n8zhyBWNQ4TBM8yQ5wwBc+Y8=) 3: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: Xwq/wJJS/Kjm/U4JxXNUcSQtOn41xVafC1xAxCE+Wts=) 4: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: pLboy3es15Aee5R8ozV3T/lLrbC6yjQ2R9cCybdnsq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:68:46:b7:c1:74:6a:d1:b7:6e:88:38:bb:d3:b2:6a:fe:7b:66:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Aug 23 09:45:48 2025 GMT Not After : Aug 26 13:18:48 2025 GMT Subject: CN=377CB14701199FF50A534800F261F971AD99A506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e1:2f:7b:72:d0:48:8f:99:b7:5b:fb:cc:33: 96:3a:42:a0:de:12:1b:f1:d7:0f:d5:dc:99:bf:62: a7:88:cc:2e:3c:46:ad:d0:53:97:2c:c6:ab:84:0f: 5a:03:50:ee:bd:66:02:9b:3d:ca:e0:56:74:b2:b4: 15:44:96:42:6f:63:a4:d5:21:5f:41:e1:43:84:e8: 59:09:43:dc:73:83:94:97:29:62:bd:50:8d:de:31: 03:52:eb:26:9f:c8:30:2d:3b:61:93:77:bb:dd:fb: a2:02:d0:6c:df:76:fe:77:ef:61:13:9c:a2:35:19: 02:85:12:b5:e4:a9:4c:b0:f9:2b:e1:c0:c9:b4:4e: 87:bf:8d:9b:a2:cc:82:da:4e:06:3f:39:cb:19:88: 43:56:fa:20:53:b7:82:01:8a:88:3a:0e:b8:34:30: a9:94:dd:87:f9:d3:47:2b:47:08:b9:19:86:f1:f3: e8:b1:8a:7a:91:43:d7:86:b2:07:50:89:18:61:4b: 80:d8:fe:3f:a6:3c:79:2b:53:3b:60:da:fd:ee:8a: bc:8e:5a:ae:f0:ba:f4:7e:bc:83:dd:a2:f6:64:3a: ef:95:ae:4f:1f:c3:d5:c1:11:39:97:60:f5:f1:de: ba:e6:3f:b8:0e:0f:d0:bb:2c:41:34:22:34:3b:9a: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7C:B1:47:01:19:9F:F5:0A:53:48:00:F2:61:F9:71:AD:99:A5:06 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:54:15:30:4b:85:e9:17:fa:f8:11:8f:e8:b3:21:44:c2:b1: 5a:19:9f:a4:9b:9a:b7:75:e7:54:10:e6:da:23:05:36:74:48: 44:f9:c4:72:0c:de:ac:d9:f4:2c:1e:f5:44:41:94:d4:e4:ee: a8:7b:7a:54:7c:94:9a:12:d7:25:3a:ea:c0:20:e2:b2:ee:86: 82:9c:04:e0:61:06:14:fe:7d:1d:1e:6a:54:09:f4:9d:3b:59: d5:08:8e:d5:66:93:99:a3:56:20:6c:43:a2:e0:c6:3a:6e:6b: 2e:52:ad:65:47:c9:97:97:6e:10:28:92:c2:ad:b6:b0:2b:8a: 52:91:c3:6f:b1:ee:84:db:19:c7:7e:dd:bc:6f:ec:f1:64:d0: 0f:d3:52:86:ef:d1:40:19:eb:a4:f3:b9:c7:1c:0b:70:25:df: f7:bf:e0:b7:2b:88:cc:23:cb:eb:78:28:86:59:e8:f8:20:7e: 57:c3:fe:c4:e2:8a:55:a5:30:72:f8:09:93:9f:b5:69:7d:d5: 85:ca:bc:4e:5c:69:b4:0e:72:8c:b3:1e:0a:79:35:0b:89:0b: c7:52:ae:61:de:c4:a9:17:56:39:77:91:09:d2:df:f3:a7:94: 56:6a:67:9c:3b:e0:ce:3e:f8:2d:f7:97:53:40:3b:11:ec:9d: 06:ef:ad:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2hGt8F0atG3bog4u9Oyav57Zv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTA4MjMwOTQ1NDhaFw0yNTA4MjYxMzE4NDhaMDMxMTAvBgNV BAMTKDM3N0NCMTQ3MDExOTlGRjUwQTUzNDgwMEYyNjFGOTcxQUQ5OUE1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4S97ctBIj5m3W/vMM5Y6QqDe Ehvx1w/V3Jm/YqeIzC48Rq3QU5csxquED1oDUO69ZgKbPcrgVnSytBVElkJvY6TV IV9B4UOE6FkJQ9xzg5SXKWK9UI3eMQNS6yafyDAtO2GTd7vd+6IC0Gzfdv5372ET nKI1GQKFErXkqUyw+SvhwMm0Toe/jZuizILaTgY/OcsZiENW+iBTt4IBiog6Drg0 MKmU3Yf500crRwi5GYbx8+ixinqRQ9eGsgdQiRhhS4DY/j+mPHkrUztg2v3uiryO Wq7wuvR+vIPdovZkOu+Vrk8fw9XBETmXYPXx3rrmP7gOD9C7LEE0IjQ7mu43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN3yxRwEZn/UKU0gA8mH5ca2ZpQYwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5UFTBLhekX+vgRj+izIUTCsVoZn6Sbmrd1 51QQ5tojBTZ0SET5xHIM3qzZ9Cwe9URBlNTk7qh7elR8lJoS1yU66sAg4rLuhoKc BOBhBhT+fR0ealQJ9J07WdUIjtVmk5mjViBsQ6Lgxjpuay5SrWVHyZeXbhAoksKt trArilKRw2+x7oTbGcd+3bxv7PFk0A/TUobv0UAZ66TzucccC3Al3/e/4LcriMwj y+t4KIZZ6PggflfD/sTiilWlMHL4CZOftWl91YXKvE5cabQOcoyzHgp5NQuJC8dS rmHexKkXVjl3kQnS3/OnlFZqZ5w74M4++C33l1NAOxHsnQbvrSI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:33 2025 by rpki-client