$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: gdoWfdeXqC0xq4ccA6JEgmLatlr58+s/UwVF6FVf8b8= Subject key identifier: 38:CF:BA:A7:FD:B3:98:42:22:7C:0E:32:20:CF:EE:D3:FF:61:BF:16 Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 23602029CEFFBCE5D55A6143AE5AB1D6010853E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 026B Signing time: Sat 23 Aug 2025 06:12:24 +0000 Manifest this update: Sat 23 Aug 2025 06:07:24 +0000 Manifest next update: Tue 26 Aug 2025 14:40:24 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: TnO3pGOiHJftQOd6DXKryLv7FvQHNCeG0oziJLeZSbA=) 2: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: RRwBLNMV19GK24+7LPxSyCfDXlLgmuU1+4QRQcA7Eh8=) 3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: +MtI3Paga95mLoPbEq+emS8LducTIoyRFm8yliuN86s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:60:20:29:ce:ff:bc:e5:d5:5a:61:43:ae:5a:b1:d6:01:08:53:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Aug 23 06:07:24 2025 GMT Not After : Aug 26 14:40:24 2025 GMT Subject: CN=38CFBAA7FDB39842227C0E3220CFEED3FF61BF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8f:04:72:91:cb:11:f7:f4:01:e4:e6:dc:12: 4a:82:84:71:8f:7b:87:6c:4b:40:09:42:76:43:e9: 8f:a7:ee:68:0b:d7:6e:36:21:55:98:fe:24:b0:cf: e0:02:1c:b7:7a:d0:b3:55:bd:0e:7c:b4:4d:35:42: 4a:13:9c:bf:aa:27:b6:2a:7a:ce:72:c4:43:a9:33: f6:49:2f:03:ea:96:24:21:a7:fe:f4:1e:af:b4:ad: 0a:eb:d2:14:ba:1d:c3:13:a4:56:21:8f:2e:a2:b8: 54:7a:68:0e:7a:8b:9d:a1:cb:10:26:a6:1f:75:ef: 28:74:31:41:7e:0a:a4:51:81:6b:eb:9a:48:f9:78: e9:57:1d:6b:cc:95:05:20:fc:ee:f1:ae:4b:28:5b: a1:6d:07:64:69:92:3e:71:c4:8b:a4:06:9c:a0:fa: 89:1e:38:a5:8c:fb:1d:d6:db:d9:0b:22:d3:54:de: ba:f5:12:d9:3c:44:a4:07:a7:d1:51:20:bf:73:8d: b1:69:49:0a:50:1e:ee:4a:03:21:0b:31:e0:9c:37: f4:3c:d2:9d:b9:a3:3f:66:e5:36:0f:9b:c6:5f:4f: 53:9c:0e:36:f7:23:82:72:79:3e:59:b1:5c:b2:32: ed:57:e4:2d:55:2a:30:19:9c:a8:fb:69:98:f3:74: 91:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:BA:A7:FD:B3:98:42:22:7C:0E:32:20:CF:EE:D3:FF:61:BF:16 X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:33:9e:24:05:82:3e:8d:1e:ac:04:d2:2d:9f:df:b5:65:58: 1c:96:3b:29:f4:88:6d:70:81:27:53:76:fd:81:b4:f3:95:03: 2d:70:61:90:2a:7d:ef:6a:d9:f4:20:98:f0:98:34:71:e6:e6: 79:68:93:24:95:2c:65:f5:bc:97:48:ae:c4:a6:43:67:f5:f5: 1b:ce:e9:29:99:56:cf:62:b9:f0:c7:4e:1f:85:f5:0c:1f:d9: 42:c8:25:e4:53:ff:3c:d0:f1:ef:c6:e8:38:26:8d:17:a8:29: 5e:9c:ed:1b:a0:4d:49:d4:69:42:b5:30:91:80:66:b7:d0:28: e3:a8:29:24:47:d3:0c:44:c8:9f:b2:51:47:25:70:3e:ae:a9: de:0b:c8:ad:26:77:e8:62:93:c7:8d:81:a9:b1:13:67:ed:e4: c8:50:de:7b:f0:28:2b:a6:57:85:60:01:6e:09:e7:08:7d:14: 58:77:34:a2:43:12:f7:84:d9:08:ff:4c:e1:37:88:26:50:ff: b5:e2:16:9a:aa:d2:dc:3b:d3:00:8d:28:b4:26:ef:e3:29:07: e2:15:fe:a3:e2:0b:4b:26:b5:7f:d6:99:2a:38:de:60:e5:fb: 88:93:19:21:bf:89:ac:14:60:83:88:6e:06:29:64:7a:e9:df: 5a:01:75:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2AgKc7/vOXVWmFDrlqx1gEIU+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTA4MjMwNjA3MjRaFw0yNTA4MjYxNDQwMjRaMDMxMTAvBgNV BAMTKDM4Q0ZCQUE3RkRCMzk4NDIyMjdDMEUzMjIwQ0ZFRUQzRkY2MUJGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZjwRykcsR9/QB5ObcEkqChHGP e4dsS0AJQnZD6Y+n7mgL1242IVWY/iSwz+ACHLd60LNVvQ58tE01QkoTnL+qJ7Yq es5yxEOpM/ZJLwPqliQhp/70Hq+0rQrr0hS6HcMTpFYhjy6iuFR6aA56i52hyxAm ph917yh0MUF+CqRRgWvrmkj5eOlXHWvMlQUg/O7xrksoW6FtB2Rpkj5xxIukBpyg +okeOKWM+x3W29kLItNU3rr1Etk8RKQHp9FRIL9zjbFpSQpQHu5KAyELMeCcN/Q8 0p25oz9m5TYPm8ZfT1OcDjb3I4JyeT5ZsVyyMu1X5C1VKjAZnKj7aZjzdJFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOM+6p/2zmEIifA4yIM/u0/9hvxYwHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkzniQFgj6NHqwE0i2f37VlWByWOyn0iG1w gSdTdv2BtPOVAy1wYZAqfe9q2fQgmPCYNHHm5nlokySVLGX1vJdIrsSmQ2f19RvO 6SmZVs9iufDHTh+F9Qwf2ULIJeRT/zzQ8e/G6DgmjReoKV6c7RugTUnUaUK1MJGA ZrfQKOOoKSRH0wxEyJ+yUUclcD6uqd4LyK0md+hik8eNgamxE2ft5MhQ3nvwKCum V4VgAW4J5wh9FFh3NKJDEveE2Qj/TOE3iCZQ/7XiFpqq0tw70wCNKLQm7+MpB+IV /qPiC0smtX/WmSo43mDl+4iTGSG/iawUYIOIbgYpZHrp31oBdU4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:57 2025 by rpki-client