$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft File: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json) Hash identifier: E8BBAXP7qlubYqFIJ2clJ+KK4n3+BaISwJSgaIeLBs4= Subject key identifier: BE:D9:C2:3B:24:65:6E:A0:AA:16:C5:EA:3C:62:53:02:A0:AC:EB:5D Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 Certificate issuer: /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Certificate serial: 2971E0BF3FF75A9B75F569205A58AF7EE1BEF3E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft Manifest number: 045E Signing time: Sat 23 Aug 2025 05:32:16 +0000 Manifest this update: Sat 23 Aug 2025 05:27:16 +0000 Manifest next update: Tue 26 Aug 2025 11:20:16 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: 06ISKC2CwbxxyFrx3ByMaV4Lra2B5W5rP3yiIdrne3M=) 2: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: hMfL1CDoqwh6084xoA1v+D050tEcUURukDBBWicoSw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:71:e0:bf:3f:f7:5a:9b:75:f5:69:20:5a:58:af:7e:e1:be:f3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Validity Not Before: Aug 23 05:27:16 2025 GMT Not After : Aug 26 11:20:16 2025 GMT Subject: CN=BED9C23B24656EA0AA16C5EA3C625302A0ACEB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:ac:3e:24:9b:cc:55:f0:51:f3:25:9d:d3: 13:4f:32:61:69:9a:aa:aa:d8:6f:00:73:45:0c:5e: ca:9d:a4:fe:f8:e1:31:96:06:86:c3:2b:bd:c7:18: 69:41:ed:97:98:57:ee:6d:c6:b2:f8:66:48:5d:f2: 94:12:97:01:fa:7e:86:2b:2f:c4:f1:e4:f4:f4:6b: 96:ea:d6:e0:f6:d9:6d:ed:08:98:a1:be:10:de:8a: a4:10:2c:d4:cb:18:91:e5:7f:0f:75:d7:e4:b8:13: 2f:08:72:ff:20:07:3b:80:5d:b1:8c:70:a6:1b:c6: 93:9c:4e:81:a8:d8:64:50:13:9e:fb:61:43:38:57: bd:be:fb:9e:87:5e:1d:15:7e:13:e0:a9:c1:ba:3d: c0:e2:09:51:67:99:93:12:84:8d:09:00:27:95:15: 2f:4a:50:fd:23:cc:81:c6:ee:ea:c9:7a:e0:b4:aa: 98:ab:ad:e5:8b:fb:2d:ec:2a:0e:e4:d6:70:2e:23: a0:bc:1e:53:3a:ec:c3:a8:08:67:7a:aa:fd:9f:25: 99:31:47:7c:6e:86:7a:9b:fc:f5:68:82:ee:6a:6a: 3b:56:6d:90:fa:62:29:96:a3:0c:6d:14:0d:9b:cb: ea:b2:b0:0b:69:9d:8f:c3:55:9e:e9:60:2b:79:59: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:C2:3B:24:65:6E:A0:AA:16:C5:EA:3C:62:53:02:A0:AC:EB:5D X509v3 Authority Key Identifier: keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b8:c0:15:68:80:92:0a:31:d3:4a:49:18:79:47:07:ac:29: 4b:8a:d5:a7:1c:ae:5c:e3:32:c4:c4:16:ab:76:d6:2b:36:d8: 79:c8:c5:27:04:30:f0:0a:03:d4:7e:35:41:64:89:24:f8:e4: ca:d0:22:58:e0:1a:2a:c5:4a:91:9a:b5:ad:03:e3:aa:07:54: e2:bd:d1:bf:75:c1:23:e0:63:c0:e7:73:8c:f6:89:c9:55:0d: a0:23:dd:c9:f0:5d:24:4e:81:76:1b:ea:af:61:28:71:10:28: ba:f2:c6:71:d0:6e:91:b5:0f:59:dd:6e:16:dc:57:2c:c5:f2: 3a:a9:cf:de:9c:2c:de:0f:82:02:22:d3:d9:6a:ad:28:92:b0: 87:0a:23:5f:04:db:33:72:36:fc:1d:3d:dc:8f:0c:fe:b5:5a: ae:e2:cf:20:93:07:53:b0:89:d9:6c:a6:ac:dc:e2:f0:ef:a4: e5:9f:31:5e:f5:46:26:fd:df:c9:83:b0:79:20:cc:87:2a:ab: 53:5f:3d:0e:6b:d5:60:83:18:49:6a:54:df:7d:76:63:f1:8c: 17:a2:5e:91:45:12:c5:ba:eb:3b:2b:60:55:06:2e:ff:ca:05: a7:6a:88:6e:de:de:e0:02:df:ad:1a:d4:7c:a4:05:f3:6f:07: 33:1a:6b:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXHgvz/3Wpt19WkgWlivfuG+8+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE NkI4QzY5MDAeFw0yNTA4MjMwNTI3MTZaFw0yNTA4MjYxMTIwMTZaMDMxMTAvBgNV BAMTKEJFRDlDMjNCMjQ2NTZFQTBBQTE2QzVFQTNDNjI1MzAyQTBBQ0VCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoKw+JJvMVfBR8yWd0xNPMmFp mqqq2G8Ac0UMXsqdpP744TGWBobDK73HGGlB7ZeYV+5txrL4Zkhd8pQSlwH6foYr L8Tx5PT0a5bq1uD22W3tCJihvhDeiqQQLNTLGJHlfw911+S4Ey8Icv8gBzuAXbGM cKYbxpOcToGo2GRQE577YUM4V72++56HXh0VfhPgqcG6PcDiCVFnmZMShI0JACeV FS9KUP0jzIHG7urJeuC0qpirreWL+y3sKg7k1nAuI6C8HlM67MOoCGd6qv2fJZkx R3xuhnqb/PVogu5qajtWbZD6YimWowxtFA2by+qysAtpnY/DVZ7pYCt5WVo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvtnCOyRlbqCqFsXqPGJTAqCs610wHwYDVR0j BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4 QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq4wBVogJIKMdNKSRh5RwesKUuK1accrlzj MsTEFqt21is22HnIxScEMPAKA9R+NUFkiST45MrQIljgGirFSpGata0D46oHVOK9 0b91wSPgY8Dnc4z2iclVDaAj3cnwXSROgXYb6q9hKHEQKLryxnHQbpG1D1ndbhbc VyzF8jqpz96cLN4PggIi09lqrSiSsIcKI18E2zNyNvwdPdyPDP61Wq7izyCTB1Ow idlspqzc4vDvpOWfMV71Rib938mDsHkgzIcqq1NfPQ5r1WCDGElqVN99dmPxjBei XpFFEsW66zsrYFUGLv/KBadqiG7e3uAC360a1HykBfNvBzMaa1s= -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:55 2025 by rpki-client