$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: OE5RVLKXYL/gXfc6JNMr6lKOix1flJ/WE6cF5ARpNWQ= Subject key identifier: CA:E7:8B:ED:48:43:4D:BC:44:D1:DE:6E:A6:55:E5:CE:D1:37:54:68 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 4F0A67FB2866BB0AC2763B51CBEFEF5515099B6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: C5 Signing time: Sat 23 Aug 2025 14:52:22 +0000 Manifest this update: Sat 23 Aug 2025 14:47:22 +0000 Manifest next update: Wed 27 Aug 2025 02:11:22 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: NZC2dVvxahXeGOnK87715iHKi94K1KkmItr+WMA9hSw=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0a:67:fb:28:66:bb:0a:c2:76:3b:51:cb:ef:ef:55:15:09:9b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Aug 23 14:47:22 2025 GMT Not After : Aug 27 02:11:22 2025 GMT Subject: CN=CAE78BED48434DBC44D1DE6EA655E5CED1375468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:12:6c:f7:07:54:ee:ae:89:21:0b:5e:c1: 44:82:33:ce:8d:54:ce:39:3d:3d:74:ac:05:c1:de: 42:14:51:70:f7:71:4e:ea:da:47:4d:ca:7a:08:f6: cd:68:ae:33:3f:36:5d:bf:0a:46:b8:29:de:91:c0: 8b:a9:fa:4f:26:05:5f:64:20:fa:60:0e:86:28:54: 1d:9f:99:f9:d2:74:85:e1:a5:37:1d:89:a6:89:4c: c2:b1:02:7c:a0:71:6a:d2:cc:ec:bf:b3:8d:70:ad: 34:a6:99:df:8f:54:f5:fa:8f:af:3c:d0:9a:fd:c2: 9a:8d:5c:93:00:30:0d:93:26:43:62:ff:1b:a9:ca: 7c:6d:cc:af:a3:16:68:12:b8:94:17:78:6c:06:91: b4:a9:e6:aa:37:c5:8b:88:6a:a6:80:11:e7:01:cf: 9d:1d:c1:5e:44:28:fa:ff:10:7a:0c:10:76:75:73: 85:1c:d8:61:d5:48:21:1f:7c:0a:d4:9e:99:85:42: 14:40:e5:3a:c7:62:b2:17:44:bf:09:25:d8:a9:4d: 75:2f:2d:b8:03:8c:3e:ba:66:b4:42:01:25:d8:dc: ff:dd:81:00:e5:3b:eb:a8:6e:b4:42:a9:26:c3:3c: d6:86:2b:09:e9:5b:d6:17:5e:be:a7:0b:f6:ca:e4: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:8B:ED:48:43:4D:BC:44:D1:DE:6E:A6:55:E5:CE:D1:37:54:68 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:94:65:4f:dd:02:80:10:4c:ee:8b:cd:57:7d:d7:95:cf:b0: 39:99:06:68:be:4f:e6:4e:26:37:1d:96:f1:99:8f:15:21:4b: 56:69:5d:ee:5e:43:b0:3f:03:3d:15:7e:e4:2f:e5:13:cc:f4: d9:3a:85:f9:d9:7c:9d:05:80:a2:48:3c:6e:66:2b:5a:b8:c0: 03:90:6b:98:81:52:7e:97:5a:b2:ed:69:54:52:19:9f:24:bf: c2:b9:35:21:44:fd:e9:e4:42:22:82:14:5b:15:87:f5:97:f1: 42:a3:e5:4c:58:1e:90:b8:5f:09:b3:07:ac:ad:cb:02:84:c3: 16:05:57:37:fb:db:ff:56:46:51:24:c2:68:49:21:37:26:8e: 1f:3f:83:8e:91:bd:e4:65:41:67:6e:39:9e:44:24:a8:cd:bc: a9:f4:98:53:b6:e5:1b:99:8c:eb:26:ad:e5:4c:7e:bc:c3:be: 04:84:a3:03:b5:c9:3a:f2:ba:44:b3:f8:ce:82:eb:61:0e:41: 42:91:c4:fd:c5:10:70:d2:1f:2b:7a:7f:c2:55:23:fb:54:34: c5:d8:6e:af:13:92:b3:3a:be:82:bc:09:25:b9:8e:4b:d2:b9: 11:68:0c:2f:0c:e1:56:5b:36:02:39:7b:10:1e:8d:58:66:3a: ad:30:f2:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwpn+yhmuwrCdjtRy+/vVRUJm2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTA4MjMxNDQ3MjJaFw0yNTA4MjcwMjExMjJaMDMxMTAvBgNV BAMTKENBRTc4QkVENDg0MzREQkM0NEQxREU2RUE2NTVFNUNFRDEzNzU0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjhJs9wdU7q6JIQtewUSCM86N VM45PT10rAXB3kIUUXD3cU7q2kdNynoI9s1orjM/Nl2/Cka4Kd6RwIup+k8mBV9k IPpgDoYoVB2fmfnSdIXhpTcdiaaJTMKxAnygcWrSzOy/s41wrTSmmd+PVPX6j688 0Jr9wpqNXJMAMA2TJkNi/xupynxtzK+jFmgSuJQXeGwGkbSp5qo3xYuIaqaAEecB z50dwV5EKPr/EHoMEHZ1c4Uc2GHVSCEffArUnpmFQhRA5TrHYrIXRL8JJdipTXUv LbgDjD66ZrRCASXY3P/dgQDlO+uobrRCqSbDPNaGKwnpW9YXXr6nC/bK5Ag1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyueL7UhDTbxE0d5uplXlztE3VGgwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2UZU/dAoAQTO6LzVd915XPsDmZBmi+T+ZO JjcdlvGZjxUhS1ZpXe5eQ7A/Az0VfuQv5RPM9Nk6hfnZfJ0FgKJIPG5mK1q4wAOQ a5iBUn6XWrLtaVRSGZ8kv8K5NSFE/enkQiKCFFsVh/WX8UKj5UxYHpC4XwmzB6yt ywKEwxYFVzf72/9WRlEkwmhJITcmjh8/g46RveRlQWduOZ5EJKjNvKn0mFO25RuZ jOsmreVMfrzDvgSEowO1yTryukSz+M6C62EOQUKRxP3FEHDSHyt6f8JVI/tUNMXY bq8TkrM6voK8CSW5jkvSuRFoDC8M4VZbNgI5exAejVhmOq0w8uU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:39 2025 by rpki-client