$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: /gwDH3C839+FdXPuEzxjeuifzlYKbILUiPnJooqYwn4= Subject key identifier: 27:14:AE:AC:B7:9D:B6:6F:B2:8B:77:A2:C3:E6:18:7C:7F:99:AF:52 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 4F01BEE6314879B5DACB7659FF5AC75ABA3A7866 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 026A Signing time: Fri 22 Aug 2025 19:21:35 +0000 Manifest this update: Fri 22 Aug 2025 19:16:35 +0000 Manifest next update: Mon 25 Aug 2025 22:15:35 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: D7jqoyzqj7adJBAM/yYi7D+kM1LqNlQkkAsniEU+ZVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:01:be:e6:31:48:79:b5:da:cb:76:59:ff:5a:c7:5a:ba:3a:78:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Aug 22 19:16:35 2025 GMT Not After : Aug 25 22:15:35 2025 GMT Subject: CN=2714AEACB79DB66FB28B77A2C3E6187C7F99AF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:d3:9b:e2:92:bf:36:2a:05:c7:5d:4d:a2: e6:ca:c1:af:54:3a:3c:04:c3:73:d8:35:80:02:ae: 8f:e1:f3:b8:dc:e2:e5:fc:f5:eb:f7:ab:3e:dc:ad: e0:1e:ff:47:45:e0:f9:29:10:6e:5c:d8:3f:fc:21: 84:a3:2c:77:59:e3:aa:7b:0d:14:c4:3c:48:e3:10: d0:e0:47:cf:6c:cf:5e:cd:63:79:3d:8b:3a:76:0a: 0a:9a:6b:56:a7:e2:2c:e6:be:87:4a:ad:97:a6:4a: d0:a0:f4:6c:ea:2a:0d:e2:3e:fc:d5:02:24:95:2b: 0d:12:18:06:d9:43:ab:c7:c1:f8:6f:0c:5a:bc:7c: cd:5b:22:0c:6c:49:c2:7c:f7:7a:15:6d:7e:cd:52: 74:9a:7c:61:a5:33:30:d0:bf:99:7d:ec:f7:f6:fd: 32:89:94:a8:87:40:2d:5b:f0:a4:3d:d9:aa:9c:2f: a7:5d:4e:0f:c2:6b:6a:7e:47:85:c0:b3:97:49:b5: 9e:94:68:71:69:86:35:ec:f8:e3:18:77:d4:5d:28: 17:1b:93:41:80:5f:57:c1:e9:26:1d:51:ac:59:ae: ac:91:2f:a3:f9:97:c8:1b:a7:94:13:34:c5:d2:90: 11:bc:c0:75:b2:ed:db:42:db:93:d2:78:fc:1e:14: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:14:AE:AC:B7:9D:B6:6F:B2:8B:77:A2:C3:E6:18:7C:7F:99:AF:52 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:73:b4:ae:a8:4c:d1:18:7e:91:08:17:96:aa:40:dd:45:8a: 0f:81:ac:91:03:15:f9:95:b5:7f:b8:dd:bc:e1:3c:f9:ca:c1: 62:b9:99:1f:a1:0f:e6:66:87:7e:5e:35:04:3d:bb:1f:ee:46: b0:14:75:db:4e:e1:08:cc:f2:90:22:93:07:95:4a:f9:c1:b7: a2:48:f2:41:6c:4a:be:b2:7b:43:3b:29:45:4e:98:42:9a:51: 67:87:94:b4:a3:fc:b2:23:a7:64:69:56:eb:4e:62:4a:53:fd: 22:75:66:c8:19:57:32:03:d4:0e:0f:08:ba:aa:59:27:a8:38: 68:ea:1c:d3:07:ac:e5:9c:e9:a8:16:29:78:7c:a9:8d:51:18: 29:4b:df:ea:6c:7c:b3:a4:cb:01:0c:23:ab:8d:da:66:02:2c: 5c:6e:82:91:ce:6c:e0:fe:d1:69:62:00:1b:fd:2c:fd:6d:71: f0:bb:50:1e:d3:4a:1b:ba:a5:ca:48:3b:39:47:53:6a:cf:39: d0:c7:7d:19:93:5a:2b:ef:73:86:e0:c1:9b:cd:14:12:52:62: 5e:7c:e5:31:27:b8:93:72:e0:0d:4b:0b:73:61:0c:fc:13:fb: 1b:4a:fc:e9:65:3b:69:bd:62:cb:13:e0:19:52:53:eb:0b:c2: 94:80:a8:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwG+5jFIebXay3ZZ/1rHWro6eGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA4MjIxOTE2MzVaFw0yNTA4MjUyMjE1MzVaMDMxMTAvBgNV BAMTKDI3MTRBRUFDQjc5REI2NkZCMjhCNzdBMkMzRTYxODdDN0Y5OUFGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmktOb4pK/NioFx11NoubKwa9U OjwEw3PYNYACro/h87jc4uX89ev3qz7creAe/0dF4PkpEG5c2D/8IYSjLHdZ46p7 DRTEPEjjENDgR89sz17NY3k9izp2Cgqaa1an4izmvodKrZemStCg9GzqKg3iPvzV AiSVKw0SGAbZQ6vHwfhvDFq8fM1bIgxsScJ893oVbX7NUnSafGGlMzDQv5l97Pf2 /TKJlKiHQC1b8KQ92aqcL6ddTg/Ca2p+R4XAs5dJtZ6UaHFphjXs+OMYd9RdKBcb k0GAX1fB6SYdUaxZrqyRL6P5l8gbp5QTNMXSkBG8wHWy7dtC25PSePweFPPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxSurLedtm+yi3eiw+YYfH+Zr1IwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRztK6oTNEYfpEIF5aqQN1Fig+BrJEDFfmV tX+43bzhPPnKwWK5mR+hD+Zmh35eNQQ9ux/uRrAUddtO4QjM8pAikweVSvnBt6JI 8kFsSr6ye0M7KUVOmEKaUWeHlLSj/LIjp2RpVutOYkpT/SJ1ZsgZVzID1A4PCLqq WSeoOGjqHNMHrOWc6agWKXh8qY1RGClL3+psfLOkywEMI6uN2mYCLFxugpHObOD+ 0WliABv9LP1tcfC7UB7TShu6pcpIOzlHU2rPOdDHfRmTWivvc4bgwZvNFBJSYl58 5TEnuJNy4A1LC3NhDPwT+xtK/OllO2m9YssT4BlSU+sLwpSAqBU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:00 2025 by rpki-client