$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: YxEIfXx1ZF9Wfi2oPrMPdDrVLFyJb3bL2/6lUSdmyx0= Subject key identifier: 09:67:23:24:00:6E:4A:41:EB:BB:72:44:2D:71:CC:CF:44:1D:F0:AF Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 655C2B5A5EC735538640F585DD450B9C4AD8CDD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: AA Signing time: Sat 23 Aug 2025 15:01:11 +0000 Manifest this update: Sat 23 Aug 2025 14:56:11 +0000 Manifest next update: Tue 26 Aug 2025 15:19:11 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 3: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: Sv8Lh/eM9Jy3LPA2sSVIyqHqxDpTUT4RNhzhoE/bFcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5c:2b:5a:5e:c7:35:53:86:40:f5:85:dd:45:0b:9c:4a:d8:cd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Aug 23 14:56:11 2025 GMT Not After : Aug 26 15:19:11 2025 GMT Subject: CN=09672324006E4A41EBBB72442D71CCCF441DF0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:41:7e:75:58:09:e0:c7:60:05:f9:fb:4b: 30:95:a2:a1:a1:29:3d:da:ac:7b:8e:6a:d1:f1:39: 54:7d:97:6c:6c:ea:49:f6:78:6a:01:66:3b:ba:ca: 2b:8b:92:2b:c3:89:2d:56:de:06:67:b8:e1:4a:e2: 89:ad:a3:f9:df:cc:59:7f:a6:fa:9b:b7:bc:36:e9: b3:51:bc:a0:5b:e0:c9:98:d3:0c:95:44:c1:97:51: 40:84:19:63:d2:c5:ed:c2:ed:42:24:8a:70:72:60: 5e:55:87:15:bf:17:2f:cf:6a:d4:91:a8:20:5f:0c: ec:a3:69:b0:0f:19:0d:87:d9:96:e3:73:84:19:c4: c2:22:da:35:ba:08:e9:79:22:6c:d1:a6:60:ce:84: 6c:6b:aa:71:8b:72:4f:7b:5c:81:3e:f2:fb:f1:1a: b8:00:a9:58:46:e7:01:bf:bb:c7:b5:87:77:9b:26: 81:30:46:9e:5e:fa:e2:2a:61:d7:8a:2c:de:52:3b: 38:a6:fc:6d:82:e4:f3:9e:64:cc:48:c9:5f:3c:4b: f3:de:8a:f4:a4:63:dd:ba:89:59:4e:e5:8c:46:44: ef:e1:70:a3:f1:05:8e:43:aa:b6:d7:c0:d3:90:7b: fa:46:aa:12:96:73:bb:a4:b9:e4:d0:da:9a:ce:1d: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:23:24:00:6E:4A:41:EB:BB:72:44:2D:71:CC:CF:44:1D:F0:AF X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5c:c7:c4:83:e7:c2:25:ec:59:0c:32:a1:8b:3a:93:70:de: 3a:db:55:8f:1d:ca:e3:a6:50:df:b1:23:02:77:50:78:f7:3c: 0c:cb:98:06:14:f2:de:d2:bc:b6:c7:8c:e4:59:93:9c:9a:60: 1e:f2:46:b5:d9:55:b7:05:5f:6f:fa:29:a3:92:cf:4b:cd:45: 42:ce:21:4e:bb:28:e8:5a:3e:45:f5:f3:e8:80:1c:c8:10:f3: 3a:73:25:15:8e:6d:98:df:29:84:a3:b7:b7:b9:35:09:5e:08: 55:26:a9:b5:04:34:85:50:c7:2b:80:df:22:a6:d0:a0:3f:1d: 9f:0e:28:30:ce:04:92:80:9a:9d:43:09:3a:bb:d1:a0:8b:ef: 05:5a:ff:1c:ff:36:11:3c:b3:ba:b4:82:e7:60:d0:07:f3:f1: 80:88:68:41:27:24:f9:75:89:20:24:a6:ae:a9:33:dc:3b:8d: 01:9f:be:84:7b:2f:54:04:c1:e6:96:51:73:99:79:30:0c:2b: c2:3e:7c:9d:64:2a:5f:8c:dd:bf:79:fd:87:c5:d6:fc:61:a9: bc:81:18:39:f5:47:b0:be:86:c9:b5:03:38:c8:11:9c:20:b1: 20:3a:a9:36:cb:0d:4d:02:80:1a:85:2e:7a:a8:a2:26:96:b1: 53:d9:cd:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVwrWl7HNVOGQPWF3UULnErYzdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTA4MjMxNDU2MTFaFw0yNTA4MjYxNTE5MTFaMDMxMTAvBgNV BAMTKDA5NjcyMzI0MDA2RTRBNDFFQkJCNzI0NDJENzFDQ0NGNDQxREYwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDo0F+dVgJ4MdgBfn7SzCVoqGh KT3arHuOatHxOVR9l2xs6kn2eGoBZju6yiuLkivDiS1W3gZnuOFK4omto/nfzFl/ pvqbt7w26bNRvKBb4MmY0wyVRMGXUUCEGWPSxe3C7UIkinByYF5VhxW/Fy/PatSR qCBfDOyjabAPGQ2H2Zbjc4QZxMIi2jW6COl5ImzRpmDOhGxrqnGLck97XIE+8vvx GrgAqVhG5wG/u8e1h3ebJoEwRp5e+uIqYdeKLN5SOzim/G2C5POeZMxIyV88S/Pe ivSkY926iVlO5YxGRO/hcKPxBY5DqrbXwNOQe/pGqhKWc7ukueTQ2prOHdqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWcjJABuSkHru3JELXHMz0Qd8K8wHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5cx8SD58Il7FkMMqGLOpNw3jrbVY8dyuOm UN+xIwJ3UHj3PAzLmAYU8t7SvLbHjORZk5yaYB7yRrXZVbcFX2/6KaOSz0vNRULO IU67KOhaPkX18+iAHMgQ8zpzJRWObZjfKYSjt7e5NQleCFUmqbUENIVQxyuA3yKm 0KA/HZ8OKDDOBJKAmp1DCTq70aCL7wVa/xz/NhE8s7q0gudg0Afz8YCIaEEnJPl1 iSAkpq6pM9w7jQGfvoR7L1QEweaWUXOZeTAMK8I+fJ1kKl+M3b95/YfF1vxhqbyB GDn1R7C+hsm1AzjIEZwgsSA6qTbLDU0CgBqFLnqooiaWsVPZzUA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:39 2025 by rpki-client