$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: 0T+xmh2g26tu2/8OUyuaSxsXjsj+gmamqLKjO7Jwa2c= Subject key identifier: 58:4F:E7:B7:C6:8C:37:12:B3:A4:87:25:FC:43:ED:DE:38:52:BE:42 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 0760017A73BB9CBE24674D4A4759516B98C398F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 01FE Signing time: Fri 22 Aug 2025 15:31:42 +0000 Manifest this update: Fri 22 Aug 2025 15:26:42 +0000 Manifest next update: Mon 25 Aug 2025 21:18:42 +0000 Files and hashes: 1: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: V4LFxMWB9wdkWTNV42yPuadJpzCu5APmm0ClxD2TABk=) 2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:60:01:7a:73:bb:9c:be:24:67:4d:4a:47:59:51:6b:98:c3:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Aug 22 15:26:42 2025 GMT Not After : Aug 25 21:18:42 2025 GMT Subject: CN=584FE7B7C68C3712B3A48725FC43EDDE3852BE42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:3a:23:f1:3e:76:11:25:02:05:cf:81:ea: c1:63:85:e1:70:c9:c6:63:21:9b:eb:df:eb:f0:e7: 94:63:39:23:92:b2:8c:44:e1:09:e1:a5:b0:c3:c6: 33:57:e2:0d:3e:b4:7f:1a:b5:09:8e:6d:27:e4:a6: b2:98:a5:32:e7:17:ab:3e:57:5b:2d:56:1c:72:2d: c0:fc:78:d1:9e:93:73:d9:fa:85:30:18:22:70:14: 08:cb:78:32:21:52:a4:aa:73:d9:0f:2d:bf:a9:f3: 21:ec:58:36:6e:77:37:ad:e3:c7:16:71:dc:36:18: e3:bf:f1:97:81:af:e9:28:f9:03:73:dc:a1:26:64: 67:7e:fd:25:7f:2c:6b:72:92:4a:30:ae:4d:b6:7d: 10:8a:9d:41:66:72:bb:a6:22:52:9b:e2:c7:a2:cc: 19:f4:95:19:ea:ac:5b:3a:1d:7a:4b:97:93:1a:26: c7:06:ca:8c:71:da:5c:7b:88:46:03:04:2c:83:a7: 4d:fe:7d:d0:a1:d9:94:22:0d:01:4d:ab:1e:f3:0e: 56:4e:01:bf:ed:fb:c9:89:a6:aa:38:b0:b8:90:bf: 8a:d0:ad:40:17:ee:ef:8f:66:ba:ac:d6:87:c8:00: 9e:bd:9a:85:45:eb:10:df:2b:ee:38:80:7c:b3:51: 52:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4F:E7:B7:C6:8C:37:12:B3:A4:87:25:FC:43:ED:DE:38:52:BE:42 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cf:82:26:49:cc:a2:9c:c3:7b:3f:3c:63:66:73:03:42:6c: 89:f7:87:66:70:39:94:d8:f9:9e:38:53:c6:e0:31:29:3c:60: ef:5a:dd:b5:06:24:11:e9:ee:73:24:aa:ec:d4:39:cf:75:b3: f9:3e:7b:65:49:56:65:d7:ff:9c:ba:b5:08:a9:33:6d:88:5a: 5f:f9:bc:97:23:38:4e:fe:3d:04:68:79:ed:20:87:75:e9:ae: c2:2e:f8:9f:79:43:fd:e9:27:a5:e3:f0:08:0b:44:e7:fc:29: 8c:2f:54:26:f6:d3:37:98:b1:eb:fb:8c:9d:d9:15:29:eb:11: 97:79:83:a1:66:84:0f:ff:06:96:ad:d5:d7:16:df:80:12:a9: 75:2f:ce:e5:49:66:b7:3f:2e:be:e4:a3:93:9b:8d:3b:42:34: b5:1c:c3:b0:35:92:a9:98:e1:b9:18:f2:27:09:5d:20:b6:f5: b3:cb:9c:95:81:bb:36:7f:f2:ce:6b:d1:8a:6e:b7:10:12:1f: 05:b6:7d:06:e3:45:bf:0d:61:40:60:c4:8e:32:7e:24:af:92: 6d:63:86:a2:39:62:ba:1b:79:0d:31:01:dc:57:4a:6a:5e:68: f4:00:b8:09:13:36:0d:0f:48:7c:c5:53:f9:94:b9:5b:c6:1f: 1f:8b:e4:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2ABenO7nL4kZ01KR1lRa5jDmPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTA4MjIxNTI2NDJaFw0yNTA4MjUyMTE4NDJaMDMxMTAvBgNV BAMTKDU4NEZFN0I3QzY4QzM3MTJCM0E0ODcyNUZDNDNFRERFMzg1MkJFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2zoj8T52ESUCBc+B6sFjheFw ycZjIZvr3+vw55RjOSOSsoxE4QnhpbDDxjNX4g0+tH8atQmObSfkprKYpTLnF6s+ V1stVhxyLcD8eNGek3PZ+oUwGCJwFAjLeDIhUqSqc9kPLb+p8yHsWDZudzet48cW cdw2GOO/8ZeBr+ko+QNz3KEmZGd+/SV/LGtykkowrk22fRCKnUFmcrumIlKb4sei zBn0lRnqrFs6HXpLl5MaJscGyoxx2lx7iEYDBCyDp03+fdCh2ZQiDQFNqx7zDlZO Ab/t+8mJpqo4sLiQv4rQrUAX7u+PZrqs1ofIAJ69moVF6xDfK+44gHyzUVIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWE/nt8aMNxKzpIcl/EPt3jhSvkIwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLPgiZJzKKcw3s/PGNmcwNCbIn3h2ZwOZTY +Z44U8bgMSk8YO9a3bUGJBHp7nMkquzUOc91s/k+e2VJVmXX/5y6tQipM22IWl/5 vJcjOE7+PQRoee0gh3XprsIu+J95Q/3pJ6Xj8AgLROf8KYwvVCb20zeYsev7jJ3Z FSnrEZd5g6FmhA//Bpat1dcW34ASqXUvzuVJZrc/Lr7ko5ObjTtCNLUcw7A1kqmY 4bkY8icJXSC29bPLnJWBuzZ/8s5r0YputxASHwW2fQbjRb8NYUBgxI4yfiSvkm1j hqI5YrobeQ0xAdxXSmpeaPQAuAkTNg0PSHzFU/mUuVvGHx+L5BY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:30 2025 by rpki-client