$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: zg6NgKfvs62tMiReHuGRtwED9IGOMZAgzKOQ5hRZsHw= Subject key identifier: 1E:37:67:20:21:9D:A9:C6:9C:F6:18:B7:1B:19:4A:88:2A:3D:57:8B Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 1F689E709431ED313D98137DA66C878B7F0573E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 01F7 Signing time: Sat 23 Aug 2025 12:11:54 +0000 Manifest this update: Sat 23 Aug 2025 12:06:54 +0000 Manifest next update: Tue 26 Aug 2025 20:03:54 +0000 Files and hashes: 1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) 2: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: LdTk0/GW3E0cJW0ne6a1+evst2cpz3/vRKKN5VTjI00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 20:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:68:9e:70:94:31:ed:31:3d:98:13:7d:a6:6c:87:8b:7f:05:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: Aug 23 12:06:54 2025 GMT Not After : Aug 26 20:03:54 2025 GMT Subject: CN=1E376720219DA9C69CF618B71B194A882A3D578B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:3a:1e:f0:c1:72:2c:6f:07:6a:fd:f1:d1: 11:71:c2:1a:75:b0:54:72:ac:cf:f7:71:cf:8d:a6: 76:c8:f5:82:4f:f0:46:8a:e2:12:eb:99:29:72:f1: 74:6b:38:68:f2:95:39:5c:74:f8:b3:7b:2f:e7:25: 4d:a7:5f:e8:f4:39:95:be:7a:f1:06:5d:82:9d:59: e8:f6:88:6e:98:df:9f:3a:c3:6f:cd:c4:10:38:0b: ee:b4:e2:32:70:08:ae:ab:70:2c:9f:ea:70:fa:e6: 47:8a:06:27:2c:93:74:58:7d:aa:af:2b:76:68:ae: c8:bf:ca:63:69:d2:cb:c6:c7:96:a0:64:7c:06:a3: 1b:e0:9c:36:5d:f5:6d:7c:39:66:0d:16:fe:b3:1c: 19:ca:b9:4d:96:dc:17:c5:b9:fb:4b:66:a1:d2:79: 4e:b6:7b:54:94:06:2b:65:c7:7e:f3:43:81:12:a0: 81:f7:3f:1e:24:f1:3b:16:7b:de:23:75:ca:0c:8b: 4a:79:46:ea:6b:c6:78:a3:3e:4b:20:ee:a9:2e:37: f4:72:20:76:56:47:87:31:3c:cc:a3:8f:0c:36:88: e2:5a:26:0d:5c:ed:89:4f:8c:e0:2c:8d:c4:eb:a3: 0f:e0:c8:66:4b:e1:b4:03:21:bd:33:67:f6:25:28: c6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:67:20:21:9D:A9:C6:9C:F6:18:B7:1B:19:4A:88:2A:3D:57:8B X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c3:9d:ac:52:28:ff:e3:41:31:97:67:e2:e1:d6:18:d4:db: 9e:54:60:35:e3:20:33:d7:43:4c:94:cb:5a:3a:60:a2:97:2e: ee:8b:7c:8c:c6:13:fa:43:0a:4f:5d:4c:0f:00:e4:8b:75:b2: a3:7b:d0:c4:2d:9e:7c:5f:65:0f:cc:7f:53:08:e5:09:7b:00: c0:6a:4e:b0:2c:ae:9e:24:48:21:36:34:3f:2c:df:67:05:ab: 1e:8f:df:30:58:50:ee:8d:e4:36:79:fb:0a:b4:24:a2:bc:b7: e7:34:f6:71:e0:a3:11:7d:38:2b:95:e7:a6:c8:fe:5c:d7:41: 75:6a:39:4e:3f:e1:58:76:2f:41:1d:ad:c4:29:91:f7:a7:7a: a1:dd:4b:a6:4c:67:2b:05:40:e4:c1:1f:ba:e8:20:15:cb:8a: e5:4a:04:2d:e1:57:8f:14:e7:7d:39:73:26:68:93:e3:7b:e0: 5b:4d:8a:a7:69:5c:c2:47:62:bf:1c:35:0c:9a:a6:9c:2c:f8: 29:4f:3b:41:9a:69:86:79:fe:b2:67:fc:15:43:fa:c3:fc:0b: 9d:62:7b:3a:ba:b2:a5:7f:aa:9e:cc:45:04:55:20:da:7a:cf: 8a:c0:ca:2e:e8:ae:09:a8:1c:68:d4:9d:06:10:24:8d:e8:cc: ba:8f:28:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2iecJQx7TE9mBN9pmyHi38Fc+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTA4MjMxMjA2NTRaFw0yNTA4MjYyMDAzNTRaMDMxMTAvBgNV BAMTKDFFMzc2NzIwMjE5REE5QzY5Q0Y2MThCNzFCMTk0QTg4MkEzRDU3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2zoe8MFyLG8Hav3x0RFxwhp1 sFRyrM/3cc+NpnbI9YJP8EaK4hLrmSly8XRrOGjylTlcdPizey/nJU2nX+j0OZW+ evEGXYKdWej2iG6Y3586w2/NxBA4C+604jJwCK6rcCyf6nD65keKBicsk3RYfaqv K3Zorsi/ymNp0svGx5agZHwGoxvgnDZd9W18OWYNFv6zHBnKuU2W3BfFuftLZqHS eU62e1SUBitlx37zQ4ESoIH3Px4k8TsWe94jdcoMi0p5RuprxnijPksg7qkuN/Ry IHZWR4cxPMyjjww2iOJaJg1c7YlPjOAsjcTrow/gyGZL4bQDIb0zZ/YlKMYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHjdnICGdqcac9hi3GxlKiCo9V4swHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHDnaxSKP/jQTGXZ+Lh1hjU255UYDXjIDPX Q0yUy1o6YKKXLu6LfIzGE/pDCk9dTA8A5It1sqN70MQtnnxfZQ/Mf1MI5Ql7AMBq TrAsrp4kSCE2ND8s32cFqx6P3zBYUO6N5DZ5+wq0JKK8t+c09nHgoxF9OCuV56bI /lzXQXVqOU4/4Vh2L0EdrcQpkfeneqHdS6ZMZysFQOTBH7roIBXLiuVKBC3hV48U 5305cyZok+N74FtNiqdpXMJHYr8cNQyappws+ClPO0GaaYZ5/rJn/BVD+sP8C51i ezq6sqV/qp7MRQRVINp6z4rAyi7orgmoHGjUnQYQJI3ozLqPKCs= -----END CERTIFICATE-----Generated at Sat Aug 23 21:49:45 2025 by rpki-client