$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: EbhqxogvBRhzGoIUwk2RnDGBFip40a90zd/eg/3aPbE= Subject key identifier: 96:0C:30:61:60:D9:22:43:B1:06:38:A0:72:B4:E2:08:1B:9B:3D:98 Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 35C5E201125E81530DCAEF3ED074D161F84F4CDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 01EF Signing time: Fri 22 Aug 2025 03:02:24 +0000 Manifest this update: Fri 22 Aug 2025 02:57:24 +0000 Manifest next update: Mon 25 Aug 2025 04:10:24 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 2: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 3: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 4: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: 4IBlIBQgnnbEAqMeGlPY0ZAfbrpDsta/2xHftwl5kng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c5:e2:01:12:5e:81:53:0d:ca:ef:3e:d0:74:d1:61:f8:4f:4c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Aug 22 02:57:24 2025 GMT Not After : Aug 25 04:10:24 2025 GMT Subject: CN=960C306160D92243B10638A072B4E2081B9B3D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:2e:39:1f:10:1b:fb:51:3f:d7:57:e8:f4: 71:07:5b:fa:c9:d3:1c:c3:30:4d:e9:2c:cc:2c:7d: 1a:6e:1c:5b:a1:5f:75:f0:55:10:29:2c:b4:da:85: 80:a3:87:ef:5f:29:1e:b3:d4:74:a8:86:ec:a8:cf: 2c:b1:7f:f2:33:4b:a7:74:f2:9d:bd:4b:79:2d:b7: ed:52:30:83:e9:b8:31:71:84:43:04:cb:88:e5:df: 49:7c:8d:60:20:6c:00:f8:f3:64:36:9e:67:79:c9: 5a:43:5e:d1:90:3a:2a:5e:c6:49:a2:3c:40:9d:ce: 7e:67:96:db:76:3c:ba:84:49:7e:ca:b6:b5:f5:e9: 7c:c8:d7:b6:09:78:fa:a0:ad:f2:fe:75:5e:b8:a9: 62:bd:70:7a:b1:e7:40:b7:37:64:ad:99:7c:bc:d3: 85:8d:9b:e0:6b:e5:2e:26:93:c4:e6:49:01:b4:7d: 07:37:9c:00:b6:b7:ff:8f:9e:3c:0d:a8:a9:2c:a6: 5a:9f:31:bb:79:e6:02:6e:a6:60:4b:47:48:07:cf: a5:cd:38:eb:4f:22:12:0b:9f:cc:65:38:58:10:b1: 55:46:6e:c1:b3:3e:52:83:aa:e7:54:d6:f6:9b:bd: 1c:4b:54:da:41:32:96:2e:dd:a5:a7:83:53:2a:5b: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0C:30:61:60:D9:22:43:B1:06:38:A0:72:B4:E2:08:1B:9B:3D:98 X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:90:8b:0a:1c:2d:b8:ec:53:2f:d7:95:b3:f7:02:3f:4f:8c: 28:ad:85:1b:9c:13:68:2d:88:28:42:5c:3c:8e:e8:f1:05:d4: 8d:35:53:37:eb:05:74:16:73:a6:ff:3b:75:92:3a:52:b5:47: 69:e2:3f:91:b3:b0:13:dc:9d:b2:b2:5a:97:93:22:2e:43:e1: ae:66:85:d1:75:be:13:94:69:e8:65:ca:4b:3a:14:c9:4d:3c: e6:da:fe:e4:10:b2:11:cc:7a:46:40:d0:79:56:e8:41:ae:4d: 56:3f:9f:40:d4:28:1e:ba:61:63:ad:6c:72:bb:e9:35:91:14: 1a:d9:f7:b4:ec:34:8e:7d:90:5e:76:0c:59:79:e4:8d:d2:9e: e2:d4:7d:2a:0b:be:8e:77:73:42:1f:45:43:a1:fe:ea:3c:43: 85:72:c4:74:eb:66:95:9d:50:bd:8e:32:9b:1e:97:f1:c8:19: e1:70:f2:52:5d:67:e9:7c:ef:fe:5b:75:0c:01:20:e4:18:3b: a3:d1:66:bc:d1:f5:a6:6e:66:b5:2e:61:24:0b:94:00:56:51: c5:5e:d4:f4:e1:a2:ea:a0:5d:17:79:bc:bb:9c:bc:13:6f:46: 5a:2a:e5:28:39:a5:cd:c3:1b:ba:f3:1b:42:2c:4b:d9:20:e4: 9e:5f:40:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcXiARJegVMNyu8+0HTRYfhPTNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTA4MjIwMjU3MjRaFw0yNTA4MjUwNDEwMjRaMDMxMTAvBgNV BAMTKDk2MEMzMDYxNjBEOTIyNDNCMTA2MzhBMDcyQjRFMjA4MUI5QjNEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvBS45HxAb+1E/11fo9HEHW/rJ 0xzDME3pLMwsfRpuHFuhX3XwVRApLLTahYCjh+9fKR6z1HSohuyozyyxf/IzS6d0 8p29S3ktt+1SMIPpuDFxhEMEy4jl30l8jWAgbAD482Q2nmd5yVpDXtGQOipexkmi PECdzn5nltt2PLqESX7KtrX16XzI17YJePqgrfL+dV64qWK9cHqx50C3N2StmXy8 04WNm+Br5S4mk8TmSQG0fQc3nAC2t/+PnjwNqKksplqfMbt55gJupmBLR0gHz6XN OOtPIhILn8xlOFgQsVVGbsGzPlKDqudU1vabvRxLVNpBMpYu3aWng1MqW6rDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgwwYWDZIkOxBjigcrTiCBubPZgwHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByQiwocLbjsUy/XlbP3Aj9PjCithRucE2gt iChCXDyO6PEF1I01UzfrBXQWc6b/O3WSOlK1R2niP5GzsBPcnbKyWpeTIi5D4a5m hdF1vhOUaehlyks6FMlNPOba/uQQshHMekZA0HlW6EGuTVY/n0DUKB66YWOtbHK7 6TWRFBrZ97TsNI59kF52DFl55I3SnuLUfSoLvo53c0IfRUOh/uo8Q4VyxHTrZpWd UL2OMpsel/HIGeFw8lJdZ+l87/5bdQwBIOQYO6PRZrzR9aZuZrUuYSQLlABWUcVe 1PThouqgXRd5vLucvBNvRloq5Sg5pc3DG7rzG0IsS9kg5J5fQMw= -----END CERTIFICATE-----Generated at Sat Aug 23 21:42:46 2025 by rpki-client