$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: SE/HNFmJGbp6BjTJts6f67E6z2dlkysdBQ7KjAy+k0c= Subject key identifier: E2:04:0B:47:EF:A4:9B:6F:7B:DD:39:C3:21:D7:F2:9B:8E:3E:79:02 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 66D5744911D13134F3AC5C87B3D628D6BC5C449A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 020E Signing time: Sat 23 Aug 2025 06:50:03 +0000 Manifest this update: Sat 23 Aug 2025 06:45:03 +0000 Manifest next update: Tue 26 Aug 2025 08:26:03 +0000 Files and hashes: 1: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: ORpNWjdlpQ4iF21E8yAM6KqMboYMVUDYS+YhTke4EN4=) 2: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 4: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d5:74:49:11:d1:31:34:f3:ac:5c:87:b3:d6:28:d6:bc:5c:44:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Aug 23 06:45:03 2025 GMT Not After : Aug 26 08:26:03 2025 GMT Subject: CN=E2040B47EFA49B6F7BDD39C321D7F29B8E3E7902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:f1:a1:ee:54:ce:7e:28:28:f8:fa:79:5b: 9a:6b:94:9a:4c:6a:a5:e7:08:91:38:36:1d:d7:e2: 0f:2d:de:69:0f:b1:9f:b5:18:bf:2e:5e:bc:28:e7: a6:96:2b:1c:b2:b1:00:40:7f:6b:e8:bc:c7:5e:34: c3:96:8f:dc:fb:fe:41:b8:f8:d1:e9:71:51:dd:dc: 27:43:89:12:30:60:b5:2c:70:c2:ef:a1:0c:fb:88: 4d:aa:eb:dd:57:0b:5c:81:21:e5:ca:62:17:d1:39: 31:45:6e:43:e9:0a:30:a1:74:d1:d6:61:b4:5e:76: 14:bc:75:87:78:36:e9:68:1c:e1:f0:0b:41:a0:86: b9:38:79:92:83:8e:28:7a:99:a5:77:df:3c:8d:8a: dd:09:18:23:71:e0:65:fa:02:49:e3:68:e9:bd:7b: d9:26:bb:a4:0e:a7:1b:e9:eb:84:d0:63:9a:50:51: 58:9f:20:f9:14:d8:cf:a8:3c:5b:48:eb:de:01:5f: 3d:3f:f6:d8:54:db:c4:e9:6f:1e:e4:e9:4f:de:41: 65:ec:b2:f2:9c:50:c2:62:c6:71:87:c7:62:5d:af: d8:08:04:25:d5:c2:df:a1:24:25:5c:e5:b9:a1:93: 73:de:62:9d:9a:cb:ca:c8:7c:f4:e1:03:1f:1d:a2: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:04:0B:47:EF:A4:9B:6F:7B:DD:39:C3:21:D7:F2:9B:8E:3E:79:02 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:35:41:6b:91:aa:0c:4f:2c:3c:76:dc:c1:a3:d3:b9:79:83: 77:3a:dd:95:95:aa:c0:c3:fd:50:dd:03:b7:cc:d3:1b:bf:71: 66:df:66:8b:a4:6c:8d:7b:d7:60:13:eb:8b:77:02:71:4e:13: 2c:bf:37:84:13:e6:b3:e9:44:67:de:a6:e9:e4:cb:f1:bd:e2: 7f:21:a4:8c:49:36:9a:45:f9:ce:6a:b4:7c:7f:db:ea:19:1c: f3:0e:6f:78:7a:5c:a9:90:71:03:31:dd:2f:03:75:23:8f:ab: 19:41:2e:7a:c8:02:cc:84:73:27:8c:21:61:a0:67:30:76:f5: 78:29:2a:68:af:5e:8e:2a:b8:38:4a:8b:da:80:13:0e:12:27: 8e:77:9d:c4:e8:04:f9:ea:09:cd:fc:46:13:48:18:79:bb:a1: b3:b4:04:12:8a:4b:2b:bc:ef:14:5a:6c:8a:c5:dd:43:06:11: c3:3a:36:4b:2d:59:ea:4a:51:a6:48:98:3b:52:b9:73:85:d4: 4e:a5:9f:67:46:8a:61:be:a2:52:79:a9:e0:83:29:e6:a5:48: b2:5a:9e:f5:c0:47:97:9f:f8:1a:c1:6c:f3:a8:bb:4e:fb:47: 6c:85:2a:9c:88:36:ef:9f:80:7a:24:65:72:5c:e6:80:22:de: 40:ed:30:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtV0SRHRMTTzrFyHs9Yo1rxcRJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTA4MjMwNjQ1MDNaFw0yNTA4MjYwODI2MDNaMDMxMTAvBgNV BAMTKEUyMDQwQjQ3RUZBNDlCNkY3QkREMzlDMzIxRDdGMjlCOEUzRTc5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWvPGh7lTOfigo+Pp5W5prlJpM aqXnCJE4Nh3X4g8t3mkPsZ+1GL8uXrwo56aWKxyysQBAf2vovMdeNMOWj9z7/kG4 +NHpcVHd3CdDiRIwYLUscMLvoQz7iE2q691XC1yBIeXKYhfROTFFbkPpCjChdNHW YbRedhS8dYd4NuloHOHwC0Gghrk4eZKDjih6maV33zyNit0JGCNx4GX6AknjaOm9 e9kmu6QOpxvp64TQY5pQUVifIPkU2M+oPFtI694BXz0/9thU28Tpbx7k6U/eQWXs svKcUMJixnGHx2Jdr9gIBCXVwt+hJCVc5bmhk3PeYp2ay8rIfPThAx8dokplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4gQLR++km2973TnDIdfym44+eQIwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALI1QWuRqgxPLDx23MGj07l5g3c63ZWVqsDD /VDdA7fM0xu/cWbfZoukbI1712AT64t3AnFOEyy/N4QT5rPpRGfepunky/G94n8h pIxJNppF+c5qtHx/2+oZHPMOb3h6XKmQcQMx3S8DdSOPqxlBLnrIAsyEcyeMIWGg ZzB29XgpKmivXo4quDhKi9qAEw4SJ453ncToBPnqCc38RhNIGHm7obO0BBKKSyu8 7xRabIrF3UMGEcM6NkstWepKUaZImDtSuXOF1E6ln2dGimG+olJ5qeCDKealSLJa nvXAR5ef+BrBbPOou077R2yFKpyINu+fgHokZXJc5oAi3kDtMCc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:35 2025 by rpki-client