$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: xBpwNOaTxguYWaoVsAcsv+OvBmnQ5OA5302w1jEXWIc= Subject key identifier: 85:95:DD:DF:06:52:86:B4:E5:28:77:AC:F1:66:54:7E:AA:F0:C6:67 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 1C26FA8583B44DF8D715F66AE1DF10DB3B69F785 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 0114 Signing time: Sat 23 Aug 2025 04:40:00 +0000 Manifest this update: Sat 23 Aug 2025 04:35:00 +0000 Manifest next update: Tue 26 Aug 2025 05:39:00 +0000 Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: ePs+7QNvRzMlIpdqEG5AJcQ/7oSXOlNvEWF18TjLRwk=) 2: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: 3cX/gPr7oM+Qsye4x088yiw3ohK9v+AchUbitoz8h4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:26:fa:85:83:b4:4d:f8:d7:15:f6:6a:e1:df:10:db:3b:69:f7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Aug 23 04:35:00 2025 GMT Not After : Aug 26 05:39:00 2025 GMT Subject: CN=8595DDDF065286B4E52877ACF166547EAAF0C667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d8:fc:1a:e3:5d:2b:0a:d6:94:7b:10:87:3a: 4b:36:a0:06:57:d6:7d:45:e5:a3:6f:ad:b7:b3:16: 04:03:cb:2a:de:70:f1:cc:4d:ce:83:80:27:dd:9b: bc:ca:70:c8:82:cd:81:c8:cf:a8:7a:16:d2:fa:c9: 14:e7:f1:77:d4:69:c1:ad:6f:c6:25:1c:c2:f7:06: c9:87:1a:ec:52:a9:16:c7:c3:c5:78:b0:65:3e:4b: 2f:96:8c:62:5b:1b:12:f5:9b:cb:72:49:c3:b8:21: d7:63:f1:49:69:d3:02:00:79:94:7f:c4:a0:76:b4: b8:43:0e:01:ce:a2:3a:46:98:13:43:f5:50:84:da: ef:43:19:5a:0f:0c:a5:dc:85:82:65:9f:9e:94:c2: 8c:ec:5c:00:02:22:94:25:5f:b4:97:76:ef:ab:73: 68:1d:48:68:07:b0:81:fa:81:ee:30:8c:69:4d:a0: 17:5c:8c:af:42:63:6c:e0:d0:20:ea:fa:4d:84:60: c9:88:c7:6c:2e:ba:c1:02:0d:19:19:c4:c9:b0:cf: f3:f8:23:f5:bf:58:f6:48:62:3d:2c:7b:b1:e8:1d: 4b:43:59:fe:71:df:de:b4:9e:28:e5:f2:a2:8f:01: 04:d1:90:15:e7:ae:d2:93:55:39:3f:7d:aa:31:f7: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:95:DD:DF:06:52:86:B4:E5:28:77:AC:F1:66:54:7E:AA:F0:C6:67 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5a:13:11:6a:9e:fc:9c:02:20:be:34:ea:86:31:88:85:91: 07:fc:a7:88:9f:8e:02:55:79:25:68:50:bf:68:01:ec:ba:6e: 7e:a1:2d:a2:16:56:77:9c:0c:73:3d:8f:1f:e8:a8:f8:14:03: fc:c1:4d:aa:04:d5:10:84:ab:49:38:91:97:9d:f8:a3:ef:3d: 42:c5:af:cf:4f:f1:7e:4a:b4:0e:b6:ae:16:27:95:3b:0a:c8: 27:af:5d:c6:cc:35:c8:5d:55:5e:29:d3:e0:89:61:d1:1c:93: b0:00:8f:eb:ec:83:cf:dc:ff:c3:3a:31:36:de:2d:a5:88:e4: 41:1e:38:a4:bf:3e:5b:23:8a:ac:61:04:55:8a:3b:3e:76:34: 9e:6e:e5:6b:e4:9a:ac:95:b2:07:22:3a:b8:25:5a:46:d5:b4: ca:c8:c8:ad:dc:02:51:fd:42:96:90:77:b2:74:7f:83:c3:7b: 12:2d:56:05:bd:a6:67:ef:22:55:ba:1a:ae:11:76:ce:a6:4d: 83:27:a3:70:8b:d0:76:ad:99:d6:35:b9:c8:3f:85:df:f3:55: c6:41:87:78:45:06:57:64:0f:ed:de:9b:3c:5b:bd:0e:a4:10: fe:54:47:28:3e:1c:1b:11:04:2c:1d:c7:7d:86:2b:b1:cc:de: bd:2e:57:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCb6hYO0TfjXFfZq4d8Q2ztp94UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTA4MjMwNDM1MDBaFw0yNTA4MjYwNTM5MDBaMDMxMTAvBgNV BAMTKDg1OTVERERGMDY1Mjg2QjRFNTI4NzdBQ0YxNjY1NDdFQUFGMEM2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2Pwa410rCtaUexCHOks2oAZX 1n1F5aNvrbezFgQDyyrecPHMTc6DgCfdm7zKcMiCzYHIz6h6FtL6yRTn8XfUacGt b8YlHML3BsmHGuxSqRbHw8V4sGU+Sy+WjGJbGxL1m8tyScO4Iddj8Ulp0wIAeZR/ xKB2tLhDDgHOojpGmBND9VCE2u9DGVoPDKXchYJln56UwozsXAACIpQlX7SXdu+r c2gdSGgHsIH6ge4wjGlNoBdcjK9CY2zg0CDq+k2EYMmIx2wuusECDRkZxMmwz/P4 I/W/WPZIYj0se7HoHUtDWf5x3960nijl8qKPAQTRkBXnrtKTVTk/faox9+XxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZXd3wZShrTlKHes8WZUfqrwxmcwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBaExFqnvycAiC+NOqGMYiFkQf8p4ifjgJV eSVoUL9oAey6bn6hLaIWVnecDHM9jx/oqPgUA/zBTaoE1RCEq0k4kZed+KPvPULF r89P8X5KtA62rhYnlTsKyCevXcbMNchdVV4p0+CJYdEck7AAj+vsg8/c/8M6MTbe LaWI5EEeOKS/PlsjiqxhBFWKOz52NJ5u5WvkmqyVsgciOrglWkbVtMrIyK3cAlH9 QpaQd7J0f4PDexItVgW9pmfvIlW6Gq4Rds6mTYMno3CL0HatmdY1ucg/hd/zVcZB h3hFBldkD+3emzxbvQ6kEP5URyg+HBsRBCwdx32GK7HM3r0uVxE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:33 2025 by rpki-client