$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: zQ6QtnDhGIT44+jojBkOE+tTeJhwqMft+jbn2Ne9WkY= Subject key identifier: 8C:A9:A4:94:A0:EB:AA:41:29:BD:95:05:5B:FF:D7:65:6A:2F:C1:1D Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 026CBFF06C55C9F06D7196BD8D3953177D4D3492 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 0507 Signing time: Sat 23 Aug 2025 10:11:14 +0000 Manifest this update: Sat 23 Aug 2025 10:06:14 +0000 Manifest next update: Tue 26 Aug 2025 15:13:14 +0000 Files and hashes: 1: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 2: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) 3: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 4: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 6: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) 7: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: AIU/QV/FpTfjm8c1kN9/w7IzB7a9M2808CrYb797chA=) 8: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6c:bf:f0:6c:55:c9:f0:6d:71:96:bd:8d:39:53:17:7d:4d:34:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Aug 23 10:06:14 2025 GMT Not After : Aug 26 15:13:14 2025 GMT Subject: CN=8CA9A494A0EBAA4129BD95055BFFD7656A2FC11D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:33:2b:b5:0f:6d:40:e0:80:21:1f:27:c1: 8c:8a:18:19:e8:d9:79:7c:1b:63:e6:f6:7e:7c:05: d2:8b:01:f9:0e:07:05:50:d6:b3:50:a9:6c:36:29: 15:f7:1d:fc:f8:56:57:d9:6c:e8:25:24:65:59:2d: c1:75:2d:94:3a:f1:52:d7:d6:7c:9a:46:7d:f6:81: 13:69:71:43:83:01:dd:5c:74:3e:26:f8:d4:a1:f3: f3:8d:a2:0c:d7:dc:b2:6b:bb:92:1b:05:1f:3a:ee: 60:dc:e9:59:cd:14:3b:5d:3d:31:32:8c:b8:88:26: 06:9f:09:d5:90:8d:49:38:53:c8:39:ef:51:e9:af: 8f:15:16:06:a5:15:84:4a:67:3f:58:69:23:e3:6c: 38:40:89:e2:5f:4c:67:98:da:48:9a:b1:2a:e1:52: 28:53:5d:75:84:a1:aa:67:8d:97:cb:0e:bb:d3:08: 74:b4:4a:9c:72:4a:28:62:97:bb:fe:64:a9:e6:f0: c2:73:0d:64:2f:d3:26:96:86:67:8e:39:f1:a1:e2: 86:cc:12:92:ba:85:3a:c3:2f:ea:03:31:2f:a9:39: 96:3d:aa:e2:36:30:64:d3:84:27:23:42:e4:85:b5: 2b:b7:82:fb:b7:1e:fa:8e:c6:2c:3b:7b:d6:00:7c: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A9:A4:94:A0:EB:AA:41:29:BD:95:05:5B:FF:D7:65:6A:2F:C1:1D X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:5a:67:9f:df:71:da:6b:e1:6f:91:48:b4:42:b0:29:21: 9f:99:fb:70:49:1c:f8:61:b1:4b:c8:16:ce:c2:bc:9f:a6:f3: f3:7d:b1:6c:06:61:67:fd:0a:2b:23:de:ee:39:6e:33:96:23: d5:60:8c:49:1d:9b:d1:45:43:9f:3a:94:77:28:28:cd:81:5c: 6c:ad:af:70:e8:a3:6b:3f:bf:0c:ae:af:ca:d6:6e:db:81:6c: 8f:3e:2c:19:ec:4e:f2:d8:9e:42:3f:0d:30:7f:8a:62:56:16: 2e:33:06:37:25:41:02:03:f5:9c:3e:07:87:26:5f:de:59:e6: fb:b5:2b:59:97:62:ba:22:86:23:33:8d:a4:f8:5f:73:fd:da: bb:00:73:f8:6e:93:8e:8c:e1:a8:55:de:ab:5e:6a:d2:6f:14: a2:cd:13:e2:2a:fb:cf:28:03:5f:f2:cf:61:42:21:8e:1e:f0: 34:11:89:af:14:db:f0:29:b5:e8:f3:8c:66:45:ea:07:c3:10: 90:b6:85:70:0c:b7:b4:f3:6a:55:a2:04:c3:3f:cf:05:89:b8: bb:8b:90:82:a1:48:d2:a1:c6:d4:17:a2:43:bf:d9:40:e1:5f: 3d:45:b2:2e:34:bc:da:4e:95:56:0d:b2:38:6a:8e:72:20:47: 45:c1:9c:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmy/8GxVyfBtcZa9jTlTF31NNJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA4MjMxMDA2MTRaFw0yNTA4MjYxNTEzMTRaMDMxMTAvBgNV BAMTKDhDQTlBNDk0QTBFQkFBNDEyOUJEOTUwNTVCRkZENzY1NkEyRkMxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DTMrtQ9tQOCAIR8nwYyKGBno 2Xl8G2Pm9n58BdKLAfkOBwVQ1rNQqWw2KRX3Hfz4VlfZbOglJGVZLcF1LZQ68VLX 1nyaRn32gRNpcUODAd1cdD4m+NSh8/ONogzX3LJru5IbBR867mDc6VnNFDtdPTEy jLiIJgafCdWQjUk4U8g571Hpr48VFgalFYRKZz9YaSPjbDhAieJfTGeY2kiasSrh UihTXXWEoapnjZfLDrvTCHS0SpxySihil7v+ZKnm8MJzDWQv0yaWhmeOOfGh4obM EpK6hTrDL+oDMS+pOZY9quI2MGTThCcjQuSFtSu3gvu3HvqOxiw7e9YAfBtlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjKmklKDrqkEpvZUFW//XZWovwR0wHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcWWmef33Haa+FvkUi0QrApIZ+Z+3BJHPhh sUvIFs7CvJ+m8/N9sWwGYWf9Cisj3u45bjOWI9VgjEkdm9FFQ586lHcoKM2BXGyt r3Doo2s/vwyur8rWbtuBbI8+LBnsTvLYnkI/DTB/imJWFi4zBjclQQID9Zw+B4cm X95Z5vu1K1mXYroihiMzjaT4X3P92rsAc/huk46M4ahV3qteatJvFKLNE+Iq+88o A1/yz2FCIY4e8DQRia8U2/AptejzjGZF6gfDEJC2hXAMt7TzalWiBMM/zwWJuLuL kIKhSNKhxtQXokO/2UDhXz1Fsi40vNpOlVYNsjhqjnIgR0XBnBQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:23 2025 by rpki-client