$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft File: 0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json) Hash identifier: I2lKmaha56mLp8OIajuvAhmbxXgWxoTfWqtX9Xt4L8c= Subject key identifier: 16:D3:36:4F:6C:8C:DA:8C:AC:D8:2A:B9:40:8A:69:A4:DC:36:14:D0 Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Certificate serial: 1AF7FD1794CC65A6DEF3DB508877E4CBB8D8D122 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft Manifest number: 036F Signing time: Fri 22 Aug 2025 14:42:12 +0000 Manifest this update: Fri 22 Aug 2025 14:37:12 +0000 Manifest next update: Tue 26 Aug 2025 01:42:12 +0000 Files and hashes: 1: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=) 2: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: 3F5ryh384+w3GpvdHsyBJS1AxEbRZUnJ/gwprNobPkU=) 3: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=) 4: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=) 5: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=) 6: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0=) 7: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=) 8: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=) 9: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: Jw15f5dwgzJzuJSGcXZktykNOxwCzZJClBBCrzYWYCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f7:fd:17:94:cc:65:a6:de:f3:db:50:88:77:e4:cb:b8:d8:d1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Validity Not Before: Aug 22 14:37:12 2025 GMT Not After : Aug 26 01:42:12 2025 GMT Subject: CN=16D3364F6C8CDA8CACD82AB9408A69A4DC3614D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:94:0a:01:be:50:ea:7c:27:f4:3e:d8:37: 99:2a:25:50:83:8e:db:d9:69:d5:6d:b0:58:df:a4: 43:91:63:f7:7d:b3:c5:72:9e:06:7c:18:a3:eb:15: 6f:46:50:5b:40:d7:72:d9:0a:c1:b9:4b:18:1b:79: 8a:18:25:0a:12:73:a7:be:40:f1:b1:cd:f6:6a:25: b0:19:08:7f:8d:f6:8f:ca:8d:aa:78:03:15:7a:32: 32:52:4b:12:bd:51:6c:f6:14:ed:1a:83:7c:d4:89: 2c:f3:d4:59:f9:75:c7:3c:bd:83:c0:78:c0:d8:f5: a7:f3:ed:d4:85:4f:7b:97:d2:fe:b1:e1:aa:67:9d: c6:b6:c5:ad:34:3b:bd:0f:f7:7f:bc:f1:4b:8d:29: 7f:7c:d2:40:23:46:06:eb:b7:ed:63:1f:9d:14:ce: 89:f2:1b:69:84:05:80:76:a9:5b:fc:25:64:f7:09: db:01:d3:9f:c2:86:e7:6e:43:a0:8f:6c:b2:bf:e7: b9:f3:9f:2c:5b:6c:b7:10:4d:93:b8:aa:b7:51:74: c6:75:29:69:9b:b9:18:ab:56:c1:1c:75:5f:2b:bc: d0:29:0c:7b:f3:53:e6:42:a4:44:3a:68:c2:3e:fd: 88:fa:48:a5:da:b2:86:46:63:e8:c3:79:df:34:c5: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:36:4F:6C:8C:DA:8C:AC:D8:2A:B9:40:8A:69:A4:DC:36:14:D0 X509v3 Authority Key Identifier: keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a7:6d:35:8e:f9:3c:16:aa:01:98:10:57:b2:f9:9b:b6:5e: c6:84:06:cf:ed:28:11:c1:19:ac:7b:d7:9f:f1:cd:a2:cc:66: f2:12:20:5c:3f:a1:f7:f4:aa:9c:8d:a6:c7:6b:c0:a7:4d:34: e3:92:c1:19:05:ae:dc:b8:07:85:69:7b:e1:cc:af:e4:1e:bd: 84:fd:fd:ce:79:99:74:9e:c5:39:60:5e:5f:23:1b:85:13:c2: 34:f2:0c:c0:0c:39:2b:84:0f:a1:13:bd:c9:db:15:15:6a:2f: 5d:99:d4:5b:e0:f2:56:df:36:35:14:4d:82:72:7c:53:55:e7: f0:3b:45:b0:47:5f:24:c4:07:cc:c0:a8:c2:8d:28:56:7a:d6: bf:05:33:f9:ed:19:d2:d6:88:ea:21:28:18:6e:02:2a:57:78: cf:c9:ea:99:ce:77:be:c3:11:4e:e6:44:7c:39:b6:9a:a3:30: b1:42:0e:6b:41:4b:f0:e9:fe:9c:e3:9c:6a:c1:42:85:e5:6a: bd:f4:d1:87:e7:7c:28:84:d4:e3:df:e9:31:9c:f3:27:2b:8d: b5:85:8f:ff:de:97:30:77:ef:b6:b2:1a:8b:c1:30:6f:ac:0b: 8d:55:95:92:bc:a0:3c:c7:37:44:3b:e4:1c:2f:40:5a:0b:d5: b9:e6:c9:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvf9F5TMZabe89tQiHfky7jY0SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5 NTc3RDMxQzAeFw0yNTA4MjIxNDM3MTJaFw0yNTA4MjYwMTQyMTJaMDMxMTAvBgNV BAMTKDE2RDMzNjRGNkM4Q0RBOENBQ0Q4MkFCOTQwOEE2OUE0REMzNjE0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJpQKAb5Q6nwn9D7YN5kqJVCD jtvZadVtsFjfpEORY/d9s8VyngZ8GKPrFW9GUFtA13LZCsG5SxgbeYoYJQoSc6e+ QPGxzfZqJbAZCH+N9o/Kjap4AxV6MjJSSxK9UWz2FO0ag3zUiSzz1Fn5dcc8vYPA eMDY9afz7dSFT3uX0v6x4apnnca2xa00O70P93+88UuNKX980kAjRgbrt+1jH50U zonyG2mEBYB2qVv8JWT3CdsB05/ChuduQ6CPbLK/57nznyxbbLcQTZO4qrdRdMZ1 KWmbuRirVsEcdV8rvNApDHvzU+ZCpEQ6aMI+/Yj6SKXasoZGY+jDed80xbRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFtM2T2yM2oys2Cq5QIpppNw2FNAwHwYDVR0j BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1 RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3 RDMxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0 NjE5NTc3RDMxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2nbTWO+TwWqgGYEFey+Zu2XsaEBs/tKBHB Gax715/xzaLMZvISIFw/off0qpyNpsdrwKdNNOOSwRkFrty4B4Vpe+HMr+QevYT9 /c55mXSexTlgXl8jG4UTwjTyDMAMOSuED6ETvcnbFRVqL12Z1Fvg8lbfNjUUTYJy fFNV5/A7RbBHXyTEB8zAqMKNKFZ61r8FM/ntGdLWiOohKBhuAipXeM/J6pnOd77D EU7mRHw5tpqjMLFCDmtBS/Dp/pzjnGrBQoXlar300YfnfCiE1OPf6TGc8ycrjbWF j//elzB377ayGovBMG+sC41VlZK8oDzHN0Q75BwvQFoL1bnmyVc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:50:58 2025 by rpki-client