$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: psy5twzlrqCGqFLR8mb7wkYsFAj5+hFgueLQK46WR4Q= Subject key identifier: 48:BE:2E:10:0D:32:2C:AA:F8:72:A6:43:A4:00:1F:9A:5B:81:5A:B2 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 4925E8439E76BBD90BBD4E39BF74C060C3C88E7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: BF Signing time: Fri 22 Aug 2025 00:41:33 +0000 Manifest this update: Fri 22 Aug 2025 00:36:33 +0000 Manifest next update: Mon 25 Aug 2025 07:20:33 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: 08x7lgZT2v7lJKtfzobvRDZIITwgZDB8R32LnbLCBNY=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:25:e8:43:9e:76:bb:d9:0b:bd:4e:39:bf:74:c0:60:c3:c8:8e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Aug 22 00:36:33 2025 GMT Not After : Aug 25 07:20:33 2025 GMT Subject: CN=48BE2E100D322CAAF872A643A4001F9A5B815AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:0a:16:23:89:0b:31:bc:02:27:a0:8e:e8: af:d0:fe:2d:9d:c7:46:2a:91:36:e3:5c:2b:03:ad: ad:16:6a:0a:ae:8b:92:c5:93:7d:3e:b1:d0:7d:04: bd:7e:78:17:25:1a:bb:a4:5d:ed:28:8e:50:14:bd: bf:93:ca:c2:2b:52:9e:42:a9:71:ac:ed:4a:1a:43: 23:0c:d3:e9:e6:bb:68:a0:a0:47:de:c9:14:31:41: bc:f4:40:d7:96:b9:3c:4f:29:31:e1:10:73:c4:6c: 82:35:05:ff:6b:6e:d4:a5:97:c8:f8:20:70:69:a7: 5a:ee:63:32:2d:51:2f:e3:df:73:f4:79:18:a1:9c: 52:6b:54:dc:76:29:e4:ab:12:87:1e:6f:26:65:43: 32:6a:33:37:d1:ee:15:cf:98:c0:b8:3b:87:bd:36: f4:e6:c1:54:55:64:95:4d:b3:a0:a8:7c:28:53:3d: fa:d2:51:4c:1a:44:ab:11:e7:fb:99:90:0c:26:b5: c3:a4:86:b8:c0:73:ff:57:8e:27:a1:2c:90:17:99: 3c:58:ba:c8:b4:e1:75:ec:70:1e:9b:99:fa:fa:55: 12:aa:a5:29:38:f1:d1:f9:48:1c:21:49:b5:69:cb: 0e:0f:8e:1d:81:68:94:fa:a3:90:2d:4b:85:3f:d1: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:2E:10:0D:32:2C:AA:F8:72:A6:43:A4:00:1F:9A:5B:81:5A:B2 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:9e:4a:ae:db:28:4d:ee:c2:cc:4c:17:fb:4f:0b:7f:6f:77: b0:c8:34:3d:ba:5a:58:8f:c3:c1:7a:47:9e:45:68:81:94:2e: 40:1d:15:33:02:cf:bb:df:95:85:9e:c5:91:7e:7a:e4:a8:57: 74:48:f1:26:f3:f2:b4:0a:02:fc:33:92:81:ce:ef:80:1e:20: f6:fd:f9:ef:23:f9:4b:87:1f:33:b2:1a:ff:9a:d2:ff:e0:e0: da:a2:88:5b:04:fc:31:e1:b8:9d:ef:e6:cb:da:d4:8b:95:5b: b7:41:63:7c:3f:2d:0d:93:89:8c:33:26:c8:01:73:8a:cb:77: 11:fb:8c:27:5b:1b:93:7b:3b:58:93:17:1b:51:ee:e2:d8:35: 43:4c:60:85:f1:4c:27:51:a2:45:6f:a1:39:04:23:15:43:c2: 60:4d:4b:d9:1b:8e:ff:24:66:96:ee:68:57:c7:97:40:3b:3a: 27:15:46:fc:bc:ae:0e:76:7b:71:8c:e6:d2:95:55:60:9a:e1: d5:60:0f:05:f7:13:ef:2d:1f:88:c3:f8:26:5d:08:43:71:79: 84:c0:d3:2e:69:97:0f:40:3d:56:42:c1:0f:ee:1a:fd:36:61: 53:3b:e0:29:4d:b9:b6:88:70:ea:25:85:f8:8c:cf:c9:9d:3f: db:76:7d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSXoQ552u9kLvU45v3TAYMPIjnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTA4MjIwMDM2MzNaFw0yNTA4MjUwNzIwMzNaMDMxMTAvBgNV BAMTKDQ4QkUyRTEwMEQzMjJDQUFGODcyQTY0M0E0MDAxRjlBNUI4MTVBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXdAoWI4kLMbwCJ6CO6K/Q/i2d x0YqkTbjXCsDra0Wagqui5LFk30+sdB9BL1+eBclGrukXe0ojlAUvb+TysIrUp5C qXGs7UoaQyMM0+nmu2igoEfeyRQxQbz0QNeWuTxPKTHhEHPEbII1Bf9rbtSll8j4 IHBpp1ruYzItUS/j33P0eRihnFJrVNx2KeSrEocebyZlQzJqMzfR7hXPmMC4O4e9 NvTmwVRVZJVNs6CofChTPfrSUUwaRKsR5/uZkAwmtcOkhrjAc/9XjiehLJAXmTxY usi04XXscB6bmfr6VRKqpSk48dH5SBwhSbVpyw4Pjh2BaJT6o5AtS4U/0WEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSL4uEA0yLKr4cqZDpAAfmluBWrIwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqeSq7bKE3uwsxMF/tPC39vd7DIND26WliP w8F6R55FaIGULkAdFTMCz7vflYWexZF+euSoV3RI8Sbz8rQKAvwzkoHO74AeIPb9 +e8j+UuHHzOyGv+a0v/g4NqiiFsE/DHhuJ3v5sva1IuVW7dBY3w/LQ2TiYwzJsgB c4rLdxH7jCdbG5N7O1iTFxtR7uLYNUNMYIXxTCdRokVvoTkEIxVDwmBNS9kbjv8k ZpbuaFfHl0A7OicVRvy8rg52e3GM5tKVVWCa4dVgDwX3E+8tH4jD+CZdCENxeYTA 0y5plw9APVZCwQ/uGv02YVM74ClNubaIcOolhfiMz8mdP9t2fY4= -----END CERTIFICATE-----Generated at Sun Aug 24 04:41:36 2025 by rpki-client