$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: 20afauhvTMH73iOXrGUyPReHcHjVKYz0KecXeoT+aCA= Subject key identifier: F0:3E:35:89:C2:50:5F:8D:D9:1B:16:C5:A0:6F:52:2E:51:26:13:89 Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 28A25D95486EDD3055150C0893C4137040847EB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 01F9 Signing time: Sat 23 Aug 2025 10:40:48 +0000 Manifest this update: Sat 23 Aug 2025 10:35:48 +0000 Manifest next update: Tue 26 Aug 2025 20:45:48 +0000 Files and hashes: 1: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: RePo8jrCfkBeaNvugVyNjKqB9TQKlD3RBdCQOu1XcHM=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a2:5d:95:48:6e:dd:30:55:15:0c:08:93:c4:13:70:40:84:7e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Aug 23 10:35:48 2025 GMT Not After : Aug 26 20:45:48 2025 GMT Subject: CN=F03E3589C2505F8DD91B16C5A06F522E51261389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:af:a5:f7:e2:f8:40:45:64:de:92:47:8e: df:3e:16:7d:91:31:6f:e9:43:22:8b:fa:9d:f3:81: 9c:13:94:53:a0:d1:27:57:79:41:62:ff:ad:88:f6: 42:90:5a:e9:49:e2:93:c1:b4:6c:21:41:5a:0c:ca: e3:57:0b:e2:4c:38:69:04:b7:b7:f6:0b:99:cb:4a: 1c:e0:1a:ef:69:44:1f:11:ca:04:eb:10:b6:e4:90: 9a:81:19:5c:c9:38:bf:9b:1b:7f:14:57:b5:fa:37: b5:4b:29:4d:25:c1:07:0d:45:38:64:87:dc:d0:d9: 99:cc:95:24:66:03:75:f3:60:b8:b1:1e:80:a5:54: 6c:ea:19:67:3c:f4:43:3f:52:9c:26:61:54:b6:43: 46:bb:8c:45:81:8c:72:ed:64:97:10:4f:9b:53:22: 4f:93:05:62:05:f1:ed:d2:81:89:13:fa:af:5a:7e: f5:16:42:b0:eb:a6:6a:90:46:9f:8f:02:2c:58:65: 00:fe:43:44:11:6a:50:a0:50:61:ee:57:92:6e:2c: 5f:e1:cd:88:7d:90:4c:ee:12:3e:11:8e:0b:78:85: 90:51:f0:31:0a:f6:49:b2:56:bb:d2:11:5d:80:b1: 70:d3:85:58:7d:38:64:39:49:88:d5:9f:05:43:15: d0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3E:35:89:C2:50:5F:8D:D9:1B:16:C5:A0:6F:52:2E:51:26:13:89 X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5f:ca:a2:f4:c6:b4:e8:da:0d:87:ba:30:70:f6:f7:4b:fd: cd:ca:92:4a:1e:6d:ce:9a:d3:79:fb:f2:b9:42:84:38:22:d5: 6b:4a:26:45:1c:b9:0c:0c:90:cf:d7:46:2b:93:da:e5:8d:01: b9:4e:a0:6d:b7:2b:f8:0e:df:3b:40:fb:09:54:62:d5:cf:d0: e7:f4:56:0e:3f:ac:e7:35:5c:af:82:28:b7:07:26:60:0c:3d: 58:c0:26:6b:d0:44:bd:9b:05:32:63:ab:af:25:70:2b:59:c9: a7:df:95:29:32:78:a2:a5:8f:ae:7f:81:2b:41:8a:9b:cc:50: ca:3a:7d:c3:4f:25:59:b0:ec:7c:10:1c:13:39:c3:79:21:a3: 46:82:8d:13:d9:04:3a:1b:14:b3:87:86:c0:ba:1d:b4:2c:5c: 55:b4:50:2d:51:ef:86:0c:02:0b:04:c6:0a:5d:36:9b:17:87: 75:f9:7b:7f:cc:fc:18:f6:32:60:cb:55:7b:d6:0b:0c:c4:6f: 67:29:cd:c3:3e:5d:4b:d7:56:73:e9:f6:e0:8c:89:a8:fd:df: 3f:8c:be:61:bb:26:bd:fd:32:cf:e4:55:42:aa:20:04:8e:94: 99:1f:bd:ba:8c:50:82:66:be:55:c3:83:54:43:1a:82:c2:46: e4:68:b0:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKJdlUhu3TBVFQwIk8QTcECEfrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNTA4MjMxMDM1NDhaFw0yNTA4MjYyMDQ1NDhaMDMxMTAvBgNV BAMTKEYwM0UzNTg5QzI1MDVGOEREOTFCMTZDNUEwNkY1MjJFNTEyNjEzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuj6+l9+L4QEVk3pJHjt8+Fn2R MW/pQyKL+p3zgZwTlFOg0SdXeUFi/62I9kKQWulJ4pPBtGwhQVoMyuNXC+JMOGkE t7f2C5nLShzgGu9pRB8RygTrELbkkJqBGVzJOL+bG38UV7X6N7VLKU0lwQcNRThk h9zQ2ZnMlSRmA3XzYLixHoClVGzqGWc89EM/UpwmYVS2Q0a7jEWBjHLtZJcQT5tT Ik+TBWIF8e3SgYkT+q9afvUWQrDrpmqQRp+PAixYZQD+Q0QRalCgUGHuV5JuLF/h zYh9kEzuEj4Rjgt4hZBR8DEK9kmyVrvSEV2AsXDThVh9OGQ5SYjVnwVDFdDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8D41icJQX43ZGxbFoG9SLlEmE4kwHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhfyqL0xrTo2g2HujBw9vdL/c3Kkkoebc6a 03n78rlChDgi1WtKJkUcuQwMkM/XRiuT2uWNAblOoG23K/gO3ztA+wlUYtXP0Of0 Vg4/rOc1XK+CKLcHJmAMPVjAJmvQRL2bBTJjq68lcCtZyafflSkyeKKlj65/gStB ipvMUMo6fcNPJVmw7HwQHBM5w3kho0aCjRPZBDobFLOHhsC6HbQsXFW0UC1R74YM AgsExgpdNpsXh3X5e3/M/Bj2MmDLVXvWCwzEb2cpzcM+XUvXVnPp9uCMiaj93z+M vmG7Jr39Ms/kVUKqIASOlJkfvbqMUIJmvlXDg1RDGoLCRuRosJs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:29 2025 by rpki-client