$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: 26wfsoIt7nKjCD00xlAv6zgiu/JjIeUMomkoxxO1yeQ= Subject key identifier: 1E:8B:3A:0A:9D:55:4F:B7:F6:AB:02:32:E0:AC:CC:B2:7A:E1:15:B5 Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 397C4C1CC52AECD8D3FF8809E21ABBA87243E7C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 018C Signing time: Thu 21 Aug 2025 06:11:10 +0000 Manifest this update: Thu 21 Aug 2025 06:06:10 +0000 Manifest next update: Sun 24 Aug 2025 10:45:10 +0000 Files and hashes: 1: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) 2: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: SA4mhnlCHR91KlLCGWCeVOjKaLW5oogzVlztxeY4lgU=) 3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 10:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7c:4c:1c:c5:2a:ec:d8:d3:ff:88:09:e2:1a:bb:a8:72:43:e7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Aug 21 06:06:10 2025 GMT Not After : Aug 24 10:45:10 2025 GMT Subject: CN=1E8B3A0A9D554FB7F6AB0232E0ACCCB27AE115B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:d3:68:32:12:16:b8:de:d4:a7:09:23:e4: a4:57:9d:eb:f6:53:05:22:38:98:66:00:7f:61:fa: 8d:0e:02:1f:7b:d2:91:00:b5:74:9e:5a:bd:79:b8: 21:49:8b:74:ef:b0:33:da:66:ba:99:51:26:34:cc: b6:2e:0a:00:0a:41:ca:cd:30:26:ed:d6:b7:0d:5c: d3:4c:09:11:9f:82:67:ea:3d:9f:00:ec:ec:5a:2d: ba:a8:e3:cf:c1:81:d9:a8:dd:8e:21:2c:e4:fb:73: 31:d7:be:c6:5e:92:b0:37:90:ec:7c:34:e2:a0:79: 80:29:df:cb:30:63:33:a2:ca:cd:72:07:e7:5e:4b: 01:16:a6:62:bd:d9:c3:91:4d:56:5b:12:b0:b6:4d: 24:0a:db:f7:f3:b2:85:28:7d:42:56:84:23:d8:ea: 55:ac:ef:4c:ae:d8:be:6e:a7:00:e6:07:c6:37:d2: 0d:79:37:d0:49:1d:f7:e7:4f:5a:11:f5:66:29:21: 1e:12:30:7d:5f:4b:40:7c:81:7c:cb:b7:6a:f0:95: 37:c8:f0:6f:e5:88:da:02:cf:c2:86:46:11:69:1d: f2:0e:71:31:cf:59:7e:e4:c3:97:ba:29:93:a9:a5: 32:3f:68:b1:45:3c:cf:42:97:27:f6:52:e5:3f:fb: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8B:3A:0A:9D:55:4F:B7:F6:AB:02:32:E0:AC:CC:B2:7A:E1:15:B5 X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e9:7a:6a:cc:6a:07:c6:0f:25:8b:bd:7c:30:ee:fe:64:d8: ec:48:4b:94:9c:24:ac:16:6a:23:35:77:94:80:81:38:8b:df: cc:5d:37:fe:86:6a:84:04:4d:d6:fc:7e:89:ae:8a:dc:8a:ee: f7:79:02:d5:19:08:b2:92:aa:d4:93:09:cc:74:f6:96:cd:35: cb:d4:b9:b7:46:6c:92:49:32:d3:98:92:cd:fa:5b:a9:34:ea: 88:17:2b:ea:b1:bd:79:9a:ef:57:9a:61:28:f9:f6:33:a9:95: 3d:dd:7c:8a:cc:6e:e0:ac:40:87:01:aa:11:7f:85:de:06:31: 4e:25:5e:3b:01:d8:9f:08:e3:fb:06:f8:48:23:c0:df:fa:11: 5f:fd:92:49:c5:e5:08:34:c4:01:02:81:93:a2:f5:a6:28:cd: 0f:e3:ff:b4:bb:19:bc:2e:00:cb:ed:67:fc:35:25:ac:1e:1e: 09:1d:cd:32:34:10:8d:bc:16:f7:42:42:b2:21:dc:e1:74:7f: 34:f7:69:d3:b4:f3:d8:2f:5d:88:6e:ca:1e:17:ca:62:45:0e: f7:b4:09:64:a8:81:40:0d:cb:e6:3c:6e:2b:72:41:be:a3:f9: e7:85:4c:5a:f0:d0:ed:c2:4f:8c:3f:1b:c1:cf:31:6a:e4:65: ee:cd:d9:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXxMHMUq7NjT/4gJ4hq7qHJD58cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTA4MjEwNjA2MTBaFw0yNTA4MjQxMDQ1MTBaMDMxMTAvBgNV BAMTKDFFOEIzQTBBOUQ1NTRGQjdGNkFCMDIzMkUwQUNDQ0IyN0FFMTE1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFNNoMhIWuN7Upwkj5KRXnev2 UwUiOJhmAH9h+o0OAh970pEAtXSeWr15uCFJi3TvsDPaZrqZUSY0zLYuCgAKQcrN MCbt1rcNXNNMCRGfgmfqPZ8A7OxaLbqo48/Bgdmo3Y4hLOT7czHXvsZekrA3kOx8 NOKgeYAp38swYzOiys1yB+deSwEWpmK92cORTVZbErC2TSQK2/fzsoUofUJWhCPY 6lWs70yu2L5upwDmB8Y30g15N9BJHffnT1oR9WYpIR4SMH1fS0B8gXzLt2rwlTfI 8G/liNoCz8KGRhFpHfIOcTHPWX7kw5e6KZOppTI/aLFFPM9Clyf2UuU/+/ixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHos6Cp1VT7f2qwIy4KzMsnrhFbUwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILpemrMagfGDyWLvXww7v5k2OxIS5ScJKwW aiM1d5SAgTiL38xdN/6GaoQETdb8fomuityK7vd5AtUZCLKSqtSTCcx09pbNNcvU ubdGbJJJMtOYks36W6k06ogXK+qxvXma71eaYSj59jOplT3dfIrMbuCsQIcBqhF/ hd4GMU4lXjsB2J8I4/sG+EgjwN/6EV/9kknF5Qg0xAECgZOi9aYozQ/j/7S7Gbwu AMvtZ/w1JaweHgkdzTI0EI28FvdCQrIh3OF0fzT3adO089gvXYhuyh4XymJFDve0 CWSogUANy+Y8bityQb6j+eeFTFrw0O3CT4w/G8HPMWrkZe7N2Rg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:52 2025 by rpki-client