$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: YykFzWm53FeCGL4KzV7Il2daDd3sh4b/g+tyaX+g/W8= Subject key identifier: 3A:52:77:4C:04:91:39:15:84:04:EC:36:AE:0F:AB:41:4D:39:C0:64 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 1BD290C081154AC4C0E129D411776AD919F769A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01BF Signing time: Sat 23 Aug 2025 06:51:31 +0000 Manifest this update: Sat 23 Aug 2025 06:46:31 +0000 Manifest next update: Tue 26 Aug 2025 06:54:31 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: 6Y36poqAUG+Y50ttMG9xFRy2ZsKJ50mzis2ePYr5hV0=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d2:90:c0:81:15:4a:c4:c0:e1:29:d4:11:77:6a:d9:19:f7:69:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Aug 23 06:46:31 2025 GMT Not After : Aug 26 06:54:31 2025 GMT Subject: CN=3A52774C049139158404EC36AE0FAB414D39C064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:c5:eb:28:d7:38:c2:e5:0f:9e:fa:27:23: 34:50:f9:7f:28:04:0d:59:1a:06:96:ca:06:7e:63: a5:21:36:e4:7c:e6:36:3d:53:a9:9b:0b:8d:a3:53: 29:21:d1:26:23:64:fb:3b:aa:b1:04:55:d4:ff:9f: 7d:b7:ed:86:7b:d9:6f:c7:0e:1f:49:5e:ce:e0:74: a5:7a:71:60:df:c6:40:88:1c:85:1d:02:5a:3b:a2: 30:b6:bd:99:ea:6a:9c:16:61:73:c9:c6:63:bb:6e: 8f:cb:a9:4e:b6:6b:07:16:df:58:3d:ce:85:7f:e9: d0:fe:71:62:a1:47:f0:25:4a:91:9f:09:42:4d:a7: f3:46:89:91:08:e3:9e:b5:d4:90:c0:89:2d:9d:73: b0:38:f4:c3:c4:31:7a:55:0c:07:75:9c:60:e2:28: f4:cb:2f:71:10:c2:7a:bc:72:8e:43:1d:ef:19:fd: 33:37:3d:b4:a0:c4:e8:54:52:09:e6:f7:f2:c1:cd: 65:da:e4:28:53:1a:9a:df:43:38:23:19:f6:a9:e7: 63:f6:b6:ec:48:94:44:33:d9:41:c0:6c:5e:3e:2d: a4:99:4a:58:fb:44:3f:2e:87:60:49:10:b8:f3:c9: 16:de:74:72:4e:30:2f:ac:bb:1d:70:ac:3f:b2:55: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:52:77:4C:04:91:39:15:84:04:EC:36:AE:0F:AB:41:4D:39:C0:64 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ed:7b:a6:07:0d:d6:c1:73:3b:b8:c5:aa:60:1b:03:61:10: d0:dd:06:e4:48:77:88:42:42:41:ae:21:ad:6d:08:07:01:c0: de:1f:d5:24:ee:ee:15:ba:3f:b8:a8:a1:7e:54:d1:ce:84:de: 74:a1:88:46:a7:1c:c5:57:c8:b1:ab:b8:81:f1:26:bd:76:2b: d7:b4:46:8c:6b:37:cc:a3:c4:38:ba:32:a8:86:67:9b:33:9d: af:28:37:4b:f9:21:4d:51:5b:d0:f8:99:4f:11:3c:e3:42:b3: 1b:04:cd:11:28:63:a4:d2:60:3e:ac:b0:a4:d4:6a:b4:b7:f0: 8d:f9:ec:27:a1:88:6b:2e:1b:66:b8:17:a7:97:ee:b7:3f:ae: ca:f7:73:be:d4:c5:1b:2c:77:03:2d:32:93:3c:0b:e2:8b:3b: 0c:38:b4:88:ab:ce:bf:9e:60:5c:0c:58:52:91:62:58:c5:cc: a0:17:05:28:f1:b4:f2:23:e8:b1:f6:7c:20:41:db:3b:9c:b1: 05:25:2a:27:b7:58:bb:49:73:88:ae:6d:a7:45:a4:90:c3:89: 63:77:53:94:1d:eb:01:f1:24:40:68:ba:5f:af:ff:26:aa:8b: 33:14:1b:07:ce:7d:82:d4:27:01:a4:5b:b6:7a:8b:15:9f:9a: ae:b9:b0:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9KQwIEVSsTA4SnUEXdq2Rn3aaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA4MjMwNjQ2MzFaFw0yNTA4MjYwNjU0MzFaMDMxMTAvBgNV BAMTKDNBNTI3NzRDMDQ5MTM5MTU4NDA0RUMzNkFFMEZBQjQxNEQzOUMwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9cXrKNc4wuUPnvonIzRQ+X8o BA1ZGgaWygZ+Y6UhNuR85jY9U6mbC42jUykh0SYjZPs7qrEEVdT/n3237YZ72W/H Dh9JXs7gdKV6cWDfxkCIHIUdAlo7ojC2vZnqapwWYXPJxmO7bo/LqU62awcW31g9 zoV/6dD+cWKhR/AlSpGfCUJNp/NGiZEI45611JDAiS2dc7A49MPEMXpVDAd1nGDi KPTLL3EQwnq8co5DHe8Z/TM3PbSgxOhUUgnm9/LBzWXa5ChTGprfQzgjGfap52P2 tuxIlEQz2UHAbF4+LaSZSlj7RD8uh2BJELjzyRbedHJOMC+sux1wrD+yVRD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlJ3TASRORWEBOw2rg+rQU05wGQwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfte6YHDdbBczu4xapgGwNhENDdBuRId4hC QkGuIa1tCAcBwN4f1STu7hW6P7iooX5U0c6E3nShiEanHMVXyLGruIHxJr12K9e0 RoxrN8yjxDi6MqiGZ5szna8oN0v5IU1RW9D4mU8RPONCsxsEzREoY6TSYD6ssKTU arS38I357CehiGsuG2a4F6eX7rc/rsr3c77UxRssdwMtMpM8C+KLOww4tIirzr+e YFwMWFKRYljFzKAXBSjxtPIj6LH2fCBB2zucsQUlKie3WLtJc4iubadFpJDDiWN3 U5Qd6wHxJEBoul+v/yaqizMUGwfOfYLUJwGkW7Z6ixWfmq65sOE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:23 2025 by rpki-client