$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: i4DTmKRXLKFw3E2W9vmRcGXawSFqQC5LFLuK8OeHUR0= Subject key identifier: 02:F7:FA:42:0C:F1:1B:C9:C5:03:27:0C:C7:EA:EF:94:B2:85:38:CE Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 574353DEF2EC52817A4F0360D9A5218FAB782BFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 11 Signing time: Fri 22 Aug 2025 03:10:00 +0000 Manifest this update: Fri 22 Aug 2025 03:05:00 +0000 Manifest next update: Mon 25 Aug 2025 11:38:00 +0000 Files and hashes: 1: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) 2: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 3: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: OfjCs9NFzL8mrmoeguFiPuE+qMonwE+puswUGyS7fsQ=) 4: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) 5: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:43:53:de:f2:ec:52:81:7a:4f:03:60:d9:a5:21:8f:ab:78:2b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Aug 22 03:05:00 2025 GMT Not After : Aug 25 11:38:00 2025 GMT Subject: CN=02F7FA420CF11BC9C503270CC7EAEF94B28538CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:f5:e1:66:9a:8d:1b:a9:9d:35:4c:39:9e: 97:3e:b1:77:47:54:e1:39:50:09:69:0e:2b:21:00: d7:8e:52:15:46:fd:66:da:52:9a:97:a1:94:a1:9b: ac:37:ac:16:5d:e2:cf:31:3d:61:1c:14:de:29:52: 3e:54:02:d1:0e:01:5e:aa:6c:77:df:0f:a0:5e:aa: 9d:03:a1:3d:e6:00:50:10:ad:6c:5a:b7:d4:09:45: 6a:d0:80:37:a3:83:26:9c:3f:cf:d1:11:58:56:c9: 67:33:0c:8e:b8:a1:74:83:f5:db:9b:fa:c3:1e:7c: f5:fd:b8:69:1c:4d:fc:c3:19:2f:fa:33:1b:32:ef: a1:57:6d:54:66:7b:ae:c7:59:8f:3c:1a:2e:7e:ff: e5:b7:29:43:65:f1:8c:56:b9:e8:cd:bf:b1:15:1f: ad:74:01:4f:af:5d:37:20:d5:93:3b:58:26:32:f6: 41:09:90:98:fa:ca:f2:0c:e3:64:16:6a:23:05:37: a7:78:13:8d:c9:14:cd:d2:bc:3a:b4:39:2e:fa:a5: 50:8f:d1:d5:5b:48:a0:2a:18:3d:a7:64:45:ba:b6: f2:ba:a6:6d:59:06:f9:36:c5:a9:b9:cb:3d:bd:d0: e9:0e:98:2a:86:eb:95:ce:4d:e4:b5:31:23:96:85: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:FA:42:0C:F1:1B:C9:C5:03:27:0C:C7:EA:EF:94:B2:85:38:CE X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ac:26:4e:39:fe:02:82:0f:c0:b9:5c:43:c9:ab:f1:07:68: b2:fa:e9:48:80:03:19:46:e2:37:04:10:f8:97:1f:09:d5:c3: 75:4c:9f:f0:48:2b:f6:b1:57:c2:4e:35:57:4b:d8:fe:66:31: 49:96:67:fc:61:5e:e2:74:43:b3:e0:cd:ee:94:8f:32:e6:81: 17:7f:c1:9f:86:29:0a:86:94:08:ac:dc:74:e5:98:a5:72:d4: 48:82:21:75:ba:c8:6e:03:54:dd:e0:3a:1b:c0:90:93:c5:21: 94:22:9a:22:bb:56:63:bc:82:96:09:16:c6:cc:98:f0:e3:85: 21:6e:7d:cd:44:80:d6:da:f4:7d:80:b9:b5:cb:82:56:c5:c5: a2:f1:39:3e:18:d0:93:03:d1:81:d4:8d:71:24:82:bb:44:d4: f7:5a:9c:13:81:9d:28:ed:dc:9d:2c:77:3b:d3:a2:7c:74:ab: 8f:f4:b1:e2:c7:23:87:46:27:74:7d:4f:b6:7c:aa:2a:c4:af: 0c:1e:09:99:29:3e:14:88:17:ae:21:37:8f:41:cc:d7:44:02: 19:95:8d:5e:ab:e7:92:3c:c2:92:33:0f:f7:78:2b:90:84:1d: f8:b7:94:cf:b2:1d:30:9d:22:14:b9:f9:fe:0f:7e:08:37:37: c0:30:d3:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0NT3vLsUoF6TwNg2aUhj6t4K/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNTA4MjIwMzA1MDBaFw0yNTA4MjUxMTM4MDBaMDMxMTAvBgNV BAMTKDAyRjdGQTQyMENGMTFCQzlDNTAzMjcwQ0M3RUFFRjk0QjI4NTM4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xvXhZpqNG6mdNUw5npc+sXdH VOE5UAlpDishANeOUhVG/WbaUpqXoZShm6w3rBZd4s8xPWEcFN4pUj5UAtEOAV6q bHffD6Beqp0DoT3mAFAQrWxat9QJRWrQgDejgyacP8/REVhWyWczDI64oXSD9dub +sMefPX9uGkcTfzDGS/6Mxsy76FXbVRme67HWY88Gi5+/+W3KUNl8YxWuejNv7EV H610AU+vXTcg1ZM7WCYy9kEJkJj6yvIM42QWaiMFN6d4E43JFM3SvDq0OS76pVCP 0dVbSKAqGD2nZEW6tvK6pm1ZBvk2xam5yz290OkOmCqG65XOTeS1MSOWhaGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvf6QgzxG8nFAycMx+rvlLKFOM4wHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmsJk45/gKCD8C5XEPJq/EHaLL66UiAAxlG 4jcEEPiXHwnVw3VMn/BIK/axV8JONVdL2P5mMUmWZ/xhXuJ0Q7Pgze6UjzLmgRd/ wZ+GKQqGlAis3HTlmKVy1EiCIXW6yG4DVN3gOhvAkJPFIZQimiK7VmO8gpYJFsbM mPDjhSFufc1EgNba9H2AubXLglbFxaLxOT4Y0JMD0YHUjXEkgrtE1PdanBOBnSjt 3J0sdzvTonx0q4/0seLHI4dGJ3R9T7Z8qirErwweCZkpPhSIF64hN49BzNdEAhmV jV6r55I8wpIzD/d4K5CEHfi3lM+yHTCdIhS5+f4Pfgg3N8Aw09c= -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:53 2025 by rpki-client