$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: MxvY6UyvVfnO5sryd+2DVB4WVR+1ojZwE9x07P9JV78= Subject key identifier: 00:64:87:3E:BC:87:19:BA:E1:CC:94:C9:74:98:3C:56:E2:5A:F5:B2 Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 5DB33CAAF07203C7EF53A37F2038D0231B53B2E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 0373 Signing time: Thu 21 Aug 2025 16:11:32 +0000 Manifest this update: Thu 21 Aug 2025 16:06:32 +0000 Manifest next update: Sun 24 Aug 2025 22:03:32 +0000 Files and hashes: 1: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: 9QYPkJDwBITWQTZCMHfnD2+Y3CRcY8xi9/Xn+NYTr58=) 2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b3:3c:aa:f0:72:03:c7:ef:53:a3:7f:20:38:d0:23:1b:53:b2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Aug 21 16:06:32 2025 GMT Not After : Aug 24 22:03:32 2025 GMT Subject: CN=0064873EBC8719BAE1CC94C974983C56E25AF5B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:6b:1b:f7:62:d1:e2:60:8e:9c:69:1b:13: 20:ea:03:20:73:a2:a2:a1:fb:5d:42:36:1a:5f:07: f4:10:dc:e6:1b:24:e7:0f:bf:83:2a:f0:b9:42:5e: 1e:bf:8e:8f:7f:bd:ea:51:39:3e:e2:3b:8a:48:e8: be:91:e0:de:88:ea:83:75:7a:88:6b:6e:07:5b:94: a5:66:78:b3:53:d5:9f:07:7c:5b:fc:ff:9a:bd:9f: 33:56:d2:d9:c7:4e:ff:bf:e4:46:9b:07:a5:59:09: fe:50:5a:f8:ab:51:ed:7d:45:e9:8f:27:82:11:7b: 8d:c9:8e:79:cd:07:94:d3:42:9a:4d:28:4b:b9:1f: 0f:79:0a:39:b4:f6:57:c9:29:5a:83:bf:ff:13:78: 4e:73:a9:b4:3f:c7:52:9c:28:01:19:bc:57:59:c1: c6:bb:60:53:a6:c2:ed:fd:e1:fb:df:91:a0:4e:27: be:99:5e:10:35:ea:ce:60:d6:e9:4a:f3:24:fb:28: 41:8b:6d:2b:3b:cd:2a:0c:66:89:d0:35:32:7f:74: 27:a7:fb:4e:3e:af:1c:73:b5:8d:95:32:78:6d:1a: 02:6a:17:bc:95:37:4e:b0:32:b8:6a:a3:cb:86:cf: eb:fe:1d:ff:1e:9c:d0:b6:e6:dd:2e:a2:97:cd:e6: e5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:87:3E:BC:87:19:BA:E1:CC:94:C9:74:98:3C:56:E2:5A:F5:B2 X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4a:38:29:34:1d:47:1c:be:fd:42:6b:19:7c:5a:68:c3:aa: 80:74:26:22:cd:81:d5:40:8a:46:9f:ef:a7:f8:ad:12:30:78: 86:f6:9d:52:8a:0b:b2:79:d2:f9:f9:d8:5f:28:1f:9f:52:a1: 59:94:a8:72:5b:0d:96:d1:aa:00:30:a9:41:a1:8e:0f:83:17: 04:ac:44:c9:99:59:09:72:9f:06:07:9b:19:a3:6a:5a:83:43: 80:ae:96:a1:10:87:d0:fd:03:b5:05:19:49:fb:6b:a1:37:bb: fa:a6:c9:3d:e0:91:82:39:6b:41:8e:75:5f:f8:91:8f:7b:f9: 25:b7:98:39:bc:ff:a4:d4:6f:14:44:84:72:c3:22:b2:d2:54: c3:07:8a:90:4e:aa:11:50:d4:e4:63:5c:c9:e1:06:f7:67:2f: 6a:3d:37:e5:95:f6:d9:2a:bc:c0:b1:8f:b3:7d:fd:8b:9f:07: e1:4d:3e:33:cc:63:87:c8:6e:65:c0:4d:3a:66:5c:44:e8:ec: 19:a1:61:64:47:8c:1d:85:fd:b1:88:72:31:67:1b:54:5e:9a: 51:27:c6:0c:da:fa:55:2b:a2:11:14:c6:cf:40:15:9e:c5:ef: dc:b6:e3:46:c0:88:c0:33:1d:85:4b:30:61:85:d9:cf:47:74: e1:69:22:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbM8qvByA8fvU6N/IDjQIxtTsuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTA4MjExNjA2MzJaFw0yNTA4MjQyMjAzMzJaMDMxMTAvBgNV BAMTKDAwNjQ4NzNFQkM4NzE5QkFFMUNDOTRDOTc0OTgzQzU2RTI1QUY1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk62sb92LR4mCOnGkbEyDqAyBz oqKh+11CNhpfB/QQ3OYbJOcPv4Mq8LlCXh6/jo9/vepROT7iO4pI6L6R4N6I6oN1 eohrbgdblKVmeLNT1Z8HfFv8/5q9nzNW0tnHTv+/5EabB6VZCf5QWvirUe19RemP J4IRe43JjnnNB5TTQppNKEu5Hw95Cjm09lfJKVqDv/8TeE5zqbQ/x1KcKAEZvFdZ wca7YFOmwu394fvfkaBOJ76ZXhA16s5g1ulK8yT7KEGLbSs7zSoMZonQNTJ/dCen +04+rxxztY2VMnhtGgJqF7yVN06wMrhqo8uGz+v+Hf8enNC25t0uopfN5uVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGSHPryHGbrhzJTJdJg8VuJa9bIwHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABKOCk0HUccvv1Caxl8WmjDqoB0JiLNgdVA ikaf76f4rRIweIb2nVKKC7J50vn52F8oH59SoVmUqHJbDZbRqgAwqUGhjg+DFwSs RMmZWQlynwYHmxmjalqDQ4CulqEQh9D9A7UFGUn7a6E3u/qmyT3gkYI5a0GOdV/4 kY97+SW3mDm8/6TUbxREhHLDIrLSVMMHipBOqhFQ1ORjXMnhBvdnL2o9N+WV9tkq vMCxj7N9/YufB+FNPjPMY4fIbmXATTpmXETo7BmhYWRHjB2F/bGIcjFnG1RemlEn xgza+lUrohEUxs9AFZ7F79y240bAiMAzHYVLMGGF2c9HdOFpIs4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:49 2025 by rpki-client