$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: c1EkMtILODbygWSs6rDMfpHNsFp8+XkgnRKVKPBP19o= Subject key identifier: 5C:2C:0B:BC:C8:E8:92:5B:5E:1E:AF:22:4B:8B:49:6A:4C:E0:49:38 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 505C591F7846AC519B11862586FE33E45D9200E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 01BB Signing time: Thu 21 Aug 2025 18:41:07 +0000 Manifest this update: Thu 21 Aug 2025 18:36:07 +0000 Manifest next update: Sun 24 Aug 2025 20:21:07 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: FH+BJ2zSt2oPRPcxclHDKHUzaLsW1IRFHCyOPYr26FU=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: J8hK76n9jAxJfoZwmgnUWZPJmdbHYnBHcHNL1o/2t5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5c:59:1f:78:46:ac:51:9b:11:86:25:86:fe:33:e4:5d:92:00:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Aug 21 18:36:07 2025 GMT Not After : Aug 24 20:21:07 2025 GMT Subject: CN=5C2C0BBCC8E8925B5E1EAF224B8B496A4CE04938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:dd:7a:e8:ea:80:5f:cd:3d:3c:06:e0:0b: f1:28:9c:40:16:bf:6a:31:e0:40:c7:aa:2b:e9:54: 00:7e:d6:88:71:06:c4:35:37:13:88:f5:47:8c:c9: f8:b1:64:2d:2f:ff:54:e7:a7:6e:14:5c:86:c5:7e: 9e:1c:2f:b6:dc:a6:af:29:bb:b5:1e:96:28:40:85: 82:1e:00:fe:67:14:d1:fa:e1:dd:48:c8:4d:c4:77: 82:5f:9c:ff:58:9c:6f:4d:5b:98:bf:da:1c:bc:31: 91:03:52:1d:cc:27:b2:9b:f8:af:f4:18:37:ba:11: c1:4e:41:b7:f6:39:12:23:77:2f:01:02:20:1c:43: bb:6d:7c:b2:42:58:07:39:b5:15:23:c7:ce:73:f2: 07:8a:7c:e8:44:cc:ab:9c:82:92:e8:f2:43:ef:a0: de:0a:91:18:4c:db:7d:fe:fa:65:6c:66:3a:57:ea: e6:d4:59:bd:61:d4:f5:1d:81:63:0a:96:3f:32:b0: 36:6a:b8:03:4a:5c:50:5f:46:22:7d:ef:32:a0:37: 4c:56:c5:08:38:de:e3:74:ce:7a:e5:ea:77:c0:ba: 8f:52:6b:c7:97:01:91:88:13:fc:50:e2:00:3b:04: d6:a4:70:fa:d3:9b:f2:4b:4c:75:a0:a8:03:47:1f: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2C:0B:BC:C8:E8:92:5B:5E:1E:AF:22:4B:8B:49:6A:4C:E0:49:38 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4f:20:db:ab:c9:72:8e:c7:52:15:a5:c2:35:ed:56:19:60: d6:b6:f6:8a:4f:09:6c:98:23:cd:b0:ea:8e:07:2e:7e:38:1e: 45:2f:a9:09:90:58:65:64:8b:79:9c:c1:a4:5e:4a:9a:4c:40: 9e:80:b0:a7:28:86:ba:b7:17:f2:c3:35:2a:c0:e4:d0:bc:8f: d7:72:51:43:09:7b:98:e7:8c:65:e5:58:69:3c:dc:0e:84:88: 2c:da:16:2b:8f:64:5d:7d:59:da:4e:4f:dc:f9:c0:83:87:96: 60:08:1c:cf:68:dc:5b:02:aa:e0:18:0c:a3:8d:6d:a4:89:ba: 8a:50:68:19:23:50:99:15:58:b2:76:d2:62:ab:44:09:d7:61: b0:c8:91:ef:e4:be:b0:08:c7:89:e9:03:7e:f9:5f:e7:ed:cb: e3:36:36:e2:f6:7d:5a:dd:3d:a7:5c:39:56:f3:e9:a3:c7:68: 8a:b9:91:ee:db:bc:98:5a:74:ec:36:53:62:b7:2c:8a:bb:ea: 2f:5f:de:b9:f6:36:c9:d1:ae:fe:99:72:dc:85:55:c2:25:ab: 5c:eb:c8:0f:81:07:c2:76:ba:42:cc:ab:de:d3:56:d0:b3:7b: 7f:cd:0b:ad:3b:0a:9c:32:9e:68:4c:73:06:f3:ca:47:ca:d0: 65:38:14:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFxZH3hGrFGbEYYlhv4z5F2SAOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNTA4MjExODM2MDdaFw0yNTA4MjQyMDIxMDdaMDMxMTAvBgNV BAMTKDVDMkMwQkJDQzhFODkyNUI1RTFFQUYyMjRCOEI0OTZBNENFMDQ5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLN166OqAX809PAbgC/EonEAW v2ox4EDHqivpVAB+1ohxBsQ1NxOI9UeMyfixZC0v/1Tnp24UXIbFfp4cL7bcpq8p u7UelihAhYIeAP5nFNH64d1IyE3Ed4JfnP9YnG9NW5i/2hy8MZEDUh3MJ7Kb+K/0 GDe6EcFOQbf2ORIjdy8BAiAcQ7ttfLJCWAc5tRUjx85z8geKfOhEzKucgpLo8kPv oN4KkRhM233++mVsZjpX6ubUWb1h1PUdgWMKlj8ysDZquANKXFBfRiJ97zKgN0xW xQg43uN0znrl6nfAuo9Sa8eXAZGIE/xQ4gA7BNakcPrTm/JLTHWgqANHH34jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCwLvMjoklteHq8iS4tJakzgSTgwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxPINuryXKOx1IVpcI17VYZYNa29opPCWyY I82w6o4HLn44HkUvqQmQWGVki3mcwaReSppMQJ6AsKcohrq3F/LDNSrA5NC8j9dy UUMJe5jnjGXlWGk83A6EiCzaFiuPZF19WdpOT9z5wIOHlmAIHM9o3FsCquAYDKON baSJuopQaBkjUJkVWLJ20mKrRAnXYbDIke/kvrAIx4npA375X+fty+M2NuL2fVrd PadcOVbz6aPHaIq5ke7bvJhadOw2U2K3LIq76i9f3rn2NsnRrv6ZctyFVcIlq1zr yA+BB8J2ukLMq97TVtCze3/NC607CpwynmhMcwbzykfK0GU4FI4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:07:15 2025 by rpki-client