$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: yOWY4vBY1uPSIUh/7hHjpUkw/DJoU0fdFJwowBFBzfA= Subject key identifier: 78:52:3F:D9:E2:F8:5C:59:01:DE:08:D8:AB:89:63:99:BB:16:6E:2D Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 4594C4DAAE2104907B6924C11BCB2358C81C8280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 0500 Signing time: Fri 22 Aug 2025 03:43:40 +0000 Manifest this update: Fri 22 Aug 2025 03:38:40 +0000 Manifest next update: Mon 25 Aug 2025 08:53:40 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) 2: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) 3: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: WzAtbZ0epyT+71RbMxQxixl3mLYwMvIEqkOekXNVnYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:94:c4:da:ae:21:04:90:7b:69:24:c1:1b:cb:23:58:c8:1c:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Aug 22 03:38:40 2025 GMT Not After : Aug 25 08:53:40 2025 GMT Subject: CN=78523FD9E2F85C5901DE08D8AB896399BB166E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:4f:90:5b:1d:09:e8:ef:83:d8:5e:30:9a: be:de:a6:dc:e8:1e:27:be:8c:4d:50:5d:72:3a:d7: 3d:8a:cc:39:29:dd:14:0c:14:fc:e3:dc:0e:96:2a: a4:5b:f9:7e:07:ed:9e:11:6e:bb:c0:4e:98:70:be: d1:0b:82:39:b8:a0:ca:5d:32:2b:c7:43:5c:79:4c: e0:66:7a:c8:03:4d:a3:b9:d0:0b:bc:dd:ed:06:fb: e1:c1:2f:c0:43:98:ce:5f:7a:ad:1a:48:8f:43:4d: 0f:38:74:71:d1:6b:32:6d:7a:a8:70:f1:15:43:ac: 46:57:89:ac:45:18:5b:11:69:8e:88:95:51:48:70: 10:32:bf:7c:1f:0e:fe:ae:5c:8c:03:bf:89:82:99: 27:4c:cb:d5:f0:52:d0:bd:8b:90:92:d9:b8:d7:32: 15:30:45:4f:a1:ba:7d:9d:70:91:04:27:41:f3:7c: da:f9:be:76:45:e9:1c:57:fb:75:0b:9e:df:f8:f7: 86:ec:aa:41:cd:9a:b0:05:2a:74:f6:89:0a:a1:8c: ff:89:06:90:30:f9:58:bc:f6:1e:23:9e:6c:9e:56: 33:71:61:1e:b3:43:fa:b4:b3:9c:42:ce:d9:1e:2f: f9:fe:a1:50:7c:cb:82:18:82:b9:f2:5b:cc:de:90: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:3F:D9:E2:F8:5C:59:01:DE:08:D8:AB:89:63:99:BB:16:6E:2D X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e2:82:c2:9b:dd:4f:30:3a:c5:74:bb:2c:7a:eb:40:4b:79: da:a0:4c:45:bf:89:1e:62:50:dd:d0:70:e4:31:10:bc:3e:42: ea:7d:f7:77:f5:c0:76:39:5b:b6:56:89:6d:98:51:b1:36:d2: dd:19:6b:b0:67:8c:b5:48:d0:90:c4:70:80:e9:69:b7:b6:5e: 4d:f1:dc:e7:61:bb:2e:d3:50:e1:b9:9e:b8:d6:a8:90:a4:d2: 54:ba:88:12:b9:ee:3a:d1:d6:2d:40:4c:e0:38:6d:16:eb:ac: 88:92:07:82:c8:05:59:fb:53:62:0b:00:11:16:d8:10:57:fe: c9:7d:10:40:24:ed:79:83:94:e4:a6:ee:cd:da:c8:c8:ae:d8: 52:ff:15:37:3e:bf:45:2c:b0:30:39:66:0f:a4:c7:8f:b1:32: 36:e0:13:77:f2:b8:e9:ee:1c:33:b4:d5:f7:71:aa:90:e5:47: 39:46:a8:3c:b9:2c:6c:b3:d4:cb:da:f4:6b:97:c2:97:28:88: 7a:07:7f:9d:81:b0:f9:65:0b:8f:55:56:27:96:a1:e4:f6:03: 95:80:36:e4:eb:ac:6e:bd:c5:ca:7d:51:61:56:97:9b:bb:7c: 40:52:af:66:bd:4a:20:b7:d9:83:8f:c4:b5:52:32:c2:b2:2c: 1a:cd:7c:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZTE2q4hBJB7aSTBG8sjWMgcgoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTA4MjIwMzM4NDBaFw0yNTA4MjUwODUzNDBaMDMxMTAvBgNV BAMTKDc4NTIzRkQ5RTJGODVDNTkwMURFMDhEOEFCODk2Mzk5QkIxNjZFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdk+QWx0J6O+D2F4wmr7eptzo Hie+jE1QXXI61z2KzDkp3RQMFPzj3A6WKqRb+X4H7Z4RbrvATphwvtELgjm4oMpd MivHQ1x5TOBmesgDTaO50Au83e0G++HBL8BDmM5feq0aSI9DTQ84dHHRazJteqhw 8RVDrEZXiaxFGFsRaY6IlVFIcBAyv3wfDv6uXIwDv4mCmSdMy9XwUtC9i5CS2bjX MhUwRU+hun2dcJEEJ0HzfNr5vnZF6RxX+3ULnt/494bsqkHNmrAFKnT2iQqhjP+J BpAw+Vi89h4jnmyeVjNxYR6zQ/q0s5xCztkeL/n+oVB8y4IYgrnyW8zekDJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeFI/2eL4XFkB3gjYq4ljmbsWbi0wHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjigsKb3U8wOsV0uyx660BLedqgTEW/iR5i UN3QcOQxELw+Qup993f1wHY5W7ZWiW2YUbE20t0Za7BnjLVI0JDEcIDpabe2Xk3x 3Odhuy7TUOG5nrjWqJCk0lS6iBK57jrR1i1ATOA4bRbrrIiSB4LIBVn7U2ILABEW 2BBX/sl9EEAk7XmDlOSm7s3ayMiu2FL/FTc+v0UssDA5Zg+kx4+xMjbgE3fyuOnu HDO01fdxqpDlRzlGqDy5LGyz1Mva9GuXwpcoiHoHf52BsPllC49VVieWoeT2A5WA NuTrrG69xcp9UWFWl5u7fEBSr2a9SiC32YOPxLVSMsKyLBrNfPM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:44 2025 by rpki-client