$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: qlwz/0POE6uyrXj3aowptQ9DcPeUiUE9il5eQtvI62E= Subject key identifier: B3:98:F5:E9:FD:91:12:1E:C4:E2:97:B3:8F:91:D9:6A:D5:2A:9C:D2 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 2EBB074F33D02CF185F45CEC46DD399C1A83A58A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 01D9 Signing time: Fri 22 Aug 2025 16:10:42 +0000 Manifest this update: Fri 22 Aug 2025 16:05:42 +0000 Manifest next update: Tue 26 Aug 2025 03:51:42 +0000 Files and hashes: 1: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 2: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: hhatKLSp3G9+Ck36T0PRAxcpGyNdyfkY4e3ph9Mh21M=) 3: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) 4: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) 5: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:bb:07:4f:33:d0:2c:f1:85:f4:5c:ec:46:dd:39:9c:1a:83:a5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Aug 22 16:05:42 2025 GMT Not After : Aug 26 03:51:42 2025 GMT Subject: CN=B398F5E9FD91121EC4E297B38F91D96AD52A9CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:63:28:94:8b:f3:c0:4a:65:a0:a6:9a:42: 9d:15:aa:56:01:aa:95:9d:ba:89:f4:b4:9c:c5:e1: be:6f:b4:39:c0:13:20:fd:f3:cb:a3:f5:7c:b8:c4: 51:5d:fc:e6:47:be:e1:79:00:b5:43:d4:d9:df:6a: 67:9b:41:ae:1f:95:30:6c:30:10:98:cd:26:09:4c: ab:55:8b:d2:7f:50:56:34:90:47:19:9a:31:85:29: 0f:9a:c3:d7:81:e2:da:20:d9:e8:17:1f:9e:c2:30: 97:02:68:a3:8f:c7:e6:06:8a:01:5a:0f:38:85:fa: 34:7f:ed:79:17:7f:70:02:5e:85:f5:cb:34:2f:58: fd:72:5f:9b:f7:27:e3:c8:f6:65:9e:4a:52:b1:eb: cd:31:28:d4:33:4d:43:f4:91:a3:55:39:2c:03:af: 7f:60:bc:f1:76:23:40:36:ea:c1:c3:9f:5e:42:e1: 59:4c:41:a8:16:75:01:12:06:b9:82:b9:f0:82:5d: c7:6e:05:08:3d:77:fb:c0:9a:36:97:df:a7:63:ed: 44:42:8f:a8:d7:b5:7a:46:8c:f6:1d:08:9d:97:d9: 01:e0:91:f5:a6:ee:dc:03:a4:08:7f:fd:34:05:57: 80:dc:c5:4e:ff:ac:45:3a:41:59:70:11:02:0c:4e: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:98:F5:E9:FD:91:12:1E:C4:E2:97:B3:8F:91:D9:6A:D5:2A:9C:D2 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a5:95:09:b4:f9:a7:6a:c6:17:81:ab:89:e4:ad:94:ee:ab: ac:36:03:d0:27:9f:5c:89:03:52:35:a2:59:bd:23:ee:d7:22: 3d:7f:aa:61:17:0c:1c:cb:b0:47:80:96:60:68:22:41:88:ea: 34:19:0a:0a:33:83:cf:63:87:7f:6c:6a:01:a5:78:29:dd:0f: 02:dd:84:fd:40:41:6b:9c:f4:c0:e2:e9:ff:c8:89:81:a8:24: 74:67:de:37:2a:37:46:a3:9c:c2:8e:7b:be:af:a2:cc:cf:46: c8:b7:d1:62:bb:e4:4f:6d:be:c0:26:dd:9b:5b:b5:51:ed:f8: aa:59:94:cd:7c:78:d8:b8:53:4c:69:23:3d:7b:f8:f0:16:f3: d4:b6:6c:75:0e:bd:b5:b1:70:d1:c8:c2:9f:6d:31:e7:83:66: 8c:8f:70:75:92:e6:79:62:2a:4d:33:78:4f:c5:1a:94:06:b3: ab:4a:60:aa:b8:09:62:7b:7b:1f:f4:8b:d3:be:c5:b7:20:05: c2:18:b2:e9:9f:15:b7:32:13:69:39:47:da:04:35:88:97:7e: 8b:bd:e7:66:f7:22:a7:3e:00:d6:e2:43:f2:02:ac:af:96:cb: ae:2b:d2:f1:55:04:f8:7b:7d:f4:e1:76:9c:83:39:87:47:c4: 03:f0:7e:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrsHTzPQLPGF9FzsRt05nBqDpYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNTA4MjIxNjA1NDJaFw0yNTA4MjYwMzUxNDJaMDMxMTAvBgNV BAMTKEIzOThGNUU5RkQ5MTEyMUVDNEUyOTdCMzhGOTFEOTZBRDUyQTlDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeY2MolIvzwEploKaaQp0VqlYB qpWduon0tJzF4b5vtDnAEyD988uj9Xy4xFFd/OZHvuF5ALVD1NnfamebQa4flTBs MBCYzSYJTKtVi9J/UFY0kEcZmjGFKQ+aw9eB4tog2egXH57CMJcCaKOPx+YGigFa DziF+jR/7XkXf3ACXoX1yzQvWP1yX5v3J+PI9mWeSlKx680xKNQzTUP0kaNVOSwD r39gvPF2I0A26sHDn15C4VlMQagWdQESBrmCufCCXcduBQg9d/vAmjaX36dj7URC j6jXtXpGjPYdCJ2X2QHgkfWm7twDpAh//TQFV4DcxU7/rEU6QVlwEQIMTgGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5j16f2REh7E4pezj5HZatUqnNIwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOllQm0+adqxheBq4nkrZTuq6w2A9Ann1yJ A1I1olm9I+7XIj1/qmEXDBzLsEeAlmBoIkGI6jQZCgozg89jh39sagGleCndDwLd hP1AQWuc9MDi6f/IiYGoJHRn3jcqN0ajnMKOe76voszPRsi30WK75E9tvsAm3Ztb tVHt+KpZlM18eNi4U0xpIz17+PAW89S2bHUOvbWxcNHIwp9tMeeDZoyPcHWS5nli Kk0zeE/FGpQGs6tKYKq4CWJ7ex/0i9O+xbcgBcIYsumfFbcyE2k5R9oENYiXfou9 52b3Iqc+ANbiQ/ICrK+Wy64r0vFVBPh7ffThdpyDOYdHxAPwfqk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:50 2025 by rpki-client