$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: t8iOysBFJzYWnYIBv+R5AEpjRWMf0fNH6C0/hCTphak= Subject key identifier: E0:7C:C6:53:96:06:52:10:98:BA:4A:73:78:24:78:79:28:14:DE:70 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 5DDBCFF952066074A6A08223F1F449EB4D74C1E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 049A Signing time: Fri 22 Aug 2025 22:21:02 +0000 Manifest this update: Fri 22 Aug 2025 22:16:02 +0000 Manifest next update: Tue 26 Aug 2025 05:31:02 +0000 Files and hashes: 1: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: T2dV9ECct1Ud7fOAgoF7v8UJVDJx36l7KpwFXhp6Z8U=) 2: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=) 3: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 4: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: r4bbE3J74imEfGNc3Yq/RkOZJXcnua5imBb7qm1BGas=) 5: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: yhrI96djPzmsJFPjMznifWha5y9C/Ph/ZCeY/G+kQzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:db:cf:f9:52:06:60:74:a6:a0:82:23:f1:f4:49:eb:4d:74:c1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Aug 22 22:16:02 2025 GMT Not After : Aug 26 05:31:02 2025 GMT Subject: CN=E07CC6539606521098BA4A73782478792814DE70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:9d:91:34:69:4f:ac:e2:5a:3e:17:79:59: 65:a4:0e:99:9c:bd:c4:66:a6:2f:cd:f7:e1:b1:9c: 06:2c:0d:a3:e3:60:7a:a2:a7:d0:7f:38:4a:75:52: 7c:fc:ea:62:2e:d6:2d:ac:75:4a:28:2c:33:21:49: 57:f7:51:fe:c1:eb:6e:af:79:a0:0a:4d:c6:54:e7: 14:ea:e8:c5:31:6b:b7:4c:da:3f:a9:d3:af:5a:90: cd:e9:4f:56:42:16:8f:e8:cc:1c:ba:b1:fd:e0:d9: 39:5c:65:eb:bc:f8:9c:42:96:6f:69:7e:e8:ff:41: 75:77:61:d8:36:5d:fa:bd:c5:75:58:5a:dd:ec:cb: 57:95:c8:19:c8:14:8b:fc:8a:45:c6:7b:c3:c5:4b: f3:98:ed:e0:b4:e2:03:32:f2:e3:b3:17:6a:f6:08: b4:d4:07:e7:81:09:73:c9:31:d6:40:55:78:e8:b8: c5:89:f4:6b:f8:eb:c9:8b:5b:2f:35:7f:83:a2:be: 04:ba:40:22:f0:63:a0:38:92:9f:df:b4:9e:c5:df: dd:d4:7a:fd:df:22:dd:77:2a:83:9b:a7:c4:d8:4c: b9:ec:c7:46:43:7f:54:30:bc:56:53:4f:95:3c:b1: 1a:7f:a9:12:65:b8:6f:19:a0:9c:99:c8:09:6b:05: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7C:C6:53:96:06:52:10:98:BA:4A:73:78:24:78:79:28:14:DE:70 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f0:ea:19:bc:c0:87:61:ad:29:73:af:37:60:5b:2d:e3:7e:bf: 9a:35:c5:eb:42:c7:d1:b0:1e:d9:2d:78:c3:94:ae:2e:13:e4: e0:0a:25:4c:51:27:34:c4:d2:98:6b:73:7e:c3:ed:24:04:76: 79:e6:d2:fe:d4:a2:92:d7:ae:91:15:2e:f1:84:2a:5f:04:ed: 5a:53:0e:11:50:d1:12:70:fa:2d:51:3e:0c:8e:65:f6:a1:7b: 30:4d:b5:53:bf:d5:37:d3:f7:ac:67:cc:64:a8:fa:f5:8c:13: e2:77:4d:fb:4b:a6:80:18:c7:01:57:1e:fd:ea:35:c3:25:7e: 03:e1:c1:30:c0:13:69:7d:93:8d:4f:ce:ba:a5:c0:f6:0b:b4: 9a:f1:34:fb:ef:3b:d3:0b:17:9e:1e:1f:88:3c:67:d4:c9:20: f5:b8:61:65:5d:39:da:a9:2f:e1:47:99:5f:44:f6:5c:57:16: 83:81:95:c3:8b:93:49:a0:66:73:98:34:ad:1d:08:b3:1f:97: c0:88:56:7f:2a:c2:0b:4a:c0:a6:cf:e6:61:78:4e:8b:d3:7c: 59:80:62:64:06:06:70:05:dd:45:73:60:e7:a7:3e:e2:7b:e9: ec:6b:21:3d:37:c7:12:6d:35:a4:d1:86:80:b3:66:b0:3f:ac: f2:8a:d8:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdvP+VIGYHSmoIIj8fRJ6010wegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA4MjIyMjE2MDJaFw0yNTA4MjYwNTMxMDJaMDMxMTAvBgNV BAMTKEUwN0NDNjUzOTYwNjUyMTA5OEJBNEE3Mzc4MjQ3ODc5MjgxNERFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg52RNGlPrOJaPhd5WWWkDpmc vcRmpi/N9+GxnAYsDaPjYHqip9B/OEp1Unz86mIu1i2sdUooLDMhSVf3Uf7B626v eaAKTcZU5xTq6MUxa7dM2j+p069akM3pT1ZCFo/ozBy6sf3g2TlcZeu8+JxClm9p fuj/QXV3Ydg2Xfq9xXVYWt3sy1eVyBnIFIv8ikXGe8PFS/OY7eC04gMy8uOzF2r2 CLTUB+eBCXPJMdZAVXjouMWJ9Gv468mLWy81f4OivgS6QCLwY6A4kp/ftJ7F393U ev3fIt13KoObp8TYTLnsx0ZDf1QwvFZTT5U8sRp/qRJluG8ZoJyZyAlrBa9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4HzGU5YGUhCYukpzeCR4eSgU3nAwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPDqGbzAh2GtKXOvN2BbLeN+v5o1xetCx9Gw HtkteMOUri4T5OAKJUxRJzTE0phrc37D7SQEdnnm0v7UopLXrpEVLvGEKl8E7VpT DhFQ0RJw+i1RPgyOZfahezBNtVO/1TfT96xnzGSo+vWME+J3TftLpoAYxwFXHv3q NcMlfgPhwTDAE2l9k41PzrqlwPYLtJrxNPvvO9MLF54eH4g8Z9TJIPW4YWVdOdqp L+FHmV9E9lxXFoOBlcOLk0mgZnOYNK0dCLMfl8CIVn8qwgtKwKbP5mF4TovTfFmA YmQGBnAF3UVzYOenPuJ76exrIT03xxJtNaTRhoCzZrA/rPKK2Ig= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:59 2025 by rpki-client