$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: RHQot3w6m0DycwjczE/Lgf8YoN40dBCWEzh3b2crTvk= Subject key identifier: 05:E2:25:AF:AB:DF:4E:CF:1A:F9:9F:E9:21:D6:0A:82:88:DF:09:A5 Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 3272F4D27FACA62F3D781C5C4AEF6220C5CC5D8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: F2 Signing time: Sat 19 Jul 2025 19:51:40 +0000 Manifest this update: Sat 19 Jul 2025 19:46:40 +0000 Manifest next update: Wed 23 Jul 2025 04:30:40 +0000 Files and hashes: 1: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: n+DPLmcqYwI3IBeAJRuCbop2q+hBMNkrmZfieDQG7ks=) 2: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) 3: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) 4: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:72:f4:d2:7f:ac:a6:2f:3d:78:1c:5c:4a:ef:62:20:c5:cc:5d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Jul 19 19:46:40 2025 GMT Not After : Jul 23 04:30:40 2025 GMT Subject: CN=05E225AFABDF4ECF1AF99FE921D60A8288DF09A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:66:d7:c8:dc:c8:0c:9b:ff:bf:86:8c:39: 34:56:46:12:e9:f6:b6:bb:cf:cb:7b:ef:fe:11:45: 55:57:5c:bd:44:f0:b7:7d:43:c3:c7:68:e3:6b:b1: 84:47:5f:64:b9:48:ca:6a:aa:5f:33:cc:26:28:4c: d1:17:06:56:db:95:53:e4:d2:09:50:f7:72:ac:dd: 24:59:76:01:9e:b1:ca:84:5b:ae:b7:d3:36:0d:65: 11:68:32:aa:91:13:a7:1e:73:d5:4e:47:f6:07:eb: 01:80:b6:2f:01:32:f4:9e:75:0e:bc:06:15:41:6b: 85:b2:5a:a0:de:6d:79:97:e5:79:c3:fe:35:87:ca: c7:68:40:4a:5f:9c:2a:e0:68:32:19:93:92:c5:76: 65:86:1a:95:f3:ea:54:a9:db:fa:96:f7:4d:c5:70: 0f:1e:2d:f3:f8:e5:a2:1b:7c:f9:e1:0c:05:0d:22: 00:6e:14:8b:ff:07:d6:e9:62:2e:44:62:df:4d:9e: 5e:99:d3:cd:f0:29:c5:f3:33:11:48:8c:9a:cf:0c: 9c:74:26:24:6a:40:28:d4:7a:95:fb:f6:86:41:09: 7e:5a:a5:50:d6:95:b0:03:51:fb:18:1c:f8:d7:11: fd:1a:86:f6:46:c6:6a:ea:11:1d:be:7d:00:9f:31: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E2:25:AF:AB:DF:4E:CF:1A:F9:9F:E9:21:D6:0A:82:88:DF:09:A5 X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:48:a4:7e:c8:a1:9a:cd:bd:9a:cd:f3:c0:73:80:e4:0c:03: db:b5:b5:45:1b:92:2b:ea:01:7c:4f:7b:e9:51:96:87:01:b9: 45:52:62:a7:76:64:90:91:69:63:46:2b:5a:f3:22:f5:c6:d6: 3c:fc:e9:1b:80:77:f8:ad:74:d8:9d:d6:18:c4:b1:f4:71:40: f0:4d:94:b1:62:9e:26:37:fd:cd:a0:c2:bb:61:39:d3:a4:06: 61:5b:c8:be:a2:3d:95:60:2d:97:2d:f7:57:ed:39:fc:96:c6: 12:c8:f4:96:b4:b8:b0:a0:5f:57:85:b5:c4:83:2c:51:43:3c: 89:19:7d:d4:06:7c:c9:b1:aa:01:2f:91:d1:04:2d:17:a0:cd: ca:50:d3:19:0d:09:2d:47:7c:f2:6d:60:5b:5d:ce:30:21:43: 7e:32:1c:d9:2f:d5:0a:fd:1f:f6:ba:b7:37:a6:05:4c:9b:05: a7:bb:ea:ae:25:b3:f8:ed:af:34:7e:25:fe:96:88:0b:04:a1: b9:30:1d:fd:4c:be:81:b1:28:90:db:76:d6:8a:c3:f1:99:3a: a1:cb:06:f8:07:e1:ed:8d:aa:52:10:b4:ee:84:dc:7f:0d:8f: ec:07:39:c2:c1:c4:f2:b8:15:72:1c:0d:60:b1:db:98:5d:36: 1e:9e:c6:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnL00n+spi89eBxcSu9iIMXMXYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTA3MTkxOTQ2NDBaFw0yNTA3MjMwNDMwNDBaMDMxMTAvBgNV BAMTKDA1RTIyNUFGQUJERjRFQ0YxQUY5OUZFOTIxRDYwQTgyODhERjA5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbWbXyNzIDJv/v4aMOTRWRhLp 9ra7z8t77/4RRVVXXL1E8Ld9Q8PHaONrsYRHX2S5SMpqql8zzCYoTNEXBlbblVPk 0glQ93Ks3SRZdgGescqEW6630zYNZRFoMqqRE6cec9VOR/YH6wGAti8BMvSedQ68 BhVBa4WyWqDebXmX5XnD/jWHysdoQEpfnCrgaDIZk5LFdmWGGpXz6lSp2/qW903F cA8eLfP45aIbfPnhDAUNIgBuFIv/B9bpYi5EYt9Nnl6Z083wKcXzMxFIjJrPDJx0 JiRqQCjUepX79oZBCX5apVDWlbADUfsYHPjXEf0ahvZGxmrqER2+fQCfMSf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBeIlr6vfTs8a+Z/pIdYKgojfCaUwHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNIpH7IoZrNvZrN88BzgOQMA9u1tUUbkivq AXxPe+lRlocBuUVSYqd2ZJCRaWNGK1rzIvXG1jz86RuAd/itdNid1hjEsfRxQPBN lLFiniY3/c2gwrthOdOkBmFbyL6iPZVgLZct91ftOfyWxhLI9Ja0uLCgX1eFtcSD LFFDPIkZfdQGfMmxqgEvkdEELRegzcpQ0xkNCS1HfPJtYFtdzjAhQ34yHNkv1Qr9 H/a6tzemBUybBae76q4ls/jtrzR+Jf6WiAsEobkwHf1MvoGxKJDbdtaKw/GZOqHL BvgH4e2NqlIQtO6E3H8Nj+wHOcLBxPK4FXIcDWCx25hdNh6exvs= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:33 2025 by rpki-client