$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: G9e9E8uGj4YAuU6eWoEEa2yzqMJE1iW2xIIz1jXVd1M= Subject key identifier: A4:B6:F6:EB:7F:3D:51:1D:A2:3C:A0:CC:08:2E:B1:4B:E2:B4:5B:3C Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 285831DA08EAEEC1DDD08E8235D1258530389FB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 0488 Signing time: Wed 23 Jul 2025 21:11:38 +0000 Manifest this update: Wed 23 Jul 2025 21:06:38 +0000 Manifest next update: Sun 27 Jul 2025 05:38:38 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: rFlWlwRqgELOVg2xXmoYMcgPP87Q897Zehd3/zhsqGk=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: NgCvE1hp44YLC96n/lodIlhmLB1FaaOx9l0TuasHSug=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=) 4: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 05:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:58:31:da:08:ea:ee:c1:dd:d0:8e:82:35:d1:25:85:30:38:9f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Jul 23 21:06:38 2025 GMT Not After : Jul 27 05:38:38 2025 GMT Subject: CN=A4B6F6EB7F3D511DA23CA0CC082EB14BE2B45B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:96:43:42:dd:88:3d:3c:d8:2f:d9:00:3b: 25:84:84:26:b7:c8:7e:7a:b4:98:33:ca:3f:b7:9c: b0:f8:5f:11:56:ec:b2:28:8b:51:24:7a:26:80:47: 39:d5:f5:91:70:d5:98:91:c0:14:f1:79:80:1e:4e: 32:9f:9b:c4:b6:03:0a:7b:cf:f1:0c:02:f3:6d:e7: 37:a2:07:c0:ed:11:89:cf:fb:7f:90:dc:82:8f:94: 02:83:ab:b2:21:92:06:35:7f:fb:23:03:90:5e:c2: 73:15:78:0b:ac:e0:0c:83:d4:67:1e:39:94:c0:44: 91:6a:89:c4:75:be:49:67:e3:25:e6:80:2a:1f:23: ec:e6:bd:68:97:39:38:e2:3d:6a:64:e7:b9:33:c8: 29:db:d6:a7:59:00:01:56:8b:06:e7:94:de:9d:ab: 4b:c2:21:73:1c:54:80:81:2d:0f:b5:83:d4:02:c2: 9f:7e:b1:f3:e9:70:d2:1c:43:06:fc:1d:de:2d:36: 43:0b:52:c1:a7:cb:2c:52:0c:cf:eb:24:1e:79:60: c5:fc:a9:2a:31:6b:12:df:cd:c2:4d:a2:cc:ba:ea: 2c:17:14:17:c8:ff:00:51:36:25:69:de:90:40:12: 86:7c:7f:5f:ae:20:b5:06:15:87:a8:9c:03:13:a8: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B6:F6:EB:7F:3D:51:1D:A2:3C:A0:CC:08:2E:B1:4B:E2:B4:5B:3C X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cb:d0:6f:9e:37:78:aa:8e:f0:7f:1d:ff:c5:99:2b:de:fb: 66:10:db:92:b9:dd:2f:64:4c:b7:84:60:4c:8a:8e:4d:09:30: 9a:45:96:6a:fa:6f:ee:3c:e9:06:c3:ed:74:37:df:61:0b:bf: a0:98:21:4b:39:89:45:e7:6c:50:4c:44:e1:c6:4e:34:5a:ef: e2:7c:2c:b2:27:1f:b4:cf:42:26:98:20:64:4b:2d:62:80:9a: 90:e6:c2:fe:0a:be:a3:aa:da:af:7e:55:20:ea:c9:02:eb:5d: d8:42:dd:6d:4b:ab:7f:02:1b:3b:9a:76:89:3f:9a:33:08:77: f6:d5:df:28:f5:5a:bc:4e:36:e7:84:8c:db:cd:c0:c3:e0:66: 11:df:26:00:65:13:56:94:b5:5a:c3:a6:3c:31:8b:8e:70:c6: b3:29:ff:9d:eb:c2:b8:d7:9f:59:5f:57:c1:d9:25:75:f8:c7: db:0e:8a:1f:37:a1:ea:7f:ae:a6:b4:48:e6:48:ec:67:b7:0b: 10:62:a4:53:c5:3e:19:76:cd:67:9b:82:86:58:60:d7:b7:7b: 0a:72:2f:5f:87:84:0a:e9:91:33:11:b3:d8:7e:b9:dd:28:20: ac:c7:a8:bc:35:6a:80:7a:79:30:20:0e:6f:b4:1b:4b:fb:49: b3:81:7c:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFgx2gjq7sHd0I6CNdElhTA4n7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTA3MjMyMTA2MzhaFw0yNTA3MjcwNTM4MzhaMDMxMTAvBgNV BAMTKEE0QjZGNkVCN0YzRDUxMURBMjNDQTBDQzA4MkVCMTRCRTJCNDVCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06ZZDQt2IPTzYL9kAOyWEhCa3 yH56tJgzyj+3nLD4XxFW7LIoi1EkeiaARznV9ZFw1ZiRwBTxeYAeTjKfm8S2Awp7 z/EMAvNt5zeiB8DtEYnP+3+Q3IKPlAKDq7IhkgY1f/sjA5BewnMVeAus4AyD1Gce OZTARJFqicR1vkln4yXmgCofI+zmvWiXOTjiPWpk57kzyCnb1qdZAAFWiwbnlN6d q0vCIXMcVICBLQ+1g9QCwp9+sfPpcNIcQwb8Hd4tNkMLUsGnyyxSDM/rJB55YMX8 qSoxaxLfzcJNosy66iwXFBfI/wBRNiVp3pBAEoZ8f1+uILUGFYeonAMTqI73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLb26389UR2iPKDMCC6xS+K0WzwwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXL0G+eN3iqjvB/Hf/FmSve+2YQ25K53S9k TLeEYEyKjk0JMJpFlmr6b+486QbD7XQ332ELv6CYIUs5iUXnbFBMROHGTjRa7+J8 LLInH7TPQiaYIGRLLWKAmpDmwv4KvqOq2q9+VSDqyQLrXdhC3W1Lq38CGzuadok/ mjMId/bV3yj1WrxONueEjNvNwMPgZhHfJgBlE1aUtVrDpjwxi45wxrMp/53rwrjX n1lfV8HZJXX4x9sOih83oep/rqa0SOZI7Ge3CxBipFPFPhl2zWebgoZYYNe3ewpy L1+HhArpkTMRs9h+ud0oIKzHqLw1aoB6eTAgDm+0G0v7SbOBfG0= -----END CERTIFICATE-----Generated at Sat Jul 26 02:52:59 2025 by rpki-client