$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: Fvi9CGlRyNUEYXW5DKKq0QSboqBQRbkOzQIvDUrZbEo= Subject key identifier: D3:41:4B:B1:26:5C:B2:85:BF:D2:57:E5:D2:3B:6D:93:92:87:E2:3B Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 747C9834646E27B280BC9B2E00DD931A8CE4706D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 04A1 Signing time: Tue 16 Sep 2025 01:21:40 +0000 Manifest this update: Tue 16 Sep 2025 01:16:40 +0000 Manifest next update: Fri 19 Sep 2025 04:50:40 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: 8WF1jS4M4IsXNyGW9UtegthzdC7Esl2f50dKaKaDEWc=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) 3: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 04:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7c:98:34:64:6e:27:b2:80:bc:9b:2e:00:dd:93:1a:8c:e4:70:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Sep 16 01:16:40 2025 GMT Not After : Sep 19 04:50:40 2025 GMT Subject: CN=D3414BB1265CB285BFD257E5D23B6D939287E23B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:99:fd:04:2a:cb:bf:9c:1a:6f:f6:bb:08: 1d:df:5f:35:a2:f6:23:80:d2:ab:6b:05:3c:bb:61: 05:90:a7:ec:63:ac:ff:c4:75:06:dc:9f:3e:e5:21: df:4e:3a:81:e7:f1:fa:99:fd:9c:29:4a:51:20:9b: 3b:45:20:b9:aa:4c:03:98:1a:6f:3e:cf:54:53:6b: b1:43:bb:32:86:dc:42:57:c3:92:28:84:70:0e:fa: 08:3b:95:9d:d6:32:dd:b5:15:56:99:18:28:c0:c8: c6:ca:03:a8:b2:b1:e3:f5:44:7c:fa:2a:13:5d:ab: 0a:1b:01:e7:52:eb:08:3d:21:c1:50:30:67:7d:83: a4:a3:07:49:45:5b:2c:2e:47:a2:c1:ed:be:bf:e5: cc:83:9e:45:1b:b6:83:8c:33:4f:27:0c:a0:28:ee: 6b:ef:49:5d:98:f9:91:fd:7a:27:2b:42:f6:aa:95: 98:81:c8:0e:c5:8a:ba:6b:e9:46:04:90:93:75:e7: d9:d7:25:12:34:07:58:40:52:b4:ac:08:81:9a:46: 51:a7:c5:b0:78:b4:a3:05:4a:33:e2:02:ad:be:7b: 2d:d4:d2:40:8f:4f:6d:b7:f9:8f:6b:40:ec:98:5c: e1:e5:b7:59:ce:57:11:ff:37:49:36:9e:4d:86:53: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:4B:B1:26:5C:B2:85:BF:D2:57:E5:D2:3B:6D:93:92:87:E2:3B X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5b:1e:64:07:6f:be:e3:23:36:a2:2a:e6:6b:38:30:4c:40: fb:19:52:a6:ca:2a:5c:fd:f3:1c:aa:60:20:6b:42:2f:e7:76: 14:10:bd:15:b3:fb:f9:34:c0:ba:b3:d6:9f:8c:d3:9d:2f:5f: 0e:29:a4:ed:67:11:5e:79:07:61:b7:f9:88:16:35:02:d5:2e: c4:55:b3:5a:ff:11:c1:8f:8e:b8:a7:96:30:75:fb:d8:4d:a2: b6:9b:d0:bb:fc:68:57:e7:53:5e:f1:e6:49:8f:7f:02:a0:b0: 17:bf:49:92:70:25:fa:5e:de:06:c6:21:b9:13:ed:bc:40:75: 3d:08:d2:58:2b:03:0d:dd:fe:2d:c4:9b:6a:6e:c4:64:ed:10: 04:05:5e:bd:65:be:1e:ee:46:5e:31:af:a7:94:39:6d:1f:37: c4:fe:95:4f:b2:aa:db:32:6d:e5:0f:db:5e:cc:f8:33:6c:3d: 34:84:d8:2d:fb:47:5b:0c:75:88:0b:62:9b:62:55:be:06:da: d2:a7:f7:1f:5f:ee:ae:0b:a5:d5:9c:32:d3:4f:73:c4:e9:85: 29:0d:b8:33:91:a2:bf:54:67:f0:44:4c:db:13:8b:a8:98:eb: 4c:dc:e9:d8:c8:f5:40:3f:84:85:f6:68:29:d0:2c:8d:17:3c: 0b:2d:67:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHyYNGRuJ7KAvJsuAN2TGozkcG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTA5MTYwMTE2NDBaFw0yNTA5MTkwNDUwNDBaMDMxMTAvBgNV BAMTKEQzNDE0QkIxMjY1Q0IyODVCRkQyNTdFNUQyM0I2RDkzOTI4N0UyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAZn9BCrLv5wab/a7CB3fXzWi 9iOA0qtrBTy7YQWQp+xjrP/EdQbcnz7lId9OOoHn8fqZ/ZwpSlEgmztFILmqTAOY Gm8+z1RTa7FDuzKG3EJXw5IohHAO+gg7lZ3WMt21FVaZGCjAyMbKA6iyseP1RHz6 KhNdqwobAedS6wg9IcFQMGd9g6SjB0lFWywuR6LB7b6/5cyDnkUbtoOMM08nDKAo 7mvvSV2Y+ZH9eicrQvaqlZiByA7Firpr6UYEkJN159nXJRI0B1hAUrSsCIGaRlGn xbB4tKMFSjPiAq2+ey3U0kCPT223+Y9rQOyYXOHlt1nOVxH/N0k2nk2GUwcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00FLsSZcsoW/0lfl0jttk5KH4jswHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1bHmQHb77jIzaiKuZrODBMQPsZUqbKKlz9 8xyqYCBrQi/ndhQQvRWz+/k0wLqz1p+M050vXw4ppO1nEV55B2G3+YgWNQLVLsRV s1r/EcGPjrinljB1+9hNorab0Lv8aFfnU17x5kmPfwKgsBe/SZJwJfpe3gbGIbkT 7bxAdT0I0lgrAw3d/i3Em2puxGTtEAQFXr1lvh7uRl4xr6eUOW0fN8T+lU+yqtsy beUP217M+DNsPTSE2C37R1sMdYgLYptiVb4G2tKn9x9f7q4LpdWcMtNPc8TphSkN uDORor9UZ/BETNsTi6iY60zc6djI9UA/hIX2aCnQLI0XPAstZ+M= -----END CERTIFICATE-----Generated at Tue Sep 16 19:46:56 2025 by rpki-client