$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json) Hash identifier: K5vP8vRim/7jxsHrbc+icK7gP6cHcG4Na6/LozB7S04= Subject key identifier: 9D:38:9C:C0:B2:9E:1D:C8:2B:18:C5:99:E8:86:B0:44:A8:71:B6:C0 Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Certificate serial: 75028663915C8F2E794E3E44BC5BFC56B03C4C33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft Manifest number: 0218 Signing time: Tue 22 Jul 2025 19:01:59 +0000 Manifest this update: Tue 22 Jul 2025 18:56:59 +0000 Manifest next update: Sat 26 Jul 2025 01:40:59 +0000 Files and hashes: 1: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: zBdUvaLA2ZmeuE0WY9MB2ox/aE6xnYDzo7jFoiw/bvU=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: 6F/+m53CI+OBq/k1F+jb2qhZ0UKG610wF81rsZOA7iw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:02:86:63:91:5c:8f:2e:79:4e:3e:44:bc:5b:fc:56:b0:3c:4c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Validity Not Before: Jul 22 18:56:59 2025 GMT Not After : Jul 26 01:40:59 2025 GMT Subject: CN=9D389CC0B29E1DC82B18C599E886B044A871B6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:97:27:95:09:61:3a:d6:f5:cb:25:59:18: bf:03:f2:b8:6b:f7:11:fe:45:60:a3:11:c2:dd:25: aa:7b:4d:fe:60:15:57:43:3e:c2:c2:5f:ce:b5:34: bf:85:e2:c0:40:68:68:1f:2b:ea:c5:66:f7:2a:f4: 5a:63:53:a1:7d:34:cf:57:b9:39:e4:f7:41:8f:60: fe:5b:72:81:57:d1:78:1b:03:0a:8f:2e:d8:9c:9e: 49:5e:8c:4d:4a:22:6c:be:7b:d3:b7:ef:0e:f4:e3: e2:26:29:39:08:6e:db:29:51:25:10:6b:d5:28:f6: 9f:a7:a1:9d:dd:2a:95:11:9d:17:2b:cb:9e:37:d6: 0b:a2:09:05:49:ec:f7:98:f0:0c:5c:18:6c:b9:0b: 8c:02:de:83:05:b9:65:4f:88:a6:4c:9a:a7:9a:8f: cb:d6:a6:b9:31:d6:b3:ad:4d:37:a2:08:db:18:54: d0:2d:d4:60:84:49:f2:71:59:1e:c0:ee:14:85:13: 69:b0:60:de:92:25:80:37:bc:c3:80:0b:46:ea:a9: 5f:af:2c:03:39:e6:d6:ad:28:82:d2:18:1f:a7:43: 7b:6a:2c:81:09:7b:99:ca:f1:1f:2b:ab:93:99:3b: a9:02:fa:56:07:3d:c3:db:fb:2b:b8:cc:cd:13:f5: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:38:9C:C0:B2:9E:1D:C8:2B:18:C5:99:E8:86:B0:44:A8:71:B6:C0 X509v3 Authority Key Identifier: keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:65:a1:99:da:75:d5:cd:69:5f:8e:da:7b:3e:1e:11:63:1d: b6:13:5b:df:e2:0d:ea:1f:62:a1:a7:f9:2b:31:56:21:4a:b1: af:cd:ed:3a:1f:8b:c1:1a:a5:b1:37:5b:fb:e9:b4:8d:03:c6: 68:30:82:82:ca:54:30:69:7f:d2:16:a8:87:b4:12:67:28:62: 63:5b:a4:42:7e:53:bb:87:cb:93:98:36:f3:76:61:88:e9:bd: c7:c1:98:7e:f3:cf:b0:bb:03:2f:09:a0:17:cd:9f:53:dc:9d: 40:8d:59:ec:66:f1:d6:1a:30:fd:2e:91:d1:a2:78:64:ef:be: e2:91:17:ab:7f:c5:76:68:a6:8b:f2:b9:ec:71:9f:d8:69:f5: 7d:02:54:e0:19:0f:67:04:08:6a:88:46:86:56:c8:1a:fa:d8: e6:89:61:2d:c4:83:38:37:75:59:bb:f9:5a:92:6e:fd:d4:9e: ba:92:f0:83:73:93:19:d5:d4:9c:9e:cb:e1:f4:b7:06:80:8e: 45:d4:da:8c:9c:b1:2f:19:2b:1c:f3:9c:80:ca:3f:73:c8:6b: 41:2c:d6:6e:d3:9e:f8:9b:86:f8:5d:e3:bd:33:03:97:9f:63: 29:9e:df:40:07:b9:27:b3:8d:87:a4:77:e5:ec:aa:d8:17:d2: b4:c8:a2:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQKGY5Fcjy55Tj5EvFv8VrA8TDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1 QzY4NTA5QTAeFw0yNTA3MjIxODU2NTlaFw0yNTA3MjYwMTQwNTlaMDMxMTAvBgNV BAMTKDlEMzg5Q0MwQjI5RTFEQzgyQjE4QzU5OUU4ODZCMDQ0QTg3MUI2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1z5cnlQlhOtb1yyVZGL8D8rhr 9xH+RWCjEcLdJap7Tf5gFVdDPsLCX861NL+F4sBAaGgfK+rFZvcq9FpjU6F9NM9X uTnk90GPYP5bcoFX0XgbAwqPLticnklejE1KImy+e9O37w704+ImKTkIbtspUSUQ a9Uo9p+noZ3dKpURnRcry5431guiCQVJ7PeY8AxcGGy5C4wC3oMFuWVPiKZMmqea j8vWprkx1rOtTTeiCNsYVNAt1GCESfJxWR7A7hSFE2mwYN6SJYA3vMOAC0bqqV+v LAM55tatKILSGB+nQ3tqLIEJe5nK8R8rq5OZO6kC+lYHPcPb+yu4zM0T9aVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTicwLKeHcgrGMWZ6IawRKhxtsAwHwYDVR0j BBgwFoAUpKTEJqT0KimCljb7MiP6f1xoUJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMC9BNEE0QzQyNkE0 RjQyQTI5ODI5NjM2RkIzMjIzRkE3RjVDNjg1MDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1QzY4 NTA5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZB N0Y1QzY4NTA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1loZnaddXNaV+O2ns+HhFjHbYTW9/iDeof YqGn+SsxViFKsa/N7Tofi8EapbE3W/vptI0DxmgwgoLKVDBpf9IWqIe0EmcoYmNb pEJ+U7uHy5OYNvN2YYjpvcfBmH7zz7C7Ay8JoBfNn1PcnUCNWexm8dYaMP0ukdGi eGTvvuKRF6t/xXZopovyuexxn9hp9X0CVOAZD2cECGqIRoZWyBr62OaJYS3Egzg3 dVm7+VqSbv3UnrqS8INzkxnV1Jyey+H0twaAjkXU2oycsS8ZKxzznIDKP3PIa0Es 1m7Tnvibhvhd470zA5efYyme30AHuSezjYekd+XsqtgX0rTIomo= -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:34 2025 by rpki-client