$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: gYLMI9ElxWNpSAND8dZAtQfHG4njC9Z7SA1y3f3nqK4= Subject key identifier: 59:15:93:9A:4C:EB:AB:3F:3B:77:AE:8C:99:E5:0C:CC:C4:37:3F:EC Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 2951711A7542AD5DE6332CA4B4A8A51A5E619C55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0205 Signing time: Sat 19 Jul 2025 01:21:40 +0000 Manifest this update: Sat 19 Jul 2025 01:16:40 +0000 Manifest next update: Tue 22 Jul 2025 09:54:40 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: MtZcG2e1PqgpMvr5v95WyWmGSXge0wXbJaIQCI7TByE=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:51:71:1a:75:42:ad:5d:e6:33:2c:a4:b4:a8:a5:1a:5e:61:9c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Jul 19 01:16:40 2025 GMT Not After : Jul 22 09:54:40 2025 GMT Subject: CN=5915939A4CEBAB3F3B77AE8C99E50CCCC4373FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:e5:9d:59:8d:85:96:d2:9f:ad:16:2a:0c: cb:8a:d7:11:79:30:af:11:b6:43:ba:05:5c:5a:84: b9:f2:29:21:96:b1:32:4e:97:82:53:b6:9d:3c:c8: 8d:d4:c8:05:08:6c:a0:ce:89:65:9d:94:60:2d:5e: ca:8b:83:c8:2d:7d:fb:a1:66:da:08:2d:a8:58:02: 8e:2f:87:bc:4c:21:98:a8:88:85:2b:db:2d:72:ff: a2:91:0a:ee:3d:6f:6e:75:de:bf:eb:1d:a6:d7:33: 19:c3:e0:f0:ad:6b:df:c6:00:f6:91:08:91:8b:1b: c8:47:60:58:b1:f8:40:7a:b6:df:4a:70:a6:3d:f7: 5a:e0:4d:46:74:59:a3:75:a5:db:83:e2:58:b5:c7: 36:aa:fd:c7:31:ae:d7:c2:6a:b6:70:bb:e2:24:a9: 5b:ad:1e:49:c1:92:ea:15:e4:ba:43:9b:7e:55:bf: 41:9e:9f:50:b3:f1:f7:f7:23:a3:2c:fa:3d:cc:7a: a9:76:42:b9:dc:f1:0a:ce:dc:99:c4:5b:26:b5:b7: b5:c5:75:47:f3:1a:28:a8:38:5a:38:6d:97:58:16: 8c:ee:d8:48:54:69:40:69:11:3b:db:fa:4b:91:99: 7e:f5:a9:7a:0e:d2:b2:d7:63:f8:6e:0e:dc:ca:7a: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:93:9A:4C:EB:AB:3F:3B:77:AE:8C:99:E5:0C:CC:C4:37:3F:EC X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ea:2b:ce:0f:cd:54:77:19:b0:b5:41:a8:f8:39:46:95:e5: bb:bc:9e:11:10:87:8b:13:3f:d2:48:92:73:38:dc:3e:b5:9c: 06:1f:f8:a1:76:be:cd:d5:b9:d8:21:7a:51:5b:fa:b2:66:9b: b1:80:ce:59:13:40:db:f3:bb:bf:63:97:ba:b2:96:05:d8:61: fa:7a:1d:eb:a0:47:49:cb:a9:d0:02:6b:21:c5:b4:8a:d0:c2: ab:d9:a8:b9:23:99:cf:d8:f8:a0:dd:a1:8b:4f:9e:4a:50:f5: a1:8a:c1:38:cc:41:04:4a:f5:c6:62:0f:e5:b0:4e:24:ee:43: 61:5d:e2:78:01:b5:bb:20:33:e0:b0:d5:a9:0e:ae:40:29:98: 73:01:37:23:b9:15:01:bb:9c:99:10:d7:f2:92:4f:45:c2:35: d6:bc:a7:52:ab:58:35:5e:a0:3c:f5:52:9f:47:2f:e1:6a:22: dd:aa:dc:cc:cb:fb:7c:ad:36:55:3e:0b:82:75:66:75:ed:81: 1f:35:dd:8d:30:a5:3a:eb:e5:68:ee:49:fa:a0:b1:5f:57:5d: 90:4b:8e:61:34:53:a2:c9:e1:e8:f4:18:68:bc:99:96:28:b0: bc:fc:b6:0a:a2:ac:be:37:8a:c3:2f:6b:b3:3b:2f:72:17:88: 98:df:0b:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVFxGnVCrV3mMyyktKilGl5hnFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTA3MTkwMTE2NDBaFw0yNTA3MjIwOTU0NDBaMDMxMTAvBgNV BAMTKDU5MTU5MzlBNENFQkFCM0YzQjc3QUU4Qzk5RTUwQ0NDQzQzNzNGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EeWdWY2FltKfrRYqDMuK1xF5 MK8RtkO6BVxahLnyKSGWsTJOl4JTtp08yI3UyAUIbKDOiWWdlGAtXsqLg8gtffuh ZtoILahYAo4vh7xMIZioiIUr2y1y/6KRCu49b2513r/rHabXMxnD4PCta9/GAPaR CJGLG8hHYFix+EB6tt9KcKY991rgTUZ0WaN1pduD4li1xzaq/ccxrtfCarZwu+Ik qVutHknBkuoV5LpDm35Vv0Gen1Cz8ff3I6Ms+j3Meql2Qrnc8QrO3JnEWya1t7XF dUfzGiioOFo4bZdYFozu2EhUaUBpETvb+kuRmX71qXoO0rLXY/huDtzKesvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWRWTmkzrqz87d66MmeUMzMQ3P+wwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjqK84PzVR3GbC1Qaj4OUaV5bu8nhEQh4sT P9JIknM43D61nAYf+KF2vs3VudghelFb+rJmm7GAzlkTQNvzu79jl7qylgXYYfp6 HeugR0nLqdACayHFtIrQwqvZqLkjmc/Y+KDdoYtPnkpQ9aGKwTjMQQRK9cZiD+Ww TiTuQ2Fd4ngBtbsgM+Cw1akOrkApmHMBNyO5FQG7nJkQ1/KST0XCNda8p1KrWDVe oDz1Up9HL+FqIt2q3MzL+3ytNlU+C4J1ZnXtgR813Y0wpTrr5WjuSfqgsV9XXZBL jmE0U6LJ4ej0GGi8mZYosLz8tgqirL43isMva7M7L3IXiJjfCxw= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:48 2025 by rpki-client