$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: ZAA90L60QNXE2AiJlSm4j799IqN49lwO+iDmHt4lVdE= Subject key identifier: 27:79:69:22:FF:4F:12:A8:C2:2C:5E:53:01:4F:A4:D2:AB:92:0B:03 Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 40BF59D542A138795B4E825CB659DF5AEDD9F725 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 010F Signing time: Sun 20 Jul 2025 13:12:12 +0000 Manifest this update: Sun 20 Jul 2025 13:07:12 +0000 Manifest next update: Wed 23 Jul 2025 17:04:12 +0000 Files and hashes: 1: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: C35SXikIhaDLGx2DtTCZTY1tvAiWcqvbFOy+lIenj/0=) 2: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: O5Phn/g9gsv8x70f4eFnuHs2LZYtvcenRJlCTzLLV3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bf:59:d5:42:a1:38:79:5b:4e:82:5c:b6:59:df:5a:ed:d9:f7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Jul 20 13:07:12 2025 GMT Not After : Jul 23 17:04:12 2025 GMT Subject: CN=27796922FF4F12A8C22C5E53014FA4D2AB920B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:13:a2:2d:ff:85:12:4d:c0:72:c6:e7:43: 50:81:b2:ac:9b:58:59:40:7f:8f:aa:d6:2a:07:99: 41:5d:35:d9:68:7d:95:49:1e:14:81:c2:80:8b:c3: 8d:bc:b0:50:ec:83:d5:98:42:f2:9e:b8:8a:42:1c: 26:84:e0:a3:ca:6a:18:33:0a:32:9b:22:10:92:c6: e5:84:9b:bd:fb:68:63:07:ae:af:9e:64:37:a9:f1: 69:9d:c7:fb:c2:08:2f:fc:47:e0:cb:9e:95:f8:b7: 73:8f:3e:96:9c:15:49:ac:b3:04:84:a1:9d:73:8d: 12:04:46:70:ea:43:5b:4d:7e:64:2f:ae:67:86:86: bb:0a:b9:c4:d7:7d:6a:49:12:82:4c:ff:77:97:d9: ca:13:76:88:09:b3:90:97:16:04:2c:62:08:b7:6d: da:30:ba:69:8b:5f:1d:c6:93:47:57:6e:27:40:e8: 07:9f:4c:04:d0:68:b8:59:2c:de:49:b2:79:d5:f9: 79:10:bb:42:d8:50:92:c1:0b:c0:4d:c0:f7:88:1a: ba:c8:53:53:9b:88:f8:e8:23:1d:14:b1:6b:1e:1a: f0:22:5d:04:73:63:db:85:8b:dd:12:fa:68:00:f4: f1:c2:2b:27:43:09:05:ee:d5:08:72:f4:43:ed:b7: dd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:79:69:22:FF:4F:12:A8:C2:2C:5E:53:01:4F:A4:D2:AB:92:0B:03 X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:75:0d:d3:e0:37:87:0d:80:21:29:32:7a:fe:95:be:17:46: cc:e9:f6:a5:6a:41:22:dd:bc:d3:69:6d:0b:4a:07:e5:8e:c8: 4f:d2:ad:93:5e:9a:50:d1:f0:fc:1a:d4:3d:b5:03:8a:e7:98: 8f:b4:f0:a9:3c:64:ba:bf:be:5d:9a:20:92:29:a1:d1:5d:61: 53:97:10:f5:8f:86:7e:6c:76:0f:41:78:a4:2c:ed:8f:39:19: 8e:d5:45:ca:00:b1:ee:b2:d4:2d:3e:70:8a:60:15:df:d3:d8: 82:1f:5d:ec:69:2c:95:24:c8:84:6e:2c:7c:e3:a8:22:6b:09: 8a:7f:0c:c5:4d:c8:70:bf:3c:03:ec:fd:b4:9e:46:e2:0c:cb: d0:b9:66:d6:b4:fc:04:64:fc:ae:fc:6c:f1:31:88:31:5c:9b: 3f:13:59:16:cc:5d:c1:b4:4a:1a:87:67:f7:f2:c9:65:e9:1d: 43:1a:d9:91:6e:8f:01:e1:1d:ff:dc:6f:95:d7:6a:fd:36:92: f3:70:ba:fe:c3:1c:28:1e:16:95:ba:e2:af:8f:5e:dd:dc:c7: ce:f9:8e:bf:4f:48:e6:33:60:3a:4d:c6:aa:51:fc:32:70:a3: 83:d8:1e:db:7a:fd:f6:a1:04:01:80:91:9b:19:3f:0e:51:f5: eb:d7:a9:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQL9Z1UKhOHlbToJctlnfWu3Z9yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNTA3MjAxMzA3MTJaFw0yNTA3MjMxNzA0MTJaMDMxMTAvBgNV BAMTKDI3Nzk2OTIyRkY0RjEyQThDMjJDNUU1MzAxNEZBNEQyQUI5MjBCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDesxOiLf+FEk3AcsbnQ1CBsqyb WFlAf4+q1ioHmUFdNdlofZVJHhSBwoCLw428sFDsg9WYQvKeuIpCHCaE4KPKahgz CjKbIhCSxuWEm737aGMHrq+eZDep8Wmdx/vCCC/8R+DLnpX4t3OPPpacFUmsswSE oZ1zjRIERnDqQ1tNfmQvrmeGhrsKucTXfWpJEoJM/3eX2coTdogJs5CXFgQsYgi3 bdowummLXx3Gk0dXbidA6AefTATQaLhZLN5JsnnV+XkQu0LYUJLBC8BNwPeIGrrI U1ObiPjoIx0UsWseGvAiXQRzY9uFi90S+mgA9PHCKydDCQXu1Qhy9EPtt901AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3lpIv9PEqjCLF5TAU+k0quSCwMwHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA11DdPgN4cNgCEpMnr+lb4XRszp9qVqQSLd vNNpbQtKB+WOyE/SrZNemlDR8Pwa1D21A4rnmI+08Kk8ZLq/vl2aIJIpodFdYVOX EPWPhn5sdg9BeKQs7Y85GY7VRcoAse6y1C0+cIpgFd/T2IIfXexpLJUkyIRuLHzj qCJrCYp/DMVNyHC/PAPs/bSeRuIMy9C5Zta0/ARk/K78bPExiDFcmz8TWRbMXcG0 ShqHZ/fyyWXpHUMa2ZFujwHhHf/cb5XXav02kvNwuv7DHCgeFpW64q+PXt3cx875 jr9PSOYzYDpNxqpR/DJwo4PYHtt6/fahBAGAkZsZPw5R9evXqQo= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:25 2025 by rpki-client