$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: piuhUytfbRu1Hf/slCTlFoCBs/w26J9d5ma/7bmfqT8= Subject key identifier: 00:8A:2F:DC:B9:70:5F:A3:3B:C3:A8:3B:2F:8A:5D:BC:CC:B6:C6:1B Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 370D2AA0E46B403AE356F0AA17BFB05C4EB08C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 014E Signing time: Thu 24 Jul 2025 04:52:15 +0000 Manifest this update: Thu 24 Jul 2025 04:47:15 +0000 Manifest next update: Sun 27 Jul 2025 07:44:15 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) 2: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: 8NzEteZKOSdh28G8q9Edgmv6Jq/bk/V+WUaSjSIWSX4=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 07:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0d:2a:a0:e4:6b:40:3a:e3:56:f0:aa:17:bf:b0:5c:4e:b0:8c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Jul 24 04:47:15 2025 GMT Not After : Jul 27 07:44:15 2025 GMT Subject: CN=008A2FDCB9705FA33BC3A83B2F8A5DBCCCB6C61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:2f:6b:0e:f4:f9:e0:92:b5:dd:fb:1a:a9: 23:4d:f6:a5:d4:da:6b:d4:a4:46:4e:00:bd:91:cf: c9:68:c4:d8:8a:50:65:a3:80:d7:0d:ff:0f:65:2b: 71:88:cf:b2:f1:34:74:8a:65:2c:01:ce:f7:fa:ad: 7f:35:b1:96:75:9f:3f:94:83:fc:3b:03:4a:48:d9: 3c:7e:25:87:49:ec:f8:8d:a3:70:b6:82:65:79:5b: b2:1f:88:e5:34:07:02:b1:21:68:f5:b6:90:a8:f8: 5a:d7:43:74:19:75:f6:fe:ce:f4:f6:2e:78:e9:ca: 88:22:12:0a:df:93:d3:69:fc:1f:90:23:6b:0b:c2: 9a:05:6b:27:33:39:4c:0a:e2:65:6f:d9:51:fc:01: bf:b3:c0:cf:e0:f6:88:00:a2:1f:d0:93:9b:71:43: 4e:2e:ee:5c:7a:1a:2e:e2:e3:36:d0:18:07:c0:de: ec:35:67:68:27:56:32:27:f2:3e:40:f9:50:6f:2e: a5:09:5c:dd:a9:64:df:a7:08:9c:3f:22:b1:87:8b: ce:f5:46:b8:b6:49:fd:f5:ab:eb:92:5c:80:3d:34: 5f:48:2f:73:8a:9c:56:ae:d8:35:20:66:fb:1a:ee: 12:54:2b:fa:1a:dc:0a:61:11:68:cf:a6:42:72:0f: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8A:2F:DC:B9:70:5F:A3:3B:C3:A8:3B:2F:8A:5D:BC:CC:B6:C6:1B X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c1:2d:3d:11:fc:d5:93:08:60:8a:69:ca:3b:5e:d4:b4:d0: b7:a3:d9:64:fa:7f:bd:eb:c1:38:86:e5:1e:ee:1a:aa:3b:a6: 2a:82:f9:d9:a3:28:c6:0c:4f:c8:0e:db:52:90:fe:8f:59:e5: c1:f3:5b:be:aa:83:4a:59:2e:88:ee:8a:83:a1:3e:4b:bb:2d: 32:72:00:b5:97:25:66:62:73:b6:5c:28:68:16:ee:68:b4:0a: 57:da:90:7a:ba:d6:17:c1:c2:b4:6f:93:99:2f:fa:4a:e5:28: 09:bd:9b:72:ae:0b:57:ba:4a:9b:b8:74:a5:8f:ef:52:b2:1a: f4:f8:73:81:5c:ad:89:cb:67:77:7c:01:c1:f9:f0:80:0f:b1: db:2e:f5:4f:ef:6e:f6:ac:7e:5b:7e:33:d8:7b:4b:aa:bf:8f: 96:96:b6:66:83:f8:27:e5:d3:eb:c3:a4:7a:ff:49:f5:85:6c: b6:60:aa:73:c0:82:3a:d1:43:03:17:bc:3d:69:f1:df:c1:3e: 1e:5f:91:77:c6:40:99:e9:00:71:9e:e0:43:40:63:ca:9a:c8: 7b:19:ba:4c:51:30:c5:24:76:da:fc:09:0b:78:c5:27:b9:0a: 8f:e9:c5:89:51:aa:1a:e0:8c:2c:16:eb:e4:0d:c7:19:47:aa: 90:4e:7a:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNw0qoORrQDrjVvCqF7+wXE6wjCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNTA3MjQwNDQ3MTVaFw0yNTA3MjcwNzQ0MTVaMDMxMTAvBgNV BAMTKDAwOEEyRkRDQjk3MDVGQTMzQkMzQTgzQjJGOEE1REJDQ0NCNkM2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yy9rDvT54JK13fsaqSNN9qXU 2mvUpEZOAL2Rz8loxNiKUGWjgNcN/w9lK3GIz7LxNHSKZSwBzvf6rX81sZZ1nz+U g/w7A0pI2Tx+JYdJ7PiNo3C2gmV5W7IfiOU0BwKxIWj1tpCo+FrXQ3QZdfb+zvT2 LnjpyogiEgrfk9Np/B+QI2sLwpoFayczOUwK4mVv2VH8Ab+zwM/g9ogAoh/Qk5tx Q04u7lx6Gi7i4zbQGAfA3uw1Z2gnVjIn8j5A+VBvLqUJXN2pZN+nCJw/IrGHi871 Rri2Sf31q+uSXIA9NF9IL3OKnFau2DUgZvsa7hJUK/oa3AphEWjPpkJyDz8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIov3LlwX6M7w6g7L4pdvMy2xhswHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/BLT0R/NWTCGCKaco7XtS00Lej2WT6f73r wTiG5R7uGqo7piqC+dmjKMYMT8gO21KQ/o9Z5cHzW76qg0pZLojuioOhPku7LTJy ALWXJWZic7ZcKGgW7mi0ClfakHq61hfBwrRvk5kv+krlKAm9m3KuC1e6Spu4dKWP 71KyGvT4c4FcrYnLZ3d8AcH58IAPsdsu9U/vbvasflt+M9h7S6q/j5aWtmaD+Cfl 0+vDpHr/SfWFbLZgqnPAgjrRQwMXvD1p8d/BPh5fkXfGQJnpAHGe4ENAY8qayHsZ ukxRMMUkdtr8CQt4xSe5Co/pxYlRqhrgjCwW6+QNxxlHqpBOehQ= -----END CERTIFICATE-----Generated at Thu Jul 24 12:12:39 2025 by rpki-client