$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: 8pRffuzCBaTe2VFjXSxSXKXl9otinQunDPYl6VrRPGo= Subject key identifier: 70:61:CF:D9:D2:A3:A8:E6:3F:09:C0:A3:0F:9A:F9:DD:E5:34:F1:32 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 2A095117A92A1CD11E9D8D0E65563A59CB9E27AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 025D Signing time: Thu 24 Jul 2025 16:31:25 +0000 Manifest this update: Thu 24 Jul 2025 16:26:25 +0000 Manifest next update: Sun 27 Jul 2025 16:52:25 +0000 Files and hashes: 1: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: 1y3I93G8WjUZUk0s/R9Rs/UlgNN4yZaacyYBi/6KQL8=) 2: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:09:51:17:a9:2a:1c:d1:1e:9d:8d:0e:65:56:3a:59:cb:9e:27:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Jul 24 16:26:25 2025 GMT Not After : Jul 27 16:52:25 2025 GMT Subject: CN=7061CFD9D2A3A8E63F09C0A30F9AF9DDE534F132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:c6:bd:25:be:fe:86:43:72:3a:71:54:cd: 38:15:19:29:92:3c:c5:7f:96:76:8a:d3:3f:4a:67: b6:c1:cf:e5:22:d3:64:63:6c:20:b5:68:84:23:0e: fa:af:d3:47:cd:56:c6:f4:a6:4c:a5:40:bc:4d:06: f2:1e:d2:49:34:fc:8a:d3:7d:2b:d6:4d:a7:d5:5d: a1:51:4a:8c:b9:ad:50:4a:d5:db:75:b6:78:13:35: 41:62:40:42:f9:a7:e0:3b:c7:f5:a8:11:fc:65:2d: ec:e6:94:89:9d:45:79:a0:a0:ac:9d:f5:85:b7:19: af:59:9b:c3:62:07:63:12:a9:6b:78:5e:e3:4f:f1: a2:9a:7d:5d:c9:80:5b:06:8b:b9:fc:f6:e3:a0:20: b9:d6:b0:79:1b:71:fa:35:b8:32:17:4f:fa:4e:02: 44:23:d0:bd:23:65:99:5a:c1:0f:34:c7:19:5f:4f: 4c:b5:fd:92:9e:a5:ab:e9:e5:06:94:c0:58:8e:3d: 95:3e:8f:fb:29:4e:3f:e1:b4:4d:59:67:66:3b:1c: ee:0a:6c:42:75:4f:ec:c8:41:31:3e:8f:82:ff:b2: c6:97:1d:37:0d:d2:ea:75:9e:a9:b4:64:d4:1d:2d: c7:09:1f:1d:76:43:3a:a8:69:f6:40:4b:6d:b4:95: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:61:CF:D9:D2:A3:A8:E6:3F:09:C0:A3:0F:9A:F9:DD:E5:34:F1:32 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:72:24:de:aa:74:46:da:75:d7:af:ce:92:3e:83:6a:52:24: 3a:13:33:f5:e5:dd:2a:53:ac:02:d8:0f:c4:4e:ac:14:24:d4: 33:82:1a:a5:67:f1:81:de:2a:c4:88:f7:eb:e1:43:d7:17:c7: b3:75:1b:06:33:50:16:55:6f:e0:b8:c9:c9:4f:a1:e2:9d:20: 36:ce:a1:46:5f:f3:fa:4d:91:97:b6:f2:10:8a:1e:a9:10:47: 0f:fd:86:9b:b0:74:13:37:82:5d:de:8b:66:8f:37:85:fb:7e: aa:41:a5:67:ee:86:99:7a:b7:36:e3:9a:35:b2:24:59:c5:9f: 99:cb:b2:c6:78:2f:ba:0d:bb:e9:14:2c:79:a5:dd:f0:15:3e: 3e:64:26:f9:c3:df:98:ef:74:a8:b2:d3:f6:1f:a9:e1:06:13: f8:1e:5a:69:c1:36:c9:93:5c:00:8b:ad:c2:e1:dd:af:09:eb: b8:b2:62:89:c4:e9:cb:65:2c:43:a3:f1:18:54:72:f8:d7:11: 6d:6f:56:1c:10:28:1a:af:39:ef:47:c7:cc:a7:0d:7c:19:15: 2e:6f:92:bb:e9:db:dc:68:b2:98:c0:0e:5c:5e:44:4e:98:65: b8:a5:ce:cc:28:36:a6:9a:0e:9f:89:a6:22:be:51:a7:b6:03: 71:a1:25:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKglRF6kqHNEenY0OZVY6WcueJ68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA3MjQxNjI2MjVaFw0yNTA3MjcxNjUyMjVaMDMxMTAvBgNV BAMTKDcwNjFDRkQ5RDJBM0E4RTYzRjA5QzBBMzBGOUFGOURERTUzNEYxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJ8a9Jb7+hkNyOnFUzTgVGSmS PMV/lnaK0z9KZ7bBz+Ui02RjbCC1aIQjDvqv00fNVsb0pkylQLxNBvIe0kk0/IrT fSvWTafVXaFRSoy5rVBK1dt1tngTNUFiQEL5p+A7x/WoEfxlLezmlImdRXmgoKyd 9YW3Ga9Zm8NiB2MSqWt4XuNP8aKafV3JgFsGi7n89uOgILnWsHkbcfo1uDIXT/pO AkQj0L0jZZlawQ80xxlfT0y1/ZKepavp5QaUwFiOPZU+j/spTj/htE1ZZ2Y7HO4K bEJ1T+zIQTE+j4L/ssaXHTcN0up1nqm0ZNQdLccJHx12QzqoafZAS220lQ1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGHP2dKjqOY/CcCjD5r53eU08TIwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlyJN6qdEbaddevzpI+g2pSJDoTM/Xl3SpT rALYD8ROrBQk1DOCGqVn8YHeKsSI9+vhQ9cXx7N1GwYzUBZVb+C4yclPoeKdIDbO oUZf8/pNkZe28hCKHqkQRw/9hpuwdBM3gl3ei2aPN4X7fqpBpWfuhpl6tzbjmjWy JFnFn5nLssZ4L7oNu+kULHml3fAVPj5kJvnD35jvdKiy0/YfqeEGE/geWmnBNsmT XACLrcLh3a8J67iyYonE6ctlLEOj8RhUcvjXEW1vVhwQKBqvOe9Hx8ynDXwZFS5v krvp29xospjADlxeRE6YZbilzswoNqaaDp+JpiK+Uae2A3GhJWY= -----END CERTIFICATE-----Generated at Fri Jul 25 06:23:19 2025 by rpki-client