$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: 7UsQYHZCacEI4EKF7tH0gR2kNoFcz5NTEBn2FJZbN2c= Subject key identifier: 31:08:F1:C1:D4:6E:51:D2:62:D9:C9:3F:FD:D1:4D:64:B0:21:46:E9 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 571A09EF294B8EAA47AFFF263350A75691386351 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 025C Signing time: Tue 22 Jul 2025 14:01:25 +0000 Manifest this update: Tue 22 Jul 2025 13:56:25 +0000 Manifest next update: Fri 25 Jul 2025 16:26:25 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: 2JCdwx1P0HIuahyYJqlNpJB/PngWiTBmbwjGkAgYUBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1a:09:ef:29:4b:8e:aa:47:af:ff:26:33:50:a7:56:91:38:63:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Jul 22 13:56:25 2025 GMT Not After : Jul 25 16:26:25 2025 GMT Subject: CN=3108F1C1D46E51D262D9C93FFDD14D64B02146E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:a9:43:82:cf:04:b0:61:39:28:91:86:ac: b5:96:c4:69:11:4d:93:a5:48:77:87:4f:64:de:e3: 64:8a:64:69:09:4a:fd:73:c5:a8:7f:bf:c0:33:0b: f2:bc:8d:3f:28:9e:05:f5:5f:ba:fc:10:ea:66:9b: e1:a6:0b:84:ce:cc:67:bc:8c:83:c2:f5:ac:6e:03: 1a:74:24:06:76:7f:85:59:e5:0e:6d:d7:9f:52:17: 5d:52:74:94:59:cc:5c:c8:38:8a:00:34:43:54:7e: fe:29:46:c1:11:05:be:7b:bc:e6:53:28:4c:9d:b7: e2:ad:25:fa:09:f9:8e:f8:50:36:a8:88:a4:2e:e9: bd:f4:89:64:7b:82:99:01:f8:6d:02:3c:72:a3:d9: df:c9:ec:fc:2b:ce:66:0f:83:ce:5b:66:70:b7:67: 34:b4:2d:d1:22:5a:fa:6d:66:23:49:21:c1:f1:3d: 79:66:fd:85:d8:4c:50:23:9b:3f:f3:8f:fe:0d:3c: 1e:fe:8e:df:ad:25:36:85:77:fc:73:9d:4c:92:ac: 7e:5f:a1:e3:30:f4:4c:61:7a:c7:cb:00:02:49:88: e2:4f:55:fd:07:ac:b1:71:6e:0f:a1:f8:87:41:2d: 9c:af:49:e2:bc:31:9e:4d:d3:3a:0a:12:c0:8a:e0: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:08:F1:C1:D4:6E:51:D2:62:D9:C9:3F:FD:D1:4D:64:B0:21:46:E9 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ec:a4:6a:fb:5e:a8:13:ad:b3:76:bd:f5:24:74:fb:da:01: 76:6c:bc:7e:68:51:e1:ed:f5:b2:cf:3f:10:51:d3:f3:01:37: 4e:d8:c7:d8:5d:a9:82:8f:2b:80:9f:2c:81:40:68:2e:4a:b9: 45:57:43:0b:4d:eb:16:01:65:60:de:08:e7:bb:e2:5b:9b:2d: 37:c7:05:c5:3d:ab:37:61:57:7f:08:57:26:c0:d7:b5:6b:22: 01:65:85:d0:ec:4d:c0:72:b8:b3:7c:3f:51:45:2e:01:9c:fc: a7:e0:5d:48:79:5b:23:f0:a7:91:60:4d:c5:fe:cd:e7:5e:98: 36:aa:aa:b1:3b:1b:bc:ec:4d:ac:5f:89:5b:a2:f7:08:9b:6d: 2e:26:a4:7c:8a:29:99:f6:89:cf:90:1f:8a:bb:42:f3:2d:99: b5:9d:11:1e:43:47:2c:12:80:a5:af:58:82:29:f7:ae:c5:d1: 1c:af:ac:87:ed:fd:93:cc:82:05:53:1a:9e:5e:70:f7:06:6b: fa:b4:53:67:4f:c6:be:42:d1:31:44:4b:8b:e9:af:bd:66:ac: 8a:12:0f:62:d0:b9:b0:f6:f1:ff:31:37:90:b1:0e:ce:06:0e: 96:bc:8a:82:25:1c:28:b7:44:9c:f4:a1:52:6f:ca:07:6f:9d: b9:27:d3:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxoJ7ylLjqpHr/8mM1CnVpE4Y1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA3MjIxMzU2MjVaFw0yNTA3MjUxNjI2MjVaMDMxMTAvBgNV BAMTKDMxMDhGMUMxRDQ2RTUxRDI2MkQ5QzkzRkZERDE0RDY0QjAyMTQ2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbqlDgs8EsGE5KJGGrLWWxGkR TZOlSHeHT2Te42SKZGkJSv1zxah/v8AzC/K8jT8ongX1X7r8EOpmm+GmC4TOzGe8 jIPC9axuAxp0JAZ2f4VZ5Q5t159SF11SdJRZzFzIOIoANENUfv4pRsERBb57vOZT KEydt+KtJfoJ+Y74UDaoiKQu6b30iWR7gpkB+G0CPHKj2d/J7PwrzmYPg85bZnC3 ZzS0LdEiWvptZiNJIcHxPXlm/YXYTFAjmz/zj/4NPB7+jt+tJTaFd/xznUySrH5f oeMw9ExhesfLAAJJiOJPVf0HrLFxbg+h+IdBLZyvSeK8MZ5N0zoKEsCK4L9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQjxwdRuUdJi2ck//dFNZLAhRukwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/spGr7XqgTrbN2vfUkdPvaAXZsvH5oUeHt 9bLPPxBR0/MBN07Yx9hdqYKPK4CfLIFAaC5KuUVXQwtN6xYBZWDeCOe74lubLTfH BcU9qzdhV38IVybA17VrIgFlhdDsTcByuLN8P1FFLgGc/KfgXUh5WyPwp5FgTcX+ zedemDaqqrE7G7zsTaxfiVui9wibbS4mpHyKKZn2ic+QH4q7QvMtmbWdER5DRywS gKWvWIIp967F0RyvrIft/ZPMggVTGp5ecPcGa/q0U2dPxr5C0TFES4vpr71mrIoS D2LQubD28f8xN5CxDs4GDpa8ioIlHCi3RJz0oVJvygdvnbkn06Y= -----END CERTIFICATE-----Generated at Thu Jul 24 12:01:20 2025 by rpki-client