$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: EekEciaCL/0wTePxUdlpOtsOEen/6uj5xnBDRBQMN8k= Subject key identifier: 8F:34:05:BD:3B:6A:AB:E3:F6:E1:78:4A:92:E4:93:B6:81:69:CC:D6 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 130ED35801A5AF4630936E68D909E90E3D5EE4F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 01F0 Signing time: Tue 22 Jul 2025 16:01:39 +0000 Manifest this update: Tue 22 Jul 2025 15:56:39 +0000 Manifest next update: Fri 25 Jul 2025 17:41:39 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: 5AX6b+0WD7k84Mohsy9LbKffzLjcytmRggJ/7eabMFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0e:d3:58:01:a5:af:46:30:93:6e:68:d9:09:e9:0e:3d:5e:e4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Jul 22 15:56:39 2025 GMT Not After : Jul 25 17:41:39 2025 GMT Subject: CN=8F3405BD3B6AABE3F6E1784A92E493B68169CCD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:db:4f:be:40:20:7a:4d:18:82:59:f5:51: b3:96:36:10:a8:ad:7f:24:32:19:7e:03:fb:66:00: 38:99:ba:de:9f:4d:f2:b3:02:ac:3e:c9:e3:86:af: e0:b6:64:6e:e3:fd:f3:e3:6c:89:95:f7:f0:83:0c: b6:8c:40:b1:c1:88:fe:e3:f3:22:3b:ed:52:d0:27: 6c:4d:fc:be:a4:39:bb:cf:5e:91:cf:66:dc:8a:83: bb:e3:8f:e7:32:c7:92:2f:5c:24:df:be:21:a0:45: 3a:d5:a9:b8:a1:12:6c:b2:77:59:ff:5e:f0:65:86: 3a:c6:7d:6f:b0:30:ba:d3:44:09:1e:d1:ba:0b:05: 0a:8d:d3:dd:cb:88:04:c6:c8:be:4c:9a:00:0e:47: ac:a8:9c:db:a5:29:b8:47:0a:d9:35:c9:e6:f0:54: c3:f8:72:6b:ec:31:02:af:3b:1e:b9:49:23:07:e6: 60:1e:20:6c:48:40:cc:df:54:f6:ef:12:4d:81:50: 91:0c:dd:e2:b0:da:c9:ea:39:e5:13:99:73:6e:bb: 2b:cd:58:e4:9e:24:7e:89:63:91:68:cd:2b:cd:0a: 56:fa:44:7a:41:3e:04:41:7e:9a:09:d2:73:61:54: ec:dc:b4:6e:21:87:86:9c:d0:40:2c:b7:d2:c1:af: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:34:05:BD:3B:6A:AB:E3:F6:E1:78:4A:92:E4:93:B6:81:69:CC:D6 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:93:a6:cf:6a:a1:a5:b3:de:ba:57:f7:4b:ad:d0:51:95:69: 9d:e3:15:ea:ac:d1:22:a2:0f:e7:e0:46:cc:7e:1b:f9:e4:48: 62:7e:5d:95:f2:ac:7b:e6:22:1e:84:fd:c3:04:81:6c:d3:13: c6:d2:61:cc:e6:5a:d8:43:e2:9f:9d:de:86:f7:8a:d9:a2:be: b1:2a:3b:73:bb:fb:82:d7:d2:1c:fd:1d:0c:90:bf:06:ae:95: 29:95:dd:aa:c3:c6:57:2c:d3:68:1a:96:5d:a2:86:93:b5:84: a0:54:57:12:67:44:b2:20:31:3f:e2:de:d6:b5:c3:00:40:32: bb:1a:0f:1b:8e:18:5c:33:d1:41:d3:2a:8a:d2:2a:4f:21:63: cf:c6:c4:38:6f:a0:8d:68:8e:04:c3:c7:83:9a:f4:4a:f4:a7: 60:6b:4e:20:0d:6d:f2:3c:ac:ec:29:1d:16:4a:4a:4e:7e:9d: 70:e0:37:9d:a0:61:47:8d:5a:2a:45:87:bf:80:b3:c0:25:80: ea:d7:ae:81:ed:ed:f9:57:ab:31:21:bb:42:6c:b8:50:ac:ac: ec:88:5e:e3:ac:c4:59:8f:12:d7:d7:61:d8:40:de:88:f0:4e: bd:e2:bb:b4:62:d4:6f:4e:ed:26:2c:d9:72:bb:f6:4a:81:26: 35:67:ec:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEw7TWAGlr0Ywk25o2QnpDj1e5PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTA3MjIxNTU2MzlaFw0yNTA3MjUxNzQxMzlaMDMxMTAvBgNV BAMTKDhGMzQwNUJEM0I2QUFCRTNGNkUxNzg0QTkyRTQ5M0I2ODE2OUNDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwNtPvkAgek0Ygln1UbOWNhCo rX8kMhl+A/tmADiZut6fTfKzAqw+yeOGr+C2ZG7j/fPjbImV9/CDDLaMQLHBiP7j 8yI77VLQJ2xN/L6kObvPXpHPZtyKg7vjj+cyx5IvXCTfviGgRTrVqbihEmyyd1n/ XvBlhjrGfW+wMLrTRAke0boLBQqN093LiATGyL5MmgAOR6yonNulKbhHCtk1yebw VMP4cmvsMQKvOx65SSMH5mAeIGxIQMzfVPbvEk2BUJEM3eKw2snqOeUTmXNuuyvN WOSeJH6JY5FozSvNClb6RHpBPgRBfpoJ0nNhVOzctG4hh4ac0EAst9LBryY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzQFvTtqq+P24XhKkuSTtoFpzNYwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWTps9qoaWz3rpX90ut0FGVaZ3jFeqs0SKi D+fgRsx+G/nkSGJ+XZXyrHvmIh6E/cMEgWzTE8bSYczmWthD4p+d3ob3itmivrEq O3O7+4LX0hz9HQyQvwaulSmV3arDxlcs02gall2ihpO1hKBUVxJnRLIgMT/i3ta1 wwBAMrsaDxuOGFwz0UHTKorSKk8hY8/GxDhvoI1ojgTDx4Oa9Er0p2BrTiANbfI8 rOwpHRZKSk5+nXDgN52gYUeNWipFh7+As8AlgOrXroHt7flXqzEhu0JsuFCsrOyI XuOsxFmPEtfXYdhA3ojwTr3iu7Ri1G9O7SYs2XK79kqBJjVn7Ac= -----END CERTIFICATE-----Generated at Thu Jul 24 12:00:35 2025 by rpki-client