$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: KAu0Da4rPChaDx+uIpQdqjnVb2slbroRJFtSsjqNWF0= Subject key identifier: 4C:DD:15:DE:2A:76:CA:EF:F0:A4:B6:D8:3E:7A:74:C7:FC:9A:5F:A6 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 142BA0CA76289C488CD47FF5FBCFA32FEE98CB02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 0105 Signing time: Sat 19 Jul 2025 22:00:00 +0000 Manifest this update: Sat 19 Jul 2025 21:55:00 +0000 Manifest next update: Wed 23 Jul 2025 06:50:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: qGTYdXCNjtKjAUImUOlx+yC3pTYFLbY+NN8354QTINY=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: ePs+7QNvRzMlIpdqEG5AJcQ/7oSXOlNvEWF18TjLRwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2b:a0:ca:76:28:9c:48:8c:d4:7f:f5:fb:cf:a3:2f:ee:98:cb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Jul 19 21:55:00 2025 GMT Not After : Jul 23 06:50:00 2025 GMT Subject: CN=4CDD15DE2A76CAEFF0A4B6D83E7A74C7FC9A5FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1a:d4:88:ef:51:f7:c1:22:44:88:65:10:1e: 75:40:0e:cb:d6:81:89:3a:8b:a8:55:aa:c4:36:41: 35:f2:27:88:0b:fc:90:38:5e:bb:56:6e:00:b3:f4: c7:b0:d6:cd:c8:24:d3:e8:10:3e:1b:a4:e0:2a:ad: c0:d3:aa:05:23:7a:b0:2a:2b:a7:41:5f:29:f9:0f: b3:19:75:5b:af:0a:76:cf:93:86:d3:0a:a5:44:60: 62:2e:61:af:c8:cc:6a:63:7f:f4:68:d0:6a:c8:5b: cf:75:42:f6:16:06:29:66:60:4c:b6:04:58:33:ee: 07:bb:d7:18:ed:7e:3c:ac:e7:7a:f9:f5:6c:7c:b9: 28:da:ae:24:54:f8:17:46:65:38:25:e2:49:3b:f2: e8:ef:b5:6b:b6:cc:bb:94:0f:02:da:ec:af:a1:3c: 1b:c9:64:fe:18:3c:78:67:f1:84:35:91:48:f0:89: 47:c5:4e:3f:94:c8:14:9a:0d:87:2f:c4:92:d2:88: 90:a0:fb:b6:11:8a:83:e7:7d:a9:c2:81:b7:bc:15: 61:89:fd:90:23:f2:1f:ae:72:45:af:1d:e7:c8:54: 7a:52:4d:d4:0f:32:ac:93:5d:6c:de:fc:ce:ce:6f: 91:fa:f7:05:43:6e:a7:92:1f:1e:a8:95:41:a2:f2: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:15:DE:2A:76:CA:EF:F0:A4:B6:D8:3E:7A:74:C7:FC:9A:5F:A6 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d2:82:a6:21:95:57:9a:3f:fb:8c:a4:1c:44:2a:5e:2e:46: 01:44:5a:ce:b5:26:f1:56:7c:f3:9c:aa:c3:5c:19:21:f8:6f: 28:06:e4:f4:47:d3:b1:5d:8f:62:50:25:43:41:42:a2:e5:07: 13:cb:19:55:2e:3c:9d:52:9c:ef:89:41:8e:b0:c6:6f:b1:48: 9c:64:24:11:a5:aa:e5:9e:d1:45:25:2f:63:05:80:89:a5:65: d8:ac:ea:73:8f:e8:d4:85:31:6e:ee:5d:82:19:53:49:01:bd: 52:0d:e9:a7:ed:04:0e:52:38:16:a8:35:ee:d9:30:09:cb:a1: a1:44:58:99:5f:72:cc:3e:da:77:fb:86:b4:88:42:f7:20:7d: f4:48:e6:78:cc:f5:61:3a:67:25:0f:5a:80:50:9c:da:83:1c: b9:31:5a:d5:4b:56:6b:93:c9:82:c8:da:dc:8c:99:18:a7:77: 64:ea:9f:7d:fa:0d:53:2c:40:41:24:59:13:e0:7c:c0:94:9d: 68:60:d3:ec:61:6f:d6:5e:7b:51:22:b1:ee:e8:8e:7b:aa:28: 7e:48:d1:51:7e:09:00:b5:94:02:70:d2:c7:38:2a:43:e1:4c: a4:11:a3:a3:f7:e5:c1:23:ca:38:34:39:c3:46:a3:a9:a8:a2: 88:0e:2f:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCugynYonEiM1H/1+8+jL+6YywIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTA3MTkyMTU1MDBaFw0yNTA3MjMwNjUwMDBaMDMxMTAvBgNV BAMTKDRDREQxNURFMkE3NkNBRUZGMEE0QjZEODNFN0E3NEM3RkM5QTVGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyGtSI71H3wSJEiGUQHnVADsvW gYk6i6hVqsQ2QTXyJ4gL/JA4XrtWbgCz9Mew1s3IJNPoED4bpOAqrcDTqgUjerAq K6dBXyn5D7MZdVuvCnbPk4bTCqVEYGIuYa/IzGpjf/Ro0GrIW891QvYWBilmYEy2 BFgz7ge71xjtfjys53r59Wx8uSjariRU+BdGZTgl4kk78ujvtWu2zLuUDwLa7K+h PBvJZP4YPHhn8YQ1kUjwiUfFTj+UyBSaDYcvxJLSiJCg+7YRioPnfanCgbe8FWGJ /ZAj8h+uckWvHefIVHpSTdQPMqyTXWze/M7Ob5H69wVDbqeSHx6olUGi8uZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTN0V3ip2yu/wpLbYPnp0x/yaX6YwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHSgqYhlVeaP/uMpBxEKl4uRgFEWs61JvFW fPOcqsNcGSH4bygG5PRH07Fdj2JQJUNBQqLlBxPLGVUuPJ1SnO+JQY6wxm+xSJxk JBGlquWe0UUlL2MFgImlZdis6nOP6NSFMW7uXYIZU0kBvVIN6aftBA5SOBaoNe7Z MAnLoaFEWJlfcsw+2nf7hrSIQvcgffRI5njM9WE6ZyUPWoBQnNqDHLkxWtVLVmuT yYLI2tyMmRind2Tqn336DVMsQEEkWRPgfMCUnWhg0+xhb9Zee1Eise7ojnuqKH5I 0VF+CQC1lAJw0sc4KkPhTKQRo6P35cEjyjg0OcNGo6mooogOL6o= -----END CERTIFICATE-----Generated at Mon Jul 21 08:42:53 2025 by rpki-client