$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: R3R+7LVNDORH+7L3T2vqfVskDEHei2rsGlPerj8FRg8= Subject key identifier: EA:EB:07:22:A6:0A:F9:6E:BB:B2:91:5B:86:B5:B7:77:AE:0A:08:AE Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 2DD7A9354D425AD2AC59656DAEF002C80740D694 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 01DC Signing time: Mon 21 Jul 2025 10:21:53 +0000 Manifest this update: Mon 21 Jul 2025 10:16:53 +0000 Manifest next update: Thu 24 Jul 2025 20:19:53 +0000 Files and hashes: 1: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: 1lVOjpNo/iBEzvjy22Ex4S+ZR7RWhgVMRgzLmGszXc8=) 2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: zLfKDuc3jNTwhPewKCkQdrraOM+o8tM8JoTok2PPCpE=) 3: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: k7X14J+QdS7MEz6uDJt6u3xkxSH91jVPDLJqXdryTNc=) 4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: /BAWrcQPac6z7r0Aw+CQfRooZAASQixIkDdl1c+PelY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d7:a9:35:4d:42:5a:d2:ac:59:65:6d:ae:f0:02:c8:07:40:d6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Jul 21 10:16:53 2025 GMT Not After : Jul 24 20:19:53 2025 GMT Subject: CN=EAEB0722A60AF96EBBB2915B86B5B777AE0A08AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:dd:79:38:46:3f:f8:31:25:a5:9c:b8:6c: 4a:ee:6f:3f:b0:87:f0:ac:2a:e0:8c:eb:7c:de:7f: 1a:57:2a:06:51:53:69:7d:24:49:84:dc:a1:ad:4b: 01:52:38:1f:47:0f:8f:82:aa:66:21:ba:2c:cc:38: 3d:21:c8:d3:25:13:a8:d5:8d:03:83:87:01:ca:d3: 09:2e:92:7d:4d:af:bb:eb:3f:e9:21:b0:e3:39:88: ef:24:22:ee:73:34:a8:68:10:af:f0:08:fa:c8:07: 2b:a4:9d:04:d4:ca:5b:25:ae:4a:1e:7a:64:99:a9: 15:e3:1a:22:eb:48:42:98:40:d5:ba:08:a2:f1:5a: cb:85:83:b7:02:df:ad:99:b6:67:a5:92:63:49:a4: 4d:19:dc:29:98:47:0b:ec:63:13:e9:a6:cb:09:52: ce:42:31:f3:b4:c1:aa:c8:c1:71:33:8e:5f:92:9b: 9f:de:83:82:d2:22:0e:66:ff:16:58:1f:8e:0f:7b: fe:eb:ea:33:0a:51:c9:bc:01:a3:2c:0f:51:01:71: 58:c2:c5:58:6a:4a:1b:0b:1a:04:42:54:6e:fd:65: db:eb:55:5d:88:32:66:73:93:ff:a4:61:f9:d0:2a: 62:ec:96:41:ea:05:5d:00:ba:e8:f6:ac:c1:c5:d8: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EB:07:22:A6:0A:F9:6E:BB:B2:91:5B:86:B5:B7:77:AE:0A:08:AE X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ec:ea:54:2f:cf:d4:38:db:06:b3:33:33:f4:0e:94:87:bf: c3:e9:fc:61:12:9f:5b:a3:ea:27:c9:6e:9f:57:67:e2:76:35: ab:e5:6c:04:d1:95:eb:3a:6c:1b:70:6f:70:a6:1e:2a:e7:e4: 9c:22:bd:d7:79:fe:e3:14:ea:19:20:96:e1:93:9c:29:c2:dc: 4a:ac:17:0d:bd:2c:0e:79:f1:95:8a:1b:a0:49:59:d1:11:7d: 02:d7:4f:e6:d6:11:7d:b8:1d:00:95:0f:88:c9:72:96:06:c7: 30:48:90:16:68:75:6f:ed:39:a3:77:45:81:4c:2b:51:58:e2: 84:a3:18:2f:0f:26:32:f0:16:5b:7c:ed:56:99:29:75:b1:57: 97:7a:50:b9:8d:ec:86:f1:96:93:41:61:76:c0:50:1c:1d:83: e4:30:80:1f:c8:99:cc:d3:03:d5:bd:fb:2c:1a:ec:29:c3:44: 52:26:d5:38:96:fe:31:29:74:d8:d5:13:04:03:c2:3c:34:be: d3:28:52:d1:49:47:3f:af:c9:13:20:4b:d8:39:6a:8d:8b:79: 77:43:c7:d3:35:6e:33:29:ca:0e:3b:2e:4f:eb:31:da:2c:b4: d8:bb:ea:a3:b9:60:9a:81:5f:c2:e5:95:1d:de:0a:19:21:ef: 94:c3:ba:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdepNU1CWtKsWWVtrvACyAdA1pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNTA3MjExMDE2NTNaFw0yNTA3MjQyMDE5NTNaMDMxMTAvBgNV BAMTKEVBRUIwNzIyQTYwQUY5NkVCQkIyOTE1Qjg2QjVCNzc3QUUwQTA4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMN15OEY/+DElpZy4bErubz+w h/CsKuCM63zefxpXKgZRU2l9JEmE3KGtSwFSOB9HD4+CqmYhuizMOD0hyNMlE6jV jQODhwHK0wkukn1Nr7vrP+khsOM5iO8kIu5zNKhoEK/wCPrIByuknQTUylslrkoe emSZqRXjGiLrSEKYQNW6CKLxWsuFg7cC362ZtmelkmNJpE0Z3CmYRwvsYxPppssJ Us5CMfO0warIwXEzjl+Sm5/eg4LSIg5m/xZYH44Pe/7r6jMKUcm8AaMsD1EBcVjC xVhqShsLGgRCVG79ZdvrVV2IMmZzk/+kYfnQKmLslkHqBV0Auuj2rMHF2PIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6usHIqYK+W67spFbhrW3d64KCK4wHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvs6lQvz9Q42wazMzP0DpSHv8Pp/GESn1uj 6ifJbp9XZ+J2NavlbATRles6bBtwb3CmHirn5Jwivdd5/uMU6hkgluGTnCnC3Eqs Fw29LA558ZWKG6BJWdERfQLXT+bWEX24HQCVD4jJcpYGxzBIkBZodW/tOaN3RYFM K1FY4oSjGC8PJjLwFlt87VaZKXWxV5d6ULmN7IbxlpNBYXbAUBwdg+QwgB/ImczT A9W9+ywa7CnDRFIm1TiW/jEpdNjVEwQDwjw0vtMoUtFJRz+vyRMgS9g5ao2LeXdD x9M1bjMpyg47Lk/rMdostNi76qO5YJqBX8LllR3eChkh75TDuuk= -----END CERTIFICATE-----Generated at Mon Jul 21 23:58:16 2025 by rpki-client