$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: 9oQnSHPmTmkWzeRcpg7yaX0lCIQN9vRmYA/UFgKM+5Q= Subject key identifier: A5:38:D3:0F:38:08:BE:F2:8C:BE:CE:40:6A:38:6E:B0:7F:AC:B7:34 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 7947983CAE599AF41DAEA367032CAEE1F767075F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 01B9 Signing time: Tue 22 Jul 2025 04:11:06 +0000 Manifest this update: Tue 22 Jul 2025 04:06:06 +0000 Manifest next update: Fri 25 Jul 2025 13:28:06 +0000 Files and hashes: 1: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: 1gMAOy09idhONr3I0BBNnLbuoiUwhMXapgkBp5fM6Xg=) 2: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: dbIV4xMO/kmp5beqpQZbhg9DwG+mNr8YalPBQGlisqE=) 3: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: hLB0u4Pvac766uVNNHRQldQ+SI0MJNlYhxvuGaXeDIA=) 4: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: yO9dnKFN9zlpHOZzkZ8VS+2FhIP3vvVtlP91AUvmN9o=) 5: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IYrgvyCjCXmDttoq8fGjccS1fVVmTtZWCeE52GEwc2U=) 6: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: urQF+d1uZLCb/Xxspk6boWaqVo9lHrklUsdPM9s+cao=) 7: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: 52rz8OVXlsR9PhF7qpvjq+LgVmTdcv6Xc2HRbxBYnZs=) 8: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: K7v4mVMrOGRH9uwLIAKHJnQcmHP3SMpJcQP3rkEuNE0=) 9: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: F6GRhs4Ym7cQbHiZ1S3rtjfG9sguZ904TOjc50vTNgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:47:98:3c:ae:59:9a:f4:1d:ae:a3:67:03:2c:ae:e1:f7:67:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Jul 22 04:06:06 2025 GMT Not After : Jul 25 13:28:06 2025 GMT Subject: CN=A538D30F3808BEF28CBECE406A386EB07FACB734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:80:d9:5e:0a:ec:6e:e4:72:06:37:f2:af: 82:6f:7a:5e:d5:ea:a6:9e:c1:e9:ce:c7:19:34:b8: 61:0d:dc:75:2f:73:9f:79:17:e4:82:4c:cf:0d:89: 31:ac:ff:53:2e:c3:4e:94:09:9c:94:76:7a:a0:0e: c1:81:b1:40:f6:67:39:32:f4:a1:20:d2:68:6d:a6: ad:bf:18:36:33:f6:f4:53:5e:42:30:94:58:f5:3d: aa:62:10:a7:64:21:89:4a:97:e3:74:89:1e:10:a2: 1c:5f:2c:cf:59:17:ef:1d:f5:8d:6b:c6:f1:13:b4: b0:5b:06:16:7b:8d:48:38:7a:de:12:95:9b:c4:df: 37:22:9f:3d:d2:60:03:d2:6e:c3:fc:22:77:bb:53: a1:23:b2:cc:8b:7f:e6:fb:62:9b:38:db:75:e4:bf: aa:fe:5a:bb:f1:0f:a4:6d:d9:e7:98:58:0e:c5:52: 0e:09:22:53:ce:58:ac:57:5e:0b:8a:fe:c7:ed:ee: cb:e5:fa:34:64:26:e9:65:1a:37:16:8d:b2:c0:fb: d5:3d:87:0f:a0:61:37:bd:5a:51:a1:98:ee:99:62: 5e:cb:73:d9:a3:35:d8:59:c3:99:55:b8:0b:5d:ff: 66:66:3b:c4:02:1f:44:3f:21:8a:95:2e:0e:d5:ab: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:38:D3:0F:38:08:BE:F2:8C:BE:CE:40:6A:38:6E:B0:7F:AC:B7:34 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:96:5e:54:2f:a2:54:dd:45:b3:90:29:5d:35:1a:99:3b:40: 5b:76:52:50:41:a7:6f:f1:ab:2b:0f:51:1e:b2:d0:30:b9:28: b1:ec:e0:0d:d2:0a:f8:37:f6:61:d4:b7:35:b3:f9:99:3c:e2: 6e:ab:51:b8:50:10:72:e8:68:64:93:cd:99:29:a7:5d:c9:49: c2:54:b0:bd:b0:ae:15:8d:f5:fd:36:4b:35:7a:d5:74:39:3f: 8d:9c:b2:64:1f:99:fc:68:90:56:6b:e0:3d:76:f6:27:b6:d8: 28:3d:22:15:f1:15:67:c4:99:43:f3:3b:9b:71:24:7d:61:8b: af:84:3e:5c:36:50:39:9d:a5:2e:f7:a2:be:6e:30:45:55:1b: 5b:0c:5d:96:6c:88:30:53:1e:dd:ba:38:d2:2b:13:41:8e:0e: ef:f8:c2:db:13:91:bc:5d:5f:18:b5:e9:e8:ae:ce:e4:3b:0a: 5e:79:e7:99:7b:17:75:25:8d:26:b1:7b:26:7d:c4:dd:cd:35: 20:94:ef:c4:5f:66:d7:66:24:2e:c9:5a:fc:be:e6:ad:71:99: c9:47:5f:97:c8:37:b4:5f:77:51:20:6d:21:fb:d2:31:de:7f: 80:c1:f5:c8:81:2b:1a:cb:a7:d8:35:ae:44:b4:89:ad:fa:04: e1:9a:2f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUeYPK5ZmvQdrqNnAyyu4fdnB18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNTA3MjIwNDA2MDZaFw0yNTA3MjUxMzI4MDZaMDMxMTAvBgNV BAMTKEE1MzhEMzBGMzgwOEJFRjI4Q0JFQ0U0MDZBMzg2RUIwN0ZBQ0I3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+foDZXgrsbuRyBjfyr4Jvel7V 6qaewenOxxk0uGEN3HUvc595F+SCTM8NiTGs/1Muw06UCZyUdnqgDsGBsUD2Zzky 9KEg0mhtpq2/GDYz9vRTXkIwlFj1PapiEKdkIYlKl+N0iR4QohxfLM9ZF+8d9Y1r xvETtLBbBhZ7jUg4et4SlZvE3zcinz3SYAPSbsP8Ine7U6EjssyLf+b7Yps423Xk v6r+WrvxD6Rt2eeYWA7FUg4JIlPOWKxXXguK/sft7svl+jRkJullGjcWjbLA+9U9 hw+gYTe9WlGhmO6ZYl7Lc9mjNdhZw5lVuAtd/2ZmO8QCH0Q/IYqVLg7Vq2CRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpTjTDzgIvvKMvs5AajhusH+stzQwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmWXlQvolTdRbOQKV01Gpk7QFt2UlBBp2/x qysPUR6y0DC5KLHs4A3SCvg39mHUtzWz+Zk84m6rUbhQEHLoaGSTzZkpp13JScJU sL2wrhWN9f02SzV61XQ5P42csmQfmfxokFZr4D129ie22Cg9IhXxFWfEmUPzO5tx JH1hi6+EPlw2UDmdpS73or5uMEVVG1sMXZZsiDBTHt26ONIrE0GODu/4wtsTkbxd Xxi16eiuzuQ7Cl5555l7F3UljSaxeyZ9xN3NNSCU78RfZtdmJC7JWvy+5q1xmclH X5fIN7Rfd1EgbSH70jHef4DB9ciBKxrLp9g1rkS0ia36BOGaL/U= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:47 2025 by rpki-client