$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: U8LwQPtc4OTiY1EaJWOtWQ3l7STptzOCRDTe6U6/6YM= Subject key identifier: F8:E4:E8:1C:54:7B:75:3E:AF:26:3B:B7:B7:57:C6:9C:B6:F4:D5:77 Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 2886767F5304F14B8048F87A18017317FF28ADE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0217 Signing time: Wed 03 Sep 2025 13:42:16 +0000 Manifest this update: Wed 03 Sep 2025 13:37:16 +0000 Manifest next update: Sun 07 Sep 2025 00:53:16 +0000 Files and hashes: 1: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 2: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 4: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 5: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: kac8PKTgAus3Zjkfix9EDMc8xNjqri3mEWhrrANLbYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 00:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:86:76:7f:53:04:f1:4b:80:48:f8:7a:18:01:73:17:ff:28:ad:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Sep 3 13:37:16 2025 GMT Not After : Sep 7 00:53:16 2025 GMT Subject: CN=F8E4E81C547B753EAF263BB7B757C69CB6F4D577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:03:a4:7a:37:f1:eb:71:3d:de:ae:05:52: 93:64:74:3f:e2:23:e2:76:82:de:1c:56:bf:c6:e6: 73:c9:5a:bd:10:a5:bf:8c:73:f7:8c:40:b9:1e:92: de:4d:f7:c4:f9:37:5e:4b:3c:30:91:dd:87:7f:0d: 70:2f:59:6f:78:1b:28:df:2f:28:1b:7b:dd:ba:2d: 10:98:b7:74:e9:bd:47:e3:63:17:e7:70:21:ae:26: 95:6a:41:27:5c:a8:b3:33:8f:8f:ca:4d:dd:4a:a7: 9f:4b:84:bc:30:d2:8c:15:14:6e:17:27:ec:a8:ee: 3d:a2:d0:11:01:64:31:f3:fe:0d:1d:47:60:7d:04: 18:eb:f8:0e:3f:dd:10:ca:5c:97:82:a8:a2:17:fe: 05:36:5a:2a:62:bc:b5:a5:ef:26:f8:85:05:e9:89: 10:dc:6e:75:a7:93:aa:59:e6:fe:99:e6:1b:95:1d: b3:3c:dc:c8:b7:0e:eb:c8:ec:0b:d3:88:bc:1c:54: d5:d8:c7:7c:17:bb:9f:7d:e2:cf:d9:e8:ea:4f:7d: fd:82:93:f7:bb:f8:ff:60:1d:70:8f:0f:b8:2f:9d: a1:d4:fa:f8:5c:1c:10:70:bf:ca:27:27:62:e9:1d: 27:8e:17:a8:5c:ae:99:a6:a2:f8:93:83:e9:2e:b2: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E4:E8:1C:54:7B:75:3E:AF:26:3B:B7:B7:57:C6:9C:B6:F4:D5:77 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:12:8e:ae:f3:10:af:71:f4:3b:8e:0d:89:83:63:b8:d9:db: 36:56:a8:d5:58:6e:14:0d:d3:66:cb:3c:ac:9a:29:58:24:e2: b2:06:50:91:5b:b6:d3:8d:7e:45:54:f4:03:f5:5e:36:3d:2b: 50:91:e7:9a:b4:c0:92:15:87:96:33:70:fd:2b:2e:f5:ef:34: 3f:98:4b:e5:71:9e:be:47:59:49:18:0d:84:3f:a0:9c:40:8c: ee:85:cd:00:c6:5f:b3:85:5a:16:c2:69:de:74:63:ab:e9:52: 2e:8c:f2:a4:ef:2f:1e:6e:63:b2:27:d6:1d:35:6d:cd:7c:cc: 5c:60:ad:5a:ef:70:a4:6f:ef:af:dc:50:7e:da:a9:93:65:0f: 21:0a:12:dc:12:2e:8a:86:13:e3:bc:af:ba:4a:85:4a:e5:1d: a5:af:3f:fd:af:e3:76:75:c7:f4:b9:8b:ea:e1:d2:06:a6:c4: 11:05:29:23:b4:1e:cc:9d:e1:7b:84:4c:2c:1d:40:3b:7d:5b: 3c:49:34:9c:49:50:93:07:58:fb:5b:7d:79:88:4a:7a:f9:4a: c6:1f:e4:e0:1c:91:4a:a6:7f:7b:03:30:9a:a2:bc:1a:0d:3d: 87:77:6e:09:67:0b:c5:89:a5:4e:d5:f2:9a:c0:f6:75:90:ad: 3c:6e:7b:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIZ2f1ME8UuASPh6GAFzF/8oreEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA5MDMxMzM3MTZaFw0yNTA5MDcwMDUzMTZaMDMxMTAvBgNV BAMTKEY4RTRFODFDNTQ3Qjc1M0VBRjI2M0JCN0I3NTdDNjlDQjZGNEQ1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkQOkejfx63E93q4FUpNkdD/i I+J2gt4cVr/G5nPJWr0Qpb+Mc/eMQLkekt5N98T5N15LPDCR3Yd/DXAvWW94Gyjf Lygbe926LRCYt3TpvUfjYxfncCGuJpVqQSdcqLMzj4/KTd1Kp59LhLww0owVFG4X J+yo7j2i0BEBZDHz/g0dR2B9BBjr+A4/3RDKXJeCqKIX/gU2WipivLWl7yb4hQXp iRDcbnWnk6pZ5v6Z5huVHbM83Mi3DuvI7AvTiLwcVNXYx3wXu5994s/Z6OpPff2C k/e7+P9gHXCPD7gvnaHU+vhcHBBwv8onJ2LpHSeOF6hcrpmmoviTg+kusildAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+OToHFR7dT6vJju3t1fGnLb01XcwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAASjq7zEK9x9DuODYmDY7jZ2zZWqNVYbhQN 02bLPKyaKVgk4rIGUJFbttONfkVU9AP1XjY9K1CR55q0wJIVh5YzcP0rLvXvND+Y S+Vxnr5HWUkYDYQ/oJxAjO6FzQDGX7OFWhbCad50Y6vpUi6M8qTvLx5uY7In1h01 bc18zFxgrVrvcKRv76/cUH7aqZNlDyEKEtwSLoqGE+O8r7pKhUrlHaWvP/2v43Z1 x/S5i+rh0gamxBEFKSO0Hsyd4XuETCwdQDt9WzxJNJxJUJMHWPtbfXmISnr5SsYf 5OAckUqmf3sDMJqivBoNPYd3bglnC8WJpU7V8prA9nWQrTxuezQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:17 2025 by rpki-client