$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: xy+YwYOH0/YTzuzEJv3XWwR01X9FBBQeA33bJs4tY9M= Subject key identifier: 03:F8:6C:84:A1:23:BC:F6:0B:F7:FF:48:16:53:39:45:66:58:5D:87 Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 5DF593918A43EBFDB7E96754EE550B68BB2F946B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 04DC Signing time: Wed 03 Sep 2025 23:31:45 +0000 Manifest this update: Wed 03 Sep 2025 23:26:45 +0000 Manifest next update: Sun 07 Sep 2025 10:53:45 +0000 Files and hashes: 1: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: yCK57c455T0I5EXoaeNw16KurZ8WrndECFbshxFFF+Y=) 2: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: 2xWbB4/mYqrmplHY/8MyqkPKEZcXvKjkESzZID4DGlk=) 3: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: LCTalW2OdI1gYSKj0d9a5cN3x/BU4CR5jkgjJ4XsxFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 10:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f5:93:91:8a:43:eb:fd:b7:e9:67:54:ee:55:0b:68:bb:2f:94:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Sep 3 23:26:45 2025 GMT Not After : Sep 7 10:53:45 2025 GMT Subject: CN=03F86C84A123BCF60BF7FF481653394566585D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:b1:b4:45:f3:87:1a:c9:b9:92:ad:0d:b7: 8f:67:80:1b:e2:36:9c:33:65:4e:34:f9:48:55:43: 7a:e4:8a:f6:6d:7e:fd:9f:e6:e5:6c:be:49:d8:25: cf:d4:da:11:60:8f:6a:58:66:50:05:c8:5e:1d:22: c4:69:94:b2:92:7b:f1:e7:ac:af:46:81:20:5d:17: f0:7e:d8:ef:03:ce:59:2a:50:7a:e6:d0:03:36:69: e2:bb:02:b8:58:07:fd:f5:b0:d4:b0:fd:0b:1c:08: 4c:5d:9f:54:4d:ae:74:88:f6:09:7c:ff:56:1c:9d: 55:20:4f:02:3d:c3:f7:cb:56:bd:d9:93:ac:c6:b9: 39:f4:59:03:60:02:24:10:c5:f7:84:19:ee:6c:7c: 0a:3f:43:4a:d1:41:71:12:72:75:54:e7:f9:a3:a1: 7d:b0:1f:d4:1e:6e:81:3a:35:cf:e6:9f:8b:40:18: a2:94:2d:35:e3:8e:74:34:42:8f:d6:af:4f:1f:06: 3a:be:c9:fc:78:79:b9:de:85:17:48:6b:76:60:c2: 1b:d4:dd:50:7c:9a:44:49:c2:6d:60:af:40:58:bc: f8:be:72:ce:27:4c:0b:d6:5a:2a:20:31:ff:09:db: 3e:fe:cb:96:a8:50:11:f9:ab:f0:78:5f:5b:d8:a6: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F8:6C:84:A1:23:BC:F6:0B:F7:FF:48:16:53:39:45:66:58:5D:87 X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7d:50:0b:0a:92:10:83:3c:9c:be:82:84:a2:fb:f9:32:af: d1:bf:f8:74:91:f9:9c:28:ff:8d:fb:08:b4:c6:0b:95:7e:b5: 62:66:2d:af:05:74:b8:22:19:74:5c:f9:9e:5c:31:4d:f1:fa: 26:be:60:25:2f:65:0f:a1:23:6a:ea:d0:d2:69:dd:b1:e8:c1: bb:0b:8b:dd:c4:bc:a2:66:c2:4a:26:38:35:7c:9d:86:30:99: 22:18:cb:ab:c5:3e:21:88:a8:02:a7:b0:bc:17:6c:24:ab:e7: 90:23:1d:51:96:37:c2:4d:68:04:e3:df:f9:4a:42:83:05:57: 29:23:08:b1:c3:55:04:7a:4f:e9:b4:9d:cd:f0:08:56:4f:e5: e2:02:28:a5:b1:ae:93:f0:0d:cb:5d:a8:ef:76:56:13:48:b4: af:52:98:51:9d:eb:eb:63:a3:0e:15:8a:83:86:fc:76:e7:2c: 30:1c:2e:6e:fe:ae:86:8d:10:d4:7b:12:cd:c0:7b:03:7f:fe: ef:25:65:40:3c:6a:6f:2a:14:0d:68:1b:24:58:e3:c5:06:3e: f2:88:cc:a8:7e:a5:92:fd:14:9f:e2:24:1f:2d:13:ec:b5:9d: 8a:48:94:76:6d:55:87:13:2d:f0:7b:0d:b6:e0:0a:b9:75:d1: 51:45:95:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfWTkYpD6/236WdU7lULaLsvlGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNTA5MDMyMzI2NDVaFw0yNTA5MDcxMDUzNDVaMDMxMTAvBgNV BAMTKDAzRjg2Qzg0QTEyM0JDRjYwQkY3RkY0ODE2NTMzOTQ1NjY1ODVEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuK7G0RfOHGsm5kq0Nt49ngBvi NpwzZU40+UhVQ3rkivZtfv2f5uVsvknYJc/U2hFgj2pYZlAFyF4dIsRplLKSe/Hn rK9GgSBdF/B+2O8DzlkqUHrm0AM2aeK7ArhYB/31sNSw/QscCExdn1RNrnSI9gl8 /1YcnVUgTwI9w/fLVr3Zk6zGuTn0WQNgAiQQxfeEGe5sfAo/Q0rRQXEScnVU5/mj oX2wH9QeboE6Nc/mn4tAGKKULTXjjnQ0Qo/Wr08fBjq+yfx4ebnehRdIa3ZgwhvU 3VB8mkRJwm1gr0BYvPi+cs4nTAvWWiogMf8J2z7+y5aoUBH5q/B4X1vYpl27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA/hshKEjvPYL9/9IFlM5RWZYXYcwHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI99UAsKkhCDPJy+goSi+/kyr9G/+HSR+Zwo /437CLTGC5V+tWJmLa8FdLgiGXRc+Z5cMU3x+ia+YCUvZQ+hI2rq0NJp3bHowbsL i93EvKJmwkomODV8nYYwmSIYy6vFPiGIqAKnsLwXbCSr55AjHVGWN8JNaATj3/lK QoMFVykjCLHDVQR6T+m0nc3wCFZP5eICKKWxrpPwDctdqO92VhNItK9SmFGd6+tj ow4VioOG/HbnLDAcLm7+roaNENR7Es3AewN//u8lZUA8am8qFA1oGyRY48UGPvKI zKh+pZL9FJ/iJB8tE+y1nYpIlHZtVYcTLfB7DbbgCrl10VFFldU= -----END CERTIFICATE-----Generated at Fri Sep 5 12:44:21 2025 by rpki-client