$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: xFhtb7Dd7u3G4AbKMFjpoX7Cpz8tPnwNXGG5w4fTJYg= Subject key identifier: C6:01:D5:80:45:80:B2:88:B7:83:C1:8A:5A:AB:8D:BB:68:D6:C8:A4 Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 275222EFA6C938F31673836C00F4E9C96F04B080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: BF Signing time: Fri 29 Aug 2025 04:21:18 +0000 Manifest this update: Fri 29 Aug 2025 04:16:18 +0000 Manifest next update: Mon 01 Sep 2025 11:17:18 +0000 Files and hashes: 1: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: J2AsX16GNgD7lmgnokjNSdkbpwAgvrgThBWW+pTgt4Q=) 2: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 3: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 4: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 11:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:52:22:ef:a6:c9:38:f3:16:73:83:6c:00:f4:e9:c9:6f:04:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Aug 29 04:16:18 2025 GMT Not After : Sep 1 11:17:18 2025 GMT Subject: CN=C601D5804580B288B783C18A5AAB8DBB68D6C8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:7b:1c:29:53:9c:53:1d:4c:63:f2:6b:3f: 05:84:95:a4:bd:83:14:04:f8:05:a4:fd:ad:cf:8a: 33:ff:0f:f4:ed:dc:3f:b2:e6:3d:9f:60:d5:9e:01: b9:f6:6b:e1:69:4a:3e:52:57:e7:37:fa:c8:dd:d0: e2:7e:74:92:9b:e0:e3:b7:a1:37:9f:b8:f2:1c:a9: af:6c:bc:08:72:90:b9:15:4d:e4:9f:ea:6c:6c:b3: b2:9b:2e:06:32:a8:6e:28:e5:f0:f6:af:65:94:69: 57:40:7f:96:e7:16:6a:54:36:23:25:2d:36:99:2a: 58:2d:13:58:35:1b:01:27:da:ce:78:4c:37:98:bf: dd:0e:ae:46:96:c0:9a:7d:9a:50:7c:45:d0:af:90: 34:71:8e:b1:65:ce:8a:d1:84:0b:3b:bb:87:a6:56: 7f:7c:0c:27:16:98:68:21:a1:0a:02:48:2a:a8:09: c6:99:85:6e:88:2f:9a:47:f1:e0:0d:7b:cd:7f:78: 3d:7a:a5:59:27:16:04:68:bc:8d:dc:44:40:4b:bf: 80:1d:4c:ff:2f:9e:d6:06:78:3a:0a:3b:f8:22:5b: 3d:4a:4b:8e:fb:a2:7f:6e:cc:66:a7:34:01:09:91: a3:84:5f:fc:a2:5d:e4:e9:6f:bc:47:45:e2:0a:eb: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:01:D5:80:45:80:B2:88:B7:83:C1:8A:5A:AB:8D:BB:68:D6:C8:A4 X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:55:fa:d1:a7:80:85:db:f1:63:28:3b:f8:04:32:39:f6:ef: a9:e7:81:86:ed:de:cb:52:84:3e:d3:c5:a0:9e:d3:f5:c0:35: 74:70:4b:62:c9:3c:4d:85:e2:23:a2:c1:53:f1:7b:fe:74:1a: 53:3e:ab:7e:f0:c5:1f:f5:9a:cf:73:92:3f:80:08:33:61:c2: e4:d8:35:3a:de:f0:d5:61:54:f3:7b:34:bf:1b:52:36:dd:ad: 14:69:71:bf:38:10:bd:88:56:0a:54:71:38:e2:70:86:e9:90: c2:81:fc:4b:2a:a3:9f:bc:27:ea:b4:17:64:44:5a:74:6c:da: 1d:31:d2:fe:92:68:1f:fb:f1:c9:63:98:1c:08:f2:2d:78:04: 36:c0:55:3b:3b:8e:7a:b8:ec:65:53:5c:e5:1b:52:84:38:3c: 1c:3b:84:25:81:f9:57:4e:6e:ea:73:e5:5a:9f:72:61:d4:f3: e2:03:8f:c0:9d:cc:dc:a5:bf:2f:e9:0f:6a:8b:8b:83:18:8f: b6:16:b7:4a:c0:60:b7:b1:bc:b5:7e:d5:87:35:ab:6b:7c:d3: de:7c:1b:a2:f5:3f:6c:9d:5e:2b:b4:6a:d1:08:c6:43:26:73: 40:c9:0a:c8:27:e0:a6:32:49:60:3e:ed:a6:17:64:4d:e0:20: 19:38:ab:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1Ii76bJOPMWc4NsAPTpyW8EsIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTA4MjkwNDE2MThaFw0yNTA5MDExMTE3MThaMDMxMTAvBgNV BAMTKEM2MDFENTgwNDU4MEIyODhCNzgzQzE4QTVBQUI4REJCNjhENkM4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3nscKVOcUx1MY/JrPwWElaS9 gxQE+AWk/a3PijP/D/Tt3D+y5j2fYNWeAbn2a+FpSj5SV+c3+sjd0OJ+dJKb4OO3 oTefuPIcqa9svAhykLkVTeSf6mxss7KbLgYyqG4o5fD2r2WUaVdAf5bnFmpUNiMl LTaZKlgtE1g1GwEn2s54TDeYv90OrkaWwJp9mlB8RdCvkDRxjrFlzorRhAs7u4em Vn98DCcWmGghoQoCSCqoCcaZhW6IL5pH8eANe81/eD16pVknFgRovI3cREBLv4Ad TP8vntYGeDoKO/giWz1KS477on9uzGanNAEJkaOEX/yiXeTpb7xHReIK6zlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxgHVgEWAsoi3g8GKWquNu2jWyKQwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1V+tGngIXb8WMoO/gEMjn276nngYbt3stS hD7TxaCe0/XANXRwS2LJPE2F4iOiwVPxe/50GlM+q37wxR/1ms9zkj+ACDNhwuTY NTre8NVhVPN7NL8bUjbdrRRpcb84EL2IVgpUcTjicIbpkMKB/Esqo5+8J+q0F2RE WnRs2h0x0v6SaB/78cljmBwI8i14BDbAVTs7jnq47GVTXOUbUoQ4PBw7hCWB+VdO bupz5VqfcmHU8+IDj8CdzNylvy/pD2qLi4MYj7YWt0rAYLexvLV+1Yc1q2t80958 G6L1P2ydXiu0atEIxkMmc0DJCsgn4KYySWA+7aYXZE3gIBk4q2U= -----END CERTIFICATE-----Generated at Sat Aug 30 13:47:01 2025 by rpki-client