$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: tAow/jP0StXaczDNNuO0zqG3VeWkFJFhSdK8KC1N2OQ= Subject key identifier: CA:FE:A7:D0:0F:27:77:EF:6E:C7:39:72:59:C7:D6:65:02:38:BF:9E Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 431EC1BA7A503853EBB114D0834B907C52835BAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 01DD Signing time: Sat 30 Aug 2025 14:21:40 +0000 Manifest this update: Sat 30 Aug 2025 14:16:40 +0000 Manifest next update: Tue 02 Sep 2025 22:48:40 +0000 Files and hashes: 1: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: thcLwrVqqTRNG8+oOmCrlRsLs787tgLy93H4k+Lgo3E=) 2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 22:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1e:c1:ba:7a:50:38:53:eb:b1:14:d0:83:4b:90:7c:52:83:5b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Aug 30 14:16:40 2025 GMT Not After : Sep 2 22:48:40 2025 GMT Subject: CN=CAFEA7D00F2777EF6EC7397259C7D6650238BF9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:de:80:d3:cb:fe:3d:7f:c0:05:4e:d2:ff: ec:55:e4:bd:b0:2f:5c:63:b8:1f:fd:4f:a2:34:96: e6:ef:3e:cc:d7:c3:6e:30:f5:c5:69:8f:96:af:83: e1:d0:fa:ee:81:84:b0:97:17:6d:00:be:10:59:4f: e3:a4:23:84:a0:3e:db:c2:16:6b:c8:4c:af:b4:c8: a1:12:38:53:5c:24:7d:84:2f:63:ef:69:e8:bd:d7: a5:9c:5e:1b:35:ab:68:a4:be:87:4f:02:3d:78:f8: 5f:98:c5:cb:8d:4b:9a:2b:ce:76:65:c8:f3:c0:d8: 95:f1:ac:e2:7f:6b:16:b6:15:a2:e1:be:54:fa:c3: 2a:a4:3a:b3:90:13:39:70:f2:73:97:e4:d3:63:69: 82:6a:02:b8:4e:7c:37:95:cd:ea:c3:d6:60:6e:b4: 31:24:62:7f:96:65:22:46:9e:36:e8:c5:50:31:96: a6:b6:92:cf:84:80:f1:d0:b8:68:15:cc:eb:1e:04: 07:d0:7d:9a:be:f7:73:21:6a:ee:b0:6a:d7:51:da: 21:be:00:02:6d:28:f1:aa:19:7a:48:dd:d2:bc:13: cc:8c:19:a1:67:15:80:c7:e1:49:cd:18:20:1f:20: f7:27:1a:96:99:04:a4:00:98:de:5d:ff:41:f6:8d: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FE:A7:D0:0F:27:77:EF:6E:C7:39:72:59:C7:D6:65:02:38:BF:9E X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a4:a1:27:d4:65:0b:a1:ef:c9:a3:73:ed:f1:17:9b:d7:a6: d0:c5:00:7d:99:7c:61:3d:e7:5f:a5:86:28:57:86:8f:7d:ad: f1:07:b2:1a:07:94:ad:29:b7:2c:dc:5a:66:32:de:bb:ae:f3: a3:ea:bd:6b:61:2a:81:2b:40:21:84:05:63:fe:35:d4:2b:98: 94:3c:d9:3a:e8:52:69:51:7a:a5:0f:77:c0:d4:14:f4:96:82: 14:44:40:1f:8d:ae:54:a4:e6:d3:6f:3b:27:4e:94:a8:65:b9: 1e:82:5e:43:6c:f7:24:5d:91:b8:ea:c0:41:ae:a8:f6:2e:6f: 27:da:16:b9:76:29:c6:36:b7:91:23:b3:ef:06:7a:62:28:14: f9:18:1c:98:68:ad:e3:69:93:93:17:be:15:49:7f:6a:aa:f5: e8:e7:20:c0:0c:c2:9a:aa:f8:0f:59:82:f2:26:ea:e5:97:e3: 88:02:81:23:dd:e1:f2:8a:d6:39:eb:45:90:f0:14:ee:21:bd: 53:62:14:3d:f0:fb:6c:fa:5e:fb:00:eb:da:2f:55:d3:38:32: fd:fd:b1:6e:c5:30:44:b6:a5:a1:51:e5:74:da:0d:7c:1e:ad: 6a:1d:46:28:0c:a7:13:60:6a:31:78:b7:52:4d:ab:97:f3:55: 2a:3f:9f:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQx7BunpQOFPrsRTQg0uQfFKDW6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTA4MzAxNDE2NDBaFw0yNTA5MDIyMjQ4NDBaMDMxMTAvBgNV BAMTKENBRkVBN0QwMEYyNzc3RUY2RUM3Mzk3MjU5QzdENjY1MDIzOEJGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtg96A08v+PX/ABU7S/+xV5L2w L1xjuB/9T6I0lubvPszXw24w9cVpj5avg+HQ+u6BhLCXF20AvhBZT+OkI4SgPtvC FmvITK+0yKESOFNcJH2EL2Pvaei916WcXhs1q2ikvodPAj14+F+YxcuNS5orznZl yPPA2JXxrOJ/axa2FaLhvlT6wyqkOrOQEzlw8nOX5NNjaYJqArhOfDeVzerD1mBu tDEkYn+WZSJGnjboxVAxlqa2ks+EgPHQuGgVzOseBAfQfZq+93Mhau6watdR2iG+ AAJtKPGqGXpI3dK8E8yMGaFnFYDH4UnNGCAfIPcnGpaZBKQAmN5d/0H2jatfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyv6n0A8nd+9uxzlyWcfWZQI4v54wHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOkoSfUZQuh78mjc+3xF5vXptDFAH2ZfGE9 51+lhihXho99rfEHshoHlK0ptyzcWmYy3ruu86PqvWthKoErQCGEBWP+NdQrmJQ8 2TroUmlReqUPd8DUFPSWghREQB+NrlSk5tNvOydOlKhluR6CXkNs9yRdkbjqwEGu qPYubyfaFrl2KcY2t5Ejs+8GemIoFPkYHJhoreNpk5MXvhVJf2qq9ejnIMAMwpqq +A9ZgvIm6uWX44gCgSPd4fKK1jnrRZDwFO4hvVNiFD3w+2z6XvsA69ovVdM4Mv39 sW7FMES2paFR5XTaDXwerWodRigMpxNgajF4t1JNq5fzVSo/n/Y= -----END CERTIFICATE-----Generated at Sun Aug 31 21:31:30 2025 by rpki-client