$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: kLEiCnmMr1hvS4bTAQsl9bZOvoymZHi5rDwqshOpYu8= Subject key identifier: 5F:76:77:DF:92:84:94:6D:50:A9:E4:72:D6:05:CF:70:26:62:14:67 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 244601FCD4B61A1760AC4F83B8E533C846391C3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 04FD Signing time: Tue 26 Aug 2025 11:02:21 +0000 Manifest this update: Tue 26 Aug 2025 10:57:21 +0000 Manifest next update: Fri 29 Aug 2025 19:50:21 +0000 Files and hashes: 1: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) 2: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) 3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 4: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: ohiZI/621+i2I8+gXirziLrUs/q1CwtacmFZDwNM+T8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 13:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:46:01:fc:d4:b6:1a:17:60:ac:4f:83:b8:e5:33:c8:46:39:1c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Aug 26 10:57:21 2025 GMT Not After : Aug 29 19:50:21 2025 GMT Subject: CN=5F7677DF9284946D50A9E472D605CF7026621467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:f8:11:4a:db:bf:03:5d:ae:81:1f:f1:4d: 46:e6:f6:83:ef:7e:16:0c:e4:a4:88:ca:c4:68:c6: 70:7e:77:24:f1:67:52:fe:2e:de:67:cb:d3:cf:62: 85:11:83:a4:db:7d:92:56:d1:b2:07:a6:14:d9:34: 50:4f:96:f6:37:bd:ae:99:7d:e7:32:4e:d9:b5:b1: 32:c3:e1:c5:cf:88:90:f5:65:a4:23:33:83:5a:97: 54:2f:9c:76:4d:15:58:55:0a:bc:bf:6f:5f:71:81: 27:58:19:27:94:0c:13:c7:88:65:21:c4:80:10:ca: f3:db:f3:16:fb:70:21:d8:ce:51:ed:10:30:9f:f9: b2:eb:19:19:0e:af:d7:92:74:4c:18:92:b0:f1:66: f2:65:00:37:ed:a9:01:5d:1b:16:66:98:3c:db:34: 21:2d:3f:1a:00:9c:08:90:29:e5:08:0b:4b:3a:8d: 67:e5:55:19:40:b0:01:84:e5:a6:11:18:dd:5b:8c: e5:4b:27:00:92:26:3a:3b:ca:a4:0e:ae:fc:7b:e4: a2:d7:04:08:d7:e5:68:1f:94:15:ff:d8:d9:7e:bb: 50:40:24:88:6b:39:8a:33:7c:8b:81:87:cd:2d:8c: 43:c8:7f:7e:f5:86:8f:a5:ae:ce:a7:db:3b:7d:ea: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:77:DF:92:84:94:6D:50:A9:E4:72:D6:05:CF:70:26:62:14:67 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:dd:95:02:65:05:87:9e:43:82:e9:42:c0:20:94:28:02:3f: 7c:55:60:9c:89:90:f3:19:a8:50:cc:35:40:d4:93:9e:a7:9d: de:10:7c:35:f3:9d:87:6a:7d:e0:dd:4a:24:32:f1:49:99:5a: dd:f2:0a:c4:05:19:b3:a4:c7:1c:93:11:d7:a0:45:d8:4f:76: 59:9c:53:73:a5:2a:ee:5d:2a:b2:68:af:4d:41:43:07:3d:96: 0d:68:21:10:91:0e:3e:1d:31:e8:69:0b:61:46:c2:21:60:10: bb:bc:03:a6:f4:47:df:fe:b0:cf:f0:b3:bf:a9:10:d4:00:eb: 4a:ce:3f:9f:a4:b4:58:73:5e:26:26:d3:55:92:c5:4c:93:0a: 06:17:9d:a2:01:89:7d:99:2a:80:16:18:1f:01:e9:c1:1b:74: 5f:77:ba:bc:be:82:67:21:ea:8b:68:86:ef:44:43:1f:11:b3: 2b:5b:89:67:ae:fe:74:0e:75:7b:97:45:f1:55:6d:9a:d8:f6: db:4c:49:0e:10:3c:72:68:47:e4:24:75:5f:4c:9c:cb:f5:ac: a2:52:c7:ce:00:46:e0:8b:3b:45:95:56:3c:0d:e3:53:3e:47: 25:dc:6d:18:a9:84:0f:8e:02:5d:44:27:74:4b:eb:02:e3:2b: 74:a1:bf:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEYB/NS2GhdgrE+DuOUzyEY5HD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTA4MjYxMDU3MjFaFw0yNTA4MjkxOTUwMjFaMDMxMTAvBgNV BAMTKDVGNzY3N0RGOTI4NDk0NkQ1MEE5RTQ3MkQ2MDVDRjcwMjY2MjE0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TvgRStu/A12ugR/xTUbm9oPv fhYM5KSIysRoxnB+dyTxZ1L+Lt5ny9PPYoURg6TbfZJW0bIHphTZNFBPlvY3va6Z fecyTtm1sTLD4cXPiJD1ZaQjM4Nal1QvnHZNFVhVCry/b19xgSdYGSeUDBPHiGUh xIAQyvPb8xb7cCHYzlHtEDCf+bLrGRkOr9eSdEwYkrDxZvJlADftqQFdGxZmmDzb NCEtPxoAnAiQKeUIC0s6jWflVRlAsAGE5aYRGN1bjOVLJwCSJjo7yqQOrvx75KLX BAjX5WgflBX/2Nl+u1BAJIhrOYozfIuBh80tjEPIf371ho+lrs6n2zt96kypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX3Z335KElG1QqeRy1gXPcCZiFGcwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPdlQJlBYeeQ4LpQsAglCgCP3xVYJyJkPMZ qFDMNUDUk56nnd4QfDXznYdqfeDdSiQy8UmZWt3yCsQFGbOkxxyTEdegRdhPdlmc U3OlKu5dKrJor01BQwc9lg1oIRCRDj4dMehpC2FGwiFgELu8A6b0R9/+sM/ws7+p ENQA60rOP5+ktFhzXiYm01WSxUyTCgYXnaIBiX2ZKoAWGB8B6cEbdF93ury+gmch 6otohu9EQx8RsytbiWeu/nQOdXuXRfFVbZrY9ttMSQ4QPHJoR+QkdV9MnMv1rKJS x84ARuCLO0WVVjwN41M+RyXcbRiphA+OAl1EJ3RL6wLjK3Shv5I= -----END CERTIFICATE-----Generated at Tue Aug 26 17:02:57 2025 by rpki-client