$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json) Hash identifier: hjlbublYg0/4/H/+/gmcDu70YBKWZ3I1SYxrb5v2Eh0= Subject key identifier: EA:A8:50:D7:06:0D:16:D0:DC:AD:7D:68:A2:67:4F:EF:0B:03:C2:54 Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Certificate serial: 49CC27DF7C8E8F256E2C66B8FDFAB00145D61D48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft Manifest number: 011D Signing time: Wed 03 Sep 2025 07:40:45 +0000 Manifest this update: Wed 03 Sep 2025 07:35:45 +0000 Manifest next update: Sat 06 Sep 2025 15:02:45 +0000 Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: Ziyg0D5V2s9TzgtFXhxrBwlw2/DAp6aRN3+gPcC29v4=) 2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: 30zFzoQ4gkXeQ0NUU1W+o1sLVW3WHIXvfOfr6CcV5MQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cc:27:df:7c:8e:8f:25:6e:2c:66:b8:fd:fa:b0:01:45:d6:1d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Validity Not Before: Sep 3 07:35:45 2025 GMT Not After : Sep 6 15:02:45 2025 GMT Subject: CN=EAA850D7060D16D0DCAD7D68A2674FEF0B03C254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:5f:fe:6b:45:12:be:ad:c5:76:e5:e2:b5: 16:1b:67:10:20:bc:8c:a1:8e:89:d5:94:37:7a:20: 44:bb:6f:80:74:07:1b:99:dc:5a:5c:ab:27:68:eb: a2:d7:ee:40:c8:59:0e:b5:68:2d:03:ed:94:a7:a2: c9:32:a9:41:35:55:b4:81:63:53:82:2c:c3:93:e9: b0:87:10:1b:95:4b:f6:8a:f9:e9:ed:42:15:99:73: 35:29:56:3f:6d:09:a7:f2:42:66:f1:5f:12:78:bb: ab:3b:bb:63:b5:31:28:6e:c7:d1:a0:1e:4a:ac:ab: ac:e0:0d:af:49:b8:9c:15:04:4c:a6:b9:bf:64:20: 57:f5:0a:11:94:92:74:eb:f8:0b:f2:06:9d:79:a9: 43:9a:f3:c4:65:de:c4:03:70:43:0e:9c:c4:97:2f: 69:89:63:b5:1a:00:e0:08:ea:79:4a:cb:d8:9d:3e: 9a:60:d9:c8:70:c5:b7:ae:6d:f6:d3:30:97:dd:d7: 72:74:79:ef:b5:1f:a9:69:24:43:86:b5:70:c7:13: 96:4a:73:63:c7:9f:aa:8a:36:e2:48:04:60:4e:e9: 3c:e2:bb:eb:34:71:cb:e4:b7:1f:b8:00:09:ea:04: 24:bc:f6:32:aa:fa:43:2a:3f:5e:8c:c1:99:f7:07: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A8:50:D7:06:0D:16:D0:DC:AD:7D:68:A2:67:4F:EF:0B:03:C2:54 X509v3 Authority Key Identifier: keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c4:b5:bc:c2:30:17:5f:b7:73:ae:21:b1:5a:d5:7a:85:1f: 7f:e6:d7:00:91:8a:f0:21:41:ce:80:7e:21:d5:d3:ec:2b:50: 5b:c1:7b:9c:1a:28:a7:43:3b:50:fd:01:12:51:3d:c4:88:a0: 95:ef:53:8f:dc:9e:b8:0b:43:b7:d4:44:5d:68:d6:58:c1:76: 83:16:ee:e8:44:c1:45:35:18:b2:5f:8a:38:cb:0d:6b:c8:b6: 8a:c0:70:a5:52:d9:1a:10:47:23:3e:83:50:a3:e0:6e:ee:ad: 0e:63:9d:3a:9b:7f:2b:8b:f1:ad:f5:02:65:ef:9f:c4:3a:e3: 92:93:ce:2b:dd:f9:db:26:e3:79:0d:6e:86:41:dc:07:76:35: 4a:14:33:af:c2:c3:7c:d9:e9:72:24:7a:07:82:e7:65:bf:5f: a5:30:7e:bc:3c:e1:21:1b:5c:9f:88:25:d0:b1:93:5d:e7:19: 23:95:0b:fe:47:91:be:8d:fa:06:b1:8f:c0:53:39:0d:de:a2: 3f:37:a8:2a:f7:bb:ba:41:a8:14:30:1c:53:92:92:c1:8a:b3: 7a:4a:39:4f:01:5b:04:9d:25:f2:ab:fe:c2:5e:dc:8e:55:f5: de:b5:d6:e1:91:81:a6:be:90:bd:3f:c7:5c:89:1a:64:a0:44: 84:86:2b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScwn33yOjyVuLGa4/fqwAUXWHUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0 RDVDQTY4NzAeFw0yNTA5MDMwNzM1NDVaFw0yNTA5MDYxNTAyNDVaMDMxMTAvBgNV BAMTKEVBQTg1MEQ3MDYwRDE2RDBEQ0FEN0Q2OEEyNjc0RkVGMEIwM0MyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WF/+a0USvq3FduXitRYbZxAg vIyhjonVlDd6IES7b4B0BxuZ3Fpcqydo66LX7kDIWQ61aC0D7ZSnoskyqUE1VbSB Y1OCLMOT6bCHEBuVS/aK+entQhWZczUpVj9tCafyQmbxXxJ4u6s7u2O1MShux9Gg Hkqsq6zgDa9JuJwVBEymub9kIFf1ChGUknTr+AvyBp15qUOa88Rl3sQDcEMOnMSX L2mJY7UaAOAI6nlKy9idPppg2chwxbeubfbTMJfd13J0ee+1H6lpJEOGtXDHE5ZK c2PHn6qKNuJIBGBO6Tziu+s0ccvktx+4AAnqBCS89jKq+kMqP16MwZn3ByTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6qhQ1wYNFtDcrX1oomdP7wsDwlQwHwYDVR0j BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4 QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1 ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPEtbzCMBdft3OuIbFa1XqFH3/m1wCRivAh Qc6AfiHV0+wrUFvBe5waKKdDO1D9ARJRPcSIoJXvU4/cnrgLQ7fURF1o1ljBdoMW 7uhEwUU1GLJfijjLDWvItorAcKVS2RoQRyM+g1Cj4G7urQ5jnTqbfyuL8a31AmXv n8Q645KTzivd+dsm43kNboZB3Ad2NUoUM6/Cw3zZ6XIkegeC52W/X6Uwfrw84SEb XJ+IJdCxk13nGSOVC/5Hkb6N+gaxj8BTOQ3eoj83qCr3u7pBqBQwHFOSksGKs3pK OU8BWwSdJfKr/sJe3I5V9d611uGRgaa+kL0/x1yJGmSgRISGK5A= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:54 2025 by rpki-client