$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: vdXIUDxdlU0GT/S05emqCCl/VaXhVfaBEix1+iWp1eA= Subject key identifier: 13:E7:16:C4:4C:5C:2A:D1:DF:27:9A:69:9E:97:CF:53:76:80:60:CE Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 5978C6B5C4B25DF3A472080E441D00143E8724A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 0195 Signing time: Sat 06 Sep 2025 12:20:42 +0000 Manifest this update: Sat 06 Sep 2025 12:15:42 +0000 Manifest next update: Tue 09 Sep 2025 16:02:42 +0000 Files and hashes: 1: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 2: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=) 3: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=) 4: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=) 5: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=) 6: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=) 7: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: EN2oriIll/565KgAtrjJFOIAP6yxoLB6BC65MCqjaQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:78:c6:b5:c4:b2:5d:f3:a4:72:08:0e:44:1d:00:14:3e:87:24:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Sep 6 12:15:42 2025 GMT Not After : Sep 9 16:02:42 2025 GMT Subject: CN=13E716C44C5C2AD1DF279A699E97CF53768060CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d8:92:25:54:e9:ce:7f:23:7f:73:d2:e5:f0: 22:8f:72:6c:af:1b:fa:ec:70:2d:65:91:99:4a:4e: 7d:e9:b0:82:8b:df:23:dd:b3:68:b7:bc:76:80:9b: c1:aa:0c:ff:e0:4e:73:ac:53:68:a3:fd:36:11:c0: 10:71:84:11:87:35:b0:0a:45:e9:5e:68:53:1f:48: 4c:9c:d2:62:40:76:33:ee:e1:79:73:d8:08:9c:52: d7:fc:d9:e2:71:13:b0:6a:51:bf:ef:ae:55:29:1d: ba:55:ee:b9:38:e4:82:15:0b:5a:18:54:52:51:6a: 25:7f:64:ff:82:06:f1:a0:7f:ed:17:27:49:e2:b0: 25:3d:ba:c5:d8:84:2f:2e:c8:b0:e8:be:8d:07:6b: 49:33:7f:df:40:6f:ae:a0:d6:8d:af:e9:7e:77:55: 9b:7d:2d:18:a2:b5:47:98:db:e5:44:35:fc:51:13: b5:e2:6f:cf:8f:0d:81:b6:e8:79:cf:ad:6a:62:e5: 5f:42:92:2d:2c:f8:17:96:7e:ef:6c:70:9e:e6:f1: ea:8a:8d:a5:d0:9a:08:c7:08:3c:e6:19:c7:1f:fe: c3:f5:d5:49:d7:ef:ad:62:85:72:81:3a:db:9c:ac: a3:17:af:8d:39:f2:31:60:91:db:9a:60:db:1b:ce: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E7:16:C4:4C:5C:2A:D1:DF:27:9A:69:9E:97:CF:53:76:80:60:CE X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:77:48:e2:81:63:24:c7:8b:f5:ea:03:cb:75:7a:6b:47:88: 02:2e:f0:0d:7a:71:23:b7:4c:f3:38:d7:ed:64:ba:4e:7e:34: df:2d:71:22:69:0d:d4:0e:53:f7:dd:2e:23:5f:3a:d9:63:c8: fc:3b:05:ef:ed:e6:9c:45:3e:17:59:72:ef:a7:7c:f6:7b:47: ad:1d:23:12:11:e9:a2:ee:ef:41:f4:91:e5:41:00:8f:d7:3f: 2a:34:81:5c:b9:3a:ec:32:e0:5d:44:f2:f8:dd:29:53:d4:73: f4:da:f5:6c:22:66:f8:df:d0:98:5f:6e:64:21:f1:31:3d:97: 1a:69:c7:85:c7:ec:92:b9:8c:a9:0c:ff:f7:5c:e5:63:3b:5d: 68:21:4d:5c:4f:53:ec:89:70:34:9b:78:cf:0f:13:83:ef:fc: 15:d6:a0:c1:aa:8c:35:f4:7b:32:ca:05:ad:8e:26:40:2e:5b: 49:8c:fe:1c:5e:65:16:cd:88:cd:ff:88:df:56:b9:90:c6:89: d8:c6:63:11:da:2f:db:b1:b6:ba:d7:d5:67:16:8e:5a:45:fa: d1:45:33:26:1b:bc:04:1e:db:27:92:38:33:a4:cc:ea:b9:34: 18:d3:c6:8a:55:04:ba:8a:e5:a9:de:87:21:e1:3b:a9:3d:d5: 52:db:e5:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXjGtcSyXfOkcggORB0AFD6HJKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNTA5MDYxMjE1NDJaFw0yNTA5MDkxNjAyNDJaMDMxMTAvBgNV BAMTKDEzRTcxNkM0NEM1QzJBRDFERjI3OUE2OTlFOTdDRjUzNzY4MDYwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD12JIlVOnOfyN/c9Ll8CKPcmyv G/rscC1lkZlKTn3psIKL3yPds2i3vHaAm8GqDP/gTnOsU2ij/TYRwBBxhBGHNbAK ReleaFMfSEyc0mJAdjPu4Xlz2AicUtf82eJxE7BqUb/vrlUpHbpV7rk45IIVC1oY VFJRaiV/ZP+CBvGgf+0XJ0nisCU9usXYhC8uyLDovo0Ha0kzf99Ab66g1o2v6X53 VZt9LRiitUeY2+VENfxRE7Xib8+PDYG26HnPrWpi5V9Cki0s+BeWfu9scJ7m8eqK jaXQmgjHCDzmGccf/sP11UnX761ihXKBOtucrKMXr4058jFgkduaYNsbzvv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE+cWxExcKtHfJ5ppnpfPU3aAYM4wHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACV3SOKBYyTHi/XqA8t1emtHiAIu8A16cSO3 TPM41+1kuk5+NN8tcSJpDdQOU/fdLiNfOtljyPw7Be/t5pxFPhdZcu+nfPZ7R60d IxIR6aLu70H0keVBAI/XPyo0gVy5Ouwy4F1E8vjdKVPUc/Ta9WwiZvjf0JhfbmQh 8TE9lxppx4XH7JK5jKkM//dc5WM7XWghTVxPU+yJcDSbeM8PE4Pv/BXWoMGqjDX0 ezLKBa2OJkAuW0mM/hxeZRbNiM3/iN9WuZDGidjGYxHaL9uxtrrX1WcWjlpF+tFF MyYbvAQe2yeSODOkzOq5NBjTxopVBLqK5anehyHhO6k91VLb5XQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:46 2025 by rpki-client