$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: wsU7HuaQCvmwHgG6suhThYddWYoOnsR5GpQbDSpeneo= Subject key identifier: 81:60:40:51:8D:CF:4E:A7:61:16:A2:D5:B5:67:9D:98:11:36:F9:DB Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 5637CA6F71507704087DFC15F9FE7168255ADD75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 021A Signing time: Thu 04 Sep 2025 18:11:38 +0000 Manifest this update: Thu 04 Sep 2025 18:06:38 +0000 Manifest next update: Sun 07 Sep 2025 21:17:38 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: Qq/N1rFlhByMG6igBdZutjrB6kgqlOs4RXH/ODp/XnA=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 21:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:37:ca:6f:71:50:77:04:08:7d:fc:15:f9:fe:71:68:25:5a:dd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Sep 4 18:06:38 2025 GMT Not After : Sep 7 21:17:38 2025 GMT Subject: CN=816040518DCF4EA76116A2D5B5679D981136F9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6b:e5:87:28:57:13:10:40:1c:e7:fd:d3:f0: ec:59:48:0c:3e:91:8d:87:89:3f:d8:88:5f:99:af: 67:ed:97:f8:b2:a5:07:6f:1b:16:36:5f:9f:4e:6c: 1c:1b:64:de:07:38:4d:5f:a9:36:70:bb:7a:e1:97: 25:a6:3a:a8:2f:eb:84:c1:db:df:c2:a0:7c:f9:03: 64:da:b5:56:ed:11:79:dc:3e:0c:66:ca:81:a9:e2: e1:b4:f7:b7:ab:7e:1c:8f:ff:44:9d:65:6b:b2:2d: 57:f4:df:47:d5:c3:8a:b4:48:02:f2:cd:36:54:7e: 5f:b0:54:a9:15:45:88:1a:76:15:24:b0:6f:7d:83: 53:ef:20:8a:b2:df:ef:69:41:2d:2b:e2:7d:d0:fa: 27:08:7f:68:ea:68:eb:03:83:63:9b:42:88:8e:4d: 42:0f:a9:0c:63:a3:fc:50:a3:09:65:52:43:22:8d: 5b:c6:74:b7:55:c9:e1:3a:2b:2e:02:29:a4:f5:72: 9c:11:84:59:50:c1:66:78:27:f7:30:e5:75:ef:ee: 21:84:80:9b:55:48:cb:40:31:c7:c9:80:b8:e2:21: fa:cd:ed:e4:a4:58:70:17:8c:09:b8:e4:83:0e:52: 1a:b2:a4:2c:c7:0b:f7:51:c0:84:94:a2:8b:0e:99: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:60:40:51:8D:CF:4E:A7:61:16:A2:D5:B5:67:9D:98:11:36:F9:DB X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b8:fc:10:cc:dd:24:3e:b9:02:69:ac:80:91:9c:9d:9a:85: 43:56:d3:c2:ba:62:7f:53:d4:dd:5a:17:9a:ac:30:52:b3:3e: eb:d6:c7:21:d0:51:e7:74:04:98:fd:5d:b9:57:33:54:21:99: 76:56:58:df:e6:20:5a:ed:e7:53:76:c9:5b:03:3e:fb:26:57: 89:2d:fd:ab:60:44:30:78:77:4a:61:81:89:58:fe:db:54:1a: 8c:98:5d:7f:07:3e:ba:4e:0c:38:57:40:6e:c0:8d:24:3b:7e: 7b:e8:23:af:6d:37:d8:3f:5a:5a:e3:82:81:1a:3c:38:e7:f4: 01:13:09:ba:87:51:c5:20:12:48:18:37:bf:87:ce:06:b6:4a: ac:11:4c:91:2f:08:f8:1f:20:f0:31:6a:39:35:e7:aa:d1:77: 73:04:6a:93:eb:6c:8d:df:b4:13:d3:23:5a:e1:fe:2d:8e:31: 0d:7f:ac:df:39:da:46:e5:db:23:ab:41:8e:31:d7:80:0e:56: d9:99:29:7a:de:f3:12:80:16:28:80:61:34:ae:d5:f7:c8:96: 59:2f:f6:30:60:b4:5e:a6:73:68:69:94:d1:55:54:03:d4:a1: d5:ed:20:67:95:ec:a8:b4:11:b7:02:b3:11:20:46:60:1b:8a: e6:a0:03:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjfKb3FQdwQIffwV+f5xaCVa3XUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTA5MDQxODA2MzhaFw0yNTA5MDcyMTE3MzhaMDMxMTAvBgNV BAMTKDgxNjA0MDUxOERDRjRFQTc2MTE2QTJENUI1Njc5RDk4MTEzNkY5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0a+WHKFcTEEAc5/3T8OxZSAw+ kY2HiT/YiF+Zr2ftl/iypQdvGxY2X59ObBwbZN4HOE1fqTZwu3rhlyWmOqgv64TB 29/CoHz5A2TatVbtEXncPgxmyoGp4uG097erfhyP/0SdZWuyLVf030fVw4q0SALy zTZUfl+wVKkVRYgadhUksG99g1PvIIqy3+9pQS0r4n3Q+icIf2jqaOsDg2ObQoiO TUIPqQxjo/xQowllUkMijVvGdLdVyeE6Ky4CKaT1cpwRhFlQwWZ4J/cw5XXv7iGE gJtVSMtAMcfJgLjiIfrN7eSkWHAXjAm45IMOUhqypCzHC/dRwISUoosOmSClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWBAUY3PTqdhFqLVtWedmBE2+dswHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu4/BDM3SQ+uQJprICRnJ2ahUNW08K6Yn9T 1N1aF5qsMFKzPuvWxyHQUed0BJj9XblXM1QhmXZWWN/mIFrt51N2yVsDPvsmV4kt /atgRDB4d0phgYlY/ttUGoyYXX8HPrpODDhXQG7AjSQ7fnvoI69tN9g/WlrjgoEa PDjn9AETCbqHUcUgEkgYN7+Hzga2SqwRTJEvCPgfIPAxajk156rRd3MEapPrbI3f tBPTI1rh/i2OMQ1/rN852kbl2yOrQY4x14AOVtmZKXre8xKAFiiAYTSu1ffIllkv 9jBgtF6mc2hplNFVVAPUodXtIGeV7Ki0EbcCsxEgRmAbiuagA+Q= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:45 2025 by rpki-client