$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: OuyNRgLirdqEDBUIEwPrpqlVk+XNkkxjfl7euh9cqSU= Subject key identifier: B7:DE:FD:54:DF:6E:6F:F4:AE:49:AD:56:37:C4:53:66:88:58:3A:37 Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 377997FC41AC94BB24FA704B1A358C0ACA130B74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 0125 Signing time: Sat 06 Sep 2025 01:52:10 +0000 Manifest this update: Sat 06 Sep 2025 01:47:10 +0000 Manifest next update: Tue 09 Sep 2025 08:56:10 +0000 Files and hashes: 1: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: Ms4czKntRFS5RPufkF3fP+awy44r9GWGVBCy7ha7xkI=) 2: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: C35SXikIhaDLGx2DtTCZTY1tvAiWcqvbFOy+lIenj/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:79:97:fc:41:ac:94:bb:24:fa:70:4b:1a:35:8c:0a:ca:13:0b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Sep 6 01:47:10 2025 GMT Not After : Sep 9 08:56:10 2025 GMT Subject: CN=B7DEFD54DF6E6FF4AE49AD5637C4536688583A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:dc:68:2d:3e:5c:ff:f2:b3:ef:0e:19:45: aa:7e:d8:c2:73:49:28:65:73:04:81:09:cb:21:bc: af:df:5c:7b:b4:0b:23:d8:e2:33:bd:60:48:e5:a4: df:49:78:35:88:32:2e:d0:03:87:30:83:0f:54:f6: 45:8d:e7:61:5b:4f:9b:64:0d:46:04:d5:32:58:be: f3:bd:4b:e5:dc:7e:51:1f:82:6d:b2:33:5c:64:c5: 4e:d6:2e:6d:86:9b:50:01:e9:e5:a8:5b:a1:36:ea: f3:b0:e9:9d:e6:bd:74:0b:c3:e4:f6:3e:c2:a9:ee: 6b:e5:1b:39:3d:88:93:00:9f:3e:2a:93:d7:14:89: e0:ce:2d:61:b3:37:e4:9a:de:c3:7f:d1:a7:1d:0e: 72:1e:fd:4f:63:05:60:ef:41:4e:8c:69:e0:ab:4a: 4d:a4:43:a6:38:fa:e9:88:16:42:6c:e7:c0:b9:e5: 05:4b:16:fc:8e:e0:17:83:51:76:f1:f1:f8:c5:7f: 53:7b:6b:fb:12:51:c3:17:4f:7d:b0:0e:10:9b:7d: e5:7b:ec:ba:db:bc:39:25:52:40:37:cd:67:8e:da: 19:da:0c:83:03:5c:31:d6:4f:67:ea:60:f0:02:09: e2:c8:1e:d9:38:b8:f8:33:c8:9b:6a:a3:4f:ee:42: 86:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DE:FD:54:DF:6E:6F:F4:AE:49:AD:56:37:C4:53:66:88:58:3A:37 X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b4:68:c8:65:78:53:c0:f9:89:48:9a:cb:ac:74:b5:cb:f8: 4f:b2:36:b5:ac:b2:bb:a8:2d:91:f6:3f:65:3f:99:36:9c:90: 6b:db:81:20:ab:07:b4:d6:e1:ac:58:4b:a7:bb:cd:6d:4c:85: ba:31:42:ef:39:b1:2d:85:db:81:c8:3d:fc:7a:45:99:3e:88: 6f:68:f3:db:ec:6e:c7:dc:fd:9b:ce:e7:65:d2:dc:fe:ee:fe: 37:5a:cf:f2:76:3b:1e:a7:eb:99:c2:52:3f:39:54:f2:ca:40: b2:69:d3:8b:d9:a2:f2:ef:58:25:9d:b1:91:0b:d8:cf:12:85: d5:cd:5a:e9:b0:07:3d:33:80:c6:da:3d:78:cb:82:32:30:fd: b1:97:18:2d:dd:e3:b4:94:58:ad:6c:4d:1b:70:c8:18:b3:66: 44:9f:4d:b1:e0:b8:ca:93:37:c6:6c:b7:61:d0:90:03:ab:af: e5:9c:45:b7:ed:55:3f:a0:c3:67:39:2f:7e:49:a8:50:2d:84: 30:ec:f7:c1:a9:81:50:9b:ea:d6:68:ad:7b:a9:e0:0f:2b:2a: db:b3:a9:e7:21:59:d8:b5:8f:34:76:59:1e:48:8c:ed:ce:de: f6:94:c7:e2:b8:5a:3a:22:6b:18:d1:ad:36:63:d0:61:31:8b: 8e:b7:25:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3mX/EGslLsk+nBLGjWMCsoTC3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNTA5MDYwMTQ3MTBaFw0yNTA5MDkwODU2MTBaMDMxMTAvBgNV BAMTKEI3REVGRDU0REY2RTZGRjRBRTQ5QUQ1NjM3QzQ1MzY2ODg1ODNBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNtxoLT5c//Kz7w4ZRap+2MJz SShlcwSBCcshvK/fXHu0CyPY4jO9YEjlpN9JeDWIMi7QA4cwgw9U9kWN52FbT5tk DUYE1TJYvvO9S+XcflEfgm2yM1xkxU7WLm2Gm1AB6eWoW6E26vOw6Z3mvXQLw+T2 PsKp7mvlGzk9iJMAnz4qk9cUieDOLWGzN+Sa3sN/0acdDnIe/U9jBWDvQU6MaeCr Sk2kQ6Y4+umIFkJs58C55QVLFvyO4BeDUXbx8fjFf1N7a/sSUcMXT32wDhCbfeV7 7LrbvDklUkA3zWeO2hnaDIMDXDHWT2fqYPACCeLIHtk4uPgzyJtqo0/uQobvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt979VN9ub/SuSa1WN8RTZohYOjcwHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy0aMhleFPA+YlImsusdLXL+E+yNrWssruo LZH2P2U/mTackGvbgSCrB7TW4axYS6e7zW1MhboxQu85sS2F24HIPfx6RZk+iG9o 89vsbsfc/ZvO52XS3P7u/jdaz/J2Ox6n65nCUj85VPLKQLJp04vZovLvWCWdsZEL 2M8ShdXNWumwBz0zgMbaPXjLgjIw/bGXGC3d47SUWK1sTRtwyBizZkSfTbHguMqT N8Zst2HQkAOrr+WcRbftVT+gw2c5L35JqFAthDDs98GpgVCb6tZorXup4A8rKtuz qechWdi1jzR2WR5IjO3O3vaUx+K4WjoiaxjRrTZj0GExi463JSU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:20 2025 by rpki-client