$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft File: A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json) Hash identifier: 4HVoE0jKuHFNBQCtmcYKKjiY5eSLLXP8UnbhA7iH8bA= Subject key identifier: A8:7A:FE:84:FD:21:13:52:FA:8B:17:08:AC:79:F3:E2:BC:16:5B:F9 Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Certificate serial: 24D1E7AC655BF9B740B994A87140F95B924ABF1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft Manifest number: 01C1 Signing time: Sat 06 Sep 2025 15:52:10 +0000 Manifest this update: Sat 06 Sep 2025 15:47:10 +0000 Manifest next update: Wed 10 Sep 2025 01:05:10 +0000 Files and hashes: 1: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: dehAdCQa2rj7pyUCMHYZPbkXEG87vkJWPD4EN4G4cvU=) 2: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: KFUWTEUvZvgc2Sp7OplQf3StiF5G7GN7f9NvxoAUowM=) 3: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: BOpg9hyAPDl8hg69J18XcZBmeLqMIq91C57NuMalFfc=) 4: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: BBLLzgoXzO5UFx2RiLevk5xUednWb8mYJbMkN3dV1P8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d1:e7:ac:65:5b:f9:b7:40:b9:94:a8:71:40:f9:5b:92:4a:bf:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Validity Not Before: Sep 6 15:47:10 2025 GMT Not After : Sep 10 01:05:10 2025 GMT Subject: CN=A87AFE84FD211352FA8B1708AC79F3E2BC165BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:a2:a0:4e:79:ad:59:bf:2c:56:b5:6d:3b: 75:27:3f:02:12:0e:97:74:8e:be:29:43:ac:2b:06: 88:75:d0:e4:53:80:1b:78:57:09:05:da:bf:7c:a2: 4d:ee:85:3e:c4:cf:4f:d8:bd:09:94:4a:67:07:ba: df:72:54:0c:3c:95:d8:5f:90:25:b6:f9:78:20:fa: 62:33:e9:d3:9d:58:85:54:c2:26:3f:a4:ad:2b:8e: 66:bb:4a:81:86:a2:05:c1:e6:6e:4e:09:86:a0:78: c9:da:9e:0b:f2:e4:f4:60:13:d7:15:e4:45:40:85: c1:b1:38:ec:6a:da:0c:7d:96:90:61:ff:72:16:5e: ce:15:36:18:f6:9e:ff:fa:3f:6b:80:8c:e3:91:8d: bd:d6:e5:83:a9:08:bf:38:27:65:92:8e:1a:e7:75: 74:82:60:18:a9:d5:43:e0:c0:b4:99:92:f6:a2:a1: 7e:fa:af:7d:95:7d:61:e3:94:3a:71:d7:03:ab:27: e6:3e:fb:b7:63:b1:51:f0:c0:b3:05:2b:26:a6:5f: 01:2e:90:b9:85:45:76:a8:f3:2c:67:aa:cb:93:da: 64:d4:b4:9c:9b:17:bf:d4:c1:72:f4:61:ba:89:09: 2e:07:91:5a:4f:e4:55:43:17:1f:5a:d0:3e:78:03: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:FE:84:FD:21:13:52:FA:8B:17:08:AC:79:F3:E2:BC:16:5B:F9 X509v3 Authority Key Identifier: keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:10:1a:00:19:d7:f0:f5:80:f8:0f:a3:17:f1:d7:26:e9:13: a8:06:9d:e3:f9:24:0d:26:a3:fa:d7:a2:71:5c:ab:ea:f9:82: 28:4a:e5:ec:56:e2:8b:e3:3b:bb:5e:2b:35:42:f3:67:2d:df: 10:b5:7a:87:8c:df:1f:bf:1a:db:a0:a4:dd:5e:c5:3e:68:ec: ad:06:4e:f2:ad:f2:53:8b:53:02:74:a7:a9:1b:63:c7:14:75: 9f:25:04:5e:46:6e:0a:2a:19:80:61:b1:39:e9:9a:7f:6b:c0: c4:84:07:d3:f4:2c:63:aa:2b:d0:2e:5d:13:32:0b:13:d1:c2: b1:39:0e:ac:ef:49:0b:23:a8:6e:a1:ed:82:96:f0:9d:8d:a0: e0:f0:eb:ac:18:7f:4b:48:c5:5f:20:58:72:75:98:52:28:6e: bd:e4:3e:93:ff:a0:ed:3c:93:67:e7:1e:ec:4a:c8:44:f6:bd: 39:f4:ad:e0:f0:02:2a:a9:bd:8d:3f:c5:bf:d8:f8:dd:1e:e8: 0a:eb:d6:02:68:49:ed:8a:31:be:b7:e9:3e:84:bf:e6:3e:ec: 14:9a:0b:47:52:63:60:0c:a0:6c:ad:45:27:ef:92:58:67:7e: e6:ef:5b:5a:3b:ec:74:af:5a:6e:ec:d5:f1:3d:28:87:64:5c: b1:bb:27:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNHnrGVb+bdAuZSocUD5W5JKvx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQw NjFEN0QyNzAeFw0yNTA5MDYxNTQ3MTBaFw0yNTA5MTAwMTA1MTBaMDMxMTAvBgNV BAMTKEE4N0FGRTg0RkQyMTEzNTJGQThCMTcwOEFDNzlGM0UyQkMxNjVCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/6KgTnmtWb8sVrVtO3UnPwIS Dpd0jr4pQ6wrBoh10ORTgBt4VwkF2r98ok3uhT7Ez0/YvQmUSmcHut9yVAw8ldhf kCW2+Xgg+mIz6dOdWIVUwiY/pK0rjma7SoGGogXB5m5OCYageMnangvy5PRgE9cV 5EVAhcGxOOxq2gx9lpBh/3IWXs4VNhj2nv/6P2uAjOORjb3W5YOpCL84J2WSjhrn dXSCYBip1UPgwLSZkvaioX76r32VfWHjlDpx1wOrJ+Y++7djsVHwwLMFKyamXwEu kLmFRXao8yxnqsuT2mTUtJybF7/UwXL0YbqJCS4HkVpP5FVDFx9a0D54A6FTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqHr+hP0hE1L6ixcIrHnz4rwWW/kwHwYDVR0j BBgwFoAUpiIC+IzmHWvUcZX7NhA83QYdfScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDczODMxNC1hOTc1LTRmZDEtOWJjOS01MjEzOGY4M2I1NmUvMC9BNjIyMDJGODhD RTYxRDZCRDQ3MTk1RkIzNjEwM0NERDA2MUQ3RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQwNjFE N0QyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDND REQwNjFEN0QyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcQGgAZ1/D1gPgPoxfx1ybpE6gGneP5JA0m o/rXonFcq+r5gihK5exW4ovjO7teKzVC82ct3xC1eoeM3x+/GtugpN1exT5o7K0G TvKt8lOLUwJ0p6kbY8cUdZ8lBF5GbgoqGYBhsTnpmn9rwMSEB9P0LGOqK9AuXRMy CxPRwrE5DqzvSQsjqG6h7YKW8J2NoODw66wYf0tIxV8gWHJ1mFIobr3kPpP/oO08 k2fnHuxKyET2vTn0reDwAiqpvY0/xb/Y+N0e6Arr1gJoSe2KMb636T6Ev+Y+7BSa C0dSY2AMoGytRSfvklhnfubvW1o77HSvWm7s1fE9KIdkXLG7J0I= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:40 2025 by rpki-client