$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: lV4XKDsHUb2R/P3lMGiHl/WG0M2UOVBFvzO6SxHplyI= Subject key identifier: 24:3E:DA:6A:C6:34:F4:CD:BE:26:0B:3D:DC:C7:25:FC:8F:D8:8E:D4 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 43134B3EAA3BD7DF2D5B4EF2627FB64075731C9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 022E Signing time: Mon 08 Sep 2025 11:00:47 +0000 Manifest this update: Mon 08 Sep 2025 10:55:47 +0000 Manifest next update: Thu 11 Sep 2025 19:47:47 +0000 Files and hashes: 1: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: 3UO0/xJza2sRySCw6PbkQC4j4UXvGlpdkjC2kTsREt4=) 2: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: PJJflVEuAqU1x1bzzs4n8zhyBWNQ4TBM8yQ5wwBc+Y8=) 3: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: pLboy3es15Aee5R8ozV3T/lLrbC6yjQ2R9cCybdnsq4=) 4: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: j0lcRKDX7Zai080pL+d3IVmhJOqrL+V2aEhEgUdciuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:13:4b:3e:aa:3b:d7:df:2d:5b:4e:f2:62:7f:b6:40:75:73:1c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Sep 8 10:55:47 2025 GMT Not After : Sep 11 19:47:47 2025 GMT Subject: CN=243EDA6AC634F4CDBE260B3DDCC725FC8FD88ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:9d:0a:95:b1:7b:fa:91:9b:80:81:1f:82: bd:75:13:a2:30:0b:c7:b3:cb:78:0e:f1:65:e7:63: 17:97:92:51:a9:a9:1f:2b:c3:93:01:cf:85:b9:10: 0a:af:e9:f5:89:7d:8f:13:9d:e6:a4:ac:33:c0:7a: e8:da:d6:3f:39:f0:15:a8:03:ac:da:ed:bd:ea:fe: 1f:a8:e0:32:62:fd:aa:d3:d3:f0:6d:78:13:14:eb: 89:8a:2b:bf:ee:38:46:c8:ee:46:81:b2:63:79:49: 6d:9c:06:17:69:1a:62:6e:e6:92:c1:4b:15:05:99: 48:ef:84:eb:d4:42:51:34:a3:d3:4f:8b:9f:e4:8f: 3e:44:77:a4:cc:ea:e1:4a:17:ba:35:50:96:41:87: 18:ba:5d:00:6a:79:ec:50:23:d4:73:52:44:9f:27: 29:6d:92:9e:79:54:d9:d0:a3:0f:95:1a:ea:17:7f: c1:f8:71:38:ac:5c:19:7c:1c:1e:2c:f4:61:40:8c: b5:e0:66:61:97:8f:e4:e2:21:fa:28:12:a7:ef:a4: de:ce:70:12:0b:74:8e:53:07:d0:04:7e:32:60:59: 7b:22:3c:c2:b4:f2:7a:55:5b:1c:4b:fe:4e:d7:11: 4a:03:fd:ec:c1:49:93:fc:cc:de:98:87:4c:b4:a6: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3E:DA:6A:C6:34:F4:CD:BE:26:0B:3D:DC:C7:25:FC:8F:D8:8E:D4 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8b:42:d8:77:15:6d:16:8f:66:71:c4:15:e5:a8:6b:9c:4c: f7:6c:33:20:5f:e5:00:ac:44:36:0b:3d:77:db:d3:9d:66:e9: 75:c7:51:06:34:52:ff:e2:55:4f:bc:f5:02:65:a6:5a:aa:87: 52:a4:38:bc:e8:98:54:5c:c6:02:5a:54:a4:0a:6e:b6:ba:43: 3f:9d:57:58:6d:65:73:92:79:9f:d4:5a:91:98:1d:52:5c:62: b7:92:ba:20:d6:6b:28:2c:8a:50:88:52:e9:08:2e:26:d2:7f: 16:61:ca:37:02:46:ec:9d:f2:db:3d:e4:7b:09:eb:29:2e:1e: 1d:6f:e3:17:e6:1a:2a:98:80:59:39:22:53:4e:15:de:fd:4f: 80:60:bf:81:32:ab:d6:0d:49:f9:fb:76:81:1a:b5:0e:2b:26: f2:0f:4d:8e:21:77:3a:1b:f3:34:0b:50:9a:89:fa:3b:a0:62: e0:3d:59:76:3a:34:b0:89:ba:e2:1a:29:2c:e9:f3:3a:5c:12: cc:77:be:ed:fa:3f:81:9e:e9:17:1f:2b:2d:0a:ad:85:eb:9d: cb:de:89:af:88:17:90:c9:c9:0f:07:50:8a:8b:19:17:96:46: 3e:f6:bd:c2:44:ff:f3:41:49:a4:72:7d:fe:7e:cc:1c:fc:97: d1:d2:fe:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxNLPqo7198tW07yYn+2QHVzHJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTA5MDgxMDU1NDdaFw0yNTA5MTExOTQ3NDdaMDMxMTAvBgNV BAMTKDI0M0VEQTZBQzYzNEY0Q0RCRTI2MEIzRERDQzcyNUZDOEZEODhFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPJ0KlbF7+pGbgIEfgr11E6Iw C8ezy3gO8WXnYxeXklGpqR8rw5MBz4W5EAqv6fWJfY8TneakrDPAeuja1j858BWo A6za7b3q/h+o4DJi/arT0/BteBMU64mKK7/uOEbI7kaBsmN5SW2cBhdpGmJu5pLB SxUFmUjvhOvUQlE0o9NPi5/kjz5Ed6TM6uFKF7o1UJZBhxi6XQBqeexQI9RzUkSf Jyltkp55VNnQow+VGuoXf8H4cTisXBl8HB4s9GFAjLXgZmGXj+TiIfooEqfvpN7O cBILdI5TB9AEfjJgWXsiPMK08npVWxxL/k7XEUoD/ezBSZP8zN6Yh0y0pvu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJD7aasY09M2+Jgs93Mcl/I/YjtQwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSLQth3FW0Wj2ZxxBXlqGucTPdsMyBf5QCs RDYLPXfb051m6XXHUQY0Uv/iVU+89QJlplqqh1KkOLzomFRcxgJaVKQKbra6Qz+d V1htZXOSeZ/UWpGYHVJcYreSuiDWaygsilCIUukILibSfxZhyjcCRuyd8ts95HsJ 6ykuHh1v4xfmGiqYgFk5IlNOFd79T4Bgv4Eyq9YNSfn7doEatQ4rJvIPTY4hdzob 8zQLUJqJ+jugYuA9WXY6NLCJuuIaKSzp8zpcEsx3vu36P4Ge6RcfKy0KrYXrncve ia+IF5DJyQ8HUIqLGReWRj72vcJE//NBSaRyff5+zBz8l9HS/sg= -----END CERTIFICATE-----Generated at Tue Sep 9 01:14:27 2025 by rpki-client