$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json) Hash identifier: itCstQlIx2oVttdOQ1xAwQ/52eRRtpKtkn7J2DjB30A= Subject key identifier: 0A:F3:9B:44:5D:AD:00:20:82:DB:F0:71:D8:39:B8:E6:22:0E:38:81 Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Certificate serial: 52C2ECF27EA8BC5C8EF42DD61B22850387B701D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft Manifest number: 0113 Signing time: Sun 07 Sep 2025 12:31:22 +0000 Manifest this update: Sun 07 Sep 2025 12:26:22 +0000 Manifest next update: Wed 10 Sep 2025 20:18:22 +0000 Files and hashes: 1: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: AIpGbysD5/zeWRHtD1y26YHX7iSLdA2JIWcXvN1SQLM=) 2: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: RpWiNQy8/wOeeIrDaor+sMkx5EaGWAlKmLI/at2NgT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c2:ec:f2:7e:a8:bc:5c:8e:f4:2d:d6:1b:22:85:03:87:b7:01:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Validity Not Before: Sep 7 12:26:22 2025 GMT Not After : Sep 10 20:18:22 2025 GMT Subject: CN=0AF39B445DAD002082DBF071D839B8E6220E3881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:09:a9:5e:0b:c0:9a:ef:d6:be:8b:71:62: fd:db:d4:9b:05:6c:79:fe:bd:33:e1:74:45:e8:85: b4:01:f2:92:1d:b5:0a:c2:8f:4f:0c:bb:1d:72:23: 8c:63:26:6a:f3:89:0d:d3:85:c0:29:13:ac:08:fe: 07:d2:ac:8c:7d:2e:cd:d1:05:83:db:08:ad:6d:e4: a8:01:dc:c9:5a:3b:b0:10:c8:d5:61:49:ee:03:38: 44:0a:8a:25:fd:08:23:78:9d:07:10:49:4b:cc:0b: ab:7c:ce:a9:a7:4b:de:d4:88:e3:32:58:af:ca:92: 63:aa:6e:fc:75:82:ce:b7:2e:73:6b:32:4d:c8:26: 91:1b:b4:86:e8:d2:4d:d5:69:fa:ef:56:82:c9:e6: 10:e2:2f:9f:fc:4b:5f:17:58:e5:fe:c7:60:0b:58: 26:0c:78:69:15:3c:04:3d:2a:ba:bf:e3:0c:e0:98: a0:af:e4:4b:58:91:de:a8:bb:d9:90:51:a9:16:a7: 5b:2b:67:3a:89:1d:10:dd:bc:dd:41:2b:ee:4e:57: 1b:b5:a7:f5:c7:a9:93:8e:cb:8d:8e:c5:b8:0a:c4: f4:18:3d:73:14:3b:e4:9d:f8:5c:4d:eb:f9:c3:db: 7f:a2:12:bb:d4:2e:d8:b6:57:af:60:ae:15:aa:40: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F3:9B:44:5D:AD:00:20:82:DB:F0:71:D8:39:B8:E6:22:0E:38:81 X509v3 Authority Key Identifier: keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cf:bd:8e:e0:8e:86:31:22:bb:ef:65:c9:05:f9:16:67:a2: 39:21:90:25:4a:18:9d:39:f3:0c:66:a9:51:39:d2:4e:fb:b0: fb:8b:2c:49:1f:c8:68:31:bb:2b:90:21:49:bc:21:d7:fd:70: cc:eb:8b:67:10:ef:25:5f:ea:50:1d:39:c8:d5:7a:63:9d:f6: 1e:d5:c8:61:b6:59:36:12:7d:c0:44:51:55:69:45:b4:0d:76: f4:79:c9:37:8f:4e:73:fe:5c:ec:56:6a:1e:aa:78:e9:71:86: 59:ce:f9:6a:f2:51:5f:cf:50:ed:7e:9b:8c:dc:75:eb:ef:62: 3d:ca:8d:2e:db:5f:1b:03:8f:18:4e:a7:d9:d9:e4:2b:54:11: 2b:ff:aa:c9:0a:b4:f3:9c:6c:55:1c:f3:c2:a3:80:61:51:c7: 3e:e2:0f:5c:7c:ad:01:52:4a:5f:20:60:ef:3e:1e:40:a2:23: 1e:66:01:27:5a:27:1c:0f:32:a3:73:4c:89:be:ec:ba:8b:99: 6b:31:f0:28:3e:a0:80:28:0d:35:cc:23:77:f2:09:81:e8:49: f0:87:83:3f:77:ce:fd:58:14:8e:5b:94:de:a8:29:96:79:7d: b4:3a:0c:8f:3f:a5:57:2f:9a:cc:71:c4:7c:62:4a:b1:26:9c: df:2f:61:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsLs8n6ovFyO9C3WGyKFA4e3AdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJE OTg5NTU5NjAeFw0yNTA5MDcxMjI2MjJaFw0yNTA5MTAyMDE4MjJaMDMxMTAvBgNV BAMTKDBBRjM5QjQ0NURBRDAwMjA4MkRCRjA3MUQ4MzlCOEU2MjIwRTM4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0awmpXgvAmu/WvotxYv3b1JsF bHn+vTPhdEXohbQB8pIdtQrCj08Mux1yI4xjJmrziQ3ThcApE6wI/gfSrIx9Ls3R BYPbCK1t5KgB3MlaO7AQyNVhSe4DOEQKiiX9CCN4nQcQSUvMC6t8zqmnS97UiOMy WK/KkmOqbvx1gs63LnNrMk3IJpEbtIbo0k3VafrvVoLJ5hDiL5/8S18XWOX+x2AL WCYMeGkVPAQ9Krq/4wzgmKCv5EtYkd6ou9mQUakWp1srZzqJHRDdvN1BK+5OVxu1 p/XHqZOOy42OxbgKxPQYPXMUO+Sd+FxN6/nD23+iErvULti2V69grhWqQIR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCvObRF2tACCC2/Bx2Dm45iIOOIEwHwYDVR0j BBgwFoAUovCvETGCNoVV9fD5LcGg69mJVZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMC9BMkYwQUYxMTMx ODIzNjg1NTVGNUYwRjkyREMxQTBFQkQ5ODk1NTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJEOTg5 NTU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEw RUJEOTg5NTU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPPvY7gjoYxIrvvZckF+RZnojkhkCVKGJ05 8wxmqVE50k77sPuLLEkfyGgxuyuQIUm8Idf9cMzri2cQ7yVf6lAdOcjVemOd9h7V yGG2WTYSfcBEUVVpRbQNdvR5yTePTnP+XOxWah6qeOlxhlnO+WryUV/PUO1+m4zc devvYj3KjS7bXxsDjxhOp9nZ5CtUESv/qskKtPOcbFUc88KjgGFRxz7iD1x8rQFS Sl8gYO8+HkCiIx5mASdaJxwPMqNzTIm+7LqLmWsx8Cg+oIAoDTXMI3fyCYHoSfCH gz93zv1YFI5blN6oKZZ5fbQ6DI8/pVcvmsxxxHxiSrEmnN8vYXE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:42 2025 by rpki-client