$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: g8Y2WEORxbPKEKV251rOoJfloqO0JAGdyQ72z67Buzs= Subject key identifier: F1:E0:FC:18:0C:82:36:19:DD:43:26:0B:1A:D7:7C:96:99:3F:6A:CB Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 70B5751BECD1B793FC23B30AC18BBC6808D7F89B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: B6 Signing time: Sun 20 Jul 2025 19:42:34 +0000 Manifest this update: Sun 20 Jul 2025 19:37:34 +0000 Manifest next update: Thu 24 Jul 2025 01:36:34 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) 3: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: nmi8Tg7vX8leRN++Ib62ES+POiIGrCPHJtabXP6NkKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b5:75:1b:ec:d1:b7:93:fc:23:b3:0a:c1:8b:bc:68:08:d7:f8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Jul 20 19:37:34 2025 GMT Not After : Jul 24 01:36:34 2025 GMT Subject: CN=F1E0FC180C823619DD43260B1AD77C96993F6ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:ea:f7:40:3a:e9:f7:98:f5:b8:ae:89:67: 8c:f3:6a:eb:92:a1:1b:62:9d:75:29:20:57:25:a3: 48:8c:3a:bb:38:63:28:84:e9:02:29:93:29:b7:12: 77:54:d1:1b:b3:fd:1e:03:92:da:0a:4d:ed:d6:d9: 89:64:f5:93:b1:bb:ae:c1:ea:98:50:5d:c5:01:f6: 33:2a:bb:74:e6:87:f6:95:02:ce:f2:a1:4a:5c:ca: ca:ee:15:07:74:1e:b6:1f:1a:2f:f2:55:02:68:64: f3:e7:22:23:fb:fe:f4:13:65:9a:cf:94:1f:4a:09: 1f:2f:01:82:19:7d:e2:4b:c6:3a:e1:0b:c2:a0:fb: 40:f0:cf:f7:44:57:3a:cb:aa:a8:b0:33:41:08:87: a6:95:61:8e:9a:cf:84:83:8e:5a:7f:e0:60:2a:fa: 35:79:03:ed:82:17:c4:af:50:fa:20:68:48:9d:cc: 34:8d:26:f8:d1:c4:26:8c:69:e8:48:62:34:00:3a: 28:7b:c4:d7:95:b2:f0:11:3b:7c:93:fb:91:80:43: 72:95:01:ff:ba:93:b5:83:22:ac:23:5d:5d:ab:79: 5a:66:85:8c:e9:84:71:6e:5b:f2:ce:72:73:28:ed: 47:4d:29:bc:8f:18:d5:8f:2a:68:55:bf:37:9b:69: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E0:FC:18:0C:82:36:19:DD:43:26:0B:1A:D7:7C:96:99:3F:6A:CB X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ac:7e:2c:f0:7a:a7:19:46:c6:56:fd:f8:c0:7c:9f:f6:ae: 0b:a5:c7:8d:1d:47:aa:ad:8c:7f:ad:61:1e:40:46:ab:36:c1: b8:43:c2:47:a9:a5:20:1f:03:8c:12:75:56:b8:75:1c:89:5c: 6e:63:1a:4e:26:43:8d:2f:d3:a6:13:a5:b2:76:f2:aa:49:aa: 50:07:6e:c5:91:79:37:13:b3:30:66:8a:e5:de:de:28:2e:55: db:a2:57:cf:3a:f0:c4:12:8d:57:89:02:f0:ae:2a:de:4d:a6: ff:b5:2c:0f:83:bd:d9:aa:d8:23:cb:25:b7:77:50:a5:10:7f: 5e:aa:df:c7:73:49:8c:c4:99:0a:0b:a3:ac:d6:3a:ef:ff:93: a0:34:27:63:41:70:23:73:2b:49:16:45:be:70:32:cb:a2:c0: cc:a6:8f:af:50:31:be:62:35:0e:8c:9d:a1:36:66:74:8f:82: 3f:7e:84:10:4b:b4:80:a2:73:35:68:2a:48:4f:95:e1:42:29: fb:54:99:04:0e:ee:8d:e0:a0:ce:85:01:f5:a3:fd:0f:30:38: 6d:0d:c9:33:a6:8e:83:8d:df:de:32:7e:a1:6c:a4:6c:4f:ce: 8a:28:38:4a:91:05:bf:a1:7b:4c:d5:68:ae:76:9b:08:ef:ab: af:99:ff:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLV1G+zRt5P8I7MKwYu8aAjX+JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTA3MjAxOTM3MzRaFw0yNTA3MjQwMTM2MzRaMDMxMTAvBgNV BAMTKEYxRTBGQzE4MEM4MjM2MTlERDQzMjYwQjFBRDc3Qzk2OTkzRjZBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWOr3QDrp95j1uK6JZ4zzauuS oRtinXUpIFclo0iMOrs4YyiE6QIpkym3EndU0Ruz/R4DktoKTe3W2Ylk9ZOxu67B 6phQXcUB9jMqu3Tmh/aVAs7yoUpcysruFQd0HrYfGi/yVQJoZPPnIiP7/vQTZZrP lB9KCR8vAYIZfeJLxjrhC8Kg+0Dwz/dEVzrLqqiwM0EIh6aVYY6az4SDjlp/4GAq +jV5A+2CF8SvUPogaEidzDSNJvjRxCaMaehIYjQAOih7xNeVsvARO3yT+5GAQ3KV Af+6k7WDIqwjXV2reVpmhYzphHFuW/LOcnMo7UdNKbyPGNWPKmhVvzebaf1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eD8GAyCNhndQyYLGtd8lpk/asswHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+sfizweqcZRsZW/fjAfJ/2rgulx40dR6qt jH+tYR5ARqs2wbhDwkeppSAfA4wSdVa4dRyJXG5jGk4mQ40v06YTpbJ28qpJqlAH bsWReTcTszBmiuXe3iguVduiV8868MQSjVeJAvCuKt5Npv+1LA+Dvdmq2CPLJbd3 UKUQf16q38dzSYzEmQoLo6zWOu//k6A0J2NBcCNzK0kWRb5wMsuiwMymj69QMb5i NQ6MnaE2ZnSPgj9+hBBLtICiczVoKkhPleFCKftUmQQO7o3goM6FAfWj/Q8wOG0N yTOmjoON394yfqFspGxPzoooOEqRBb+he0zVaK52mwjvq6+Z/9Y= -----END CERTIFICATE-----Generated at Mon Jul 21 10:36:52 2025 by rpki-client