$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json) Hash identifier: BK0ZKp2omRLxIq2W/4UbcStQfvNZV1uFKgAx7+Z0OV8= Subject key identifier: D5:89:47:06:F0:E3:00:55:FD:EF:8B:6C:81:F3:62:F9:18:8B:F0:F5 Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 2745C9DFF45D38F0A483F3018184831CAADAD091 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft Manifest number: 018A Signing time: Fri 05 Sep 2025 09:51:00 +0000 Manifest this update: Fri 05 Sep 2025 09:46:00 +0000 Manifest next update: Mon 08 Sep 2025 19:10:00 +0000 Files and hashes: 1: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: HldvuvzDss506tvLET0x1DDlZ0Q/17k+3V7+6yPT+bY=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: g1Ka7yfyJPbCamNmlkRkAf0k4fb7xbeQ8IZXUzIAW64=) 3: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 7QwG3sKKh+mYjg4jS1AeFszBYeNEnM56jws/Z3GCGMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:45:c9:df:f4:5d:38:f0:a4:83:f3:01:81:84:83:1c:aa:da:d0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: Sep 5 09:46:00 2025 GMT Not After : Sep 8 19:10:00 2025 GMT Subject: CN=D5894706F0E30055FDEF8B6C81F362F9188BF0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:da:70:66:c7:c6:13:86:e3:39:ad:39:19:26: 70:5d:a2:ec:c6:ec:ee:0f:7e:c7:c1:ea:78:bf:d3: d9:57:e3:99:8f:a7:be:e7:f8:27:33:b6:04:6c:59: 4c:8a:9c:e9:17:1c:c2:ca:28:81:04:70:87:a4:89: 97:6d:a0:c9:85:36:e7:35:cf:cf:ee:6d:c8:9f:1f: f6:96:13:e0:47:0d:67:60:66:5d:75:41:8a:15:42: d7:ab:7c:b7:f2:f8:55:67:7e:56:d2:d6:ba:bd:fd: 63:58:f9:8f:75:ad:c4:48:00:27:47:85:99:76:53: 50:c3:b4:26:75:45:7c:ec:ff:04:e5:b5:c4:ea:1e: 41:48:4a:d5:16:78:f2:1a:6e:d4:07:ad:4f:d7:50: 0a:61:17:c8:c1:47:25:91:31:41:4b:6e:a2:50:d7: 7b:6b:72:b0:4a:43:e1:22:45:32:58:9e:32:c3:e5: 26:7e:93:d6:b9:64:1b:28:c9:cf:78:43:75:1d:8f: 9d:0f:46:0a:48:bd:88:4b:05:74:68:c6:91:30:c0: 2f:00:37:5b:70:86:21:a5:2b:3a:56:13:65:7e:64: 87:62:87:7a:c9:84:00:f7:b1:22:2e:da:59:d6:26: fa:90:aa:1d:93:b1:00:6b:35:f6:06:35:6c:2a:5c: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:89:47:06:F0:E3:00:55:FD:EF:8B:6C:81:F3:62:F9:18:8B:F0:F5 X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1a:ec:1f:74:62:c8:25:2b:28:d2:40:15:87:89:eb:87:0a: 03:56:04:9f:79:7e:71:6c:36:9c:a2:61:67:ab:14:7a:7f:92: cf:e7:f0:ff:44:da:29:30:0b:f7:09:51:59:49:65:d6:40:53: f7:a1:f9:53:f2:2a:f4:8d:1e:e7:6e:9f:bb:e7:d5:93:45:4a: 0e:05:e8:d0:d3:14:cc:3c:ac:1f:77:97:e9:79:c7:3d:e8:21: 35:6c:17:3f:16:fd:e1:72:55:30:4c:5c:dc:ac:25:79:22:69: 8c:0b:23:a5:27:1c:07:79:1f:5e:a8:4f:1b:a8:ac:8c:e6:5e: 95:60:d1:2f:39:28:c4:97:75:af:6e:5e:2b:9f:d0:d0:e2:3a: cd:a1:1a:89:d9:60:54:0f:91:9b:9b:98:09:7e:7c:a4:24:0e: a7:66:22:6e:8d:ca:3e:bb:ec:07:28:be:ad:db:e3:9a:0e:23: 61:cf:4f:d6:32:6d:7f:80:6f:c4:82:34:e8:f3:8b:fb:54:69: fa:5c:4e:eb:6b:6a:67:12:8f:56:51:cd:50:b5:0e:bd:7c:90: 50:11:a8:6c:d5:c2:3d:0c:48:4c:1d:cf:e0:0c:fe:32:e8:c1: 94:80:f1:44:35:af:1a:98:ba:d9:05:9b:d6:c9:66:f1:1f:58: 38:18:1e:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0XJ3/RdOPCkg/MBgYSDHKra0JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yNTA5MDUwOTQ2MDBaFw0yNTA5MDgxOTEwMDBaMDMxMTAvBgNV BAMTKEQ1ODk0NzA2RjBFMzAwNTVGREVGOEI2QzgxRjM2MkY5MTg4QkYwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2nBmx8YThuM5rTkZJnBdouzG 7O4PfsfB6ni/09lX45mPp77n+CcztgRsWUyKnOkXHMLKKIEEcIekiZdtoMmFNuc1 z8/ubcifH/aWE+BHDWdgZl11QYoVQterfLfy+FVnflbS1rq9/WNY+Y91rcRIACdH hZl2U1DDtCZ1RXzs/wTltcTqHkFIStUWePIabtQHrU/XUAphF8jBRyWRMUFLbqJQ 13trcrBKQ+EiRTJYnjLD5SZ+k9a5ZBsoyc94Q3Udj50PRgpIvYhLBXRoxpEwwC8A N1twhiGlKzpWE2V+ZIdih3rJhAD3sSIu2lnWJvqQqh2TsQBrNfYGNWwqXNbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YlHBvDjAFX974tsgfNi+RiL8PUwHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIw QTAxQURFREE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJca7B90YsglKyjSQBWHieuHCgNWBJ95fnFs NpyiYWerFHp/ks/n8P9E2ikwC/cJUVlJZdZAU/eh+VPyKvSNHudun7vn1ZNFSg4F 6NDTFMw8rB93l+l5xz3oITVsFz8W/eFyVTBMXNysJXkiaYwLI6UnHAd5H16oTxuo rIzmXpVg0S85KMSXda9uXiuf0NDiOs2hGonZYFQPkZubmAl+fKQkDqdmIm6Nyj67 7Acovq3b45oOI2HPT9YybX+Ab8SCNOjzi/tUafpcTutramcSj1ZRzVC1Dr18kFAR qGzVwj0MSEwdz+AM/jLowZSA8UQ1rxqYutkFm9bJZvEfWDgYHto= -----END CERTIFICATE-----Generated at Sun Sep 7 15:26:58 2025 by rpki-client