$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: OIYehcfT0BY1qy2uTnAoBAunSPUs07ktLQGS/qk+cpM= Subject key identifier: B5:14:B8:5C:F6:A8:7D:A9:B3:79:A2:51:4D:D0:55:4A:26:68:C1:9C Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 5D02EB16597FA77341AC3D8817E02550C93C056C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 01FD Signing time: Sat 06 Sep 2025 15:41:55 +0000 Manifest this update: Sat 06 Sep 2025 15:36:55 +0000 Manifest next update: Tue 09 Sep 2025 16:05:55 +0000 Files and hashes: 1: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: d638vIL/9G+FdTZ3BZT9ycujTCt8UMHxu0F5dmSPLyA=) 2: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:02:eb:16:59:7f:a7:73:41:ac:3d:88:17:e0:25:50:c9:3c:05:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: Sep 6 15:36:55 2025 GMT Not After : Sep 9 16:05:55 2025 GMT Subject: CN=B514B85CF6A87DA9B379A2514DD0554A2668C19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:78:23:4c:63:0b:ae:ec:61:b4:c9:c8:fb: 1b:b2:c6:56:eb:7f:ea:ea:f3:b5:d8:e8:5a:6b:86: 43:4c:57:2a:76:e3:8c:ce:84:1e:63:19:67:fb:04: 5b:67:c0:01:c5:be:01:9a:90:e6:b3:a2:09:8e:a6: f3:7f:cc:89:f7:50:e9:d7:a9:fc:a8:5f:8a:d3:a7: cc:12:65:d4:6b:fe:30:1f:e2:ad:5e:fe:c7:9d:e5: 0a:7a:51:4d:3f:77:52:aa:1a:61:fd:4a:a5:34:fe: e4:44:f7:d8:9a:29:4e:01:b9:8c:3d:85:55:2b:27: b0:ef:42:14:7b:62:c7:da:f5:e9:e5:91:86:69:b4: 2f:77:a3:4d:16:51:4b:e1:d0:d7:20:f3:13:6d:a2: a8:02:2c:e0:b9:16:e1:aa:2f:56:7c:54:b0:88:de: ed:fe:97:b7:7d:f4:e0:36:17:dc:fc:63:67:42:11: b4:69:ed:d7:72:a7:de:95:51:8f:8d:1f:1d:6c:75: d5:a0:a2:5d:8f:91:bb:a0:1a:26:ce:c3:b8:d8:fa: a7:55:d8:96:0f:fe:98:d4:e0:4a:09:5c:32:9f:b0: 13:e3:90:29:2f:24:73:b1:8a:ec:b0:91:3d:5a:7e: fd:e1:71:93:ac:cc:ac:81:f6:b9:5f:48:cf:ad:d9: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:14:B8:5C:F6:A8:7D:A9:B3:79:A2:51:4D:D0:55:4A:26:68:C1:9C X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1a:02:9c:6c:0e:a1:4f:c7:58:63:18:b9:ab:14:0f:21:fc: 57:5f:38:75:71:fe:84:1a:99:ae:f7:f5:24:af:b2:f2:ff:bb: 83:93:fa:ea:42:00:d0:92:30:9d:01:1c:fb:8d:d7:02:34:73: 77:c7:cc:83:60:64:7d:5a:35:f2:94:a8:78:2d:0e:98:20:48: 4f:1f:f1:23:52:62:35:0d:73:a4:5a:5f:ed:73:ca:ca:ad:98: fc:05:c1:5f:1b:a6:b3:df:61:44:a8:be:81:49:6d:1b:5b:e8: 1f:d0:39:50:6d:b0:83:4e:67:73:18:75:6c:1d:58:6b:e1:9b: 1c:a2:1b:4b:97:af:d8:b3:a6:4f:12:30:59:89:5b:80:23:f8: 27:43:94:4f:33:98:fb:e0:9e:29:85:9a:07:2c:81:37:69:60: b1:15:71:77:45:7a:17:eb:95:5b:e8:93:28:a3:0a:50:99:54: d6:3b:b1:78:e2:1b:18:db:b7:3c:92:55:5d:52:6e:50:58:4f: 95:bf:88:b2:c6:88:56:09:82:c5:e5:bd:64:c7:21:df:99:af: 72:54:e6:3e:e5:3a:f9:43:e3:34:bb:5a:7d:2b:1f:7b:c7:b8: 8a:e3:cc:69:df:d3:7c:4a:8b:6a:ea:7f:90:e2:2c:97:97:fe: a6:07:75:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQLrFll/p3NBrD2IF+AlUMk8BWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTA5MDYxNTM2NTVaFw0yNTA5MDkxNjA1NTVaMDMxMTAvBgNV BAMTKEI1MTRCODVDRjZBODdEQTlCMzc5QTI1MTRERDA1NTRBMjY2OEMxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZXgjTGMLruxhtMnI+xuyxlbr f+rq87XY6FprhkNMVyp244zOhB5jGWf7BFtnwAHFvgGakOazogmOpvN/zIn3UOnX qfyoX4rTp8wSZdRr/jAf4q1e/sed5Qp6UU0/d1KqGmH9SqU0/uRE99iaKU4BuYw9 hVUrJ7DvQhR7Ysfa9enlkYZptC93o00WUUvh0Ncg8xNtoqgCLOC5FuGqL1Z8VLCI 3u3+l7d99OA2F9z8Y2dCEbRp7ddyp96VUY+NHx1sddWgol2PkbugGibOw7jY+qdV 2JYP/pjU4EoJXDKfsBPjkCkvJHOxiuywkT1afv3hcZOszKyB9rlfSM+t2abjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtRS4XPaofamzeaJRTdBVSiZowZwwHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMaApxsDqFPx1hjGLmrFA8h/FdfOHVx/oQa ma739SSvsvL/u4OT+upCANCSMJ0BHPuN1wI0c3fHzINgZH1aNfKUqHgtDpggSE8f 8SNSYjUNc6RaX+1zysqtmPwFwV8bprPfYUSovoFJbRtb6B/QOVBtsINOZ3MYdWwd WGvhmxyiG0uXr9izpk8SMFmJW4Aj+CdDlE8zmPvgnimFmgcsgTdpYLEVcXdFehfr lVvokyijClCZVNY7sXjiGxjbtzySVV1SblBYT5W/iLLGiFYJgsXlvWTHId+Zr3JU 5j7lOvlD4zS7Wn0rH3vHuIrjzGnf03xKi2rqf5DiLJeX/qYHdbI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:11 2025 by rpki-client