$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: ndZxGuRvXnbiac63FT8U7ErtgklhABNIfbsvpNbbr5w= Subject key identifier: 71:15:B8:66:1D:8F:83:F9:A6:25:B3:56:99:69:79:C4:FF:46:3A:56 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 7494A76FAFEFBCB2A482D46BFDD6602BD2F80DE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 0214 Signing time: Fri 05 Sep 2025 12:40:03 +0000 Manifest this update: Fri 05 Sep 2025 12:35:03 +0000 Manifest next update: Mon 08 Sep 2025 17:12:03 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: maKir+ahh/QDzGAsdl8owGHk3H5FInCT+cuelbCo4/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:94:a7:6f:af:ef:bc:b2:a4:82:d4:6b:fd:d6:60:2b:d2:f8:0d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Sep 5 12:35:03 2025 GMT Not After : Sep 8 17:12:03 2025 GMT Subject: CN=7115B8661D8F83F9A625B356996979C4FF463A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:cf:c3:84:0c:da:f3:32:37:66:b0:af:40: c6:b9:d6:5c:b0:3e:31:4a:24:30:68:8f:4c:ed:91: 6c:00:ca:98:56:e3:51:d3:ee:09:d1:38:ff:eb:c5: 42:40:47:7e:91:1b:42:57:7c:36:23:85:05:28:52: c2:e4:16:18:f1:a2:45:69:fb:11:1e:de:ab:20:d1: c7:86:84:f3:5d:6d:36:b0:5a:34:65:d3:c5:b9:42: 90:f8:d4:bd:1c:0e:20:f4:ba:14:c2:31:31:d6:15: 39:48:ed:04:d5:31:50:e7:c8:52:85:43:a6:93:3f: b1:26:04:0e:32:92:51:cf:5a:78:04:d6:e5:24:59: 51:80:ce:f9:51:7a:90:90:ef:2d:dc:2d:35:0c:39: b6:c6:9e:3f:b4:d2:f9:4d:2c:13:b2:58:4f:1e:05: ad:00:5e:56:db:38:05:34:86:96:bf:6c:84:bb:25: 33:d3:13:ee:0f:c1:17:59:f5:91:8a:f7:7b:f5:a6: a8:c2:10:98:45:47:b2:c1:18:5a:08:22:c5:f7:6a: 14:30:85:14:29:eb:c7:1c:ed:f8:cc:93:ae:af:e2: ae:73:8b:32:d2:9d:94:55:ab:fe:ad:0e:f0:7a:ff: b0:40:c4:f9:9a:2a:b7:bc:06:66:68:08:93:0b:55: b1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:15:B8:66:1D:8F:83:F9:A6:25:B3:56:99:69:79:C4:FF:46:3A:56 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:cd:e4:10:9f:ba:a9:60:10:0d:54:4f:21:f4:aa:5a:83:c6: de:e6:96:f6:42:e0:bb:c0:e4:81:6a:c9:8a:67:c0:b5:39:6d: d9:20:09:05:91:d1:75:51:72:16:eb:b0:c0:ca:07:af:25:d6: 73:0a:be:ba:7b:9f:95:3c:08:75:5a:50:c3:2a:22:f8:9f:fd: 84:63:25:9f:d4:92:c3:6c:22:aa:34:20:d0:90:e9:6c:a0:9a: 85:c8:46:78:b8:47:23:8b:98:ea:7c:39:17:0e:88:6d:6a:33: de:56:a3:d8:6c:27:53:fc:43:4f:c6:66:ec:fa:b3:77:2b:89: 5d:ad:8b:da:e6:95:42:5e:35:d3:3f:61:db:62:94:9f:c3:61: f0:b0:15:b6:f4:f3:51:88:b8:ac:74:68:6c:4d:1e:e3:62:ff: 64:7a:5b:2b:c3:2a:d6:2a:9e:73:c6:b5:1b:62:bf:cb:1c:4f: 15:0c:7d:b1:25:5c:a5:90:0e:f0:bf:60:a8:bd:a2:b9:4f:fb: 37:45:e1:a8:a9:25:42:a8:86:15:c7:e2:8f:7d:c5:84:ec:89: 2e:a8:22:3b:e3:78:fe:43:fd:09:32:18:8a:72:0c:8b:ca:19: 55:ec:34:7a:23:6a:3c:98:f5:a9:7e:ca:b5:c7:e1:27:ee:3a: 78:de:cb:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJSnb6/vvLKkgtRr/dZgK9L4DeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTA5MDUxMjM1MDNaFw0yNTA5MDgxNzEyMDNaMDMxMTAvBgNV BAMTKDcxMTVCODY2MUQ4RjgzRjlBNjI1QjM1Njk5Njk3OUM0RkY0NjNBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSD8/DhAza8zI3ZrCvQMa51lyw PjFKJDBoj0ztkWwAyphW41HT7gnROP/rxUJAR36RG0JXfDYjhQUoUsLkFhjxokVp +xEe3qsg0ceGhPNdbTawWjRl08W5QpD41L0cDiD0uhTCMTHWFTlI7QTVMVDnyFKF Q6aTP7EmBA4yklHPWngE1uUkWVGAzvlRepCQ7y3cLTUMObbGnj+00vlNLBOyWE8e Ba0AXlbbOAU0hpa/bIS7JTPTE+4PwRdZ9ZGK93v1pqjCEJhFR7LBGFoIIsX3ahQw hRQp68cc7fjMk66v4q5zizLSnZRVq/6tDvB6/7BAxPmaKre8BmZoCJMLVbE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcRW4Zh2Pg/mmJbNWmWl5xP9GOlYwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLN5BCfuqlgEA1UTyH0qlqDxt7mlvZC4LvA 5IFqyYpnwLU5bdkgCQWR0XVRchbrsMDKB68l1nMKvrp7n5U8CHVaUMMqIvif/YRj JZ/UksNsIqo0INCQ6WygmoXIRni4RyOLmOp8ORcOiG1qM95Wo9hsJ1P8Q0/GZuz6 s3criV2ti9rmlUJeNdM/YdtilJ/DYfCwFbb081GIuKx0aGxNHuNi/2R6WyvDKtYq nnPGtRtiv8scTxUMfbElXKWQDvC/YKi9orlP+zdF4aipJUKohhXH4o99xYTsiS6o IjvjeP5D/QkyGIpyDIvKGVXsNHojajyY9al+yrXH4SfuOnjey2g= -----END CERTIFICATE-----Generated at Sun Sep 7 03:38:12 2025 by rpki-client