$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: pgILduJ2sOAdQnkEqfF/mmOklRYNR08Vz77ttjF7R9I= Subject key identifier: 11:A0:1E:B3:02:02:6D:EF:17:85:F9:11:8B:83:2F:BB:81:6C:E0:51 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 55DBF77CC11B93BD4CFAB42A058435EA107AF2FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 0119 Signing time: Wed 03 Sep 2025 00:10:00 +0000 Manifest this update: Wed 03 Sep 2025 00:05:00 +0000 Manifest next update: Sat 06 Sep 2025 10:56:00 +0000 Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: ePs+7QNvRzMlIpdqEG5AJcQ/7oSXOlNvEWF18TjLRwk=) 2: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: /j/sp/TBKwUZIk4gUseOutLiAZuMAGlT5KLdV3ANFMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:db:f7:7c:c1:1b:93:bd:4c:fa:b4:2a:05:84:35:ea:10:7a:f2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Sep 3 00:05:00 2025 GMT Not After : Sep 6 10:56:00 2025 GMT Subject: CN=11A01EB302026DEF1785F9118B832FBB816CE051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:a7:49:d5:78:10:2f:25:7a:db:f8:42:b2: 60:93:ec:84:2a:03:dd:95:0f:ab:37:80:16:c8:29: b7:65:8d:21:d0:1d:45:0f:53:fb:18:f5:c7:1e:85: b8:ec:bb:dd:d0:d8:67:85:a6:e9:25:88:66:55:04: a2:6d:0c:50:4f:26:e6:68:08:f5:45:36:23:41:0b: 8d:c7:c4:d0:db:a8:4f:81:28:ad:19:55:20:42:78: f7:05:68:bf:dd:89:d0:00:d2:11:6b:f3:02:88:9e: 9e:8c:e4:56:d6:05:6b:f4:3e:ee:e6:a3:0d:72:99: 35:24:b6:c8:ff:44:fa:ff:cd:47:26:db:79:4a:2f: 81:1d:9f:51:7a:0b:5d:5e:1d:23:b9:af:44:5e:7c: cb:03:7d:d2:24:6c:15:0c:03:9c:de:da:ce:0c:4a: 29:38:2e:e9:bf:7b:4d:04:4e:e2:d8:a4:68:85:fc: 3d:fa:29:b7:1a:a7:ff:91:c7:b8:85:53:0c:45:9f: a7:fa:e3:a5:8b:5c:4e:07:9c:d1:16:cd:0a:9a:d9: d8:47:4f:55:ed:10:5d:25:e1:c6:7f:bd:e0:55:16: 52:d2:8d:f3:6f:c6:e7:01:53:e7:29:52:9d:aa:d2: 98:f6:0c:a9:0d:ec:c9:4d:7d:e3:ad:7e:91:eb:db: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A0:1E:B3:02:02:6D:EF:17:85:F9:11:8B:83:2F:BB:81:6C:E0:51 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a2:45:59:bc:7b:72:c8:58:40:73:c8:06:fb:f1:13:7c:88: ee:1f:f1:15:a7:87:7c:e9:9a:96:31:7c:1c:b8:80:13:86:73: f4:3c:18:81:89:25:ab:f4:cb:e9:71:1a:98:d2:76:4d:6f:85: 46:ac:5c:0c:7e:19:e6:3f:63:c6:e0:19:1d:20:16:2e:02:a3: ba:c1:25:32:bf:fc:b9:82:d4:93:3b:b7:a6:45:e8:e5:c0:6e: 7b:52:d8:55:10:d2:ae:4b:98:84:8f:a8:a4:ec:b5:7f:42:06: 13:30:de:7f:df:e5:f6:58:88:8f:9b:bf:f8:81:d9:1e:b4:c1: 1a:20:c2:72:bb:1f:8f:08:f3:9f:a7:8c:94:62:f4:57:fd:be: ab:d5:46:d4:05:e4:46:44:52:3b:d4:8b:d0:42:ca:5b:85:e1: c6:ee:fd:ee:5d:89:bd:cd:39:5c:a5:63:ce:72:d7:6b:a1:11: d9:70:f6:61:7d:35:81:40:2e:67:f0:21:f7:31:d8:dd:86:d0: cc:50:81:3b:35:9b:da:6c:a8:8c:f8:cd:22:bf:db:33:fe:45: 21:4d:22:33:ff:6d:7e:25:59:f8:a0:c8:14:47:e7:a4:03:5b: 68:cd:f9:56:e9:4d:60:9e:99:83:ae:21:af:a4:ff:6e:24:93: a7:d2:12:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdv3fMEbk71M+rQqBYQ16hB68v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTA5MDMwMDA1MDBaFw0yNTA5MDYxMDU2MDBaMDMxMTAvBgNV BAMTKDExQTAxRUIzMDIwMjZERUYxNzg1RjkxMThCODMyRkJCODE2Q0UwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MadJ1XgQLyV62/hCsmCT7IQq A92VD6s3gBbIKbdljSHQHUUPU/sY9ccehbjsu93Q2GeFpukliGZVBKJtDFBPJuZo CPVFNiNBC43HxNDbqE+BKK0ZVSBCePcFaL/didAA0hFr8wKInp6M5FbWBWv0Pu7m ow1ymTUktsj/RPr/zUcm23lKL4Edn1F6C11eHSO5r0RefMsDfdIkbBUMA5ze2s4M Sik4Lum/e00ETuLYpGiF/D36Kbcap/+Rx7iFUwxFn6f646WLXE4HnNEWzQqa2dhH T1XtEF0l4cZ/veBVFlLSjfNvxucBU+cpUp2q0pj2DKkN7MlNfeOtfpHr2yKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEaAeswICbe8XhfkRi4Mvu4Fs4FEwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWiRVm8e3LIWEBzyAb78RN8iO4f8RWnh3zp mpYxfBy4gBOGc/Q8GIGJJav0y+lxGpjSdk1vhUasXAx+GeY/Y8bgGR0gFi4Co7rB JTK//LmC1JM7t6ZF6OXAbntS2FUQ0q5LmISPqKTstX9CBhMw3n/f5fZYiI+bv/iB 2R60wRogwnK7H48I85+njJRi9Ff9vqvVRtQF5EZEUjvUi9BCyluF4cbu/e5dib3N OVylY85y12uhEdlw9mF9NYFALmfwIfcx2N2G0MxQgTs1m9psqIz4zSK/2zP+RSFN IjP/bX4lWfigyBRH56QDW2jN+VbpTWCemYOuIa+k/24kk6fSEpE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:16 2025 by rpki-client