$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: jwfP6P/j+u6j4/26oMXUMHfrsjLDDWKWBcTTwTspiKQ= Subject key identifier: 7F:3C:36:A4:94:D1:AB:C2:F4:1B:8E:21:82:79:26:3B:3D:C2:97:9C Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 14BA572BC742FF2AE8E88E7AD34FCFCF14A46526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 050D Signing time: Sat 06 Sep 2025 00:11:14 +0000 Manifest this update: Sat 06 Sep 2025 00:06:14 +0000 Manifest next update: Tue 09 Sep 2025 08:14:14 +0000 Files and hashes: 1: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 2: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) 3: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 4: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: 8uBz0UyCtNUS4/8COGH98wvf7GLdRC7Nt1RKgJA+7us=) 5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 6: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) 7: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 8: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ba:57:2b:c7:42:ff:2a:e8:e8:8e:7a:d3:4f:cf:cf:14:a4:65:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Sep 6 00:06:14 2025 GMT Not After : Sep 9 08:14:14 2025 GMT Subject: CN=7F3C36A494D1ABC2F41B8E218279263B3DC2979C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:85:24:92:ea:61:f6:2a:b9:f8:22:b4:58:67: db:c7:86:ab:40:e6:3b:37:c7:70:cc:28:3d:cc:5e: c9:2f:83:ab:a0:38:20:bf:24:54:b3:1e:4e:88:d4: dd:55:5b:f7:89:b3:65:a8:eb:a3:1d:6a:51:ce:0a: 48:31:4f:1c:f3:4e:16:e2:e3:7e:8d:c0:da:2f:7c: 8b:fb:7e:0d:70:97:40:43:72:42:13:bc:51:66:ab: c0:fc:c7:6f:30:1d:be:c1:bb:dc:78:0a:f2:98:8c: da:42:28:8d:9b:fc:4a:ed:4c:cb:9a:6d:05:74:0b: 26:b0:7d:ff:93:60:d4:f6:08:70:bf:d6:0d:b8:c3: 34:8a:75:0a:dd:b6:71:f0:0e:90:79:07:e0:89:ae: 81:6a:15:2b:79:ca:ea:d6:ed:64:00:db:29:83:29: 56:38:f9:35:20:b2:a4:76:93:44:83:b7:8f:f5:0e: 1a:70:25:e8:7a:79:1e:3f:51:ec:74:bb:e6:9d:b0: e6:88:01:20:08:18:52:ae:05:bc:b3:04:57:6c:4c: c8:29:40:6a:94:a1:93:22:2a:68:3b:2b:02:a7:9c: 38:d0:64:05:ce:4b:60:ef:24:eb:20:90:3b:dd:1f: d1:50:23:d9:53:1b:9d:12:cc:f6:db:ce:61:58:5b: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:36:A4:94:D1:AB:C2:F4:1B:8E:21:82:79:26:3B:3D:C2:97:9C X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:77:97:0b:8a:9b:81:9f:d2:f8:f2:a4:70:4b:f1:4b:62:ba: 4a:5e:39:20:19:9c:5f:95:d6:f0:63:6f:a3:db:84:f9:e4:02: 2d:41:96:67:20:34:46:65:33:6f:b2:c6:5c:ee:13:49:cd:71: d6:6a:f0:86:ed:29:5c:9d:9d:48:5f:95:07:71:ef:ff:81:a1: 1a:39:29:e3:8b:53:c7:6e:b2:8e:9f:15:af:6c:af:2b:1c:28: e5:99:e5:c5:71:df:d4:69:c9:8d:5a:f5:1d:47:21:16:9b:1b: e5:ef:a7:63:cc:16:37:d0:f9:96:d0:3c:38:c7:5d:a7:95:b8: 0b:75:a7:a4:ad:36:a5:29:7e:70:e4:0c:d8:a4:99:c5:3d:e2: 33:2d:6d:26:57:06:ff:b9:2c:9e:9e:28:c8:3d:93:f9:0f:8d: a2:e6:74:ae:46:0e:82:26:0a:c5:f4:6b:a2:1c:78:36:7c:40: 1f:55:67:30:cc:b6:b8:5c:57:fb:2f:80:b3:88:ae:92:49:c1: fe:17:d0:8f:dc:34:17:b7:04:6c:ab:18:2e:da:7a:9b:9e:ef: 9a:04:c0:c2:cf:e7:a3:93:98:42:0c:ff:7c:cf:96:eb:65:c8: e5:cf:28:9a:b6:aa:62:24:5e:68:a8:97:8a:af:19:2c:44:84: 98:0b:cb:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLpXK8dC/yro6I5600/PzxSkZSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA5MDYwMDA2MTRaFw0yNTA5MDkwODE0MTRaMDMxMTAvBgNV BAMTKDdGM0MzNkE0OTREMUFCQzJGNDFCOEUyMTgyNzkyNjNCM0RDMjk3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2hSSS6mH2Krn4IrRYZ9vHhqtA 5js3x3DMKD3MXskvg6ugOCC/JFSzHk6I1N1VW/eJs2Wo66MdalHOCkgxTxzzThbi 436NwNovfIv7fg1wl0BDckITvFFmq8D8x28wHb7Bu9x4CvKYjNpCKI2b/ErtTMua bQV0Cyawff+TYNT2CHC/1g24wzSKdQrdtnHwDpB5B+CJroFqFSt5yurW7WQA2ymD KVY4+TUgsqR2k0SDt4/1DhpwJeh6eR4/Uex0u+adsOaIASAIGFKuBbyzBFdsTMgp QGqUoZMiKmg7KwKnnDjQZAXOS2DvJOsgkDvdH9FQI9lTG50SzPbbzmFYW6c9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfzw2pJTRq8L0G44hgnkmOz3Cl5wwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd3lwuKm4Gf0vjypHBL8UtiukpeOSAZnF+V 1vBjb6PbhPnkAi1BlmcgNEZlM2+yxlzuE0nNcdZq8IbtKVydnUhflQdx7/+BoRo5 KeOLU8duso6fFa9sryscKOWZ5cVx39RpyY1a9R1HIRabG+Xvp2PMFjfQ+ZbQPDjH XaeVuAt1p6StNqUpfnDkDNikmcU94jMtbSZXBv+5LJ6eKMg9k/kPjaLmdK5GDoIm CsX0a6IceDZ8QB9VZzDMtrhcV/svgLOIrpJJwf4X0I/cNBe3BGyrGC7aepue75oE wMLP56OTmEIM/3zPlutlyOXPKJq2qmIkXmiol4qvGSxEhJgLy8Q= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:51 2025 by rpki-client