$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: ZrYWFvpeiFkVb5ZiMGt6ao4aiF+rqneJY4k1j+nNUtI= Subject key identifier: FA:24:6F:81:9E:D0:78:0B:2F:5E:32:10:E3:6A:F3:B2:03:0C:C3:1C Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 6289ADB097629A4F18DBDAF80C795661B7CB4DE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: B1 Signing time: Sun 20 Jul 2025 22:21:33 +0000 Manifest this update: Sun 20 Jul 2025 22:16:33 +0000 Manifest next update: Thu 24 Jul 2025 09:11:33 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) 2: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: laB1CHyiize8m6WcwNtQIasCns54LXAF8K0BNNn+74w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:89:ad:b0:97:62:9a:4f:18:db:da:f8:0c:79:56:61:b7:cb:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Jul 20 22:16:33 2025 GMT Not After : Jul 24 09:11:33 2025 GMT Subject: CN=FA246F819ED0780B2F5E3210E36AF3B2030CC31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:8b:12:b1:ca:c6:91:11:58:f4:e7:cf:a1: 03:9e:10:a6:e2:96:c8:a1:5e:83:b2:3e:f9:7f:9a: 61:52:39:65:d9:ec:3f:a7:fc:09:de:5e:29:e3:5a: 64:0c:52:4b:a1:9f:2f:40:61:cc:aa:dc:bd:39:f3: d5:85:54:20:c2:17:50:f3:b6:18:f2:50:5a:83:92: 14:96:03:b0:c3:39:df:fd:57:72:16:28:5b:c8:c4: 45:e2:16:9f:6e:8d:4d:b3:c5:d4:33:41:70:d5:ed: 9f:f5:06:70:56:5a:ef:a0:11:71:02:ee:2f:26:c3: 8e:f4:cd:ed:52:23:b6:b1:3d:69:23:c6:0a:0d:51: 6f:c6:4c:11:07:29:fd:89:28:2e:ee:02:64:de:35: 19:27:db:39:8e:87:4a:51:0b:97:ac:75:d9:a8:d4: 3b:c5:7d:29:f0:44:b9:0f:3c:08:1f:fd:e7:53:a8: c4:95:66:82:c2:28:4d:d9:8d:16:ed:a8:2f:03:ef: 14:73:cc:2b:f3:ad:0d:5c:8d:bf:38:22:31:8e:44: 37:5e:9d:d4:81:5e:a7:3c:75:b8:c9:50:9a:db:b8: a5:7f:0b:bc:03:67:93:b8:ed:92:c2:49:7b:38:b7: bd:c3:f4:22:16:10:5a:41:57:79:0f:e6:6c:82:13: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:24:6F:81:9E:D0:78:0B:2F:5E:32:10:E3:6A:F3:B2:03:0C:C3:1C X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5e:4a:f6:1b:82:d5:8b:3c:26:74:75:e9:25:cc:2d:5f:a4: 79:51:0e:9b:2c:67:11:60:fe:43:fc:41:59:81:ae:ee:40:44: 0b:57:5b:54:d1:f4:59:90:f0:68:7d:49:c4:3c:09:75:8a:2a: 33:9a:bd:91:32:57:e1:a2:f1:10:fb:e7:ca:4b:d5:64:94:71: 3c:05:35:c3:1f:8d:77:2b:4d:33:c8:56:37:28:f5:aa:31:a1: f7:2c:3f:92:b8:7f:60:11:ff:84:06:eb:dc:89:2e:48:69:1f: 9a:c9:6b:37:4c:fe:6e:e8:d6:29:d9:f3:d5:3b:74:b3:a5:42: 00:ad:eb:20:c2:cf:6c:38:4e:28:af:d4:0b:25:7c:c2:37:41: b4:b6:bd:f7:43:7c:f4:ea:09:81:b2:e9:5b:9f:4f:03:4b:67: 9c:f7:5b:2e:a4:55:26:65:30:97:b9:94:d2:fe:25:c1:f3:ae: 4c:eb:5c:90:70:07:ca:d1:91:a6:10:4b:08:3c:e5:6c:11:79: f2:37:05:c3:88:16:93:07:67:df:8b:8e:5e:30:2f:72:42:43: f2:bc:5d:4f:95:3d:bf:f4:91:3b:36:a9:e8:5b:d2:15:5e:3d: 47:45:29:36:29:ab:58:a6:d0:ac:b7:77:86:d6:7c:27:13:d4: b8:41:7d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYomtsJdimk8Y29r4DHlWYbfLTeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTA3MjAyMjE2MzNaFw0yNTA3MjQwOTExMzNaMDMxMTAvBgNV BAMTKEZBMjQ2RjgxOUVEMDc4MEIyRjVFMzIxMEUzNkFGM0IyMDMwQ0MzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFIsSscrGkRFY9OfPoQOeEKbi lsihXoOyPvl/mmFSOWXZ7D+n/AneXinjWmQMUkuhny9AYcyq3L0589WFVCDCF1Dz thjyUFqDkhSWA7DDOd/9V3IWKFvIxEXiFp9ujU2zxdQzQXDV7Z/1BnBWWu+gEXEC 7i8mw470ze1SI7axPWkjxgoNUW/GTBEHKf2JKC7uAmTeNRkn2zmOh0pRC5esddmo 1DvFfSnwRLkPPAgf/edTqMSVZoLCKE3ZjRbtqC8D7xRzzCvzrQ1cjb84IjGORDde ndSBXqc8dbjJUJrbuKV/C7wDZ5O47ZLCSXs4t73D9CIWEFpBV3kP5myCE/lPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iRvgZ7QeAsvXjIQ42rzsgMMwxwwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJheSvYbgtWLPCZ0deklzC1fpHlRDpssZxFg /kP8QVmBru5ARAtXW1TR9FmQ8Gh9ScQ8CXWKKjOavZEyV+Gi8RD758pL1WSUcTwF NcMfjXcrTTPIVjco9aoxofcsP5K4f2AR/4QG69yJLkhpH5rJazdM/m7o1inZ89U7 dLOlQgCt6yDCz2w4Tiiv1AslfMI3QbS2vfdDfPTqCYGy6VufTwNLZ5z3Wy6kVSZl MJe5lNL+JcHzrkzrXJBwB8rRkaYQSwg85WwRefI3BcOIFpMHZ9+Ljl4wL3JCQ/K8 XU+VPb/0kTs2qehb0hVePUdFKTYpq1im0Ky3d4bWfCcT1LhBfTg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:37:21 2025 by rpki-client