$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: 8/5oDTvCGinkwSLLDQ99wnsV0/UnHeeHT3cGbIbdwbM= Subject key identifier: 21:BE:FA:BF:C9:E4:4D:0C:2C:C3:9B:35:96:8A:CC:5A:5A:D8:50:B4 Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 37BC602F77A4D9675054EA7B33F719804262F293 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 01F2 Signing time: Sat 06 Sep 2025 04:41:55 +0000 Manifest this update: Sat 06 Sep 2025 04:36:55 +0000 Manifest next update: Tue 09 Sep 2025 14:40:55 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: GYOdgB5E6zAfN6csGwKvCQu8t1dBnuZsHYI8ZcYsOXc=) 2: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: wMwayzIPwqMBIP88IOsXTpqmzpX3PVf3WfVEJ/JlX8M=) 3: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: k7X14J+QdS7MEz6uDJt6u3xkxSH91jVPDLJqXdryTNc=) 4: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: SrRZ8C6gNri7mq7+YXGalbj7EU5dRfkJ9qxejGGwGEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bc:60:2f:77:a4:d9:67:50:54:ea:7b:33:f7:19:80:42:62:f2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Sep 6 04:36:55 2025 GMT Not After : Sep 9 14:40:55 2025 GMT Subject: CN=21BEFABFC9E44D0C2CC39B35968ACC5A5AD850B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:79:eb:9c:03:7c:8d:cd:fb:3e:77:0d:87: 0d:91:86:c7:fc:a7:10:f9:6e:67:bc:d0:0e:70:b5: ad:8b:96:9e:6b:e3:f7:e5:48:77:9e:37:10:90:b5: 9e:4b:f1:60:39:c9:a1:5e:7d:85:89:48:51:77:e2: be:0b:ad:b0:9f:31:40:20:d2:59:46:e9:e1:a0:fc: 88:c3:b4:8e:0a:14:05:4b:e9:e0:c7:9c:37:20:57: db:54:69:c8:ab:f6:6f:ec:97:ec:28:24:d9:16:94: 46:30:e4:37:a1:35:85:91:9c:fa:ed:f1:ab:e0:bd: db:0a:ac:e5:40:a0:95:f9:ea:7d:26:4b:3c:2b:9e: ca:0f:af:b3:9c:8d:09:20:a7:1a:74:96:26:3a:d0: 94:e6:ed:35:e8:01:c6:79:f0:72:87:95:32:8d:b7: 83:43:20:82:f4:a4:be:d7:15:83:32:56:7c:6b:47: e0:db:98:63:61:d1:af:0e:84:03:1a:9a:a9:b4:e8: a8:06:1d:ab:d7:68:ea:cf:f2:9c:a4:fa:b4:6f:28: 29:fe:27:17:7f:35:da:dc:1c:00:11:11:28:ba:d6: f2:aa:65:15:b1:a7:86:4c:7a:8c:50:5a:dc:9d:16: 09:f3:20:86:df:a8:8d:a7:20:b6:fb:ef:c5:dc:0f: 57:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:FA:BF:C9:E4:4D:0C:2C:C3:9B:35:96:8A:CC:5A:5A:D8:50:B4 X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d2:09:8b:e3:b6:e7:97:4b:dd:38:59:53:11:d5:6e:f3:a8: 93:77:ec:4c:7d:68:ad:39:48:d7:fc:36:ac:89:a1:ae:2c:9f: a8:77:c9:21:e4:fa:56:3b:a5:ff:5a:f4:59:8f:68:9e:61:43: 9b:29:ce:7c:6b:32:ba:f9:32:e9:32:22:56:f1:40:1a:a8:e2: 7d:8d:c9:2d:6b:ed:66:c9:af:0c:f2:d7:64:60:00:a5:e4:7d: 2b:bf:9b:c5:57:50:49:d0:bb:2c:b3:4b:8c:3d:20:b8:8b:73: f2:e7:ae:a0:b0:a4:a4:c7:88:e2:0f:ff:2f:3e:50:06:f2:d5: 1f:d0:37:00:56:0e:b4:d7:d5:50:3a:92:0f:86:89:6b:12:43: 45:13:dd:0a:27:06:3b:44:e1:a5:44:68:2c:6d:86:5f:6d:93: 5f:06:79:a7:89:5f:1f:a3:b2:2c:c9:29:b3:2c:fb:e5:fc:e9: 62:4a:47:4f:76:c7:b5:ca:1b:12:02:7f:5e:dd:20:a2:43:be: 94:ce:9d:0f:04:ed:b5:80:4b:c1:03:eb:b3:24:1b:bb:be:17: 87:b0:6b:84:5f:27:a7:a9:70:e0:06:c9:bf:d9:19:ba:d8:e9: ca:39:03:ea:8e:a5:49:e3:74:bc:52:7b:29:ab:df:28:57:cc: 3c:61:c7:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7xgL3ek2WdQVOp7M/cZgEJi8pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNTA5MDYwNDM2NTVaFw0yNTA5MDkxNDQwNTVaMDMxMTAvBgNV BAMTKDIxQkVGQUJGQzlFNDREMEMyQ0MzOUIzNTk2OEFDQzVBNUFEODUwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaXnrnAN8jc37PncNhw2Rhsf8 pxD5bme80A5wta2Llp5r4/flSHeeNxCQtZ5L8WA5yaFefYWJSFF34r4LrbCfMUAg 0llG6eGg/IjDtI4KFAVL6eDHnDcgV9tUacir9m/sl+woJNkWlEYw5DehNYWRnPrt 8avgvdsKrOVAoJX56n0mSzwrnsoPr7OcjQkgpxp0liY60JTm7TXoAcZ58HKHlTKN t4NDIIL0pL7XFYMyVnxrR+DbmGNh0a8OhAMamqm06KgGHavXaOrP8pyk+rRvKCn+ Jxd/NdrcHAARESi61vKqZRWxp4ZMeoxQWtydFgnzIIbfqI2nILb778XcD1dDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIb76v8nkTQwsw5s1lorMWlrYULQwHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzSCYvjtueXS904WVMR1W7zqJN37Ex9aK05 SNf8NqyJoa4sn6h3ySHk+lY7pf9a9FmPaJ5hQ5spznxrMrr5MukyIlbxQBqo4n2N yS1r7WbJrwzy12RgAKXkfSu/m8VXUEnQuyyzS4w9ILiLc/LnrqCwpKTHiOIP/y8+ UAby1R/QNwBWDrTX1VA6kg+GiWsSQ0UT3QonBjtE4aVEaCxthl9tk18GeaeJXx+j sizJKbMs++X86WJKR092x7XKGxICf17dIKJDvpTOnQ8E7bWAS8ED67MkG7u+F4ew a4RfJ6epcOAGyb/ZGbrY6co5A+qOpUnjdLxSeymr3yhXzDxhx4k= -----END CERTIFICATE-----Generated at Sun Sep 7 15:41:02 2025 by rpki-client