$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: Y140EUIMBzN4D5HV5jxZ6fUx/6VetUvVksiRODM5MYM= Subject key identifier: BE:BC:2F:FA:B8:BD:0B:D0:89:C5:D6:D8:61:0F:AF:C8:41:97:0B:43 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 1DFF81130B62243329E25A031F5BF2B2D124AED2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 0159 Signing time: Mon 01 Sep 2025 13:00:47 +0000 Manifest this update: Mon 01 Sep 2025 12:55:47 +0000 Manifest next update: Thu 04 Sep 2025 22:13:47 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: 4ip7XeIe+35ZB0HGyIk3DM0FrKWokOi9wfiJ1lE2O0E=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 22:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ff:81:13:0b:62:24:33:29:e2:5a:03:1f:5b:f2:b2:d1:24:ae:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Sep 1 12:55:47 2025 GMT Not After : Sep 4 22:13:47 2025 GMT Subject: CN=BEBC2FFAB8BD0BD089C5D6D8610FAFC841970B43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:0e:a6:2d:b5:ea:3f:cc:df:b8:a2:63:2f: a3:c9:e0:b7:cb:61:91:2b:2c:1a:0e:c4:bc:11:25: d7:c9:e6:af:b5:75:06:cb:6d:ca:89:34:ad:ec:8b: 1e:0a:b6:7e:7d:d2:b0:6d:7e:df:9b:18:5d:67:d7: 0f:7d:bb:e6:1b:85:d9:f1:36:10:f2:e1:1d:29:89: a5:40:71:9c:a9:ea:a8:30:06:60:88:ad:99:58:27: 32:cb:0b:5e:ae:05:b5:d3:57:34:2d:36:d4:1b:e9: 30:b2:2d:d8:47:35:b8:3d:57:88:37:d0:67:9d:e7: d0:02:22:94:51:d4:d2:af:a0:c1:7b:6c:68:db:87: 31:0c:c6:20:76:5e:3e:6f:28:8f:18:27:5d:4e:bf: 69:e5:4f:b6:45:7d:37:ea:37:cb:82:e1:6d:12:be: fd:ee:25:22:82:cf:56:96:4b:29:15:68:c7:9b:93: a3:ac:47:45:76:94:42:9e:b9:25:b5:ef:b2:e4:a5: d8:b1:c2:2e:01:3a:8b:d6:45:bf:17:7e:37:0b:07: 4f:d8:d4:66:78:56:c8:32:f7:00:bb:88:db:cd:d4: 9c:fc:0e:54:97:18:38:4b:8c:8b:ea:59:69:a0:21: 5c:57:95:14:19:92:98:45:62:0d:43:2c:ec:f3:fd: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:2F:FA:B8:BD:0B:D0:89:C5:D6:D8:61:0F:AF:C8:41:97:0B:43 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:b7:7d:48:93:24:f2:a6:0f:f6:24:c7:74:91:e0:60:ba: 95:0e:5b:87:97:ed:f8:f5:a3:dd:90:d9:e1:43:d4:c8:d5:bb: 36:40:18:ed:1e:55:14:eb:62:ac:9d:42:b8:be:cd:17:8a:d8: 1b:91:c8:96:3a:80:6a:7b:ce:05:b4:d7:73:56:1c:0b:01:e0: c3:46:ec:37:80:9c:b2:96:c3:ae:d8:12:8b:54:ef:e1:e3:5f: e7:68:a0:13:12:a2:a9:a9:44:9f:26:4e:4e:68:5d:43:e5:8a: d8:98:1e:24:52:51:8d:d2:25:5a:c9:72:4f:a9:e2:cf:74:22: a4:80:30:2f:43:a8:04:ae:fb:23:5c:b2:51:39:97:63:67:b9: 18:47:2d:40:5d:c4:cf:e3:1d:d6:9d:95:67:36:56:73:1d:72: 5e:62:c6:3c:58:9e:59:07:db:21:5b:cc:27:db:b0:53:54:53: f9:12:05:4f:99:b6:a3:cf:a3:cc:dd:3c:e3:c8:cb:65:58:31: 05:e4:c0:72:9c:a9:2d:82:95:5b:16:b7:5a:1e:4c:f7:53:18: 8e:f4:af:56:8f:d3:47:de:ce:12:38:29:53:8f:2d:22:5d:71: 97:0f:8d:d0:89:5f:e7:96:92:50:fe:db:5d:41:f6:a4:0c:7d: 8b:12:a6:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHf+BEwtiJDMp4loDH1vystEkrtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTA5MDExMjU1NDdaFw0yNTA5MDQyMjEzNDdaMDMxMTAvBgNV BAMTKEJFQkMyRkZBQjhCRDBCRDA4OUM1RDZEODYxMEZBRkM4NDE5NzBCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwQ6mLbXqP8zfuKJjL6PJ4LfL YZErLBoOxLwRJdfJ5q+1dQbLbcqJNK3six4Ktn590rBtft+bGF1n1w99u+Ybhdnx NhDy4R0piaVAcZyp6qgwBmCIrZlYJzLLC16uBbXTVzQtNtQb6TCyLdhHNbg9V4g3 0Ged59ACIpRR1NKvoMF7bGjbhzEMxiB2Xj5vKI8YJ11Ov2nlT7ZFfTfqN8uC4W0S vv3uJSKCz1aWSykVaMebk6OsR0V2lEKeuSW177Lkpdixwi4BOovWRb8XfjcLB0/Y 1GZ4Vsgy9wC7iNvN1Jz8DlSXGDhLjIvqWWmgIVxXlRQZkphFYg1DLOzz/VLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvrwv+ri9C9CJxdbYYQ+vyEGXC0MwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4Yt31IkyTypg/2JMd0keBgupUOW4eX7fj1 o92Q2eFD1MjVuzZAGO0eVRTrYqydQri+zReK2BuRyJY6gGp7zgW013NWHAsB4MNG 7DeAnLKWw67YEotU7+HjX+dooBMSoqmpRJ8mTk5oXUPlitiYHiRSUY3SJVrJck+p 4s90IqSAMC9DqASu+yNcslE5l2NnuRhHLUBdxM/jHdadlWc2VnMdcl5ixjxYnlkH 2yFbzCfbsFNUU/kSBU+ZtqPPo8zdPOPIy2VYMQXkwHKcqS2ClVsWt1oeTPdTGI70 r1aP00fezhI4KVOPLSJdcZcPjdCJX+eWklD+211B9qQMfYsSpkY= -----END CERTIFICATE-----Generated at Wed Sep 3 10:15:32 2025 by rpki-client