$ rpki-client -vvf repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft File: A794160F8781ADF0A63CEECE52275B19F08F18D8.mft (raw, json) Hash identifier: ATSaFzBnDWn7IFTdsCFBgXl3JPd0ee1IHafyx8B4+0M= Subject key identifier: EC:A9:25:DC:75:A0:5D:23:77:D1:B2:DE:0E:1C:AB:1D:33:EC:AE:8F Authority key identifier: A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8 Certificate issuer: /CN=A794160F8781ADF0A63CEECE52275B19F08F18D8 Certificate serial: 0AFF2CA789A26F9618422EAC662885F5A850BD71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft Manifest number: 0138 Signing time: Fri 05 Sep 2025 23:50:59 +0000 Manifest this update: Fri 05 Sep 2025 23:45:59 +0000 Manifest next update: Tue 09 Sep 2025 08:50:59 +0000 Files and hashes: 1: A794160F8781ADF0A63CEECE52275B19F08F18D8.crl (hash: VCaPl8qUndTpiebWdyl6SVlhZXr1ihJ5CgO+CFninH8=) 2: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: mtMEnNnCc/n2ygwxa9g+6Mh/rQhVC5sEMiRt5rS7CMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ff:2c:a7:89:a2:6f:96:18:42:2e:ac:66:28:85:f5:a8:50:bd:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A794160F8781ADF0A63CEECE52275B19F08F18D8 Validity Not Before: Sep 5 23:45:59 2025 GMT Not After : Sep 9 08:50:59 2025 GMT Subject: CN=ECA925DC75A05D2377D1B2DE0E1CAB1D33ECAE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:79:ce:ca:7b:c0:c8:e7:7c:04:5c:11:87: 2c:af:d6:79:41:7e:ee:9d:12:d5:a0:be:65:c9:0f: 22:7f:76:d1:1c:ff:0c:21:33:59:a8:fe:b7:aa:27: 09:5f:8f:a8:14:d6:d6:66:9a:70:46:60:78:8d:dd: 7d:f9:ab:4f:6e:ee:41:7d:0f:5c:58:c3:cd:fd:ae: 46:0d:92:2c:1b:25:9a:66:d6:91:d1:b2:35:ee:12: 9a:76:06:40:9d:83:b8:aa:90:cf:fb:0c:b8:6e:de: 63:37:a2:87:65:53:44:af:d9:7e:b6:ff:07:ba:8d: f5:84:58:24:f6:15:a3:81:e1:06:bd:47:12:07:29: 23:b6:2a:f7:c2:1e:78:fc:a1:17:44:cd:8a:ff:ba: 94:5a:bd:44:0c:a2:19:5d:ad:0c:6f:ec:dc:fa:f6: c5:22:5b:3c:03:71:45:3e:99:1a:49:c7:07:f8:ee: eb:07:11:50:63:76:8f:91:95:86:5e:8e:2b:16:4a: 02:e7:10:83:55:75:2d:f5:96:d0:96:09:f5:d6:86: ff:91:bd:fb:41:52:40:a9:3c:96:55:58:18:fe:f1: 8f:a6:a2:21:87:e9:f1:93:d4:4c:48:55:d0:28:04: ce:b1:2f:e5:f8:d9:1d:0b:d8:8c:b0:f5:ce:1d:59: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A9:25:DC:75:A0:5D:23:77:D1:B2:DE:0E:1C:AB:1D:33:EC:AE:8F X509v3 Authority Key Identifier: keyid:A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ae:82:0c:fb:19:ab:16:32:2c:02:84:f4:b6:05:14:82:73: f9:53:8b:ba:e9:33:a8:f6:0e:b9:4b:5c:fd:ea:d1:4c:46:86: 84:84:96:3e:0e:07:f1:03:8d:fc:69:15:f1:f3:9b:76:f9:4d: 4f:2a:3a:13:51:59:03:e0:52:26:09:7a:71:dc:1e:9c:bc:4c: 8b:bd:a6:d2:d6:32:0d:2a:83:eb:ed:81:03:3a:fb:ec:2d:49: 73:6d:a8:d3:b5:cd:f2:c0:a7:e7:36:f3:f5:a6:a2:92:cb:33: 5d:b0:1d:91:ad:07:6d:67:fe:a1:50:26:9b:2a:ed:45:5f:10: 6e:e3:78:eb:0b:f1:d7:31:50:85:39:51:0b:32:fd:2d:c1:48: 45:59:e4:ff:6b:5b:26:05:5e:90:da:55:bd:df:54:62:17:f0: 3e:54:17:78:11:8a:5b:a8:1c:5e:d6:4a:d2:88:db:a5:1c:27: 53:4f:21:ec:a0:24:e8:c3:36:dc:34:d1:a3:17:39:b7:99:f5: c5:c1:51:a8:69:49:85:85:a0:0d:df:5e:13:9b:32:84:87:90: 65:da:92:04:f3:52:85:af:99:d5:20:3c:d6:66:72:f0:f5:fa: 16:49:dd:7d:0a:de:d7:a9:72:95:13:25:42:2d:a6:82:b8:af: 13:15:44:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCv8sp4mib5YYQi6sZiiF9ahQvXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVCMTlG MDhGMThEODAeFw0yNTA5MDUyMzQ1NTlaFw0yNTA5MDkwODUwNTlaMDMxMTAvBgNV BAMTKEVDQTkyNURDNzVBMDVEMjM3N0QxQjJERTBFMUNBQjFEMzNFQ0FFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqXnOynvAyOd8BFwRhyyv1nlB fu6dEtWgvmXJDyJ/dtEc/wwhM1mo/reqJwlfj6gU1tZmmnBGYHiN3X35q09u7kF9 D1xYw839rkYNkiwbJZpm1pHRsjXuEpp2BkCdg7iqkM/7DLhu3mM3oodlU0Sv2X62 /we6jfWEWCT2FaOB4Qa9RxIHKSO2KvfCHnj8oRdEzYr/upRavUQMohldrQxv7Nz6 9sUiWzwDcUU+mRpJxwf47usHEVBjdo+RlYZejisWSgLnEINVdS31ltCWCfXWhv+R vftBUkCpPJZVWBj+8Y+moiGH6fGT1ExIVdAoBM6xL+X42R0L2Iyw9c4dWV7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Kkl3HWgXSN30bLeDhyrHTPsro8wHwYDVR0j BBgwFoAUp5QWD4eBrfCmPO7OUidbGfCPGNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGVhNTA1Ni0wZmJjLTQwMzItODY4MC0zZmE1NDQxZTRkNTUvMC9BNzk0MTYwRjg3 ODFBREYwQTYzQ0VFQ0U1MjI3NUIxOUYwOEYxOEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVCMTlGMDhG MThEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVC MTlGMDhGMThEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOuggz7GasWMiwChPS2BRSCc/lTi7rpM6j2 DrlLXP3q0UxGhoSElj4OB/EDjfxpFfHzm3b5TU8qOhNRWQPgUiYJenHcHpy8TIu9 ptLWMg0qg+vtgQM6++wtSXNtqNO1zfLAp+c28/WmopLLM12wHZGtB21n/qFQJpsq 7UVfEG7jeOsL8dcxUIU5UQsy/S3BSEVZ5P9rWyYFXpDaVb3fVGIX8D5UF3gRiluo HF7WStKI26UcJ1NPIeygJOjDNtw00aMXObeZ9cXBUahpSYWFoA3fXhObMoSHkGXa kgTzUoWvmdUgPNZmcvD1+hZJ3X0K3tepcpUTJUItpoK4rxMVRN0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:18:52 2025 by rpki-client