$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: FtRkgQLoP3zUuZAUCsK28zpmej09jnu2aDsTjJkdyWs= Subject key identifier: C8:4C:D9:19:6F:05:5E:04:FB:76:C9:FD:D8:55:75:65:DE:6E:51:FC Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 2F8368C7C8B382ECE29B5E545A06FA57C48753E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 17 Signing time: Thu 04 Sep 2025 15:50:00 +0000 Manifest this update: Thu 04 Sep 2025 15:45:00 +0000 Manifest next update: Sun 07 Sep 2025 19:48:00 +0000 Files and hashes: 1: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 2: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: nW0GX0FjxqBd+pxDnJ+NJuETu+XFlUy4lYX5BwxZsgo=) 3: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) 4: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) 5: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 19:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:83:68:c7:c8:b3:82:ec:e2:9b:5e:54:5a:06:fa:57:c4:87:53:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Sep 4 15:45:00 2025 GMT Not After : Sep 7 19:48:00 2025 GMT Subject: CN=C84CD9196F055E04FB76C9FDD8557565DE6E51FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:63:24:8b:d0:4c:5e:99:62:02:ac:15:10: df:e8:be:7e:bb:49:89:5e:87:a7:22:23:49:17:a5: 0d:48:0f:be:d9:2d:b9:c4:83:c9:3e:63:47:c0:39: aa:79:c9:b1:86:ed:f7:d4:ba:8b:38:9c:f1:c9:b5: 5c:0c:21:5a:9b:25:f9:89:b7:90:85:ff:b6:72:c8: 8a:ca:b1:46:f4:67:27:94:01:2d:27:26:68:26:a9: 8e:19:de:85:e9:a3:ac:4f:c8:53:b0:b9:63:6e:47: 83:21:88:a5:29:7f:e1:c5:20:52:d1:9e:af:df:14: f6:41:03:c4:42:c3:cb:d2:6e:69:4c:6e:1e:2e:d0: ab:7a:8f:3d:82:3a:0a:4c:8a:0d:2b:10:45:8d:42: 08:ba:12:11:2c:ac:b3:8c:90:59:aa:64:b0:bb:ec: 13:77:03:17:b5:9e:40:b1:0e:32:9c:82:8b:c7:79: a9:63:af:ca:ab:c4:73:fe:f2:ca:dc:63:46:06:c8: 11:d4:e5:1b:a9:a5:20:02:16:fe:4d:c8:74:e7:6f: f4:9a:c7:b0:8f:f1:c0:df:ae:29:cf:03:56:90:0e: 7f:d6:86:62:7d:f4:11:30:28:de:7b:2f:ca:10:41: 1d:6f:88:5c:86:a7:5e:c8:ac:09:29:bb:9d:30:f9: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4C:D9:19:6F:05:5E:04:FB:76:C9:FD:D8:55:75:65:DE:6E:51:FC X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bd:bf:f9:bd:eb:a8:56:32:21:c3:93:22:fa:cf:e8:50:91: a0:f0:0d:57:96:fe:9a:30:da:4f:ca:f8:3b:ca:7f:92:29:95: dc:68:c4:32:ef:ff:9c:a3:e7:a4:51:13:8b:3e:0d:0a:b5:fc: 93:57:cc:ca:02:51:f7:24:0c:3b:4b:5a:97:88:a2:52:87:8d: 37:c5:ab:56:df:34:a4:17:ac:32:48:5c:5d:95:6d:cb:dd:0a: 00:f0:a3:0e:84:1b:31:e6:71:59:a4:71:93:db:d5:92:19:aa: 6e:a3:04:eb:de:b5:e1:6e:9a:17:8e:7a:fa:53:6e:0c:3f:b7: 8d:6b:eb:2d:04:db:94:cf:07:3a:05:ba:2f:60:70:52:d5:c5: 99:ca:61:27:76:2e:92:be:2f:0e:e2:26:fa:0c:56:1f:7b:d0: 4c:b8:fa:25:ec:95:3d:69:12:8c:6a:57:1c:e8:f5:31:40:80: 44:89:b8:48:f5:ec:25:ba:95:00:17:6c:24:12:db:14:92:1e: d9:09:24:6d:23:19:f2:cc:13:6a:5a:78:26:6e:75:60:85:b6: f5:52:3f:6d:b3:0e:ae:0a:63:6d:f3:e4:34:82:22:7f:67:7f: b7:a7:e3:77:b8:2e:cb:a2:ef:f0:20:49:50:b3:16:a0:b8:17: 00:3e:78:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4Nox8izguzim15UWgb6V8SHU+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNTA5MDQxNTQ1MDBaFw0yNTA5MDcxOTQ4MDBaMDMxMTAvBgNV BAMTKEM4NENEOTE5NkYwNTVFMDRGQjc2QzlGREQ4NTU3NTY1REU2RTUxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcWMki9BMXpliAqwVEN/ovn67 SYleh6ciI0kXpQ1ID77ZLbnEg8k+Y0fAOap5ybGG7ffUuos4nPHJtVwMIVqbJfmJ t5CF/7ZyyIrKsUb0ZyeUAS0nJmgmqY4Z3oXpo6xPyFOwuWNuR4MhiKUpf+HFIFLR nq/fFPZBA8RCw8vSbmlMbh4u0Kt6jz2COgpMig0rEEWNQgi6EhEsrLOMkFmqZLC7 7BN3Axe1nkCxDjKcgovHealjr8qrxHP+8srcY0YGyBHU5RuppSACFv5NyHTnb/Sa x7CP8cDfrinPA1aQDn/WhmJ99BEwKN57L8oQQR1viFyGp17IrAkpu50w+Z25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyEzZGW8FXgT7dsn92FV1Zd5uUfwwHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+9v/m966hWMiHDkyL6z+hQkaDwDVeW/pow 2k/K+DvKf5IpldxoxDLv/5yj56RRE4s+DQq1/JNXzMoCUfckDDtLWpeIolKHjTfF q1bfNKQXrDJIXF2VbcvdCgDwow6EGzHmcVmkcZPb1ZIZqm6jBOveteFumheOevpT bgw/t41r6y0E25TPBzoFui9gcFLVxZnKYSd2LpK+Lw7iJvoMVh970Ey4+iXslT1p EoxqVxzo9TFAgESJuEj17CW6lQAXbCQS2xSSHtkJJG0jGfLME2paeCZudWCFtvVS P22zDq4KY23z5DSCIn9nf7en43e4Lsui7/AgSVCzFqC4FwA+eBM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:33 2025 by rpki-client