$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: LaA5r/x90n6H7tXSY5Ug4SWF+bd0NnJwSZT9BOtMZC4= Subject key identifier: DB:F0:7B:8B:1B:59:37:32:3F:B0:28:99:BA:C2:FF:16:25:CC:24:E0 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 2C01F85A9D778350705050798113374EAC8B9436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 01C3 Signing time: Sat 06 Sep 2025 17:21:07 +0000 Manifest this update: Sat 06 Sep 2025 17:16:07 +0000 Manifest next update: Tue 09 Sep 2025 17:38:07 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: 5g8vl4cGEIXoFbWNoOx1HiWzbX5p43Jn5fEQF7zlJDA=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: PrW1B+JOk51E9zyJqPaIkQOhvDojGNHgAHNsvo2TOSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:01:f8:5a:9d:77:83:50:70:50:50:79:81:13:37:4e:ac:8b:94:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Sep 6 17:16:07 2025 GMT Not After : Sep 9 17:38:07 2025 GMT Subject: CN=DBF07B8B1B5937323FB02899BAC2FF1625CC24E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:f3:87:b5:66:82:c8:e1:23:f2:cb:bf:6c: 80:ff:d5:5b:e3:30:40:fa:78:2c:0f:30:e4:71:4a: 89:6f:4b:45:ad:ff:24:66:bc:90:a4:c3:8d:b2:56: 68:ba:fd:fe:ef:9e:b7:82:39:6e:56:36:ec:9c:28: 16:20:c5:b5:f4:81:8d:cd:02:19:8f:60:e7:99:d7: a9:48:11:d5:4d:0c:b9:c7:31:e4:cb:29:79:bb:e5: 69:60:2e:4b:cb:13:c1:71:8b:9f:44:81:bf:ee:a8: ff:86:18:9f:28:e6:a5:7f:41:88:ce:10:14:31:05: c2:f5:f9:0a:3d:69:4b:91:6a:a5:06:14:b2:63:ab: 78:24:3b:c4:a1:05:e0:6e:a1:d9:2c:4f:42:63:f5: 19:b1:19:04:92:85:9a:a2:2e:fb:94:80:e3:28:08: 4d:fb:e7:d4:8b:a7:ec:03:94:cf:10:1a:11:39:c5: 4b:70:bb:3e:bb:e3:8c:3b:93:f9:d5:2a:bb:6b:3d: d9:b0:44:1e:f7:b1:15:02:30:86:b5:50:de:ed:d1: 12:7a:3a:0d:00:97:8c:98:96:0b:74:db:53:72:23: 62:7a:ae:cd:14:fc:a7:29:11:e9:c7:57:4d:ec:e0: e6:2e:da:e9:98:59:ee:c1:4d:02:8e:3d:91:9d:60: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:7B:8B:1B:59:37:32:3F:B0:28:99:BA:C2:FF:16:25:CC:24:E0 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5b:1a:d8:44:93:4b:cd:74:d3:eb:be:01:25:80:f5:aa:06: a5:5c:b6:b5:ec:df:d1:48:11:dc:01:62:bd:e4:e1:96:4d:c6: 14:e4:05:dc:95:d5:90:a8:21:35:2e:6c:8a:17:56:23:1a:b3: ce:97:3a:a5:4a:f7:fd:b7:d9:06:7f:c5:9e:ae:30:d8:7d:67: 98:d8:90:89:6d:7e:c9:6f:97:49:33:e9:58:e9:ee:d2:ee:7d: 8c:bd:c5:10:d6:2a:6a:6e:09:28:d6:ea:02:ec:03:bb:68:c1: 30:1b:ca:16:be:59:54:e3:6a:a0:50:ab:66:1a:f3:bb:33:c1: 9c:ce:f4:e8:56:35:e5:f4:16:4f:f4:d2:be:ba:37:e0:4b:36: 38:87:fa:0b:a6:ed:8d:68:2d:7f:6b:a6:dd:f9:bb:b8:0c:a9: 4b:0d:3c:56:be:04:24:55:8d:36:0c:fd:91:05:a4:9d:cb:ff: 6f:76:68:0d:91:d3:f4:c2:07:8f:46:8b:0f:3b:ec:10:8a:72: 48:73:f0:c6:66:1d:69:7b:80:73:70:d4:2e:b0:0a:21:64:a5: f4:52:2c:6d:41:be:96:2d:1d:b3:01:d2:e1:76:6a:14:e6:6f: fb:8a:f3:9a:5e:86:26:a7:aa:44:4f:4b:5c:9a:26:49:12:95: 35:bc:82:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAH4Wp13g1BwUFB5gRM3TqyLlDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNTA5MDYxNzE2MDdaFw0yNTA5MDkxNzM4MDdaMDMxMTAvBgNV BAMTKERCRjA3QjhCMUI1OTM3MzIzRkIwMjg5OUJBQzJGRjE2MjVDQzI0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7C/OHtWaCyOEj8su/bID/1Vvj MED6eCwPMORxSolvS0Wt/yRmvJCkw42yVmi6/f7vnreCOW5WNuycKBYgxbX0gY3N AhmPYOeZ16lIEdVNDLnHMeTLKXm75WlgLkvLE8Fxi59Egb/uqP+GGJ8o5qV/QYjO EBQxBcL1+Qo9aUuRaqUGFLJjq3gkO8ShBeBuodksT0Jj9RmxGQSShZqiLvuUgOMo CE3759SLp+wDlM8QGhE5xUtwuz6744w7k/nVKrtrPdmwRB73sRUCMIa1UN7t0RJ6 Og0Al4yYlgt021NyI2J6rs0U/KcpEenHV03s4OYu2umYWe7BTQKOPZGdYB03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/B7ixtZNzI/sCiZusL/FiXMJOAwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdbGthEk0vNdNPrvgElgPWqBqVctrXs39FI EdwBYr3k4ZZNxhTkBdyV1ZCoITUubIoXViMas86XOqVK9/232QZ/xZ6uMNh9Z5jY kIltfslvl0kz6Vjp7tLufYy9xRDWKmpuCSjW6gLsA7towTAbyha+WVTjaqBQq2Ya 87szwZzO9OhWNeX0Fk/00r66N+BLNjiH+gum7Y1oLX9rpt35u7gMqUsNPFa+BCRV jTYM/ZEFpJ3L/292aA2R0/TCB49Giw877BCKckhz8MZmHWl7gHNw1C6wCiFkpfRS LG1BvpYtHbMB0uF2ahTmb/uK85pehianqkRPS1yaJkkSlTW8gkU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:46 2025 by rpki-client