$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: WIYhnJXo8XbFD1QxOfUzF00owlQItqVdJ7X1Qt2B+bI= Subject key identifier: 7A:69:02:B7:B8:D0:CB:64:31:83:5B:2E:6E:30:37:8A:ED:54:D4:C3 Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 4597C33893F3050B74812587236F09C024B08424 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 02E0 Signing time: Fri 05 Sep 2025 05:51:05 +0000 Manifest this update: Fri 05 Sep 2025 05:46:05 +0000 Manifest next update: Mon 08 Sep 2025 16:00:05 +0000 Files and hashes: 1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=) 2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: iJLSAC0OlNmY/sLMHujiRMzul1vtiOzsu8eZ1jgiGdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:97:c3:38:93:f3:05:0b:74:81:25:87:23:6f:09:c0:24:b0:84:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Sep 5 05:46:05 2025 GMT Not After : Sep 8 16:00:05 2025 GMT Subject: CN=7A6902B7B8D0CB6431835B2E6E30378AED54D4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:81:19:ff:5e:f1:14:8b:98:94:96:4d:59: fa:ff:a7:8e:7c:7d:5e:97:af:1f:9f:2f:89:e5:8e: 4c:6d:fa:82:0f:f4:a3:1e:69:a5:95:2e:14:ce:27: 8d:8a:50:74:f1:60:61:14:51:a6:0f:38:db:e5:08: 8a:2c:06:7c:0c:d5:b6:d3:9f:45:d1:dc:be:52:40: 0d:60:53:ea:d6:a2:97:c4:95:a9:65:68:fb:ec:c3: 09:4a:76:a8:00:21:01:38:e8:f1:f8:e3:cf:db:4d: f9:0d:a4:4e:ac:01:06:de:e2:0b:35:9f:31:74:e8: c2:8e:0c:2a:40:8f:41:9f:ce:c1:b3:f1:18:7b:5e: 97:28:00:e2:3e:ad:75:5b:ca:b7:d3:4a:15:26:0c: 96:4e:39:c3:39:39:91:ac:16:53:e7:44:29:bc:e5: d3:c8:68:82:2d:c4:11:73:77:4c:3e:66:d0:8f:6c: 3c:b0:fb:47:dc:d0:ee:1a:86:9b:e4:61:34:c9:b5: 82:13:1d:97:c6:00:ce:78:66:bf:5f:78:49:88:c4: fd:19:e9:6d:9c:7d:55:af:fe:71:24:dc:8a:25:b7: 10:4c:af:d0:6b:61:af:4a:7f:99:f6:97:34:12:96: d1:e6:d5:2f:e3:c5:85:65:09:f9:0d:dc:32:df:69: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:69:02:B7:B8:D0:CB:64:31:83:5B:2E:6E:30:37:8A:ED:54:D4:C3 X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:1b:3a:d9:9a:b8:2e:b7:3c:ad:ef:84:0e:4f:65:27:2a:25: 19:6f:54:b6:07:f0:4a:ee:ff:f8:d8:ef:45:86:95:c0:d0:a7: a7:00:63:c5:24:b7:ce:58:04:43:40:b7:eb:45:75:65:1b:6a: 52:5e:95:45:46:f8:71:56:c1:23:2b:7c:f3:89:f0:02:2c:a7: 63:28:7a:2f:f2:7c:ca:09:bf:0b:3f:d5:b1:6a:ab:d4:e0:d7: c2:2b:89:fe:89:c9:69:6a:4f:7b:79:36:f3:b8:35:24:38:6c: 9e:d9:48:4e:e2:30:39:4f:58:9c:8f:15:9f:2e:81:55:b7:21: ba:6d:3b:79:54:e9:a2:6c:eb:57:2e:4c:cc:67:95:06:da:2a: d5:ef:4a:38:d1:76:b7:43:bb:9f:80:24:9d:da:be:d6:3a:d6: 26:52:3a:53:3d:e7:b9:66:d6:74:7c:53:a0:12:c9:05:e9:46: 8c:d0:a1:82:70:b0:02:5d:a6:51:44:9f:80:e6:58:0c:97:30: 0c:be:fa:7c:f5:90:5a:fb:6a:a8:3a:cd:45:44:14:b3:b4:fa: 11:e7:b8:ae:dd:b1:f8:7d:65:43:47:e6:da:ce:a4:96:da:3c: 79:50:2e:99:f8:2a:c1:11:4e:34:76:66:58:0e:51:6b:83:08: b7:8a:f2:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZfDOJPzBQt0gSWHI28JwCSwhCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTA5MDUwNTQ2MDVaFw0yNTA5MDgxNjAwMDVaMDMxMTAvBgNV BAMTKDdBNjkwMkI3QjhEMENCNjQzMTgzNUIyRTZFMzAzNzhBRUQ1NEQ0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBYEZ/17xFIuYlJZNWfr/p458 fV6Xrx+fL4nljkxt+oIP9KMeaaWVLhTOJ42KUHTxYGEUUaYPONvlCIosBnwM1bbT n0XR3L5SQA1gU+rWopfElallaPvswwlKdqgAIQE46PH448/bTfkNpE6sAQbe4gs1 nzF06MKODCpAj0GfzsGz8Rh7XpcoAOI+rXVbyrfTShUmDJZOOcM5OZGsFlPnRCm8 5dPIaIItxBFzd0w+ZtCPbDyw+0fc0O4ahpvkYTTJtYITHZfGAM54Zr9feEmIxP0Z 6W2cfVWv/nEk3IoltxBMr9BrYa9Kf5n2lzQSltHm1S/jxYVlCfkN3DLfaS3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUemkCt7jQy2Qxg1subjA3iu1U1MMwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYbOtmauC63PK3vhA5PZScqJRlvVLYH8Eru //jY70WGlcDQp6cAY8Ukt85YBENAt+tFdWUbalJelUVG+HFWwSMrfPOJ8AIsp2Mo ei/yfMoJvws/1bFqq9Tg18Irif6JyWlqT3t5NvO4NSQ4bJ7ZSE7iMDlPWJyPFZ8u gVW3IbptO3lU6aJs61cuTMxnlQbaKtXvSjjRdrdDu5+AJJ3avtY61iZSOlM957lm 1nR8U6ASyQXpRozQoYJwsAJdplFEn4DmWAyXMAy++nz1kFr7aqg6zUVEFLO0+hHn uK7dsfh9ZUNH5trOpJbaPHlQLpn4KsERTjR2ZlgOUWuDCLeK8qM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:52 2025 by rpki-client