$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft File: 1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json) Hash identifier: /Rj03fqf5EBqwp9zOnRP7yl0vXED3VpjnlyVYsoz9sY= Subject key identifier: AA:42:8F:2F:6D:91:83:AA:F8:DB:73:E7:52:FD:CF:35:14:24:04:FA Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D Certificate issuer: /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Certificate serial: 022905EAD30A5D839E6ED6CFF720D7E11A7EA56F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft Manifest number: 0505 Signing time: Fri 05 Sep 2025 18:32:03 +0000 Manifest this update: Fri 05 Sep 2025 18:27:03 +0000 Manifest next update: Tue 09 Sep 2025 03:00:03 +0000 Files and hashes: 1: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: c+tdFw4qSOJfNnlR9BNhzRqwfyEMhsr9JhWMf+1l61I=) 2: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: q1jYn7Xb50WmP2uCHt9tAsO6LxmkwzEXjSuX+S7nEvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:29:05:ea:d3:0a:5d:83:9e:6e:d6:cf:f7:20:d7:e1:1a:7e:a5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Validity Not Before: Sep 5 18:27:03 2025 GMT Not After : Sep 9 03:00:03 2025 GMT Subject: CN=AA428F2F6D9183AAF8DB73E752FDCF35142404FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:fb:af:ef:0c:2d:c2:9f:f8:6b:f0:5a:50: 4a:60:07:0a:7a:6d:4b:a9:bc:bb:cc:88:1e:e9:5b: 41:34:27:20:93:80:5a:64:95:72:4c:b6:95:6c:e6: d1:36:41:7a:df:df:00:6f:f8:5c:a3:74:d2:b8:5c: 2d:88:20:2a:83:56:0e:b4:ed:54:16:f1:93:53:5a: 70:2d:94:da:00:ae:d2:c6:11:d3:2e:2a:bd:13:f7: 04:28:6c:18:51:c5:67:45:5e:8d:5d:3f:70:f2:40: 05:4d:f3:78:62:6b:d3:c7:d0:ec:3c:77:57:eb:a9: 8f:33:4d:92:da:e9:a2:ed:39:6a:31:20:0f:dc:6e: a6:92:b4:84:f5:d4:b1:07:b8:79:6c:5e:01:86:26: 83:e0:af:6d:4d:3c:f1:49:75:97:bb:25:39:c7:91: 99:91:ad:df:17:9e:06:c7:db:99:1b:79:c9:e6:b9: 66:ac:f7:b6:2c:8f:e1:5a:cf:48:98:fe:4c:6c:d7: 80:c1:b8:6d:04:88:08:99:34:72:d4:12:24:b0:98: 63:bd:58:0c:53:63:16:f0:61:d6:c8:f2:77:49:b2: d9:cb:54:96:d3:fb:ed:dc:a9:05:89:b9:0a:46:d3: 2b:c7:8c:32:df:bc:16:2d:e1:4e:67:fc:a6:d1:37: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:42:8F:2F:6D:91:83:AA:F8:DB:73:E7:52:FD:CF:35:14:24:04:FA X509v3 Authority Key Identifier: keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ad:71:54:b0:29:80:06:31:b6:a5:d0:75:5a:64:8a:c0:5b: 26:14:ad:4d:86:67:17:57:be:a8:dd:18:04:00:dc:8e:0f:ee: 7b:b1:d9:94:ba:4d:71:bf:e9:1f:fe:7b:db:86:f9:8c:d2:af: ff:b6:26:51:c9:ff:33:23:11:3e:e1:a4:a5:6c:df:b5:a3:f9: 8e:97:7e:13:3f:b1:45:a9:5c:35:e6:1b:50:e9:e2:b2:ac:9e: fc:24:8e:c3:4e:bb:67:a1:df:95:bb:50:41:69:f5:ad:2b:b2: bc:4a:c8:9f:77:5b:37:a0:78:90:17:52:5e:0a:fa:98:a8:db: 5b:ab:23:09:61:47:01:d2:87:4c:e4:43:3a:b6:a6:08:44:5a: c8:84:c6:eb:59:0e:8c:49:b2:d4:6f:b3:aa:41:e9:50:d1:5e: 5e:c1:fc:0f:bc:31:67:76:25:5b:82:5e:50:92:93:e4:40:f0: 82:8d:42:9b:58:c6:91:d7:64:2b:39:9b:33:48:21:4b:c5:7a: 7f:e4:6d:f3:33:38:23:81:09:55:87:36:40:01:ab:3f:9f:0f: 48:81:5f:d9:39:4b:47:33:01:b9:4b:00:b8:2e:4c:0d:ba:9b: 4e:be:3a:95:f9:e3:c9:c6:a6:07:68:b4:0a:be:f2:8d:50:b2: dd:76:fa:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAikF6tMKXYOebtbP9yDX4Rp+pW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1 MDQyNDQ2RDAeFw0yNTA5MDUxODI3MDNaFw0yNTA5MDkwMzAwMDNaMDMxMTAvBgNV BAMTKEFBNDI4RjJGNkQ5MTgzQUFGOERCNzNFNzUyRkRDRjM1MTQyNDA0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdPuv7wwtwp/4a/BaUEpgBwp6 bUupvLvMiB7pW0E0JyCTgFpklXJMtpVs5tE2QXrf3wBv+FyjdNK4XC2IICqDVg60 7VQW8ZNTWnAtlNoArtLGEdMuKr0T9wQobBhRxWdFXo1dP3DyQAVN83hia9PH0Ow8 d1frqY8zTZLa6aLtOWoxIA/cbqaStIT11LEHuHlsXgGGJoPgr21NPPFJdZe7JTnH kZmRrd8XngbH25kbecnmuWas97Ysj+Faz0iY/kxs14DBuG0EiAiZNHLUEiSwmGO9 WAxTYxbwYdbI8ndJstnLVJbT++3cqQWJuQpG0yvHjDLfvBYt4U5n/KbRNwhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqkKPL22Rg6r423PnUv3PNRQkBPowHwYDVR0j BBgwFoAUGg/EaVRm8ANP3HvTXZe/k1BCRG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODdhZWU3Zi1kNjViLTQ2ZWMtYTc4MS03Y2JlZjVhYWViODAvMC8xQTBGQzQ2OTU0 NjZGMDAzNEZEQzdCRDM1RDk3QkY5MzUwNDI0NDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1MDQy NDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3YWVlN2YtZDY1Yi00NmVjLWE3 ODEtN2NiZWY1YWFlYjgwLzAvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JG OTM1MDQyNDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKtcVSwKYAGMbal0HVaZIrAWyYUrU2GZxdX vqjdGAQA3I4P7nux2ZS6TXG/6R/+e9uG+YzSr/+2JlHJ/zMjET7hpKVs37Wj+Y6X fhM/sUWpXDXmG1Dp4rKsnvwkjsNOu2eh35W7UEFp9a0rsrxKyJ93WzegeJAXUl4K +pio21urIwlhRwHSh0zkQzq2pghEWsiExutZDoxJstRvs6pB6VDRXl7B/A+8MWd2 JVuCXlCSk+RA8IKNQptYxpHXZCs5mzNIIUvFen/kbfMzOCOBCVWHNkABqz+fD0iB X9k5S0czAblLALguTA26m06+OpX548nGpgdotAq+8o1Qst12+oU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:24 2025 by rpki-client