$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: Zje1mkdoTKhOYyCGDWc6pOz8Un3yySzEuP8YqhoXnTo= Subject key identifier: D0:11:47:10:5D:27:FD:12:FD:FD:E5:EE:94:57:8D:55:52:DE:34:87 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 7267EC32A16AEE713FED7D1309C0E2078B14D56F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 01DE Signing time: Wed 03 Sep 2025 06:50:41 +0000 Manifest this update: Wed 03 Sep 2025 06:45:41 +0000 Manifest next update: Sat 06 Sep 2025 14:37:41 +0000 Files and hashes: 1: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 2: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) 3: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) 4: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: iHS7DnHNNsmBcvnOtxD5qq/yFRmodQCRzDuACGjAjBg=) 5: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:67:ec:32:a1:6a:ee:71:3f:ed:7d:13:09:c0:e2:07:8b:14:d5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Sep 3 06:45:41 2025 GMT Not After : Sep 6 14:37:41 2025 GMT Subject: CN=D01147105D27FD12FDFDE5EE94578D5552DE3487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:5a:30:f8:50:b6:db:21:1b:d9:96:78:47: 93:8f:57:22:d1:13:1c:82:8b:e7:81:cc:5b:dd:18: b5:8a:4b:ee:b4:bd:0f:33:20:87:8d:9b:6f:af:d2: 54:2c:82:8a:cf:10:0f:94:01:64:ac:e2:08:da:8f: 06:17:8b:ab:65:b7:fa:48:77:c4:2d:53:4d:38:6a: 19:0a:19:ea:ba:85:09:cc:6f:06:83:58:f5:ac:44: 3d:67:2e:81:1b:99:bd:c9:69:f7:bd:83:fb:30:3c: e7:d2:44:bd:0c:6e:b6:f6:de:f5:a3:d2:5f:12:08: cd:64:18:c0:6c:e9:a7:a2:87:31:cc:d4:a5:6a:4c: 12:5c:44:06:ff:dc:76:74:34:8a:1f:43:d8:3f:a1: 50:fc:60:a9:e5:44:c1:85:50:29:d8:23:e9:db:8d: 17:98:a1:01:55:14:34:fe:72:1f:74:22:d7:51:fb: d3:3b:e6:ef:56:46:62:1c:03:f5:55:31:1d:f8:5f: 64:bc:9a:6c:6f:1d:9a:df:b1:c5:7d:8d:62:56:2a: 07:ff:83:33:ec:1b:9a:c4:f5:ba:9f:5e:d2:72:fb: fe:0c:d5:a2:37:c6:b1:8f:85:01:f6:cb:a0:af:bb: b3:4e:df:cf:6e:03:53:b0:55:1c:02:60:87:40:52: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:11:47:10:5D:27:FD:12:FD:FD:E5:EE:94:57:8D:55:52:DE:34:87 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:1f:ca:67:14:f8:35:56:d5:52:a4:62:ec:98:e3:68:e0:d4: 43:cc:2b:b0:b6:ff:8a:d6:bc:24:4a:97:71:0a:e0:b8:9e:7d: fd:2a:38:24:28:9d:21:25:7f:49:2e:2e:39:d5:bb:35:03:57: c9:a7:63:93:5f:a5:69:21:be:e4:a9:35:35:64:3d:5e:5c:6f: d6:31:8d:ca:0a:2d:e9:be:62:10:a5:03:e1:ed:69:8b:6b:20: 7d:99:a8:cf:33:7c:ed:24:f4:8c:67:71:73:28:8f:c3:79:7e: f6:6b:16:18:1a:06:89:73:90:e3:db:d2:59:c8:5e:bd:d9:be: 88:6f:c6:11:be:24:86:04:45:91:ec:4e:8a:74:66:10:4a:c4: 7e:fd:46:30:52:94:7a:71:8e:97:72:2b:ad:24:32:ce:aa:d3: e0:d9:cb:b9:20:6c:a5:6f:df:66:10:bc:f7:24:8d:62:9f:02: c7:67:48:44:e2:ef:d7:a1:ff:ef:97:78:cc:56:27:ed:08:cc: 15:06:a4:f1:ef:c1:80:72:e8:bb:f7:e6:4a:f7:8f:ad:ba:9f: 5b:b7:61:4f:6a:6e:b2:f4:59:f2:81:cd:58:d7:b7:6f:21:a7: 83:db:ca:c0:06:9a:ed:17:77:67:bb:be:65:d6:db:e3:c7:b6: 97:d4:b3:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmfsMqFq7nE/7X0TCcDiB4sU1W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNTA5MDMwNjQ1NDFaFw0yNTA5MDYxNDM3NDFaMDMxMTAvBgNV BAMTKEQwMTE0NzEwNUQyN0ZEMTJGREZERTVFRTk0NTc4RDU1NTJERTM0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCVow+FC22yEb2ZZ4R5OPVyLR ExyCi+eBzFvdGLWKS+60vQ8zIIeNm2+v0lQsgorPEA+UAWSs4gjajwYXi6tlt/pI d8QtU004ahkKGeq6hQnMbwaDWPWsRD1nLoEbmb3Jafe9g/swPOfSRL0Mbrb23vWj 0l8SCM1kGMBs6aeihzHM1KVqTBJcRAb/3HZ0NIofQ9g/oVD8YKnlRMGFUCnYI+nb jReYoQFVFDT+ch90ItdR+9M75u9WRmIcA/VVMR34X2S8mmxvHZrfscV9jWJWKgf/ gzPsG5rE9bqfXtJy+/4M1aI3xrGPhQH2y6Cvu7NO389uA1OwVRwCYIdAUjhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BFHEF0n/RL9/eXulFeNVVLeNIcwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMfymcU+DVW1VKkYuyY42jg1EPMK7C2/4rW vCRKl3EK4Lieff0qOCQonSElf0kuLjnVuzUDV8mnY5NfpWkhvuSpNTVkPV5cb9Yx jcoKLem+YhClA+HtaYtrIH2ZqM8zfO0k9IxncXMoj8N5fvZrFhgaBolzkOPb0lnI Xr3ZvohvxhG+JIYERZHsTop0ZhBKxH79RjBSlHpxjpdyK60kMs6q0+DZy7kgbKVv 32YQvPckjWKfAsdnSETi79eh/++XeMxWJ+0IzBUGpPHvwYBy6Lv35kr3j626n1u3 YU9qbrL0WfKBzVjXt28hp4PbysAGmu0Xd2e7vmXW2+PHtpfUs0g= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:55 2025 by rpki-client