$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft File: 528A271B82B6185862B06F250499140113F6FE20.mft (raw, json) Hash identifier: mwscVUqw0g2MTtIfPwzcQBCtxKv8daZxr+NPbO3OHtk= Subject key identifier: 79:0A:37:51:22:50:DD:E8:3D:69:F1:B5:B9:99:F8:97:C8:DE:6F:16 Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20 Certificate serial: 10527DB5F98013A0F8C73CEFC446537AAF6157C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft Manifest number: 01FE Signing time: Sat 19 Jul 2025 07:00:58 +0000 Manifest this update: Sat 19 Jul 2025 06:55:58 +0000 Manifest next update: Tue 22 Jul 2025 18:59:58 +0000 Files and hashes: 1: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: MQjXu/RXiGgqqkbg+Hne3YnIirRX6PLKyNkCVjZicW0=) 2: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: uC/qnArDdSiiufGjxuhvh3127pXhWNHzqVlIjcIb2ME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:52:7d:b5:f9:80:13:a0:f8:c7:3c:ef:c4:46:53:7a:af:61:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A271B82B6185862B06F250499140113F6FE20 Validity Not Before: Jul 19 06:55:58 2025 GMT Not After : Jul 22 18:59:58 2025 GMT Subject: CN=790A37512250DDE83D69F1B5B999F897C8DE6F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:be:b3:55:f3:ff:1e:c1:51:8c:a7:f1:21: 0b:cc:22:93:23:e8:0f:70:27:55:5c:a1:36:ae:13: 97:8f:7d:4b:b0:f2:fe:1f:0f:82:04:d9:72:fc:bc: 2d:c2:64:01:52:8d:ec:c9:2e:42:38:d3:f3:af:11: cf:e0:87:f1:17:6c:3a:67:1b:30:3c:6a:14:90:50: 4e:08:a1:d0:00:d4:56:0f:49:8b:7d:02:6f:29:89: 25:42:3a:27:41:d1:25:c4:45:d2:6b:a7:ec:80:88: c9:a4:f7:71:6d:65:3d:b3:72:a4:f4:2d:df:a0:76: 1d:a8:4d:33:15:3f:df:24:e6:e9:0b:9f:04:f5:bd: 6a:f8:d9:06:64:16:18:54:e7:0d:ad:fb:12:4e:75: 68:57:4b:a1:4b:0e:c1:2a:8f:8a:24:10:44:d3:37: b0:df:24:44:c2:ac:d5:d6:70:cb:75:97:77:9d:e8: 67:29:cd:c6:1b:3e:f0:12:1b:e0:e9:7f:29:93:0e: 08:ae:eb:ad:2c:03:25:d2:43:21:9d:b5:cf:7a:05: f0:ff:f4:71:23:71:a2:ae:93:c7:90:7b:44:f6:21: fd:15:20:dc:58:b9:24:ea:b5:cf:6d:bc:88:7f:f5: 0d:13:e8:c5:23:a9:86:3e:cf:61:22:74:a1:e0:7e: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0A:37:51:22:50:DD:E8:3D:69:F1:B5:B9:99:F8:97:C8:DE:6F:16 X509v3 Authority Key Identifier: keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5b:b5:28:ab:2d:73:fc:bb:ad:e9:87:6b:b8:78:a9:19:75: 01:f4:c9:d3:f5:1d:b7:c3:1a:ae:53:f9:33:e8:2d:0e:ef:78: 49:1e:6a:4e:97:1c:58:b3:35:35:46:c8:26:5d:75:8e:7b:44: 01:da:fd:6d:e7:d7:91:82:e7:ec:e4:bf:7b:72:2d:2a:09:13: 87:bc:d7:db:1a:6b:d5:89:74:25:bb:23:26:3d:e4:fc:cf:1a: e9:2f:58:f1:22:f0:97:c2:bc:79:60:2d:3b:24:18:80:dc:28: ea:57:f0:86:0a:ad:63:45:e5:5e:9b:18:e5:1c:ed:bd:18:83: cd:3d:7c:38:15:3a:47:0a:07:7f:96:da:be:8d:a6:44:1b:7c: cb:61:a5:87:b0:1f:72:66:66:cc:27:67:cd:b1:a8:b1:3a:9e: 97:2c:fd:51:68:3b:f5:6b:07:0e:92:60:a6:a0:8e:bc:c0:94: 92:5b:03:43:3e:4e:67:db:8d:e2:14:3b:99:6a:08:10:8e:47: 2c:18:f9:4e:5c:0e:44:d5:a0:30:be:60:2b:8b:9d:1e:af:1c: e9:fe:ba:78:33:d4:84:86:1e:13:f9:4d:c1:5c:1e:a9:89:7e: 2f:2d:06:66:02:58:bb:37:9e:d5:87:55:b6:e5:40:24:ac:03: 92:de:3c:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFJ9tfmAE6D4xzzvxEZTeq9hV8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDEx M0Y2RkUyMDAeFw0yNTA3MTkwNjU1NThaFw0yNTA3MjIxODU5NThaMDMxMTAvBgNV BAMTKDc5MEEzNzUxMjI1MERERTgzRDY5RjFCNUI5OTlGODk3QzhERTZGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/L6zVfP/HsFRjKfxIQvMIpMj 6A9wJ1VcoTauE5ePfUuw8v4fD4IE2XL8vC3CZAFSjezJLkI40/OvEc/gh/EXbDpn GzA8ahSQUE4IodAA1FYPSYt9Am8piSVCOidB0SXERdJrp+yAiMmk93FtZT2zcqT0 Ld+gdh2oTTMVP98k5ukLnwT1vWr42QZkFhhU5w2t+xJOdWhXS6FLDsEqj4okEETT N7DfJETCrNXWcMt1l3ed6GcpzcYbPvASG+DpfymTDgiu660sAyXSQyGdtc96BfD/ 9HEjcaKuk8eQe0T2If0VINxYuSTqtc9tvIh/9Q0T6MUjqYY+z2EidKHgfqUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQo3USJQ3eg9afG1uZn4l8jebxYwHwYDVR0j BBgwFoAUUoonG4K2GFhisG8lBJkUARP2/iAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMC81MjhBMjcxQjgy QjYxODU4NjJCMDZGMjUwNDk5MTQwMTEzRjZGRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDExM0Y2 RkUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFkM2NjOGEtOTczOC00NTFiLWE3 OTgtN2I3NmIwOTQwYjRiLzAvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0 MDExM0Y2RkUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlbtSirLXP8u63ph2u4eKkZdQH0ydP1HbfD Gq5T+TPoLQ7veEkeak6XHFizNTVGyCZddY57RAHa/W3n15GC5+zkv3tyLSoJE4e8 19saa9WJdCW7IyY95PzPGukvWPEi8JfCvHlgLTskGIDcKOpX8IYKrWNF5V6bGOUc 7b0Yg809fDgVOkcKB3+W2r6NpkQbfMthpYewH3JmZswnZ82xqLE6npcs/VFoO/Vr Bw6SYKagjrzAlJJbA0M+TmfbjeIUO5lqCBCORywY+U5cDkTVoDC+YCuLnR6vHOn+ ungz1ISGHhP5TcFcHqmJfi8tBmYCWLs3ntWHVbblQCSsA5LePJw= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:35 2025 by rpki-client