$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: kTtqHC4GRKVpfyaFsd9YSkjBlJMjewWwXi391J5fBFg= Subject key identifier: C1:68:04:D1:4C:C6:A3:10:C6:48:12:A7:09:62:54:12:5A:1C:71:8F Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 7D20757DFD5B4D30FDBAB23801672486C2E434B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 0440 Signing time: Sat 19 Jul 2025 14:21:35 +0000 Manifest this update: Sat 19 Jul 2025 14:16:35 +0000 Manifest next update: Wed 23 Jul 2025 00:43:35 +0000 Files and hashes: 1: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) 2: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: VTaPcExqoImOvFRGbGmYXYT/9b80TyMyWNOAZ9x+6rM=) 3: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:20:75:7d:fd:5b:4d:30:fd:ba:b2:38:01:67:24:86:c2:e4:34:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Jul 19 14:16:35 2025 GMT Not After : Jul 23 00:43:35 2025 GMT Subject: CN=C16804D14CC6A310C64812A7096254125A1C718F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:50:1f:85:14:80:43:bb:cc:8c:50:39:50: 59:80:df:2d:10:48:aa:64:b3:51:04:62:b7:d1:19: fd:15:d8:95:ab:4c:4d:65:df:17:d5:e3:27:c6:21: f4:48:01:06:87:c9:b1:6b:9e:5d:35:bc:36:ea:5b: 29:73:42:4f:60:9e:d6:d6:dc:22:31:7c:f1:c8:ff: d1:5b:cc:94:53:2b:19:97:19:06:15:b8:1f:e6:c6: 36:d5:79:c3:3b:76:5b:23:5f:50:70:08:fd:d0:44: b7:b9:d6:af:cc:2f:7e:54:c4:68:c4:a0:34:7d:21: aa:d1:26:99:79:b4:e3:c0:0d:ed:d8:63:8b:f4:d9: 6b:69:cc:6d:6c:66:f8:27:f5:8d:e8:9b:c4:d0:60: 5f:5c:66:e1:7c:5e:02:df:c0:62:fa:3b:14:41:69: ed:8e:37:8f:42:b5:3b:44:40:9a:a7:b8:c2:61:2a: 76:cf:4a:48:62:92:79:6a:e8:dc:35:cd:8a:88:48: 0f:66:84:a9:d4:a5:fb:15:91:b8:86:d7:aa:de:fb: f9:46:e8:ab:eb:66:84:b7:64:46:21:21:82:c5:13: 21:67:85:0e:2a:70:5c:28:fd:cf:de:e5:2a:73:24: 51:7e:a0:a7:b4:2c:f7:7c:7c:17:85:7c:1b:d3:df: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:04:D1:4C:C6:A3:10:C6:48:12:A7:09:62:54:12:5A:1C:71:8F X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:5d:96:7f:cb:f4:95:6c:12:c5:06:e4:3a:6a:6a:9d:73:ab: 2e:e7:94:47:a6:e2:ee:47:58:41:fc:92:24:cb:1f:76:20:f5: d2:5d:65:45:c8:a5:df:f5:e2:42:6a:a9:fa:8b:75:e0:a9:65: 3c:16:21:8b:d4:9a:23:55:8b:b6:01:5e:3f:1e:49:86:6e:70: 06:7d:31:0b:e8:01:0c:88:33:00:31:fc:4a:34:41:e9:c2:26: 17:32:08:4c:44:d6:ec:73:ae:45:0b:8a:55:d4:58:4c:17:17: 15:cc:ba:f3:7b:45:94:7d:12:c2:a3:86:54:f3:bb:8f:a0:fb: 73:d2:26:1a:79:76:dc:1f:4f:24:86:d5:a7:d8:5b:0d:f2:80: 67:71:e2:09:fe:ee:6a:f7:43:35:1c:8d:02:b9:0c:a8:da:a1: 4d:91:fc:e5:23:c9:09:dc:43:d1:03:ad:df:e5:a2:ff:43:50: 4c:9d:0f:23:8f:1b:68:f7:e5:18:85:7f:d7:38:19:c7:06:6e: dc:a2:90:17:38:b2:df:7b:1e:e0:5c:ef:18:b6:17:dd:73:47: 36:76:6e:b3:db:b4:38:38:a2:f8:d3:4e:48:34:dd:89:a6:b0: 45:0f:0a:39:d4:9d:9a:93:f1:64:a2:ce:c7:4d:a0:0c:c2:2b: 5b:82:9c:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSB1ff1bTTD9urI4AWckhsLkNLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTA3MTkxNDE2MzVaFw0yNTA3MjMwMDQzMzVaMDMxMTAvBgNV BAMTKEMxNjgwNEQxNENDNkEzMTBDNjQ4MTJBNzA5NjI1NDEyNUExQzcxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnlAfhRSAQ7vMjFA5UFmA3y0Q SKpks1EEYrfRGf0V2JWrTE1l3xfV4yfGIfRIAQaHybFrnl01vDbqWylzQk9gntbW 3CIxfPHI/9FbzJRTKxmXGQYVuB/mxjbVecM7dlsjX1BwCP3QRLe51q/ML35UxGjE oDR9IarRJpl5tOPADe3YY4v02WtpzG1sZvgn9Y3om8TQYF9cZuF8XgLfwGL6OxRB ae2ON49CtTtEQJqnuMJhKnbPSkhiknlq6Nw1zYqISA9mhKnUpfsVkbiG16re+/lG 6KvrZoS3ZEYhIYLFEyFnhQ4qcFwo/c/e5SpzJFF+oKe0LPd8fBeFfBvT3+PXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWgE0UzGoxDGSBKnCWJUEloccY8wHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtdln/L9JVsEsUG5Dpqap1zqy7nlEem4u5H WEH8kiTLH3Yg9dJdZUXIpd/14kJqqfqLdeCpZTwWIYvUmiNVi7YBXj8eSYZucAZ9 MQvoAQyIMwAx/Eo0QenCJhcyCExE1uxzrkULilXUWEwXFxXMuvN7RZR9EsKjhlTz u4+g+3PSJhp5dtwfTySG1afYWw3ygGdx4gn+7mr3QzUcjQK5DKjaoU2R/OUjyQnc Q9EDrd/lov9DUEydDyOPG2j35RiFf9c4GccGbtyikBc4st97HuBc7xi2F91zRzZ2 brPbtDg4ovjTTkg03YmmsEUPCjnUnZqT8WSizsdNoAzCK1uCnBk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:54 2025 by rpki-client