$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: gIXO1pJhxcttly7P881C5xhqU9rLh2vEYvnXHj2BNsM= Subject key identifier: 2B:03:19:38:57:6E:8E:87:A6:A2:2F:1E:A6:D2:78:DF:01:F0:04:81 Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 2AB1FC29B071D002504C5BDD6ACD6F7D42394003 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 01FB Signing time: Tue 22 Jul 2025 13:30:52 +0000 Manifest this update: Tue 22 Jul 2025 13:25:52 +0000 Manifest next update: Fri 25 Jul 2025 19:28:52 +0000 Files and hashes: 1: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: /98DMXkzU+QDHjIDKoOYU1wcZedvwYZgWNBABDhsRv0=) 2: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: xrvT6KEXPMSJAM8Fsg2QmP7x9BFhOlo+bUA8rQvsmN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b1:fc:29:b0:71:d0:02:50:4c:5b:dd:6a:cd:6f:7d:42:39:40:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Jul 22 13:25:52 2025 GMT Not After : Jul 25 19:28:52 2025 GMT Subject: CN=2B031938576E8E87A6A22F1EA6D278DF01F00481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:b8:3a:d5:22:b6:a8:12:90:6f:7c:71:3d: 5b:16:e7:20:44:da:a1:ff:52:1f:5b:b8:d0:35:c9: aa:79:7a:8d:dc:69:fc:f3:74:b0:6d:e5:d1:c5:6c: c6:e8:d0:dd:07:32:56:8d:ff:88:39:ed:c1:0f:b5: 88:0c:ce:8f:cc:ea:29:36:3a:06:ab:db:11:80:d6: 66:7f:cf:46:37:27:4c:a3:7d:98:f8:c0:c7:d3:fb: 2a:39:26:d2:e9:c7:f3:eb:54:c5:57:bf:9a:49:e6: 0c:ce:25:91:cf:30:6b:90:5c:ad:be:63:84:e4:d9: 32:31:9c:e6:d6:3a:ea:70:cd:d7:bf:cd:7f:21:9f: ee:8d:cc:6c:4f:35:b4:10:78:78:61:0f:5e:f1:18: 22:ba:c2:3e:7a:63:f1:d0:78:0d:6e:ef:92:21:2f: 10:ba:53:2f:c1:79:17:e0:1d:12:28:63:89:27:8f: b3:ed:bd:54:8c:8c:84:1f:52:8e:01:ee:54:9a:9c: 00:68:98:e1:d5:88:58:97:67:94:13:4e:43:98:eb: f6:c6:39:ae:c2:5a:74:f4:a7:b6:cf:ea:43:b5:b2: 55:5c:9d:6e:31:0f:4f:23:c0:5f:2f:bb:63:fd:9f: de:4a:ae:af:ab:d7:3a:cc:47:50:39:9a:ee:02:dd: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:03:19:38:57:6E:8E:87:A6:A2:2F:1E:A6:D2:78:DF:01:F0:04:81 X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:70:ab:d2:3f:c9:a8:e4:a0:b5:48:8e:d0:c3:a1:54:8d:52: 3c:f5:1b:8b:4b:79:3c:e2:55:b6:f3:8c:55:5d:16:89:a2:ad: ee:b8:0b:f0:24:46:c7:e0:36:9b:0a:35:80:7a:c3:6c:70:bb: e6:91:e8:4f:b9:24:78:1d:76:9f:2e:0b:75:50:20:83:c8:96: 8b:7d:b8:b1:65:39:30:1e:57:36:95:78:67:a1:bb:36:b4:4f: 33:7b:d2:3d:5a:be:ca:4f:7c:03:f8:5f:99:e5:06:a2:34:12: b4:c8:96:11:b6:94:fd:a7:29:6c:f4:12:d5:3f:9a:cb:d3:b8: 41:13:5e:17:98:d4:ce:97:b4:c1:a7:e8:44:79:d4:05:76:fe: 28:4e:91:f6:93:ac:e2:05:c3:97:93:46:a9:73:29:dc:78:56: c9:82:5f:07:d8:b8:87:48:01:36:78:06:2e:76:48:1e:9d:c5: c4:a7:8c:e4:80:59:4e:67:15:0a:04:10:1e:94:d5:f5:61:c4: ce:83:c5:c3:1d:f8:b3:6f:a9:ab:1c:31:ce:4c:81:8e:d5:f6: 1c:4e:56:fa:1d:91:ab:06:84:ac:fb:78:57:af:88:78:e2:a4: e7:03:19:f9:24:2b:1a:06:3e:ba:4e:2a:00:6a:2d:0e:47:fd: da:e6:41:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrH8KbBx0AJQTFvdas1vfUI5QAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNTA3MjIxMzI1NTJaFw0yNTA3MjUxOTI4NTJaMDMxMTAvBgNV BAMTKDJCMDMxOTM4NTc2RThFODdBNkEyMkYxRUE2RDI3OERGMDFGMDA0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uLg61SK2qBKQb3xxPVsW5yBE 2qH/Uh9buNA1yap5eo3cafzzdLBt5dHFbMbo0N0HMlaN/4g57cEPtYgMzo/M6ik2 Ogar2xGA1mZ/z0Y3J0yjfZj4wMfT+yo5JtLpx/PrVMVXv5pJ5gzOJZHPMGuQXK2+ Y4Tk2TIxnObWOupwzde/zX8hn+6NzGxPNbQQeHhhD17xGCK6wj56Y/HQeA1u75Ih LxC6Uy/BeRfgHRIoY4knj7PtvVSMjIQfUo4B7lSanABomOHViFiXZ5QTTkOY6/bG Oa7CWnT0p7bP6kO1slVcnW4xD08jwF8vu2P9n95Krq+r1zrMR1A5mu4C3YLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwMZOFdujoemoi8eptJ43wHwBIEwHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZwq9I/yajkoLVIjtDDoVSNUjz1G4tLeTzi VbbzjFVdFomire64C/AkRsfgNpsKNYB6w2xwu+aR6E+5JHgddp8uC3VQIIPIlot9 uLFlOTAeVzaVeGehuza0TzN70j1avspPfAP4X5nlBqI0ErTIlhG2lP2nKWz0EtU/ msvTuEETXheY1M6XtMGn6ER51AV2/ihOkfaTrOIFw5eTRqlzKdx4VsmCXwfYuIdI ATZ4Bi52SB6dxcSnjOSAWU5nFQoEEB6U1fVhxM6DxcMd+LNvqascMc5MgY7V9hxO VvodkasGhKz7eFeviHjipOcDGfkkKxoGPrpOKgBqLQ5H/drmQa8= -----END CERTIFICATE-----Generated at Thu Jul 24 04:12:22 2025 by rpki-client