$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: xHs5DHmveb2tbAINkHXWeNPh6JEH9SFIPTXMSE4zhxY= Subject key identifier: A2:E4:49:A3:FD:74:73:4D:77:DF:64:ED:50:06:48:0D:BD:43:59:11 Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 70C4100F5202D7DD58544544A0D5F4C87946B335 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 01FA Signing time: Sun 20 Jul 2025 03:30:52 +0000 Manifest this update: Sun 20 Jul 2025 03:25:52 +0000 Manifest next update: Wed 23 Jul 2025 13:26:52 +0000 Files and hashes: 1: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: /m7P7YpgqRGNkSDknVWizMCdZWLbjaZ4FRn39sifnLM=) 2: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: /98DMXkzU+QDHjIDKoOYU1wcZedvwYZgWNBABDhsRv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c4:10:0f:52:02:d7:dd:58:54:45:44:a0:d5:f4:c8:79:46:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Jul 20 03:25:52 2025 GMT Not After : Jul 23 13:26:52 2025 GMT Subject: CN=A2E449A3FD74734D77DF64ED5006480DBD435911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:19:7c:1e:5d:d5:48:79:04:19:23:dd:92: 99:7d:c2:66:2c:81:86:47:f5:c2:80:84:5b:bd:26: 1b:6a:e9:4b:60:73:16:76:0a:7b:11:09:25:f0:19: f4:2a:b1:f2:59:79:ad:ae:f8:21:f2:fb:83:6c:36: de:a1:de:c5:8a:d8:51:fb:56:d6:b2:a0:8b:2c:c7: 7a:1a:9a:7d:0b:01:d7:98:b8:de:74:a5:36:29:f3: 9f:e3:79:87:22:6d:e0:32:e1:38:01:e3:25:90:22: 53:78:14:3d:e0:b2:c4:d3:67:75:fb:aa:1d:f6:f8: 9d:b3:47:2f:b4:f6:c1:e2:31:93:fd:70:9b:c7:d5: 75:c8:cb:76:dc:9b:dd:99:10:28:a1:b8:15:15:eb: 49:1b:28:34:4a:a4:c5:95:a4:2d:76:4a:9f:d2:d8: 1f:28:f2:00:51:00:d3:df:d6:ab:b4:e8:0c:06:be: a5:e1:7a:82:49:fe:58:4e:1e:97:a6:fc:1b:fe:7c: c8:a8:d0:a3:29:9b:cd:6b:c5:f9:19:f2:38:f3:52: 83:47:04:99:d2:42:0e:03:09:6c:d3:28:43:1d:66: fb:fe:a7:ee:6d:00:9b:9e:d6:ff:a9:25:48:69:da: e9:a5:ce:e0:9a:64:32:b2:84:18:4b:f9:98:9b:a5: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E4:49:A3:FD:74:73:4D:77:DF:64:ED:50:06:48:0D:BD:43:59:11 X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:35:21:54:33:fd:31:7c:eb:47:3a:9a:88:2f:87:d8:de:61: c7:f9:b7:b9:08:80:32:ee:c9:04:73:5f:ee:3a:38:06:7b:30: 8c:97:b6:54:89:b4:02:d6:6a:56:3f:8d:f4:cb:01:8f:9f:1b: 07:cd:3a:e2:81:bd:67:88:ac:9d:51:8a:bb:36:e9:49:09:a8: 98:6b:0a:15:5e:d2:08:99:7a:d7:ce:8a:0d:fb:98:b6:96:39: 17:c4:80:11:05:9f:42:0c:35:4e:ed:27:73:f6:2c:df:81:d0: 8d:33:63:dd:fc:4d:06:2d:f2:63:39:c3:fa:fb:c4:d8:fc:cc: 65:ed:bb:ef:38:de:11:71:16:1e:4d:63:4d:56:4c:22:6d:2e: 38:55:80:c9:e0:c0:fa:0f:92:2b:ac:f2:6d:81:e0:17:3d:9d: b3:ea:8c:60:61:93:b7:81:2c:9d:c7:2f:ad:d3:69:21:95:66: 24:8d:1d:61:da:f3:f3:ba:10:73:ab:4b:f1:02:b5:04:09:0a: 97:3c:bc:6c:60:46:89:fb:2d:91:9e:b0:ab:6d:fa:3f:4d:81: ca:8e:f4:b1:84:fd:6a:4c:5d:9e:43:95:c6:fe:f0:07:9e:98: 36:1f:8c:d4:f9:b9:51:8f:8b:21:28:48:8b:9b:db:7b:71:fd: 32:ac:c0:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMQQD1IC191YVEVEoNX0yHlGszUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNTA3MjAwMzI1NTJaFw0yNTA3MjMxMzI2NTJaMDMxMTAvBgNV BAMTKEEyRTQ0OUEzRkQ3NDczNEQ3N0RGNjRFRDUwMDY0ODBEQkQ0MzU5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQxl8Hl3VSHkEGSPdkpl9wmYs gYZH9cKAhFu9Jhtq6UtgcxZ2CnsRCSXwGfQqsfJZea2u+CHy+4NsNt6h3sWK2FH7 VtayoIssx3oamn0LAdeYuN50pTYp85/jeYcibeAy4TgB4yWQIlN4FD3gssTTZ3X7 qh32+J2zRy+09sHiMZP9cJvH1XXIy3bcm92ZECihuBUV60kbKDRKpMWVpC12Sp/S 2B8o8gBRANPf1qu06AwGvqXheoJJ/lhOHpem/Bv+fMio0KMpm81rxfkZ8jjzUoNH BJnSQg4DCWzTKEMdZvv+p+5tAJue1v+pJUhp2umlzuCaZDKyhBhL+ZibpZrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUouRJo/10c01332TtUAZIDb1DWREwHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKA1IVQz/TF860c6mogvh9jeYcf5t7kIgDLu yQRzX+46OAZ7MIyXtlSJtALWalY/jfTLAY+fGwfNOuKBvWeIrJ1Rirs26UkJqJhr ChVe0giZetfOig37mLaWORfEgBEFn0IMNU7tJ3P2LN+B0I0zY938TQYt8mM5w/r7 xNj8zGXtu+843hFxFh5NY01WTCJtLjhVgMngwPoPkius8m2B4Bc9nbPqjGBhk7eB LJ3HL63TaSGVZiSNHWHa8/O6EHOrS/ECtQQJCpc8vGxgRon7LZGesKtt+j9NgcqO 9LGE/WpMXZ5Dlcb+8AeemDYfjNT5uVGPiyEoSIub23tx/TKswMA= -----END CERTIFICATE-----Generated at Tue Jul 22 06:43:57 2025 by rpki-client