$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: 0Ov66ighaZTQLBltGFEn4yFrD/IN5G2IhuOgyfbyhPU= Subject key identifier: DA:7E:C6:83:72:CD:79:EB:7E:36:73:D3:12:44:79:B9:5E:FD:28:98 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 4E9028C6FB4E258F4370B8E205805AEBC08E3927 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 017F Signing time: Sun 20 Jul 2025 22:00:45 +0000 Manifest this update: Sun 20 Jul 2025 21:55:45 +0000 Manifest next update: Thu 24 Jul 2025 04:28:45 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: CsZGOInkMHF7IR+oxB6ktdPWbXSXLCSoJ1UNyW5fZRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:90:28:c6:fb:4e:25:8f:43:70:b8:e2:05:80:5a:eb:c0:8e:39:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Jul 20 21:55:45 2025 GMT Not After : Jul 24 04:28:45 2025 GMT Subject: CN=DA7EC68372CD79EB7E3673D3124479B95EFD2898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:cc:7a:80:ca:40:69:da:9c:4d:72:a2:b6: bb:13:98:2b:12:44:08:af:c3:5b:29:89:c7:2f:34: 49:48:b5:16:0c:58:05:c2:71:a0:5c:6d:c9:8a:0d: 51:a3:43:f2:58:40:cf:6c:b9:78:2a:65:49:3d:48: 3e:74:c5:6a:1f:3a:f6:78:da:cc:44:28:af:aa:f8: d4:b0:b3:6b:aa:4c:27:f2:a5:ba:4e:79:2f:6b:b1: 45:25:64:66:e5:e3:cc:51:1d:77:26:b9:66:c4:0d: 31:fc:78:6b:c2:21:6d:ef:c5:8f:06:5a:d6:6c:47: bb:7d:22:e5:94:b9:84:c6:c9:2e:9d:82:88:a2:64: 15:43:b9:35:14:35:c3:b6:70:7d:77:ab:a8:71:10: 49:1f:4f:4c:b2:57:c4:50:35:d6:35:be:bc:f8:e9: aa:3f:26:b4:a5:b0:58:31:d3:1d:33:0f:2f:74:af: a8:b4:a4:94:c6:d6:01:22:28:3e:43:ff:61:3d:da: 27:94:fd:52:a4:87:c3:b7:b9:51:c2:28:57:bf:d1: 96:00:f1:a0:4a:0a:c3:d7:87:e9:62:78:7c:20:36: f4:84:6e:61:7d:38:ac:27:29:cd:d0:20:48:f2:cd: 07:8f:b8:13:08:e0:72:dc:2e:1d:07:99:77:dd:3a: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7E:C6:83:72:CD:79:EB:7E:36:73:D3:12:44:79:B9:5E:FD:28:98 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:59:7c:d8:3f:bc:ff:f6:39:6b:5f:e8:05:80:2a:d1:61:67: ba:b0:81:a4:32:de:50:67:57:54:44:64:97:a4:af:71:8b:c6: 5b:ff:08:7a:45:e3:7c:c9:b4:cd:1e:08:51:78:15:ac:d9:89: fa:2a:68:75:b5:7d:c0:07:f6:9d:2f:f1:16:80:f4:58:9b:f9: 50:26:22:6f:ac:d0:78:2e:2d:b4:e7:1b:c4:a7:d8:af:b4:ed: ca:85:72:60:58:a9:47:f1:9a:11:c6:52:91:4e:43:07:9d:b5: c5:44:a3:c7:8c:76:9b:09:20:d5:52:ab:b4:8f:e4:f7:09:5e: 8a:09:f3:e4:2b:65:2f:0a:b6:c1:64:c8:3b:54:05:ca:f9:3e: 94:04:f7:74:26:d7:20:c9:ef:d2:7a:ea:bb:e1:36:fd:96:fc: e5:b0:27:3c:9e:42:9f:4d:7e:0f:3d:4e:92:fc:50:a8:b7:90: 91:85:14:bf:1b:ac:a8:f5:9d:65:5d:68:41:69:da:84:2c:27: 92:2e:27:ba:17:50:86:1b:2f:54:5f:10:80:88:84:c9:4d:cf: 21:be:d2:2c:6a:ee:a3:c6:47:fd:11:df:f5:e4:ba:b2:f8:d5: 6c:84:a0:0c:4d:90:a1:18:5a:6b:66:dd:eb:5a:87:f6:1e:6b: b9:e7:85:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpAoxvtOJY9DcLjiBYBa68COOScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTA3MjAyMTU1NDVaFw0yNTA3MjQwNDI4NDVaMDMxMTAvBgNV BAMTKERBN0VDNjgzNzJDRDc5RUI3RTM2NzNEMzEyNDQ3OUI5NUVGRDI4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLMx6gMpAadqcTXKitrsTmCsS RAivw1spiccvNElItRYMWAXCcaBcbcmKDVGjQ/JYQM9suXgqZUk9SD50xWofOvZ4 2sxEKK+q+NSws2uqTCfypbpOeS9rsUUlZGbl48xRHXcmuWbEDTH8eGvCIW3vxY8G WtZsR7t9IuWUuYTGyS6dgoiiZBVDuTUUNcO2cH13q6hxEEkfT0yyV8RQNdY1vrz4 6ao/JrSlsFgx0x0zDy90r6i0pJTG1gEiKD5D/2E92ieU/VKkh8O3uVHCKFe/0ZYA 8aBKCsPXh+lieHwgNvSEbmF9OKwnKc3QIEjyzQePuBMI4HLcLh0HmXfdOk6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2n7Gg3LNeet+NnPTEkR5uV79KJgwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxZfNg/vP/2OWtf6AWAKtFhZ7qwgaQy3lBn V1REZJekr3GLxlv/CHpF43zJtM0eCFF4FazZifoqaHW1fcAH9p0v8RaA9Fib+VAm Im+s0HguLbTnG8Sn2K+07cqFcmBYqUfxmhHGUpFOQwedtcVEo8eMdpsJINVSq7SP 5PcJXooJ8+QrZS8KtsFkyDtUBcr5PpQE93Qm1yDJ79J66rvhNv2W/OWwJzyeQp9N fg89TpL8UKi3kJGFFL8brKj1nWVdaEFp2oQsJ5IuJ7oXUIYbL1RfEICIhMlNzyG+ 0ixq7qPGR/0R3/XkurL41WyEoAxNkKEYWmtm3etah/Yea7nnhQ8= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:49 2025 by rpki-client