$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: Gfrn5N4ZYZopWE094dU4RJ2mOUaBeWl+eF6YCFy96BQ= Subject key identifier: C2:38:72:75:1F:93:D4:57:05:E2:52:E2:13:DE:9E:2B:81:D9:90:F2 Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 7EEFF1C83DDA61713610F8342DE739563B0F2F7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: DD Signing time: Sat 26 Jul 2025 02:50:39 +0000 Manifest this update: Sat 26 Jul 2025 02:45:39 +0000 Manifest next update: Tue 29 Jul 2025 12:36:39 +0000 Files and hashes: 1: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: 6CkotH31CcorzcMG7nGycyG7c+Z1FNCXw5ByiIohi/M=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 2lAjycdxeSaqDarXvJpjbjwFWksBTkypcj159AzhKmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 12:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ef:f1:c8:3d:da:61:71:36:10:f8:34:2d:e7:39:56:3b:0f:2f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Jul 26 02:45:39 2025 GMT Not After : Jul 29 12:36:39 2025 GMT Subject: CN=C23872751F93D45705E252E213DE9E2B81D990F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:ac:7b:16:3f:cc:e2:f6:8b:88:17:86:25: da:8f:46:95:a1:1d:b8:74:43:04:3f:82:94:ab:a3: e8:d9:fe:46:22:08:f5:91:e3:58:fa:99:3c:7b:e7: 74:7f:cc:44:06:3b:c5:a2:7a:7c:65:99:31:58:48: 75:e4:cd:c7:3d:f3:e5:a1:70:9c:9f:49:2b:df:04: eb:e0:c8:34:03:25:ef:30:f7:f9:86:55:10:5a:ff: 30:af:dd:5e:38:54:cb:3b:b8:23:f7:cc:74:4c:61: 8a:21:2f:97:3d:63:e1:85:62:36:6a:28:c1:8c:57: d3:8c:5d:7e:4c:6a:63:87:35:15:8a:b7:ac:8e:aa: 98:7b:36:e8:04:48:61:81:55:70:ea:6f:d2:43:8e: 3c:75:b5:c5:0d:43:0b:02:29:bb:0c:fd:e9:b8:b0: f1:17:45:98:12:72:fb:53:25:c3:6f:73:9a:71:37: 8a:11:11:fe:15:ae:33:23:2d:72:05:3d:32:89:3d: 61:83:3c:1e:3f:4f:29:cf:4d:c8:7f:37:42:c6:f7: d4:eb:e5:21:53:4b:b9:8e:e6:84:8a:6a:1a:fa:4c: 92:69:00:4a:5b:db:43:7d:f2:97:40:64:38:ec:1b: 39:85:e2:b2:33:f4:be:5a:f1:8d:ad:6d:35:62:e4: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:72:75:1F:93:D4:57:05:E2:52:E2:13:DE:9E:2B:81:D9:90:F2 X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9d:25:b3:d7:e7:a4:52:1a:de:8b:d8:55:9f:57:c6:d6:1e: 55:9d:8d:90:32:2a:23:fc:83:d7:ba:c3:a6:4d:95:1f:75:71: 42:d1:69:71:98:08:99:10:3d:3a:22:13:a1:0d:b3:5e:7d:d6: a8:e8:cb:e0:57:df:74:99:f1:50:b1:fe:b0:e2:05:7b:2f:94: f4:e2:68:6e:6f:4e:10:2d:e0:ac:5c:5b:8c:42:8d:34:1a:b0: 8f:a1:d3:4d:fb:1c:0d:5e:18:1d:2f:4a:b0:17:46:a4:54:b1: 46:28:a5:fc:29:8a:a1:6e:b3:6d:1b:51:21:73:33:93:71:a7: 5c:a5:eb:ea:34:62:b6:e3:7d:6f:a1:36:5a:61:5a:c3:f3:86: fb:eb:17:1d:8b:b1:18:17:c7:31:6b:88:cb:80:3c:c3:73:82: 0f:43:ae:79:e6:b5:28:91:b2:7b:5a:20:94:79:fd:61:d3:a8: 24:d5:b8:ed:94:e8:42:c8:b3:fc:c2:10:f3:ef:62:29:d6:f1: d9:d8:cc:7f:b5:1f:c4:58:9e:1c:0f:18:e0:b9:fc:20:ee:28: 4c:9e:a7:2b:8e:05:2d:fc:df:a0:fd:11:4f:00:d3:2f:b0:e6: a4:e6:11:a6:6c:28:98:c3:f7:76:67:84:34:8c:14:cc:77:12: 7a:be:ad:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfu/xyD3aYXE2EPg0Lec5VjsPL34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNTA3MjYwMjQ1MzlaFw0yNTA3MjkxMjM2MzlaMDMxMTAvBgNV BAMTKEMyMzg3Mjc1MUY5M0Q0NTcwNUUyNTJFMjEzREU5RTJCODFEOTkwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGg6x7Fj/M4vaLiBeGJdqPRpWh Hbh0QwQ/gpSro+jZ/kYiCPWR41j6mTx753R/zEQGO8WienxlmTFYSHXkzcc98+Wh cJyfSSvfBOvgyDQDJe8w9/mGVRBa/zCv3V44VMs7uCP3zHRMYYohL5c9Y+GFYjZq KMGMV9OMXX5MamOHNRWKt6yOqph7NugESGGBVXDqb9JDjjx1tcUNQwsCKbsM/em4 sPEXRZgScvtTJcNvc5pxN4oREf4VrjMjLXIFPTKJPWGDPB4/TynPTch/N0LG99Tr 5SFTS7mO5oSKahr6TJJpAEpb20N98pdAZDjsGzmF4rIz9L5a8Y2tbTVi5FsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjhydR+T1FcF4lLiE96eK4HZkPIwHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHidJbPX56RSGt6L2FWfV8bWHlWdjZAyKiP8 g9e6w6ZNlR91cULRaXGYCJkQPToiE6ENs1591qjoy+BX33SZ8VCx/rDiBXsvlPTi aG5vThAt4KxcW4xCjTQasI+h0037HA1eGB0vSrAXRqRUsUYopfwpiqFus20bUSFz M5Nxp1yl6+o0YrbjfW+hNlphWsPzhvvrFx2LsRgXxzFriMuAPMNzgg9DrnnmtSiR sntaIJR5/WHTqCTVuO2U6ELIs/zCEPPvYinW8dnYzH+1H8RYnhwPGOC5/CDuKEye pyuOBS3836D9EU8A0y+w5qTmEaZsKJjD93ZnhDSMFMx3Enq+rRI= -----END CERTIFICATE-----Generated at Sat Jul 26 09:47:02 2025 by rpki-client