$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: xl7Pl52t2uRUF6doeZjMrI0GlTEXpTqcg499/uk6HzY= Subject key identifier: 46:74:B2:C2:DF:8A:85:63:4A:36:28:8A:4E:F9:19:40:3A:FE:9C:A2 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 32290705DF62D7DE57C7210D61410A6ACCC74DF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 01CD Signing time: Sun 20 Jul 2025 04:00:52 +0000 Manifest this update: Sun 20 Jul 2025 03:55:52 +0000 Manifest next update: Wed 23 Jul 2025 12:25:52 +0000 Files and hashes: 1: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: bbZpkII0zNnmoHVkR2CsqMA4YTW7m7OpSIV4mQlEZq0=) 2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: 5drLDE3hXRgz1UUxF/qZh+s/keLXYCRvqXQkuLFTAhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:29:07:05:df:62:d7:de:57:c7:21:0d:61:41:0a:6a:cc:c7:4d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Jul 20 03:55:52 2025 GMT Not After : Jul 23 12:25:52 2025 GMT Subject: CN=4674B2C2DF8A85634A36288A4EF919403AFE9CA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:da:28:74:d3:7c:07:21:c1:56:65:4e:38: 85:0f:bd:34:f4:0a:21:75:0c:99:ec:2d:82:a6:6f: eb:f7:1a:18:dc:8a:bc:3e:ec:45:fd:bf:7e:35:80: 19:0d:6a:a0:52:a2:29:19:9a:7e:fa:ff:34:a4:c4: e0:fc:5e:ff:c7:e5:b7:26:dd:70:6e:41:67:84:1b: 73:41:db:15:a3:da:ca:46:ab:4b:c9:19:0f:48:5c: b6:ad:fe:24:75:34:04:a3:6c:db:a0:c8:56:de:f6: 2e:0b:5c:4b:10:55:ed:26:e4:34:03:0b:81:62:40: f8:15:1f:e2:ee:f5:76:1e:65:c3:2e:5b:43:8b:7a: 64:55:32:1e:68:52:1e:ce:9e:80:79:d5:a5:96:44: f8:1f:56:63:8f:12:53:67:9b:40:a6:05:2f:ca:35: 34:08:f9:b4:9f:28:52:59:9a:61:99:61:f0:53:6f: 85:a2:00:52:23:5e:fa:74:17:28:40:fb:ff:a5:14: f9:38:ee:33:85:d6:41:ec:03:be:3a:6a:60:e8:30: 43:8e:e6:16:2b:d1:29:89:65:14:4b:7c:77:ab:e8: 34:a5:77:1a:7c:fa:f1:75:b0:42:bd:7b:1b:fe:88: f9:40:df:a6:cf:32:84:9e:df:97:74:03:91:ce:2e: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:74:B2:C2:DF:8A:85:63:4A:36:28:8A:4E:F9:19:40:3A:FE:9C:A2 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:32:0a:86:d9:a2:43:e3:ee:02:68:97:ad:a7:63:a8:6c:06: 37:8e:eb:01:43:e0:7f:0a:00:bb:1d:a4:70:3d:45:7f:0d:03: 4d:47:57:62:b3:5e:ae:31:a3:04:30:58:cc:0a:ff:60:00:fd: 54:bf:db:97:25:cb:72:87:52:08:d3:ef:3c:0c:0a:33:bc:98: 3a:39:5e:fd:42:ee:99:8e:11:0b:1c:81:a9:27:17:38:a5:0b: d2:18:e3:78:45:f3:cf:52:90:3b:0c:2a:92:16:a0:51:13:54: 92:29:7f:7c:5a:94:90:45:6e:f9:32:08:6e:8e:65:eb:09:b8: c3:ca:1b:05:a4:6f:95:0c:3e:9d:9d:be:cf:e1:17:a1:38:43: 70:eb:3a:68:ca:5e:ef:02:9b:6f:2a:04:23:09:56:c1:db:f2: 38:b8:22:3f:5b:cd:c0:71:92:f0:34:1e:b4:a1:dc:f5:ff:09: a6:1b:e9:d6:91:62:6c:96:58:66:7b:f6:61:bb:09:ad:c0:72: 67:e2:f5:8f:f6:c9:b5:32:d8:ba:48:eb:d0:11:f4:e3:a7:b6: b2:7f:d9:cb:42:19:79:94:bb:cb:41:87:f0:d3:08:28:5c:8b: 34:44:49:3c:bd:54:48:c1:d0:ff:ef:58:64:a0:08:d3:0a:f8: 1a:d4:e2:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMikHBd9i195XxyENYUEKaszHTfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTA3MjAwMzU1NTJaFw0yNTA3MjMxMjI1NTJaMDMxMTAvBgNV BAMTKDQ2NzRCMkMyREY4QTg1NjM0QTM2Mjg4QTRFRjkxOTQwM0FGRTlDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRitoodNN8ByHBVmVOOIUPvTT0 CiF1DJnsLYKmb+v3Ghjcirw+7EX9v341gBkNaqBSoikZmn76/zSkxOD8Xv/H5bcm 3XBuQWeEG3NB2xWj2spGq0vJGQ9IXLat/iR1NASjbNugyFbe9i4LXEsQVe0m5DQD C4FiQPgVH+Lu9XYeZcMuW0OLemRVMh5oUh7OnoB51aWWRPgfVmOPElNnm0CmBS/K NTQI+bSfKFJZmmGZYfBTb4WiAFIjXvp0FyhA+/+lFPk47jOF1kHsA746amDoMEOO 5hYr0SmJZRRLfHer6DSldxp8+vF1sEK9exv+iPlA36bPMoSe35d0A5HOLja5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURnSywt+KhWNKNiiKTvkZQDr+nKIwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcyCobZokPj7gJol62nY6hsBjeO6wFD4H8K ALsdpHA9RX8NA01HV2KzXq4xowQwWMwK/2AA/VS/25cly3KHUgjT7zwMCjO8mDo5 Xv1C7pmOEQscgaknFzilC9IY43hF889SkDsMKpIWoFETVJIpf3xalJBFbvkyCG6O ZesJuMPKGwWkb5UMPp2dvs/hF6E4Q3DrOmjKXu8Cm28qBCMJVsHb8ji4Ij9bzcBx kvA0HrSh3PX/CaYb6daRYmyWWGZ79mG7Ca3Acmfi9Y/2ybUy2LpI69AR9OOntrJ/ 2ctCGXmUu8tBh/DTCChcizRESTy9VEjB0P/vWGSgCNMK+BrU4iw= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:30 2025 by rpki-client