$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json) Hash identifier: qj+bknUWFotPRL+aa6ofADOgtlBLEBSlYXNLGKZrHME= Subject key identifier: 2B:78:DE:7B:8A:F3:6C:61:EB:99:C4:A7:83:CC:91:86:80:C0:12:CD Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 6F29F137C62619CC3F331A11E52BF9C01AF2344A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft Manifest number: 04F5 Signing time: Mon 21 Jul 2025 05:40:55 +0000 Manifest this update: Mon 21 Jul 2025 05:35:55 +0000 Manifest next update: Thu 24 Jul 2025 11:28:55 +0000 Files and hashes: 1: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: xxmjrJOrTd0QfvJnnE49YYUpSjXejnuX66Cvnqehaao=) 2: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:29:f1:37:c6:26:19:cc:3f:33:1a:11:e5:2b:f9:c0:1a:f2:34:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Jul 21 05:35:55 2025 GMT Not After : Jul 24 11:28:55 2025 GMT Subject: CN=2B78DE7B8AF36C61EB99C4A783CC918680C012CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:c6:25:8a:1c:e1:cd:10:2c:ac:c7:65:99: a5:27:3a:0f:ad:ac:70:e6:3e:82:58:8d:3a:8f:26: 65:07:53:1f:6f:99:61:af:a2:94:14:c2:6b:5d:b0: 2d:29:aa:5c:06:56:36:f5:bc:f8:90:95:f8:8e:53: 93:89:e8:10:af:e7:53:ca:76:b5:75:e1:d7:95:15: 7b:aa:4f:0e:69:66:91:60:2f:f4:8d:5d:f6:84:4b: bd:f4:ec:2b:79:a3:55:a8:82:bc:d1:7b:40:84:43: f0:c5:0b:a0:ae:38:64:8d:32:4c:0a:e2:fc:0c:75: 37:ff:db:69:4b:ab:d6:4a:10:90:20:ef:61:8f:89: 72:bf:9a:f9:b0:7e:ec:45:58:80:e0:4e:9a:1a:67: ff:14:b4:cd:f6:2c:68:1b:85:05:28:72:84:48:98: 22:36:e9:56:5a:ee:61:9b:e8:30:dc:1e:02:2a:07: 61:5e:a6:f0:7b:2e:14:99:cb:b2:e9:78:29:e0:08: ad:8a:c5:fd:36:e6:ae:60:66:07:da:a5:78:3f:61: 4d:1a:bb:4f:da:92:58:a7:49:e8:37:2a:17:11:c2: 63:5c:06:01:db:9f:74:bf:6a:6b:5a:62:e8:48:29: f7:d6:f8:45:39:f2:09:e6:70:5d:48:8a:4d:ff:3e: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:78:DE:7B:8A:F3:6C:61:EB:99:C4:A7:83:CC:91:86:80:C0:12:CD X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:34:43:94:7a:cd:8d:8c:98:8f:b9:69:e2:55:7b:dd:3d:28: ea:07:d9:a8:d2:bc:54:e1:03:23:bf:7c:28:33:d3:77:91:47: 33:81:d2:ba:35:7f:d3:34:cf:fe:33:63:d4:5c:d5:c0:bf:44: fb:3c:ad:72:7a:25:29:9f:3a:52:78:a9:1d:88:bd:08:31:03: 25:bf:ca:12:e4:8b:b1:d0:cb:19:26:a2:e0:cf:6b:77:31:1c: e7:b4:a2:6b:52:40:6e:07:32:3a:60:73:f3:3f:32:36:7d:52: 8c:e2:73:c6:45:71:8d:fe:4b:0d:3e:a7:c8:1c:1f:ba:02:44: bc:ef:ca:84:28:5b:e3:7e:bc:1f:58:e8:4c:88:9e:72:e8:68: f7:0d:0f:eb:4e:eb:a4:53:70:2f:43:37:05:76:09:62:f4:8d: fd:52:a1:00:17:fc:95:0d:8d:35:07:f8:63:1b:44:53:a9:04: 26:78:f0:00:01:9c:a4:ed:96:2c:9b:0e:90:3f:3a:35:ca:34: 4a:84:7c:54:99:65:af:8e:69:1c:01:7e:c5:d9:5a:6c:02:24: 8a:2a:df:66:43:42:b8:bb:3f:0c:24:45:1b:0e:70:43:0c:68: 25:48:51:c8:cf:a3:b4:e7:0a:90:09:f2:62:cc:d7:c2:21:69: 23:f8:c6:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbynxN8YmGcw/MxoR5Sv5wBryNEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNTA3MjEwNTM1NTVaFw0yNTA3MjQxMTI4NTVaMDMxMTAvBgNV BAMTKDJCNzhERTdCOEFGMzZDNjFFQjk5QzRBNzgzQ0M5MTg2ODBDMDEyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2cYlihzhzRAsrMdlmaUnOg+t rHDmPoJYjTqPJmUHUx9vmWGvopQUwmtdsC0pqlwGVjb1vPiQlfiOU5OJ6BCv51PK drV14deVFXuqTw5pZpFgL/SNXfaES7307Ct5o1WogrzRe0CEQ/DFC6CuOGSNMkwK 4vwMdTf/22lLq9ZKEJAg72GPiXK/mvmwfuxFWIDgTpoaZ/8UtM32LGgbhQUocoRI mCI26VZa7mGb6DDcHgIqB2FepvB7LhSZy7LpeCngCK2Kxf025q5gZgfapXg/YU0a u0/aklinSeg3KhcRwmNcBgHbn3S/amtaYuhIKffW+EU58gnmcF1Iik3/PqmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3jee4rzbGHrmcSng8yRhoDAEs0wHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD00Q5R6zY2MmI+5aeJVe909KOoH2ajSvFTh AyO/fCgz03eRRzOB0ro1f9M0z/4zY9Rc1cC/RPs8rXJ6JSmfOlJ4qR2IvQgxAyW/ yhLki7HQyxkmouDPa3cxHOe0omtSQG4HMjpgc/M/MjZ9Uozic8ZFcY3+Sw0+p8gc H7oCRLzvyoQoW+N+vB9Y6EyInnLoaPcND+tO66RTcC9DNwV2CWL0jf1SoQAX/JUN jTUH+GMbRFOpBCZ48AABnKTtliybDpA/OjXKNEqEfFSZZa+OaRwBfsXZWmwCJIoq 32ZDQri7PwwkRRsOcEMMaCVIUcjPo7TnCpAJ8mLM18IhaSP4xj4= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:57 2025 by rpki-client