$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: a3CYX97KD9vKZPW5hemcgfQukj0Jovtp5h0DTUp+Xg8= Subject key identifier: C8:A1:69:AD:F6:CE:52:D9:F7:94:A4:A8:29:F2:A9:3A:82:D7:B7:67 Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 74423D7CD099773FDC06BA721230D7307A22BF1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: AD Signing time: Sun 20 Jul 2025 06:31:06 +0000 Manifest this update: Sun 20 Jul 2025 06:26:06 +0000 Manifest next update: Wed 23 Jul 2025 08:55:06 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) 2: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: RpainDm860b2J8zhRme9HqmtLKU+RQ3kkFoHQVWKRHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:42:3d:7c:d0:99:77:3f:dc:06:ba:72:12:30:d7:30:7a:22:bf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Jul 20 06:26:06 2025 GMT Not After : Jul 23 08:55:06 2025 GMT Subject: CN=C8A169ADF6CE52D9F794A4A829F2A93A82D7B767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:0c:e5:22:ae:af:ae:99:f8:3a:42:3e:d8: 2a:a9:9d:ca:df:9e:f8:b8:87:3a:36:02:87:d6:3e: 24:f2:e5:d3:e1:e5:cf:a6:16:3e:cd:ff:c8:d5:d5: ed:58:fc:27:01:13:09:82:53:d8:29:ae:71:9d:d1: 58:07:fb:62:2c:e6:5f:17:7b:71:d1:72:32:f5:20: 20:05:75:68:b7:ec:bf:bb:1b:75:e3:77:10:a4:ab: ac:a4:f1:42:e2:58:2b:4a:d4:4c:cd:4f:8b:12:53: bd:ae:22:ce:7c:52:b6:84:b1:e3:dc:53:ec:e9:72: fc:ba:21:5e:d8:93:5b:ed:04:a2:9c:b9:79:aa:02: d7:3d:8b:e8:b2:0f:52:c7:1b:22:f5:aa:eb:55:54: 9a:51:d2:4c:a2:07:98:ad:d6:50:b0:03:10:d4:44: 9c:94:8c:9f:51:67:75:75:11:90:cd:6f:ce:e7:e3: 2e:76:6d:b6:7f:4f:27:22:d3:25:53:f0:d9:8b:27: 85:41:6e:86:95:9a:0e:8e:f9:da:65:83:4c:61:44: b0:cf:87:df:9d:f4:2d:14:50:c8:24:b6:e5:e6:17: e0:fa:6b:9a:21:f0:60:77:e0:71:dd:a8:0d:5f:9a: 90:b0:3e:52:c7:70:dc:1e:2e:f1:7e:7f:85:b2:f2: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A1:69:AD:F6:CE:52:D9:F7:94:A4:A8:29:F2:A9:3A:82:D7:B7:67 X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:43:4f:75:34:3a:1d:25:6e:82:95:e4:ba:b3:9f:3f:11:e8: d0:13:9c:cd:6e:3e:f2:ce:e9:cb:4f:00:b9:1e:6a:fc:35:0a: f6:8d:1e:8e:aa:86:38:26:21:b2:91:0c:8e:d1:c5:7f:21:0b: 17:f9:ea:bc:e2:df:7f:b0:07:b6:c0:39:42:d2:8a:8a:99:6d: 8d:5c:34:f4:da:bc:21:98:e1:9d:61:b3:79:9e:a8:07:53:40: 5f:da:bf:7a:39:d7:d1:df:d0:73:58:be:80:86:73:99:b1:b9: 99:25:4d:90:97:6c:2b:85:10:8b:1d:48:20:de:fe:72:f5:91: 07:d3:3f:3d:50:62:72:f6:06:ce:79:e9:fb:44:5f:05:70:b8: 06:ae:f3:81:44:dc:5b:bf:b2:6e:f1:92:24:af:da:1e:1d:3f: cc:4c:c5:6d:a3:c0:32:79:34:c8:67:dc:3a:7e:8c:d1:41:7b: 69:3b:e1:36:31:7b:9c:a5:a6:89:48:c9:62:3f:dc:0a:3b:9b: 2a:f2:df:38:25:d1:6a:1e:a7:2c:81:3e:3d:7f:6e:6d:81:4e: 28:44:8c:08:10:28:c6:37:d8:b2:8c:1e:31:0f:30:93:e8:54: 26:9c:75:5d:f1:ab:11:5c:81:65:c8:16:c6:ab:1e:09:ed:da: 91:59:5e:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEI9fNCZdz/cBrpyEjDXMHoivx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTA3MjAwNjI2MDZaFw0yNTA3MjMwODU1MDZaMDMxMTAvBgNV BAMTKEM4QTE2OUFERjZDRTUyRDlGNzk0QTRBODI5RjJBOTNBODJEN0I3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASAzlIq6vrpn4OkI+2Cqpncrf nvi4hzo2AofWPiTy5dPh5c+mFj7N/8jV1e1Y/CcBEwmCU9gprnGd0VgH+2Is5l8X e3HRcjL1ICAFdWi37L+7G3XjdxCkq6yk8ULiWCtK1EzNT4sSU72uIs58UraEsePc U+zpcvy6IV7Yk1vtBKKcuXmqAtc9i+iyD1LHGyL1qutVVJpR0kyiB5it1lCwAxDU RJyUjJ9RZ3V1EZDNb87n4y52bbZ/Tyci0yVT8NmLJ4VBboaVmg6O+dplg0xhRLDP h9+d9C0UUMgktuXmF+D6a5oh8GB34HHdqA1fmpCwPlLHcNweLvF+f4Wy8nq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKFprfbOUtn3lKSoKfKpOoLXt2cwHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJDT3U0Oh0lboKV5Lqznz8R6NATnM1uPvLO 6ctPALkeavw1CvaNHo6qhjgmIbKRDI7RxX8hCxf56rzi33+wB7bAOULSioqZbY1c NPTavCGY4Z1hs3meqAdTQF/av3o519Hf0HNYvoCGc5mxuZklTZCXbCuFEIsdSCDe /nL1kQfTPz1QYnL2Bs556ftEXwVwuAau84FE3Fu/sm7xkiSv2h4dP8xMxW2jwDJ5 NMhn3Dp+jNFBe2k74TYxe5ylpolIyWI/3Ao7myry3zgl0WoepyyBPj1/bm2BTihE jAgQKMY32LKMHjEPMJPoVCacdV3xqxFcgWXIFsarHgnt2pFZXqM= -----END CERTIFICATE-----Generated at Mon Jul 21 12:28:10 2025 by rpki-client