$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: VBrOvdIvQh/HXIVzwAmTYvUl9yvgbOn119VQXMAnd+c= Subject key identifier: F0:43:8C:D1:7F:BB:F9:80:71:47:6B:43:C9:FB:D5:EF:BC:17:A1:86 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 59CE59D14F936831AA65B7122B56148E88EDF547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 01F1 Signing time: Thu 24 Jul 2025 17:51:40 +0000 Manifest this update: Thu 24 Jul 2025 17:46:40 +0000 Manifest next update: Sun 27 Jul 2025 21:17:40 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: nPKJhfZ9Y0YUZQ2z22UdjU0V6OAU4F83FpdrInVbo8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ce:59:d1:4f:93:68:31:aa:65:b7:12:2b:56:14:8e:88:ed:f5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Jul 24 17:46:40 2025 GMT Not After : Jul 27 21:17:40 2025 GMT Subject: CN=F0438CD17FBBF98071476B43C9FBD5EFBC17A186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:61:18:5d:dd:25:1a:17:ba:21:0f:16:f7: b4:d8:1a:a7:d6:9c:59:a0:05:b6:53:7a:0f:93:12: e9:89:0d:51:7e:9a:f0:f8:03:86:e3:e7:6e:b2:21: 65:61:5d:1a:7f:a0:60:21:04:d2:d7:fa:8f:43:92: 6a:80:53:25:86:d8:bb:dc:3d:0b:5e:cb:76:bd:64: b4:9c:1e:a8:2c:9c:e0:f8:6d:16:2a:dc:b2:2e:db: be:87:14:a7:7a:0f:8b:7c:5f:21:5f:d1:f2:62:a5: e2:e7:f6:c8:33:ac:e9:93:d9:01:8f:e2:45:5d:09: c7:46:cd:6d:79:fd:e6:fb:1a:c2:c7:b8:85:3b:38: d6:b1:f3:e6:cd:c5:1d:d5:f7:cb:05:5f:51:a9:ad: 96:32:5f:86:6f:18:e3:d3:d3:04:ff:89:aa:62:76: d3:08:ca:dc:42:a8:2c:63:a9:eb:d2:3c:0d:27:b9: 74:cf:25:b8:e2:76:f0:27:e3:53:22:3f:4f:04:16: 94:4b:fd:8a:4b:60:23:8d:35:9f:e9:73:5f:00:c8: b4:1e:18:ba:79:fe:90:a7:ef:cd:c6:a9:7f:bc:0f: 1f:39:54:86:f7:8c:d5:d1:6b:49:30:15:b6:b8:b2: 92:94:a2:45:f1:d9:72:ec:dd:98:d8:fa:09:34:15: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:43:8C:D1:7F:BB:F9:80:71:47:6B:43:C9:FB:D5:EF:BC:17:A1:86 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:66:18:57:2f:ea:35:b1:20:2e:30:2c:24:07:b0:a8:be:eb: 71:d1:58:82:e7:b4:26:27:45:58:d8:d7:39:56:c8:9a:c3:4d: 1d:22:4b:de:fb:e1:51:2e:98:72:98:51:99:e0:87:4a:d3:85: 40:46:51:89:c9:33:1d:16:b1:3f:5a:01:64:80:e7:b9:15:0b: f2:f1:74:d2:ba:62:4b:52:d0:ea:07:c6:bb:a6:a6:f8:3e:8f: 66:a5:8d:3f:05:5f:4a:24:fa:45:25:4e:ba:37:f3:09:d0:57: 2e:8f:bf:2c:91:1c:26:c2:bc:18:d0:79:c5:54:5e:36:82:b1: e0:de:5e:a9:39:60:eb:3f:a7:82:ab:9e:fa:90:cd:18:4f:99: 60:5c:34:c2:47:7a:45:58:fb:27:0e:69:47:4a:11:b7:1b:a3: 35:74:87:23:a1:c6:11:0a:da:a2:09:24:db:62:1f:11:18:3d: 60:b3:38:ff:2e:5c:08:76:00:85:df:14:3c:d4:34:26:2f:38: 9d:20:78:7e:11:d2:b0:28:19:83:b3:28:a7:5e:cf:a4:05:eb: 20:aa:34:1a:7b:c7:44:9d:4b:cd:6d:a3:54:b6:a4:41:62:2c: bb:4f:3e:66:90:ac:91:c8:1b:08:af:71:ff:7d:02:aa:8e:45: 7f:c5:bd:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWc5Z0U+TaDGqZbcSK1YUjojt9UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTA3MjQxNzQ2NDBaFw0yNTA3MjcyMTE3NDBaMDMxMTAvBgNV BAMTKEYwNDM4Q0QxN0ZCQkY5ODA3MTQ3NkI0M0M5RkJENUVGQkMxN0ExODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+mEYXd0lGhe6IQ8W97TYGqfW nFmgBbZTeg+TEumJDVF+mvD4A4bj526yIWVhXRp/oGAhBNLX+o9DkmqAUyWG2Lvc PQtey3a9ZLScHqgsnOD4bRYq3LIu276HFKd6D4t8XyFf0fJipeLn9sgzrOmT2QGP 4kVdCcdGzW15/eb7GsLHuIU7ONax8+bNxR3V98sFX1GprZYyX4ZvGOPT0wT/iapi dtMIytxCqCxjqevSPA0nuXTPJbjidvAn41MiP08EFpRL/YpLYCONNZ/pc18AyLQe GLp5/pCn783GqX+8Dx85VIb3jNXRa0kwFba4spKUokXx2XLs3ZjY+gk0FdqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8EOM0X+7+YBxR2tDyfvV77wXoYYwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhmGFcv6jWxIC4wLCQHsKi+63HRWILntCYn RVjY1zlWyJrDTR0iS9774VEumHKYUZngh0rThUBGUYnJMx0WsT9aAWSA57kVC/Lx dNK6YktS0OoHxrumpvg+j2aljT8FX0ok+kUlTro38wnQVy6PvyyRHCbCvBjQecVU XjaCseDeXqk5YOs/p4KrnvqQzRhPmWBcNMJHekVY+ycOaUdKEbcbozV0hyOhxhEK 2qIJJNtiHxEYPWCzOP8uXAh2AIXfFDzUNCYvOJ0geH4R0rAoGYOzKKdez6QF6yCq NBp7x0SdS81to1S2pEFiLLtPPmaQrJHIGwivcf99AqqORX/Fvag= -----END CERTIFICATE-----Generated at Fri Jul 25 06:23:26 2025 by rpki-client