$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: zzsRJAmd7fyOoHQ0F7l3j0BlFOvHra9HNvyFJ6biMns= Subject key identifier: D4:2F:AC:02:B5:A0:E0:8D:C4:09:A2:C5:07:42:28:CE:14:FF:81:53 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 5780D66B9FBD67F5F0E9E90285979D7D518A96B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 04EC Signing time: Mon 21 Jul 2025 01:01:24 +0000 Manifest this update: Mon 21 Jul 2025 00:56:24 +0000 Manifest next update: Thu 24 Jul 2025 03:15:24 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: p2QBu5DnNdzUaVbVlsdDjxvEdaBLpy4FHRNey5VM3uE=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:80:d6:6b:9f:bd:67:f5:f0:e9:e9:02:85:97:9d:7d:51:8a:96:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Jul 21 00:56:24 2025 GMT Not After : Jul 24 03:15:24 2025 GMT Subject: CN=D42FAC02B5A0E08DC409A2C5074228CE14FF8153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:4a:ed:5c:00:fc:96:4e:02:0b:0f:a9:97: 2f:1e:a0:79:1e:99:41:21:01:5e:f8:6e:62:5d:eb: 38:43:cb:c5:c0:90:85:4b:2a:bf:5c:d2:f8:21:91: 99:46:33:25:8f:19:70:49:62:b4:66:28:69:5a:25: 4e:f9:5e:76:c7:92:c3:7d:ba:89:0a:8f:ae:11:49: 88:d3:ec:6e:11:e3:68:92:c0:68:7c:e8:d7:d0:95: 94:fd:23:9a:80:62:59:61:83:9d:3f:de:b7:cd:88: a6:bc:85:8c:72:83:31:fd:89:16:38:27:83:38:2d: 35:23:94:3c:c4:f4:3d:79:90:7c:44:a3:97:f9:a1: 82:b4:bc:9e:8d:c9:86:4a:9f:eb:da:d5:ca:b3:f1: 7e:a3:ee:c8:5c:5a:22:17:62:78:0a:a7:d7:da:5a: 12:44:ce:fc:b3:fd:ae:6c:35:f7:ee:59:66:e2:3b: 7f:0a:bc:74:ce:d2:e2:50:54:65:97:42:6e:3c:da: cd:62:93:64:03:16:b9:8f:21:75:26:a3:e0:21:6d: 63:c5:82:64:61:cb:7a:0b:5f:3c:4d:1c:23:7b:fa: d9:7d:aa:71:5a:65:1d:bf:e0:cf:d3:bf:73:22:fa: 75:6e:63:3b:04:e1:9b:d4:a1:8a:a4:82:d9:a0:1c: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2F:AC:02:B5:A0:E0:8D:C4:09:A2:C5:07:42:28:CE:14:FF:81:53 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:75:86:16:ce:37:6c:94:ea:d7:e7:b8:94:01:48:e2:7c:e8: 6d:45:0a:83:32:4f:4c:7b:61:57:fa:1b:4e:90:d7:34:21:ec: be:66:44:1c:0a:08:de:ae:07:de:c4:71:f7:36:fb:55:d5:92: 58:09:98:b3:37:55:cf:ac:3f:04:dd:74:c1:53:64:c5:ce:8a: 27:80:c8:65:59:82:e7:7d:44:d0:cf:5f:44:ba:a1:32:12:10: 4c:71:23:32:38:3e:ee:34:b4:b4:af:35:c2:51:60:a4:1b:3a: b7:ec:0d:a7:0b:b6:73:69:99:ec:aa:3b:6b:2d:5e:85:4c:66: 04:69:1a:c5:b1:e7:08:cd:b6:1a:fa:9d:64:9b:64:ac:5c:dd: b9:6f:93:09:97:25:26:38:a2:55:75:5e:34:59:bf:a1:c8:2c: 5e:c0:57:d8:18:8b:ba:86:71:2b:6b:48:63:01:12:76:e7:ee: c8:6c:fe:9c:8c:fa:6d:2e:82:ff:db:be:9d:75:77:83:7a:f0: d2:c4:95:8a:76:85:f5:e1:ca:91:16:fb:03:a0:21:f3:14:8b: f6:db:86:48:bd:c1:52:2b:97:e7:f1:e7:97:05:f1:b5:ac:04: f9:33:34:2a:d5:67:70:5c:8f:1b:43:0a:1b:a8:36:1f:0c:9f: 51:99:61:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4DWa5+9Z/Xw6ekChZedfVGKlrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTA3MjEwMDU2MjRaFw0yNTA3MjQwMzE1MjRaMDMxMTAvBgNV BAMTKEQ0MkZBQzAyQjVBMEUwOERDNDA5QTJDNTA3NDIyOENFMTRGRjgxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmUrtXAD8lk4CCw+ply8eoHke mUEhAV74bmJd6zhDy8XAkIVLKr9c0vghkZlGMyWPGXBJYrRmKGlaJU75XnbHksN9 uokKj64RSYjT7G4R42iSwGh86NfQlZT9I5qAYllhg50/3rfNiKa8hYxygzH9iRY4 J4M4LTUjlDzE9D15kHxEo5f5oYK0vJ6NyYZKn+va1cqz8X6j7shcWiIXYngKp9fa WhJEzvyz/a5sNffuWWbiO38KvHTO0uJQVGWXQm482s1ik2QDFrmPIXUmo+AhbWPF gmRhy3oLXzxNHCN7+tl9qnFaZR2/4M/Tv3Mi+nVuYzsE4ZvUoYqkgtmgHFUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1C+sArWg4I3ECaLFB0IozhT/gVMwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN1hhbON2yU6tfnuJQBSOJ86G1FCoMyT0x7 YVf6G06Q1zQh7L5mRBwKCN6uB97Ecfc2+1XVklgJmLM3Vc+sPwTddMFTZMXOiieA yGVZgud9RNDPX0S6oTISEExxIzI4Pu40tLSvNcJRYKQbOrfsDacLtnNpmeyqO2st XoVMZgRpGsWx5wjNthr6nWSbZKxc3blvkwmXJSY4olV1XjRZv6HILF7AV9gYi7qG cStrSGMBEnbn7shs/pyM+m0ugv/bvp11d4N68NLElYp2hfXhypEW+wOgIfMUi/bb hki9wVIrl+fx55cF8bWsBPkzNCrVZ3BcjxtDChuoNh8Mn1GZYSw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:25 2025 by rpki-client