$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: ofG2eNdu32VfvtEGMpTkn/zgM7+FNOitvoFQj2CtmHE= Subject key identifier: D5:04:AD:C1:96:14:08:51:EE:F5:12:A8:A7:65:16:D5:A9:80:D6:4C Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 58202497AC5708993FD08AA65DAA943DD50DC820 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 02F5 Signing time: Sun 20 Jul 2025 16:40:55 +0000 Manifest this update: Sun 20 Jul 2025 16:35:55 +0000 Manifest next update: Thu 24 Jul 2025 03:25:55 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: u45eOeApa6yd6xN1C2RGbbG+sirnQkLopdR6tci9OG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:20:24:97:ac:57:08:99:3f:d0:8a:a6:5d:aa:94:3d:d5:0d:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Jul 20 16:35:55 2025 GMT Not After : Jul 24 03:25:55 2025 GMT Subject: CN=D504ADC196140851EEF512A8A76516D5A980D64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:c4:67:1a:3c:9f:44:2c:bd:07:3c:bf:b0: 66:cd:cc:ac:d0:a9:cc:b2:ba:4f:57:80:4e:0d:02: b7:9c:07:0d:80:a7:62:77:ea:3c:48:63:5b:c3:ca: c4:68:69:73:59:c6:73:38:30:12:a6:c1:87:44:5c: a3:10:20:55:14:7e:3e:f4:95:05:20:8b:fc:f6:f8: 8f:0f:64:1b:61:69:3e:d0:c3:7e:f3:eb:9b:c5:12: ef:87:67:a7:51:4d:35:a1:00:6e:88:ae:e2:3b:3c: 66:ac:1a:cb:8f:3c:54:b8:63:5a:1a:69:9f:9f:1f: fb:12:6f:44:05:34:e7:94:fe:9a:e1:de:a9:31:0c: 6d:b0:61:d8:11:85:e1:72:47:8e:17:5d:e4:ae:26: 9b:bf:ba:b5:9a:c9:83:b9:08:fb:62:04:a3:3d:7e: dd:12:ed:71:a9:9f:5a:d5:a2:3f:bd:1b:35:e3:3f: 67:a6:87:7a:17:bf:5d:67:2c:a0:41:07:5e:a1:c3: 80:79:27:2a:06:38:00:25:f3:62:d9:a8:c3:72:92: 60:35:2d:3b:22:34:f3:36:cc:68:63:9f:13:74:56: 43:9e:5e:42:1d:d0:64:91:b4:92:c6:e8:45:56:cc: 1c:65:b1:56:a2:a1:ba:a3:6b:a5:c3:5a:73:d3:35: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:04:AD:C1:96:14:08:51:EE:F5:12:A8:A7:65:16:D5:A9:80:D6:4C X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:09:e6:ac:99:e0:74:a5:fc:5f:dc:51:86:be:27:6a:06:c8: aa:29:28:df:64:db:e3:24:d9:23:a0:f1:fb:2c:6b:f8:03:ff: bf:ed:e7:d2:34:67:af:33:34:06:61:29:63:1d:b7:da:5f:31: 8e:e1:0c:35:53:6d:87:c9:ef:e3:9c:f0:f3:66:b2:87:ca:e5: 86:a7:b7:85:5e:9a:94:cf:e5:d1:00:1f:61:b4:04:4c:48:d7: 89:49:4f:3f:d3:c6:68:87:13:d6:a4:13:9e:67:b0:0a:7c:db: 37:da:fb:09:9b:69:68:85:e8:c4:b7:a2:ab:eb:ae:76:d4:49: d8:1e:53:92:3f:09:db:6b:87:76:1c:5e:a4:e7:9b:3e:1f:0c: 4d:7c:20:cf:8d:de:20:cc:7f:44:d2:07:f8:bb:ed:ed:12:a9: 1a:41:ce:8b:94:c2:eb:44:c6:30:20:0b:d8:20:c6:ee:79:87: cb:ab:9d:e7:d3:a4:61:e8:d2:bd:23:f5:40:d9:96:7d:7d:6f: 37:fd:6c:18:ff:7d:e1:e4:75:0a:0f:d8:38:cb:c7:c0:cb:5f: e2:6f:60:af:96:2f:cd:77:79:83:7b:bd:4a:34:0f:ea:eb:ac: fd:d0:01:8a:c0:cd:8a:d1:43:94:06:c5:ce:1c:9f:9e:04:b9: c7:04:cc:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCAkl6xXCJk/0IqmXaqUPdUNyCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA3MjAxNjM1NTVaFw0yNTA3MjQwMzI1NTVaMDMxMTAvBgNV BAMTKEQ1MDRBREMxOTYxNDA4NTFFRUY1MTJBOEE3NjUxNkQ1QTk4MEQ2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZMRnGjyfRCy9Bzy/sGbNzKzQ qcyyuk9XgE4NArecBw2Ap2J36jxIY1vDysRoaXNZxnM4MBKmwYdEXKMQIFUUfj70 lQUgi/z2+I8PZBthaT7Qw37z65vFEu+HZ6dRTTWhAG6IruI7PGasGsuPPFS4Y1oa aZ+fH/sSb0QFNOeU/prh3qkxDG2wYdgRheFyR44XXeSuJpu/urWayYO5CPtiBKM9 ft0S7XGpn1rVoj+9GzXjP2emh3oXv11nLKBBB16hw4B5JyoGOAAl82LZqMNykmA1 LTsiNPM2zGhjnxN0VkOeXkId0GSRtJLG6EVWzBxlsVaiobqja6XDWnPTNX4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1QStwZYUCFHu9RKop2UW1amA1kwwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEJ5qyZ4HSl/F/cUYa+J2oGyKopKN9k2+Mk 2SOg8fssa/gD/7/t59I0Z68zNAZhKWMdt9pfMY7hDDVTbYfJ7+Oc8PNmsofK5Yan t4VempTP5dEAH2G0BExI14lJTz/TxmiHE9akE55nsAp82zfa+wmbaWiF6MS3oqvr rnbUSdgeU5I/Cdtrh3YcXqTnmz4fDE18IM+N3iDMf0TSB/i77e0SqRpBzouUwutE xjAgC9ggxu55h8urnefTpGHo0r0j9UDZln19bzf9bBj/feHkdQoP2DjLx8DLX+Jv YK+WL813eYN7vUo0D+rrrP3QAYrAzYrRQ5QGxc4cn54EuccEzBo= -----END CERTIFICATE-----Generated at Mon Jul 21 02:01:57 2025 by rpki-client