$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft File: 1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json) Hash identifier: SJMzNZyMJOznFPRVJdH8rTzEQLMkjZi9tWKWEg2ZcdI= Subject key identifier: 84:9A:29:1D:78:D7:51:4E:BE:4D:3E:DB:58:2F:3A:B7:1D:91:78:8D Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 494793D6459B38324EFD8590A954E97AA572A53F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft Manifest number: 01EC Signing time: Sat 19 Jul 2025 08:41:33 +0000 Manifest this update: Sat 19 Jul 2025 08:36:33 +0000 Manifest next update: Tue 22 Jul 2025 18:19:33 +0000 Files and hashes: 1: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: 83g1exgFqaTQKU38X1D6x0BtWT5D2KATwMghhQSp0Hg=) 2: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: EFHYC7XhG7MQGG+p71C9PeqM87F/0AnjgXarEbD+y4E=) 3: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: AS7ErBWYOh3ltpqaacXCmV2CVPom+cE/4rFVdqtAK+c=) 4: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: ykRWiMSaAsP4Z39Whyu3kvlehUT+9RaQnqBPMyF4FR0=) 5: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: sJCm2ee/pkpEqZ3CTb0n1XRlqsVPP4kAsamQV7lnrGA=) 6: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: fZAiOWcSo18d+kOC8HhNCJ9gsqMP/VJEIPGm1Y7BJC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:47:93:d6:45:9b:38:32:4e:fd:85:90:a9:54:e9:7a:a5:72:a5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Jul 19 08:36:33 2025 GMT Not After : Jul 22 18:19:33 2025 GMT Subject: CN=849A291D78D7514EBE4D3EDB582F3AB71D91788D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:19:ec:94:c9:f3:97:69:ff:74:46:cf:8f: 3d:26:bb:da:fb:5c:8a:1b:10:a2:bb:f9:bc:45:a3: 8f:85:d1:a6:38:c5:47:b6:04:9b:b8:02:ba:5e:f8: ec:99:2b:1f:a5:dc:49:ec:de:d0:b4:02:f0:a7:74: 3b:a6:5c:04:cb:31:c5:a0:85:ac:6a:ff:c7:b0:5c: 64:24:5c:6a:27:fa:8e:b7:4d:67:d9:e3:ae:e7:4b: c1:42:ec:6e:7c:dd:67:a3:e6:af:ed:8e:81:cc:f6: 36:94:36:89:e4:fb:69:43:79:e6:5e:9c:fb:95:25: 72:e6:11:2e:84:c3:57:7e:a8:c0:a2:91:dd:b0:6c: e5:1f:89:58:f1:7b:cb:57:80:31:f0:e3:10:97:34: be:0e:c6:9b:f7:7c:ae:36:bb:77:83:a1:d3:ef:74: 44:9f:2f:a2:65:bc:ff:86:9d:c6:de:2c:d7:3e:91: 55:20:93:ef:4e:08:03:f7:f4:14:ff:76:be:8e:23: bf:a4:b3:5a:01:7f:51:49:ff:b7:e6:05:f1:0b:fe: 13:0a:d2:ff:6c:a2:84:82:97:cf:e2:29:f2:95:62: 1b:cb:f4:2d:4c:30:62:26:27:ee:fb:a3:ba:44:b9: 99:1d:8e:42:7c:a6:e2:42:83:8c:7c:1d:cd:d9:78: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9A:29:1D:78:D7:51:4E:BE:4D:3E:DB:58:2F:3A:B7:1D:91:78:8D X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:df:4e:81:87:d9:5e:d9:01:5b:8c:e4:9a:66:fc:7b:a8:d4: b9:74:d3:4a:01:f8:7c:98:ac:c4:c6:a2:80:8c:d9:f5:c0:5b: 99:45:7a:3f:7b:8f:1c:f2:b5:ba:de:d3:04:b2:b1:09:b7:59: 6e:0c:5b:8c:03:f7:4c:93:3c:1d:97:2a:07:af:43:44:a4:0d: bf:1b:cd:60:84:28:5b:b4:ee:23:9b:db:3d:96:1a:4e:74:dd: 11:eb:b9:14:11:a7:2d:9c:04:34:77:76:eb:db:c5:2a:c1:da: 49:5b:aa:50:36:1e:01:e4:4e:c9:3b:d9:e5:16:04:49:49:df: 31:19:c7:56:b8:da:c8:0d:a2:d0:04:58:e7:6e:eb:6a:2f:b0: 75:1d:13:36:7c:04:91:b8:56:51:60:e5:1d:ef:f5:58:cc:a2: cb:e6:c0:f6:42:cc:d1:5f:d1:31:29:48:19:c9:96:ef:a1:fb: 1c:a5:89:36:32:ad:3e:a2:d5:ce:ab:1a:54:58:d4:38:83:a1: de:ce:ae:c2:0a:47:67:3f:a5:89:c7:1e:af:55:02:c2:6e:6f: 83:d0:4d:fd:8a:85:dd:ae:b1:b5:9c:a7:7c:33:d4:9a:56:b6: f0:73:5c:2d:59:a6:a7:98:60:51:bf:a7:30:aa:08:8a:a1:43: cc:1d:43:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUeT1kWbODJO/YWQqVTpeqVypT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNTA3MTkwODM2MzNaFw0yNTA3MjIxODE5MzNaMDMxMTAvBgNV BAMTKDg0OUEyOTFENzhENzUxNEVCRTREM0VEQjU4MkYzQUI3MUQ5MTc4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswRnslMnzl2n/dEbPjz0mu9r7 XIobEKK7+bxFo4+F0aY4xUe2BJu4Arpe+OyZKx+l3Ens3tC0AvCndDumXATLMcWg haxq/8ewXGQkXGon+o63TWfZ467nS8FC7G583Wej5q/tjoHM9jaUNonk+2lDeeZe nPuVJXLmES6Ew1d+qMCikd2wbOUfiVjxe8tXgDHw4xCXNL4Oxpv3fK42u3eDodPv dESfL6JlvP+GncbeLNc+kVUgk+9OCAP39BT/dr6OI7+ks1oBf1FJ/7fmBfEL/hMK 0v9sooSCl8/iKfKVYhvL9C1MMGImJ+77o7pEuZkdjkJ8puJCg4x8Hc3ZeKEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJopHXjXUU6+TT7bWC86tx2ReI0wHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmMmMwMjUtMWQ3Ni00YTM2LTgx NjAtYTllOGFmZTM1NzlmLzAvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1 OUVBMDk3MzUzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvfToGH2V7ZAVuM5Jpm/Huo1Ll000oB+HyY rMTGooCM2fXAW5lFej97jxzytbre0wSysQm3WW4MW4wD90yTPB2XKgevQ0SkDb8b zWCEKFu07iOb2z2WGk503RHruRQRpy2cBDR3duvbxSrB2klbqlA2HgHkTsk72eUW BElJ3zEZx1a42sgNotAEWOdu62ovsHUdEzZ8BJG4VlFg5R3v9VjMosvmwPZCzNFf 0TEpSBnJlu+h+xyliTYyrT6i1c6rGlRY1DiDod7OrsIKR2c/pYnHHq9VAsJub4PQ Tf2Khd2usbWcp3wz1JpWtvBzXC1ZpqeYYFG/pzCqCIqhQ8wdQ78= -----END CERTIFICATE-----Generated at Sun Jul 20 21:58:21 2025 by rpki-client