$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: gd+yt+sm687Ywk7ihpO6zvWH3zDKpGgjBacRRP4shA8= Subject key identifier: 7F:F8:A3:C3:16:69:98:56:86:2E:39:39:AD:6B:54:82:DC:0F:E5:83 Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 681BB111BE6C3E5BE40F54495FDD19669D19DC0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 01ED Signing time: Sun 20 Jul 2025 19:11:43 +0000 Manifest this update: Sun 20 Jul 2025 19:06:43 +0000 Manifest next update: Thu 24 Jul 2025 06:25:43 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) 2: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: NCYxNu5TrL24NCG83AVzOMVRJyhKF0rhIa8hqNF7jsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1b:b1:11:be:6c:3e:5b:e4:0f:54:49:5f:dd:19:66:9d:19:dc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Jul 20 19:06:43 2025 GMT Not After : Jul 24 06:25:43 2025 GMT Subject: CN=7FF8A3C316699856862E3939AD6B5482DC0FE583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:94:ec:b2:5c:07:2b:93:ad:1b:bc:28:ff: 6f:72:2e:39:0d:48:dc:2d:7f:02:ed:ff:ef:65:f5: f7:0c:74:e0:d1:17:3d:bd:86:7d:55:10:37:d7:b2: ef:e4:04:21:7c:14:01:13:17:a8:4d:ac:4a:5e:82: a7:ff:33:dc:5c:f6:dc:f5:2f:e6:17:9e:28:e6:df: 10:35:13:8d:f1:25:fd:28:40:7a:72:fc:a3:74:ae: 00:d7:69:e5:96:3c:b8:56:46:8a:4d:f5:38:3c:de: a9:6f:03:d4:4d:85:37:1f:b6:e3:5c:b1:e6:32:74: 46:12:04:b8:eb:eb:a8:59:41:db:81:d0:3a:a0:c3: d9:84:a7:56:ca:ec:86:aa:64:da:10:1d:61:f9:a8: dc:41:30:97:fe:47:22:b5:98:9f:1c:08:22:e5:a2: 37:6c:06:2d:42:be:f9:aa:26:6b:54:24:28:cc:3e: e1:f2:c8:6b:0d:78:18:a4:34:78:df:f6:bd:ff:25: 67:0d:c0:f4:80:39:3f:d0:8a:84:91:25:db:9d:bb: b7:76:8e:84:0f:1c:be:fb:08:1a:7c:ed:78:27:20: 0a:f5:7e:94:11:2c:83:fc:2e:d1:c6:b4:58:ee:e8: d7:43:17:c2:dd:2b:57:d1:56:a6:1f:ac:9e:57:2f: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F8:A3:C3:16:69:98:56:86:2E:39:39:AD:6B:54:82:DC:0F:E5:83 X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:05:db:97:19:0e:40:99:3f:02:61:7e:a4:6c:38:e0:a4:05: 71:6b:93:2b:9d:f6:e9:88:f2:83:40:c4:cd:5d:87:28:4d:0b: e3:2c:0b:98:0a:ae:37:f6:35:ac:14:de:67:18:fd:64:6b:31: 93:8c:0b:bf:f5:57:a2:21:fa:d9:81:88:fe:08:ff:74:30:a8: 86:55:cc:f2:e9:7c:5d:8d:dd:91:7f:3b:b5:f5:73:23:67:17: 98:56:c7:4b:a5:cb:d4:52:ad:e9:5c:71:ad:9f:7b:10:d8:8b: fb:98:9e:1e:df:4f:8c:61:04:a1:77:f7:08:c7:37:2b:ed:d6: b7:0b:42:7f:79:a0:28:3d:bb:c8:ee:e4:27:d2:84:33:bb:95: 2b:cb:b6:c7:c6:89:e7:32:b0:27:1f:cd:6f:4b:fb:84:1b:8b: 55:65:3f:96:b3:7e:c0:0a:1f:1a:7c:9b:1d:48:5e:e1:77:f1: 21:43:52:b6:8c:60:c2:9f:0d:12:ec:0a:84:22:d8:76:d6:ce: 95:aa:e6:a7:8b:2e:db:9c:52:3e:b4:c0:c8:b2:a4:13:17:db: 58:7b:b8:80:f5:ed:75:43:5e:51:54:69:58:c1:eb:c6:74:d1: 70:f6:fa:1a:1f:f6:f7:8d:a2:78:c1:39:8d:02:da:10:4e:18: d3:68:cb:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBuxEb5sPlvkD1RJX90ZZp0Z3A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNTA3MjAxOTA2NDNaFw0yNTA3MjQwNjI1NDNaMDMxMTAvBgNV BAMTKDdGRjhBM0MzMTY2OTk4NTY4NjJFMzkzOUFENkI1NDgyREMwRkU1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIpTsslwHK5OtG7wo/29yLjkN SNwtfwLt/+9l9fcMdODRFz29hn1VEDfXsu/kBCF8FAETF6hNrEpegqf/M9xc9tz1 L+YXnijm3xA1E43xJf0oQHpy/KN0rgDXaeWWPLhWRopN9Tg83qlvA9RNhTcftuNc seYydEYSBLjr66hZQduB0Dqgw9mEp1bK7IaqZNoQHWH5qNxBMJf+RyK1mJ8cCCLl ojdsBi1CvvmqJmtUJCjMPuHyyGsNeBikNHjf9r3/JWcNwPSAOT/QioSRJdudu7d2 joQPHL77CBp87XgnIAr1fpQRLIP8LtHGtFju6NdDF8LdK1fRVqYfrJ5XL9BvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/ijwxZpmFaGLjk5rWtUgtwP5YMwHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEF25cZDkCZPwJhfqRsOOCkBXFrkyud9umI 8oNAxM1dhyhNC+MsC5gKrjf2NawU3mcY/WRrMZOMC7/1V6Ih+tmBiP4I/3QwqIZV zPLpfF2N3ZF/O7X1cyNnF5hWx0uly9RSrelcca2fexDYi/uYnh7fT4xhBKF39wjH Nyvt1rcLQn95oCg9u8ju5CfShDO7lSvLtsfGiecysCcfzW9L+4Qbi1VlP5azfsAK Hxp8mx1IXuF38SFDUraMYMKfDRLsCoQi2HbWzpWq5qeLLtucUj60wMiypBMX21h7 uID17XVDXlFUaVjB68Z00XD2+hof9veNonjBOY0C2hBOGNNoy6U= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:25 2025 by rpki-client