$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: 7lR2vkF1s1kWRq+Ue/1Y8z5/ISWVwgCSZEL5fmKHSNg= Subject key identifier: 4D:5F:1B:26:9C:F2:F1:9C:56:7B:0D:13:99:FC:A9:ED:31:80:90:EB Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 4956E4D36DFBCA6622833A806C686C096EC3CF61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0204 Signing time: Mon 21 Jul 2025 13:21:04 +0000 Manifest this update: Mon 21 Jul 2025 13:16:04 +0000 Manifest next update: Thu 24 Jul 2025 23:05:04 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: ptkHzUCJdBUo2jPmqlzPzCOwAMuxCGay3zh5FpaUNm4=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 23:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:56:e4:d3:6d:fb:ca:66:22:83:3a:80:6c:68:6c:09:6e:c3:cf:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Jul 21 13:16:04 2025 GMT Not After : Jul 24 23:05:04 2025 GMT Subject: CN=4D5F1B269CF2F19C567B0D1399FCA9ED318090EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:68:11:a6:1a:c1:96:c2:1b:0f:6e:51:69: 5d:f5:0c:8e:e2:35:73:0f:cb:c2:ee:b5:7e:6c:fa: 0c:67:ae:1c:3d:be:8a:ec:9d:58:8f:fd:00:e2:b8: e0:2d:88:36:a7:84:ca:08:80:c3:ad:75:95:44:d3: ef:ba:35:7d:51:fa:bc:17:09:09:ef:31:e6:b2:e9: cf:cb:a1:70:c3:66:cd:b0:b8:28:81:66:a5:de:dc: f6:48:e9:3e:fc:33:da:cc:e9:d8:48:8c:ac:dd:a3: 6e:bd:3b:91:59:2e:12:e6:5c:14:4f:c9:93:c9:2e: 25:9f:e2:36:7b:91:73:3f:79:2a:89:68:65:db:ca: a4:5d:e4:21:f5:94:17:0c:53:18:a4:92:a0:c0:85: cb:0f:3a:65:d5:c3:f2:7b:d6:74:4d:67:c3:eb:e1: 47:83:40:78:2a:48:95:62:14:5a:25:ae:9f:59:ed: d8:30:29:46:97:e1:f6:96:14:68:39:76:b2:2d:93: a1:16:e5:5b:74:f5:b2:82:cf:37:06:f8:88:e2:e1: 4a:75:81:c2:95:19:78:33:ad:31:e7:fc:85:73:92: b5:7d:90:31:c2:b0:48:a5:4a:c9:7d:81:4a:25:4b: f0:61:5a:14:64:d7:46:93:a2:98:ce:83:37:b5:be: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5F:1B:26:9C:F2:F1:9C:56:7B:0D:13:99:FC:A9:ED:31:80:90:EB X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:3f:a6:e3:07:1d:bd:b6:fe:2c:63:cd:fa:e7:07:86:cc:d2: f6:52:f2:a8:ae:e9:cf:30:9f:0b:40:15:13:05:89:68:32:58: cb:00:79:65:df:65:19:1f:1d:1b:ae:8f:70:2f:74:ca:8f:1a: cb:f5:b4:6b:89:d7:27:ba:8b:7a:75:68:c0:0b:8b:a7:f2:b8: de:c1:6c:c3:63:ca:c7:1f:35:c1:57:21:84:70:62:a6:e6:66: 73:63:6f:9f:6f:ac:ff:79:c6:73:2f:1d:a2:51:ef:a9:16:dc: 99:85:02:99:0f:bc:1c:0e:37:c0:18:24:fd:10:97:e4:5e:6a: ff:fe:3e:7a:36:7f:a7:82:fb:44:0c:47:96:21:b9:02:8c:54: 54:a9:4f:e5:2a:c0:73:f0:08:c2:f5:b7:eb:5c:6f:12:d7:f9: 7b:aa:da:cd:b5:0b:86:87:73:32:ea:30:d6:71:c2:4b:09:f4: 22:cb:1e:40:59:c0:97:04:93:e6:ba:f1:47:9f:95:1d:96:bd: 7d:fd:cd:d3:be:fd:90:2b:69:96:66:b4:ce:1e:57:f6:17:a9: 6b:0c:f3:d4:ed:31:40:87:f4:0e:b6:fb:00:f2:f8:78:82:2c: ab:c3:e2:85:35:e9:04:fe:2b:18:f6:01:d3:61:2f:f5:16:e1: 80:72:d3:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVbk0237ymYigzqAbGhsCW7Dz2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTA3MjExMzE2MDRaFw0yNTA3MjQyMzA1MDRaMDMxMTAvBgNV BAMTKDRENUYxQjI2OUNGMkYxOUM1NjdCMEQxMzk5RkNBOUVEMzE4MDkwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/omgRphrBlsIbD25RaV31DI7i NXMPy8LutX5s+gxnrhw9vorsnViP/QDiuOAtiDanhMoIgMOtdZVE0++6NX1R+rwX CQnvMeay6c/LoXDDZs2wuCiBZqXe3PZI6T78M9rM6dhIjKzdo269O5FZLhLmXBRP yZPJLiWf4jZ7kXM/eSqJaGXbyqRd5CH1lBcMUxikkqDAhcsPOmXVw/J71nRNZ8Pr 4UeDQHgqSJViFFolrp9Z7dgwKUaX4faWFGg5drItk6EW5Vt09bKCzzcG+Iji4Up1 gcKVGXgzrTHn/IVzkrV9kDHCsEilSsl9gUolS/BhWhRk10aTopjOgze1viuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTV8bJpzy8ZxWew0Tmfyp7TGAkOswHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALU/puMHHb22/ixjzfrnB4bM0vZS8qiu6c8w nwtAFRMFiWgyWMsAeWXfZRkfHRuuj3AvdMqPGsv1tGuJ1ye6i3p1aMALi6fyuN7B bMNjyscfNcFXIYRwYqbmZnNjb59vrP95xnMvHaJR76kW3JmFApkPvBwON8AYJP0Q l+Reav/+Pno2f6eC+0QMR5YhuQKMVFSpT+UqwHPwCML1t+tcbxLX+Xuq2s21C4aH czLqMNZxwksJ9CLLHkBZwJcEk+a68UeflR2WvX39zdO+/ZAraZZmtM4eV/YXqWsM 89TtMUCH9A62+wDy+HiCLKvD4oU16QT+Kxj2AdNhL/UW4YBy010= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:13 2025 by rpki-client