$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: Bvh4IsPxsWONds4w8JsMsgFY5aGOMZXKn2IstwRN05w= Subject key identifier: 22:B8:51:50:9D:3F:CF:09:35:2F:96:67:3C:91:D3:35:4D:E9:07:E1 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 1DF3C097D3B794CF4642D89629DCB4D3436C4E35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 0105 Signing time: Sat 26 Jul 2025 04:30:00 +0000 Manifest this update: Sat 26 Jul 2025 04:25:00 +0000 Manifest next update: Tue 29 Jul 2025 11:24:00 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 2: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: 5LJKUqz4ZLX7JM1tcFsb+7VFzvCcalQcmkfRVjeC+d8=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 09:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f3:c0:97:d3:b7:94:cf:46:42:d8:96:29:dc:b4:d3:43:6c:4e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Jul 26 04:25:00 2025 GMT Not After : Jul 29 11:24:00 2025 GMT Subject: CN=22B851509D3FCF09352F96673C91D3354DE907E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:d8:8c:b5:12:1f:36:c7:1e:78:c6:a8:5b: 4b:09:a0:24:01:97:66:e2:a6:71:90:25:ca:50:88: 1d:b6:4c:95:95:5f:0c:45:ca:a5:0a:41:08:20:cc: ec:09:5f:1e:71:32:b1:ca:73:26:8b:45:f2:c8:d1: 90:58:89:57:1e:28:24:a0:a8:b3:24:f9:00:da:ec: 75:a3:25:18:3b:21:43:83:d2:17:fc:74:c0:cc:68: 5f:ad:b0:63:0e:54:d4:49:74:10:9a:50:92:74:44: c2:cb:b7:ab:24:71:dc:b7:c5:3a:70:ef:bd:28:2b: d7:d7:a2:53:c3:96:ae:9e:f7:68:10:a2:70:67:c4: 4d:ad:00:83:2b:d3:05:a2:39:50:19:58:ad:9f:ce: 43:ba:c3:65:dc:49:e1:15:d4:5f:71:13:d2:6c:e8: a2:17:4d:69:a4:be:cb:d1:1b:6c:3d:5a:99:ac:fc: f9:86:ec:28:91:d2:81:6c:13:ed:30:f9:6b:46:63: 95:fc:f0:40:80:9d:07:fb:16:48:88:37:89:df:4b: 00:90:28:a6:ec:89:00:0e:dd:0b:43:8b:27:ba:f7: 41:40:52:cc:85:82:1f:38:18:78:00:6e:08:8a:b0: 6d:2f:3d:da:6e:5a:a0:d3:0e:3d:6f:24:48:26:ae: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B8:51:50:9D:3F:CF:09:35:2F:96:67:3C:91:D3:35:4D:E9:07:E1 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e5:37:19:02:5a:53:99:65:86:09:81:11:5b:01:c5:0f:05: a4:9b:e5:e5:6a:42:0e:e5:d4:0e:e3:be:a2:49:f1:0e:17:db: 04:f7:1b:e3:46:ea:36:c6:e3:7e:56:a1:a0:cd:9f:f7:25:02: 9d:32:d4:dd:df:42:7f:8d:be:67:8a:f1:94:03:14:89:fe:a1: 42:72:02:e2:2d:4a:ed:c8:f9:6a:bd:9d:f3:5c:f7:a2:42:65: d7:52:ba:d8:ec:08:4a:0d:42:d5:6d:bf:23:f2:58:67:28:86: 00:63:b5:fb:09:c8:28:e7:91:99:1a:3b:68:e0:ad:80:19:4c: 72:a7:8e:b2:2b:f6:5d:4e:a6:fc:4d:c9:be:6d:37:6e:c9:5a: 5a:01:a2:e4:c2:5f:78:9d:35:b1:bf:b3:74:af:87:19:78:46: 8a:c7:d8:3e:5a:27:80:c5:28:b8:22:bc:ef:f4:4a:f9:cb:00: 4e:bb:30:e3:0f:6f:86:15:c9:0f:cb:ab:af:af:74:76:2a:87: 80:33:76:07:fa:21:a4:88:10:a2:d4:e9:b2:3b:eb:a3:04:73: 5b:9d:4d:b6:9a:4d:16:c5:1c:4f:5a:9e:cf:b1:ef:0b:4b:f4: 85:bc:c6:db:5b:1c:14:54:12:47:55:08:23:01:d7:df:12:5f: 1a:8e:00:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfPAl9O3lM9GQtiWKdy000NsTjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNTA3MjYwNDI1MDBaFw0yNTA3MjkxMTI0MDBaMDMxMTAvBgNV BAMTKDIyQjg1MTUwOUQzRkNGMDkzNTJGOTY2NzNDOTFEMzM1NERFOTA3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmtiMtRIfNsceeMaoW0sJoCQB l2bipnGQJcpQiB22TJWVXwxFyqUKQQggzOwJXx5xMrHKcyaLRfLI0ZBYiVceKCSg qLMk+QDa7HWjJRg7IUOD0hf8dMDMaF+tsGMOVNRJdBCaUJJ0RMLLt6skcdy3xTpw 770oK9fXolPDlq6e92gQonBnxE2tAIMr0wWiOVAZWK2fzkO6w2XcSeEV1F9xE9Js 6KIXTWmkvsvRG2w9Wpms/PmG7CiR0oFsE+0w+WtGY5X88ECAnQf7FkiIN4nfSwCQ KKbsiQAO3QtDiye690FAUsyFgh84GHgAbgiKsG0vPdpuWqDTDj1vJEgmrqrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIrhRUJ0/zwk1L5ZnPJHTNU3pB+EwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHflNxkCWlOZZYYJgRFbAcUPBaSb5eVqQg7l 1A7jvqJJ8Q4X2wT3G+NG6jbG435WoaDNn/clAp0y1N3fQn+NvmeK8ZQDFIn+oUJy AuItSu3I+Wq9nfNc96JCZddSutjsCEoNQtVtvyPyWGcohgBjtfsJyCjnkZkaO2jg rYAZTHKnjrIr9l1OpvxNyb5tN27JWloBouTCX3idNbG/s3Svhxl4RorH2D5aJ4DF KLgivO/0SvnLAE67MOMPb4YVyQ/Lq6+vdHYqh4Azdgf6IaSIEKLU6bI766MEc1ud TbaaTRbFHE9ans+x7wtL9IW8xttbHBRUEkdVCCMB198SXxqOAMU= -----END CERTIFICATE-----Generated at Sat Jul 26 19:05:19 2025 by rpki-client