$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: A+0GF6zyiRK/mEAgrklte+Ln0o73A4o/oqvBrejV8Rg= Subject key identifier: 04:A0:56:B4:4D:C4:40:46:0E:0A:0B:C5:58:D6:87:77:7F:E4:F7:76 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 65472486EAB4B9E4909BA6EDE8E736FFCBB5E511 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0225 Signing time: Tue 22 Jul 2025 20:30:36 +0000 Manifest this update: Tue 22 Jul 2025 20:25:36 +0000 Manifest next update: Sat 26 Jul 2025 01:51:36 +0000 Files and hashes: 1: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: aVqfOapB/c6AP72zFaQg1F05n6qKEYNC2UxpBvT1T4c=) 2: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 4: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:47:24:86:ea:b4:b9:e4:90:9b:a6:ed:e8:e7:36:ff:cb:b5:e5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Jul 22 20:25:36 2025 GMT Not After : Jul 26 01:51:36 2025 GMT Subject: CN=04A056B44DC440460E0A0BC558D687777FE4F776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:2f:b7:c0:2c:68:ee:98:36:cf:7a:42:8a: bb:a5:80:52:63:79:58:66:33:61:74:db:92:63:1c: 3c:ba:aa:d7:2d:7c:ba:1c:12:32:e1:23:1f:ee:b1: 1a:fb:77:2e:58:f7:81:b5:9f:a4:bc:04:cf:7a:e0: be:d2:48:48:06:02:6c:06:bc:a5:78:7b:06:45:5f: 3e:bf:1a:fa:99:e9:92:1e:96:24:75:be:2d:19:f3: 2e:a6:81:fc:44:e6:f4:98:5a:1e:44:0e:f1:e7:da: 5d:d4:c5:c6:22:2e:8f:e2:32:d0:a4:7c:05:0e:ad: a6:f7:da:52:38:2a:63:d0:8f:bd:7f:4c:32:d4:1f: 86:ff:5f:33:b5:58:57:a0:bf:25:96:c0:2f:bb:cd: 44:a8:52:18:13:fd:73:f4:f2:a7:4d:b0:b9:f4:80: 55:7b:23:ee:a6:6e:38:bd:5f:ca:10:f7:c3:08:7a: 1d:eb:fa:33:da:3c:80:0c:dc:a0:e0:a7:04:ea:25: 75:1e:d3:81:f9:96:8e:3b:c4:cb:d0:46:6f:99:c9: d3:b2:fb:a9:96:c2:1c:a4:f4:40:cf:70:bd:ae:3e: 6f:f9:96:fe:bf:0f:a8:aa:4f:15:5e:97:99:33:7d: 45:8e:23:38:a5:58:c7:fc:bd:a8:17:59:08:f5:5e: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A0:56:B4:4D:C4:40:46:0E:0A:0B:C5:58:D6:87:77:7F:E4:F7:76 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f3:57:cb:02:ee:02:4c:6b:18:4f:0f:66:6c:a4:bd:d0:cb: eb:44:46:be:79:62:57:43:a8:c8:90:3c:5e:08:21:80:3a:88: 45:7c:5a:aa:a7:bf:3c:c1:12:d1:c2:48:eb:54:24:71:6c:27: 7d:bc:28:de:d8:ba:7a:ec:6c:86:c4:fc:db:42:86:4e:6f:bd: f1:24:99:6d:a6:b6:82:46:c6:64:e3:c6:59:6a:80:4d:53:47: e6:5e:0a:87:55:30:52:ef:f5:55:b7:5b:56:d1:69:61:90:7e: 7a:06:e8:a2:56:93:12:8e:47:b2:52:08:51:0c:cf:80:67:31: af:42:8a:f6:23:b2:51:aa:c9:20:e8:e0:a5:5b:41:b0:38:75: d0:32:5c:ce:52:1d:23:fd:97:2c:29:d4:34:78:d7:51:d5:be: 99:ee:f9:66:d7:37:68:b3:3e:ba:73:e6:62:0d:54:28:f5:1a: 82:2c:5b:61:75:0c:7c:9a:42:45:c8:c4:b7:eb:9c:89:6e:49: e7:a9:f6:fc:30:ef:83:49:41:5b:56:97:83:0f:51:e9:f1:c3: 84:0e:cc:d5:46:97:9a:90:d9:49:47:da:14:25:10:2e:2d:11: c6:e3:46:dc:eb:d7:7d:01:33:65:86:7f:93:b1:7f:10:2c:de: 58:fa:78:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUckhuq0ueSQm6bt6Oc2/8u15REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA3MjIyMDI1MzZaFw0yNTA3MjYwMTUxMzZaMDMxMTAvBgNV BAMTKDA0QTA1NkI0NERDNDQwNDYwRTBBMEJDNTU4RDY4Nzc3N0ZFNEY3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenS+3wCxo7pg2z3pCirulgFJj eVhmM2F025JjHDy6qtctfLocEjLhIx/usRr7dy5Y94G1n6S8BM964L7SSEgGAmwG vKV4ewZFXz6/GvqZ6ZIeliR1vi0Z8y6mgfxE5vSYWh5EDvHn2l3UxcYiLo/iMtCk fAUOrab32lI4KmPQj71/TDLUH4b/XzO1WFegvyWWwC+7zUSoUhgT/XP08qdNsLn0 gFV7I+6mbji9X8oQ98MIeh3r+jPaPIAM3KDgpwTqJXUe04H5lo47xMvQRm+ZydOy +6mWwhyk9EDPcL2uPm/5lv6/D6iqTxVel5kzfUWOIzilWMf8vagXWQj1XqOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBKBWtE3EQEYOCgvFWNaHd3/k93YwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHzV8sC7gJMaxhPD2ZspL3Qy+tERr55YldD qMiQPF4IIYA6iEV8WqqnvzzBEtHCSOtUJHFsJ328KN7YunrsbIbE/NtChk5vvfEk mW2mtoJGxmTjxllqgE1TR+ZeCodVMFLv9VW3W1bRaWGQfnoG6KJWkxKOR7JSCFEM z4BnMa9CivYjslGqySDo4KVbQbA4ddAyXM5SHSP9lywp1DR411HVvpnu+WbXN2iz Prpz5mINVCj1GoIsW2F1DHyaQkXIxLfrnIluSeep9vww74NJQVtWl4MPUenxw4QO zNVGl5qQ2UlH2hQlEC4tEcbjRtzr130BM2WGf5OxfxAs3lj6eAU= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:03 2025 by rpki-client