$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: NMdgpjS9N6Bj3SuzEPs0e+4R77OB/djHQjPu2PPrbn8= Subject key identifier: D7:B0:41:0A:74:8A:11:76:9F:14:B5:5C:49:38:F9:0D:28:9A:21:45 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 278D6BE4AA1D1804FCBD2CB8538E57C803526F1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 048C Signing time: Tue 22 Jul 2025 06:31:01 +0000 Manifest this update: Tue 22 Jul 2025 06:26:01 +0000 Manifest next update: Fri 25 Jul 2025 08:42:01 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 2: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: T2dV9ECct1Ud7fOAgoF7v8UJVDJx36l7KpwFXhp6Z8U=) 3: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=) 4: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: r4bbE3J74imEfGNc3Yq/RkOZJXcnua5imBb7qm1BGas=) 5: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: Nt38t+ZCV8H0Bc6AapWzjaYOOOpjSD/QTADiZXNblg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 08:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8d:6b:e4:aa:1d:18:04:fc:bd:2c:b8:53:8e:57:c8:03:52:6f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Jul 22 06:26:01 2025 GMT Not After : Jul 25 08:42:01 2025 GMT Subject: CN=D7B0410A748A11769F14B55C4938F90D289A2145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:cf:89:25:0c:c3:ec:48:75:83:8b:d5:b6: 12:7b:34:8f:e7:3f:17:35:3c:4a:cd:80:86:3f:bc: f5:96:58:71:3a:8a:f4:8d:21:37:47:ff:4e:05:66: e8:be:b2:35:58:24:a3:33:6f:86:26:08:57:73:a0: cc:7d:b7:14:99:ef:1b:3c:4c:05:69:8e:b9:4c:1b: dd:17:0b:b8:9a:de:cd:57:ad:b8:03:ae:7d:13:25: 3d:40:e2:80:cf:e0:db:2b:9c:8c:7d:52:c1:a1:e7: 9a:52:a6:00:4f:ab:02:87:8a:64:1e:ad:07:fd:61: 28:16:e3:8e:dd:0f:a1:be:10:fa:98:58:89:08:c2: 1a:44:ac:47:34:61:70:f8:5e:cb:84:12:da:c1:6b: ee:43:c8:90:1d:d8:08:ab:9d:2d:4d:7a:24:c6:8a: 4c:ed:f3:86:93:62:09:17:0e:6a:cc:5d:c1:7a:5f: b7:df:9e:6f:5b:3d:3e:52:23:f4:e4:aa:74:66:6f: 14:fe:ff:8b:27:05:1d:06:da:1b:f9:5d:dd:b2:67: af:63:2d:bc:18:c4:f6:13:88:ed:56:da:b7:5f:94: 81:91:b5:7b:ac:d7:48:1f:ff:a3:ca:2c:71:ee:b4: 51:36:b2:bd:8e:be:25:63:0e:09:9c:e8:7b:f9:3b: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B0:41:0A:74:8A:11:76:9F:14:B5:5C:49:38:F9:0D:28:9A:21:45 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:d7:bf:0d:55:73:c6:14:09:20:27:fe:46:6e:a6:fb:cc:29: e9:71:4d:b3:6a:3e:eb:59:83:e1:09:57:e4:92:4c:90:8c:dc: 7f:66:94:5f:4c:89:77:bc:2e:7b:04:d7:82:5a:b5:8f:15:2b: 56:29:0e:92:39:e2:be:29:bb:48:62:f1:bc:44:cb:03:c2:91: e1:19:00:f8:47:df:4c:21:e1:5f:ff:fe:fd:4b:2c:7f:8f:2d: d7:d5:a7:4a:f1:2b:c6:29:ce:56:06:be:af:59:1c:b8:70:25: 02:de:7f:0c:a7:f7:44:3c:23:79:31:d0:ff:6f:6b:ef:2a:00: 2e:17:98:07:be:dc:8b:dc:d4:23:fc:07:b7:ec:ce:fb:48:11: 98:4f:3e:43:16:e2:af:09:d8:ee:d6:17:6e:38:04:d2:70:d7: 46:71:68:d2:a2:43:5f:26:9b:33:50:d9:bc:ce:bc:f5:5e:cc: 3f:9c:9b:20:0b:64:81:77:a6:c9:57:fd:36:d6:e6:b4:b4:fe: c5:49:92:80:55:1c:be:c9:06:8a:6b:4d:03:36:25:2d:26:41: f7:2f:94:d9:91:63:3c:50:04:81:83:69:65:19:c2:a0:07:d3: cb:49:6e:b4:52:42:e7:f5:77:4d:aa:7a:ba:a0:31:2a:e7:4d: ef:70:17:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ41r5KodGAT8vSy4U45XyANSbxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA3MjIwNjI2MDFaFw0yNTA3MjUwODQyMDFaMDMxMTAvBgNV BAMTKEQ3QjA0MTBBNzQ4QTExNzY5RjE0QjU1QzQ5MzhGOTBEMjg5QTIxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNb8+JJQzD7Eh1g4vVthJ7NI/n Pxc1PErNgIY/vPWWWHE6ivSNITdH/04FZui+sjVYJKMzb4YmCFdzoMx9txSZ7xs8 TAVpjrlMG90XC7ia3s1XrbgDrn0TJT1A4oDP4NsrnIx9UsGh55pSpgBPqwKHimQe rQf9YSgW447dD6G+EPqYWIkIwhpErEc0YXD4XsuEEtrBa+5DyJAd2AirnS1NeiTG ikzt84aTYgkXDmrMXcF6X7ffnm9bPT5SI/TkqnRmbxT+/4snBR0G2hv5Xd2yZ69j LbwYxPYTiO1W2rdflIGRtXus10gf/6PKLHHutFE2sr2OviVjDgmc6Hv5O5eFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17BBCnSKEXafFLVcSTj5DSiaIUUwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/Xvw1Vc8YUCSAn/kZupvvMKelxTbNqPutZ g+EJV+SSTJCM3H9mlF9MiXe8LnsE14JatY8VK1YpDpI54r4pu0hi8bxEywPCkeEZ APhH30wh4V///v1LLH+PLdfVp0rxK8YpzlYGvq9ZHLhwJQLefwyn90Q8I3kx0P9v a+8qAC4XmAe+3Ivc1CP8B7fszvtIEZhPPkMW4q8J2O7WF244BNJw10ZxaNKiQ18m mzNQ2bzOvPVezD+cmyALZIF3pslX/TbW5rS0/sVJkoBVHL7JBoprTQM2JS0mQfcv lNmRYzxQBIGDaWUZwqAH08tJbrRSQuf1d02qerqgMSrnTe9wF1Q= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:09 2025 by rpki-client