$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: C3548sWD6J2M7C8sjSLNFBUAz+KQauJGHyeokzNCvro= Subject key identifier: 23:FA:E4:53:85:FD:BE:B8:8C:CB:8B:40:5B:4F:9E:E6:8B:00:16:BF Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 7B3BA80A5D74254C7C883C88D40C4469075D4054 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: CF Signing time: Fri 29 Aug 2025 23:12:03 +0000 Manifest this update: Fri 29 Aug 2025 23:07:03 +0000 Manifest next update: Tue 02 Sep 2025 02:03:03 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: axGKRvwNOcrQ0G/j+ooUTpUSWd2KevgWAvTYVLstRLY=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3b:a8:0a:5d:74:25:4c:7c:88:3c:88:d4:0c:44:69:07:5d:40:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Aug 29 23:07:03 2025 GMT Not After : Sep 2 02:03:03 2025 GMT Subject: CN=23FAE45385FDBEB88CCB8B405B4F9EE68B0016BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:b8:d1:cc:39:55:a2:76:7d:ee:d4:11:10: 47:2d:99:1f:70:a7:1c:d9:6c:91:79:ed:f8:04:fc: c9:6e:36:67:99:6f:57:48:41:5f:9c:18:2b:fc:9a: a0:df:87:f7:66:f6:17:a5:da:b8:da:0d:18:7a:c0: dd:fc:91:62:00:ab:be:c9:01:dd:d2:6b:e0:f2:a5: 06:33:8b:17:51:b5:55:f4:de:61:5b:05:fb:e8:03: 36:07:3c:64:74:4f:6c:fb:e1:de:28:98:8b:98:e3: 31:be:6e:de:6d:01:32:12:51:58:e7:55:8b:2e:b4: a3:3d:43:df:d5:7f:83:ef:d1:1f:55:00:98:30:1d: 4a:63:c8:a3:bb:3e:05:29:66:c6:96:fe:07:df:e5: c3:cb:3c:13:03:c8:ca:22:c5:1d:f8:77:7b:3c:35: 37:43:68:bb:d9:02:29:db:63:9c:58:55:3e:48:3b: cf:cc:6d:dc:07:51:27:68:50:56:cd:79:d7:ae:99: bc:d1:01:84:ac:a6:ac:d7:0d:45:52:4e:0d:a7:bb: 51:72:1b:53:50:b6:5e:e1:82:5d:ad:fb:53:24:4c: 46:df:ee:c9:6c:09:dc:d6:8b:b3:54:f9:aa:cd:c2: 4d:da:81:48:ef:e4:e1:2b:8d:7b:0e:65:f9:58:8d: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FA:E4:53:85:FD:BE:B8:8C:CB:8B:40:5B:4F:9E:E6:8B:00:16:BF X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:43:a3:e5:9f:ac:59:79:8e:5a:0b:bf:7f:f0:a0:e4:ca:2d: 9c:fc:dc:9d:b8:cc:ca:1c:0a:2f:cd:61:1d:74:a3:1f:2b:d3: 13:f1:f8:50:a5:13:f5:68:a1:37:26:40:05:8f:49:c9:53:78: 47:8e:c3:ad:5f:6c:bf:3c:71:5c:fe:79:aa:8d:55:a9:10:41: b1:9d:91:4f:be:e3:3b:d3:a4:d0:9a:d0:d7:74:f8:82:2a:fb: 23:fb:62:d6:99:42:08:86:d4:5e:3a:0c:64:8b:f8:ef:c6:eb: f8:b1:db:ad:96:44:1d:a9:5a:b6:8b:0c:4b:25:49:29:73:05: a2:4f:6c:e9:51:ea:ce:d0:0a:a6:dc:d8:24:b0:b1:74:39:27: 6c:00:c2:b4:f8:b8:21:9b:29:1e:fb:5e:0a:15:c8:4b:49:21: 61:a0:f9:ed:4c:c4:01:4f:68:95:b8:81:ce:c7:a7:c7:98:89: 3d:03:46:2a:6b:27:db:ed:78:21:58:d2:77:9a:c4:ca:a0:73: eb:9a:fb:34:33:48:72:d3:8b:b1:a2:62:c6:ef:8b:f4:5a:0c: 63:bd:26:70:0e:86:93:8a:29:e3:34:c3:52:69:a6:40:83:4f: dc:cc:1f:07:6e:93:2e:be:35:7f:4b:45:6f:78:16:b1:44:10: f6:04:0c:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezuoCl10JUx8iDyI1AxEaQddQFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTA4MjkyMzA3MDNaFw0yNTA5MDIwMjAzMDNaMDMxMTAvBgNV BAMTKDIzRkFFNDUzODVGREJFQjg4Q0NCOEI0MDVCNEY5RUU2OEIwMDE2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjLjRzDlVonZ97tQREEctmR9w pxzZbJF57fgE/MluNmeZb1dIQV+cGCv8mqDfh/dm9hel2rjaDRh6wN38kWIAq77J Ad3Sa+DypQYzixdRtVX03mFbBfvoAzYHPGR0T2z74d4omIuY4zG+bt5tATISUVjn VYsutKM9Q9/Vf4Pv0R9VAJgwHUpjyKO7PgUpZsaW/gff5cPLPBMDyMoixR34d3s8 NTdDaLvZAinbY5xYVT5IO8/MbdwHUSdoUFbNedeumbzRAYSspqzXDUVSTg2nu1Fy G1NQtl7hgl2t+1MkTEbf7slsCdzWi7NU+arNwk3agUjv5OErjXsOZflYjVdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI/rkU4X9vriMy4tAW0+e5osAFr8wHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZDo+WfrFl5jloLv3/woOTKLZz83J24zMoc Ci/NYR10ox8r0xPx+FClE/VooTcmQAWPSclTeEeOw61fbL88cVz+eaqNVakQQbGd kU++4zvTpNCa0Nd0+IIq+yP7YtaZQgiG1F46DGSL+O/G6/ix262WRB2pWraLDEsl SSlzBaJPbOlR6s7QCqbc2CSwsXQ5J2wAwrT4uCGbKR77XgoVyEtJIWGg+e1MxAFP aJW4gc7Hp8eYiT0DRiprJ9vteCFY0neaxMqgc+ua+zQzSHLTi7GiYsbvi/RaDGO9 JnAOhpOKKeM0w1JppkCDT9zMHwduky6+NX9LRW94FrFEEPYEDDM= -----END CERTIFICATE-----Generated at Sun Aug 31 13:56:55 2025 by rpki-client