$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: TpSQv5zWhEt3R14EeWKZLIuE4wXtPSnnvNTYJEBUvTY= Subject key identifier: CF:AB:CF:33:85:4A:F6:7E:55:E2:63:EF:0B:3C:9C:67:D7:33:A2:13 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 3CAA8DBA5B6117F5FA40054CF3A720840263B717 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 01E2 Signing time: Sat 06 Sep 2025 07:30:51 +0000 Manifest this update: Sat 06 Sep 2025 07:25:51 +0000 Manifest next update: Tue 09 Sep 2025 14:40:51 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) 2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: uRXNdZ69Ok63UuonVzH97vjVab+39YMfVEAST5forU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:aa:8d:ba:5b:61:17:f5:fa:40:05:4c:f3:a7:20:84:02:63:b7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Sep 6 07:25:51 2025 GMT Not After : Sep 9 14:40:51 2025 GMT Subject: CN=CFABCF33854AF67E55E263EF0B3C9C67D733A213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:23:e6:e2:6f:e9:13:79:bf:0d:9a:ce:e0:da: 4a:58:f8:64:8c:6d:61:22:24:51:a2:b4:a7:73:e7: db:53:94:49:46:9f:9d:8a:86:99:84:c0:cf:91:b9: 4a:bb:14:d4:72:b5:34:7c:39:5b:08:c4:02:47:1d: 23:2e:0b:66:0d:9c:94:29:f4:13:32:04:fe:21:25: 54:0c:8b:18:f2:c3:0a:b6:d6:45:2b:5c:48:2b:24: 6e:e7:b4:a2:cd:e6:f4:6a:0c:26:19:25:43:b1:ea: 6d:e2:f2:a8:b0:f3:d4:f9:46:50:44:71:80:78:78: 20:6c:b6:81:c4:ef:ff:55:f8:0f:7c:70:4d:6d:19: ce:a4:5e:36:c8:b8:6f:d0:2b:f3:b4:5d:5e:ae:b2: b9:24:8f:39:3b:00:61:c4:ba:b5:0c:c1:96:65:35: 79:f4:b4:55:cc:56:3e:b2:10:86:c0:e0:ec:63:71: 94:b3:96:19:7a:98:e7:99:92:fe:57:de:4e:7c:7b: ce:60:5c:fd:b5:32:20:1b:59:5b:7f:dc:cf:d6:3d: f0:ad:e1:f3:b8:7f:18:dc:d5:cd:71:b5:e0:16:6c: 20:8c:2b:f0:1c:9f:61:e1:99:a3:68:26:a0:29:e0: 16:68:ef:3b:d1:5a:92:ca:c3:5d:53:4a:3d:f0:4f: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AB:CF:33:85:4A:F6:7E:55:E2:63:EF:0B:3C:9C:67:D7:33:A2:13 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a0:13:59:fd:86:c4:eb:38:5e:d2:a6:c6:47:24:3b:1e:fc: e8:ab:fe:6e:d4:65:34:c4:8b:aa:a3:93:c8:6a:10:67:68:89: c1:6b:57:86:9e:a7:e0:46:15:cf:a8:e6:e4:0a:57:0b:67:c4: 30:2f:6f:54:39:2e:b6:91:f1:85:e2:a1:4e:c2:51:de:16:6a: fd:2c:7f:51:06:30:d9:bf:a6:40:54:bc:5b:2b:5a:95:3a:53: 3a:57:2a:6b:6b:2f:18:4b:58:fb:65:a5:f7:f8:91:d1:4b:4c: 7d:1c:3f:d7:0b:75:30:a5:7d:8c:3c:4f:d0:21:b4:be:f3:b8: fd:cc:c9:3b:02:8b:85:ee:7e:84:13:4b:a1:32:72:b0:ce:0f: eb:2f:42:22:3f:60:ca:23:f2:9a:b8:f6:a1:e7:95:a0:5b:8d: 25:33:5f:e4:52:c9:ca:29:99:4a:29:47:91:61:f0:e5:e3:62: 38:e6:66:e5:1a:82:2a:94:dc:af:d1:8e:5d:75:a7:5e:3a:85: 88:ed:cd:a9:04:23:2c:2f:e9:da:1d:4b:47:38:6d:64:d2:7d: 27:3a:7a:35:99:f4:4c:b6:e5:7c:2a:c0:b7:15:5d:81:91:e1: c9:d3:dd:83:24:cc:d6:bb:d7:9d:6b:9f:16:50:d2:11:71:5b: 2a:16:88:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKqNulthF/X6QAVM86cghAJjtxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTA5MDYwNzI1NTFaFw0yNTA5MDkxNDQwNTFaMDMxMTAvBgNV BAMTKENGQUJDRjMzODU0QUY2N0U1NUUyNjNFRjBCM0M5QzY3RDczM0EyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqI+bib+kTeb8Nms7g2kpY+GSM bWEiJFGitKdz59tTlElGn52KhpmEwM+RuUq7FNRytTR8OVsIxAJHHSMuC2YNnJQp 9BMyBP4hJVQMixjywwq21kUrXEgrJG7ntKLN5vRqDCYZJUOx6m3i8qiw89T5RlBE cYB4eCBstoHE7/9V+A98cE1tGc6kXjbIuG/QK/O0XV6usrkkjzk7AGHEurUMwZZl NXn0tFXMVj6yEIbA4OxjcZSzlhl6mOeZkv5X3k58e85gXP21MiAbWVt/3M/WPfCt 4fO4fxjc1c1xteAWbCCMK/Acn2HhmaNoJqAp4BZo7zvRWpLKw11TSj3wT1f1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6vPM4VK9n5V4mPvCzycZ9czohMwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6gE1n9hsTrOF7SpsZHJDse/Oir/m7UZTTE i6qjk8hqEGdoicFrV4aep+BGFc+o5uQKVwtnxDAvb1Q5LraR8YXioU7CUd4Wav0s f1EGMNm/pkBUvFsrWpU6UzpXKmtrLxhLWPtlpff4kdFLTH0cP9cLdTClfYw8T9Ah tL7zuP3MyTsCi4XufoQTS6EycrDOD+svQiI/YMoj8pq49qHnlaBbjSUzX+RSycop mUopR5Fh8OXjYjjmZuUagiqU3K/Rjl11p146hYjtzakEIywv6dodS0c4bWTSfSc6 ejWZ9Ey25XwqwLcVXYGR4cnT3YMkzNa7151rnxZQ0hFxWyoWiNc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:50 2025 by rpki-client