$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json) Hash identifier: ivfcRaWexBl5jHgY2MmJgFHVoWGAIICPBZ+Lau1GFPU= Subject key identifier: F5:18:37:EB:55:78:35:AB:30:95:F5:00:2D:E8:55:F3:19:E2:CF:04 Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 4AC7777B92EAC8EC2793F0F4868A94F6E4DB9B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft Manifest number: 0509 Signing time: Wed 03 Sep 2025 21:10:55 +0000 Manifest this update: Wed 03 Sep 2025 21:05:55 +0000 Manifest next update: Sun 07 Sep 2025 04:55:55 +0000 Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=) 2: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: Ba6n0hdlypEqJR/F6chsvlxGcOjTObCrejiAWqZK+oE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:77:7b:92:ea:c8:ec:27:93:f0:f4:86:8a:94:f6:e4:db:9b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Sep 3 21:05:55 2025 GMT Not After : Sep 7 04:55:55 2025 GMT Subject: CN=F51837EB557835AB3095F5002DE855F319E2CF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ae:b3:06:ea:8b:c6:a0:49:a7:fd:1e:48:11: 90:c9:65:32:62:95:a6:67:6a:52:5b:32:81:b4:94: 77:71:d3:aa:95:12:34:9c:73:e8:41:b8:a5:69:20: 55:83:3d:9b:ba:6d:7d:1c:0f:c3:94:da:18:bb:6c: ad:ed:09:1e:33:5a:3c:03:60:50:bb:db:4e:d6:b2: dd:8a:f2:62:57:92:d9:0c:4a:78:39:dc:6e:39:db: 3f:c9:c2:92:4c:f9:98:b3:53:56:53:93:b1:a8:bc: a4:4f:19:ae:1a:bb:a6:23:d4:54:1b:ee:2a:19:20: 80:59:2d:0f:4f:b6:0f:85:4d:e0:d9:d9:ae:07:12: d5:39:44:39:2f:8f:71:02:16:cc:af:fd:9f:5d:14: 9d:0f:57:52:51:1f:03:2a:bd:6e:34:3e:ee:7d:86: f2:a7:39:7d:00:e3:fe:c1:c2:46:85:c2:5c:da:31: b8:e6:fb:d2:c7:bd:e7:bf:5d:03:e8:f0:e2:ed:09: cb:64:5e:27:03:fc:19:f5:14:46:15:a9:f4:5b:ad: 0c:4f:d0:02:bb:a4:e2:34:8d:d0:cd:e3:45:30:13: 38:80:77:07:e1:8c:3a:66:be:4a:d3:d8:6c:24:1f: 0d:eb:32:64:17:2d:f6:36:fa:33:60:af:22:59:a1: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:18:37:EB:55:78:35:AB:30:95:F5:00:2D:E8:55:F3:19:E2:CF:04 X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5e:e7:02:49:f9:14:92:3e:37:96:f0:0e:cd:42:d2:d8:9f: c9:de:35:17:6e:d4:55:1b:22:cb:84:17:42:50:e3:c0:93:7d: 91:03:56:f5:1c:11:b5:9c:d4:b2:cb:36:39:d4:23:a9:69:2e: fa:0c:7f:11:3f:30:46:d0:e4:82:ad:1d:e8:48:24:02:24:f7: f1:ea:45:2d:ba:51:4c:6b:e0:1e:a4:8f:75:1c:af:9a:3c:9d: ec:81:82:d0:25:ee:00:a7:01:0d:5b:23:cf:52:f2:ec:2d:21: 16:ea:f3:a1:2c:fa:18:0b:1f:35:65:14:11:0a:06:50:e6:1d: 0b:96:8d:82:fc:0b:e4:7a:7d:17:21:94:94:03:7e:04:e0:aa: 81:13:04:27:b6:3e:01:db:9d:e5:4b:bf:0c:27:dd:28:1e:3e: 5d:40:20:4b:9d:48:52:f3:9f:3a:7c:9c:15:ec:20:77:2a:0f: 4c:0e:05:e7:99:db:b2:da:8f:64:7b:e0:c7:69:33:fe:c7:c3: a1:4c:56:cc:14:b1:66:9c:19:a2:87:6f:cb:2b:8d:b2:09:c8: 4c:3f:52:73:4c:5c:96:0c:3a:43:ff:84:77:83:45:14:cb:5a: c6:dd:a0:be:eb:fe:2d:59:a2:03:13:73:46:e3:e4:ba:20:ef: 9d:de:64:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsd3e5LqyOwnk/D0hoqU9uTbmy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNTA5MDMyMTA1NTVaFw0yNTA5MDcwNDU1NTVaMDMxMTAvBgNV BAMTKEY1MTgzN0VCNTU3ODM1QUIzMDk1RjUwMDJERTg1NUYzMTlFMkNGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0rrMG6ovGoEmn/R5IEZDJZTJi laZnalJbMoG0lHdx06qVEjScc+hBuKVpIFWDPZu6bX0cD8OU2hi7bK3tCR4zWjwD YFC7207Wst2K8mJXktkMSng53G452z/JwpJM+ZizU1ZTk7GovKRPGa4au6Yj1FQb 7ioZIIBZLQ9Ptg+FTeDZ2a4HEtU5RDkvj3ECFsyv/Z9dFJ0PV1JRHwMqvW40Pu59 hvKnOX0A4/7BwkaFwlzaMbjm+9LHvee/XQPo8OLtCctkXicD/Bn1FEYVqfRbrQxP 0AK7pOI0jdDN40UwEziAdwfhjDpmvkrT2GwkHw3rMmQXLfY2+jNgryJZofC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Rg361V4NaswlfUALehV8xnizwQwHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1e5wJJ+RSSPjeW8A7NQtLYn8neNRdu1FUb IsuEF0JQ48CTfZEDVvUcEbWc1LLLNjnUI6lpLvoMfxE/MEbQ5IKtHehIJAIk9/Hq RS26UUxr4B6kj3Ucr5o8neyBgtAl7gCnAQ1bI89S8uwtIRbq86Es+hgLHzVlFBEK BlDmHQuWjYL8C+R6fRchlJQDfgTgqoETBCe2PgHbneVLvwwn3SgePl1AIEudSFLz nzp8nBXsIHcqD0wOBeeZ27Laj2R74MdpM/7Hw6FMVswUsWacGaKHb8srjbIJyEw/ UnNMXJYMOkP/hHeDRRTLWsbdoL7r/i1ZogMTc0bj5Log753eZJY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:38 2025 by rpki-client