$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: aqhgy0d9Z5G2hyh3XTCOWB2Lc8sibzaJNFFg2HQexmM= Subject key identifier: DB:70:6D:3F:8C:D6:70:55:BE:E5:2D:07:10:8A:F7:62:F8:0C:5E:88 Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 32F3E928C99EB0A5E814C51C77E2FF40B8652399 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 04C4 Signing time: Sat 06 Sep 2025 04:41:53 +0000 Manifest this update: Sat 06 Sep 2025 04:36:53 +0000 Manifest next update: Tue 09 Sep 2025 06:51:53 +0000 Files and hashes: 1: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: m1DfuLZZI3DaqZYopJu0iozjaHUtvrNANkDN9deJMd0=) 2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: XAdZjhJ8p/Sfbf/+znyNJnyeiAlF9/1TNV8duJLhiwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f3:e9:28:c9:9e:b0:a5:e8:14:c5:1c:77:e2:ff:40:b8:65:23:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Sep 6 04:36:53 2025 GMT Not After : Sep 9 06:51:53 2025 GMT Subject: CN=DB706D3F8CD67055BEE52D07108AF762F80C5E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:27:59:ad:c1:82:ac:34:fc:3f:d1:f8:b9: 0a:7a:db:da:4a:9c:a1:b5:ef:85:1f:6f:25:04:25: 97:26:d1:fe:15:b8:04:2e:d1:32:df:d1:00:08:3c: 54:16:2b:2e:5e:52:0d:b4:7d:72:4c:f7:1c:2d:80: ff:5a:c6:08:a8:e2:49:92:3c:a5:81:68:6c:84:2c: b5:eb:43:86:cf:2e:49:3b:bc:c3:3e:8f:f9:dc:cd: 38:eb:e6:54:4c:0b:41:bf:d2:bc:36:57:65:b0:11: 24:e7:83:04:61:fb:83:b0:0d:c7:ab:15:d3:f6:2a: 5a:33:c8:fc:5c:8c:2e:9e:20:ef:d4:f6:d1:78:0d: 96:1e:2a:b5:a0:eb:1e:b4:9d:cc:ea:86:eb:2c:7b: db:1a:66:cf:4c:fd:a0:31:a8:19:ee:ec:61:b1:d5: 08:ad:c4:e3:1d:cb:13:8c:29:d9:83:7a:82:41:28: 4f:c5:64:77:74:79:d9:de:34:00:44:79:fb:60:7a: 63:27:c3:91:24:ce:84:2d:c4:f5:44:d5:de:c3:60: 4e:8f:dd:de:2d:6f:63:56:8c:68:d4:b9:a7:27:b5: 6b:58:0e:08:8d:89:40:ad:ad:03:4a:6a:18:1e:74: 4d:5e:0f:f7:c3:bf:92:a8:96:79:63:61:77:df:34: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:70:6D:3F:8C:D6:70:55:BE:E5:2D:07:10:8A:F7:62:F8:0C:5E:88 X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ad:6a:2a:01:93:a7:ad:e6:96:d3:e2:c2:ef:4e:1d:71:8d: e6:75:78:8e:69:22:11:32:e8:1e:78:8c:e7:78:fb:5c:2a:f8: 85:c6:5d:73:7e:49:ea:0c:7e:b5:44:c1:45:a7:14:57:9c:12: fb:7f:19:bb:7b:0b:42:2a:b3:dd:48:90:3a:7a:dc:4d:0b:ba: a5:d7:2a:ea:46:7c:02:eb:36:34:77:d9:87:3e:be:5e:34:de: 84:14:8e:f2:6a:ac:a0:7c:a1:18:1b:9a:20:32:c0:79:52:5c: 42:f2:08:42:2b:81:cc:80:57:cf:bf:0d:4f:aa:60:47:ef:58: 35:5a:85:0a:4c:1e:c5:0e:8a:cb:cf:18:bd:cf:75:7b:44:c2: 40:62:cb:83:ec:fe:6f:59:63:10:a6:34:45:7c:f1:8f:1e:0d: 90:23:27:ac:93:d3:c9:5e:ea:82:b8:c1:50:fe:5a:53:2c:43: fc:2d:f2:40:1e:73:88:03:cd:fe:e3:97:53:15:62:68:6b:f0: 3c:6e:c8:5c:05:ae:cd:eb:81:8a:15:98:e2:15:07:26:74:1b: fa:01:cf:ee:8c:49:37:49:54:b3:1f:07:90:37:17:b7:e8:37: 29:41:61:60:7b:aa:32:25:a7:4d:32:fe:a1:ed:7d:ef:a0:57: bc:eb:aa:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvPpKMmesKXoFMUcd+L/QLhlI5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNTA5MDYwNDM2NTNaFw0yNTA5MDkwNjUxNTNaMDMxMTAvBgNV BAMTKERCNzA2RDNGOENENjcwNTVCRUU1MkQwNzEwOEFGNzYyRjgwQzVFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWydZrcGCrDT8P9H4uQp629pK nKG174UfbyUEJZcm0f4VuAQu0TLf0QAIPFQWKy5eUg20fXJM9xwtgP9axgio4kmS PKWBaGyELLXrQ4bPLkk7vMM+j/nczTjr5lRMC0G/0rw2V2WwESTngwRh+4OwDcer FdP2KlozyPxcjC6eIO/U9tF4DZYeKrWg6x60nczqhusse9saZs9M/aAxqBnu7GGx 1QitxOMdyxOMKdmDeoJBKE/FZHd0edneNABEeftgemMnw5EkzoQtxPVE1d7DYE6P 3d4tb2NWjGjUuacntWtYDgiNiUCtrQNKahgedE1eD/fDv5KolnljYXffNAFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23BtP4zWcFW+5S0HEIr3YvgMXogwHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFataioBk6et5pbT4sLvTh1xjeZ1eI5pIhEy 6B54jOd4+1wq+IXGXXN+SeoMfrVEwUWnFFecEvt/Gbt7C0Iqs91IkDp63E0LuqXX KupGfALrNjR32Yc+vl403oQUjvJqrKB8oRgbmiAywHlSXELyCEIrgcyAV8+/DU+q YEfvWDVahQpMHsUOisvPGL3PdXtEwkBiy4Ps/m9ZYxCmNEV88Y8eDZAjJ6yT08le 6oK4wVD+WlMsQ/wt8kAec4gDzf7jl1MVYmhr8DxuyFwFrs3rgYoVmOIVByZ0G/oB z+6MSTdJVLMfB5A3F7foNylBYWB7qjIlp00y/qHtfe+gV7zrqv4= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:51 2025 by rpki-client