$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: XY44ymEpyFUugfj/YPVYV8kdGnisBmlphh3FzxhtMyM= Subject key identifier: 30:A0:51:27:3E:1B:88:A2:ED:67:AF:AE:BB:B9:E6:31:7B:F5:7F:22 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 4409F18EBDB7B5D46A77DF6EF7285854ECE41E6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: B9 Signing time: Sun 20 Jul 2025 17:40:40 +0000 Manifest this update: Sun 20 Jul 2025 17:35:40 +0000 Manifest next update: Thu 24 Jul 2025 03:38:40 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: 5ClhwsNG7ir5iQQcvpfEFfyBTfdJeowhiRd+XaxpLpc=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:09:f1:8e:bd:b7:b5:d4:6a:77:df:6e:f7:28:58:54:ec:e4:1e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Jul 20 17:35:40 2025 GMT Not After : Jul 24 03:38:40 2025 GMT Subject: CN=30A051273E1B88A2ED67AFAEBBB9E6317BF57F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:ef:54:9f:ae:96:ee:15:cf:bd:f0:fc:bf: 1a:4b:6c:61:f2:c5:9c:c8:8c:53:e7:5f:28:9e:da: b3:bc:43:40:2f:6b:3c:e5:04:0a:e6:27:0a:37:71: 2f:78:52:19:73:f4:f7:0d:c0:6d:d0:e3:bb:d5:b4: ec:8f:80:33:ad:ce:57:a8:a1:d5:26:ba:f9:fe:de: fa:8f:01:68:75:e6:c1:d4:dc:fd:56:af:6b:e9:75: e3:4d:76:99:4e:6e:c1:a3:83:0d:50:87:60:92:b5: e5:83:fe:7d:b2:cb:2b:66:74:a2:e2:24:f7:04:cd: 93:96:e1:f4:cc:73:5b:88:6e:7e:cf:21:63:7b:7c: a9:37:bf:97:68:a6:0d:c8:3c:47:40:b0:f1:3f:04: 17:80:fd:29:df:a2:a9:4e:1f:dd:9f:8f:9d:1a:11: 63:03:4f:76:da:78:da:5b:4c:70:58:f0:4a:58:37: b4:0b:69:25:31:6c:c3:c9:a6:2b:28:9f:31:4f:b1: 48:47:88:a3:82:98:16:15:d3:84:7d:39:ca:39:39: 04:17:9c:d3:eb:25:fe:97:75:6d:d8:fa:d7:e0:fa: 54:e5:cc:2c:b5:37:48:9e:ed:60:68:ae:4e:d0:65: 43:0b:36:7b:5a:e2:65:4c:c1:b7:ae:0b:06:f3:a1: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A0:51:27:3E:1B:88:A2:ED:67:AF:AE:BB:B9:E6:31:7B:F5:7F:22 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a4:e2:14:0b:17:1f:b0:d5:12:64:05:ae:5b:a9:13:b8:59: c9:d3:f5:b1:c8:1e:66:34:39:42:87:67:78:79:be:bc:d6:c2: 04:5f:c4:b3:98:f9:0f:9f:71:6a:a2:c8:d8:54:40:23:02:1a: 5c:a8:e9:b8:b1:3d:6e:30:cb:f6:8e:ad:21:a1:f0:a5:47:3c: 11:7d:7f:05:5a:c5:5c:e9:fb:cc:59:56:0a:92:4e:16:26:35: bd:2c:20:46:31:3e:69:d1:33:d6:3e:48:92:30:e9:11:17:9d: f1:11:85:e6:bb:af:77:75:41:2a:95:9a:ca:24:13:60:ad:94: 16:c6:4f:10:cf:bb:b3:69:48:58:b1:77:f3:ad:77:4d:2e:77: 89:a0:c1:cc:29:5a:0a:07:0e:2d:83:bb:68:d8:df:84:28:45: 2a:80:64:a7:b7:f1:28:30:a4:9d:ad:93:7f:6d:79:12:4d:ca: 2c:24:97:1b:55:29:76:67:dc:34:de:0b:63:ef:7e:02:6f:3f: 23:3e:6a:89:7b:78:5e:f9:39:6b:78:4c:07:2d:4a:7f:a3:bc: 03:65:2e:ec:3b:d9:c9:47:7e:22:a8:14:9a:b9:3b:d7:9a:cb: a5:83:f1:68:9c:c8:51:f5:1f:a4:60:ae:d2:83:db:00:d8:59: f7:01:40:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAnxjr23tdRqd99u9yhYVOzkHm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTA3MjAxNzM1NDBaFw0yNTA3MjQwMzM4NDBaMDMxMTAvBgNV BAMTKDMwQTA1MTI3M0UxQjg4QTJFRDY3QUZBRUJCQjlFNjMxN0JGNTdGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NO9Un66W7hXPvfD8vxpLbGHy xZzIjFPnXyie2rO8Q0AvazzlBArmJwo3cS94Uhlz9PcNwG3Q47vVtOyPgDOtzleo odUmuvn+3vqPAWh15sHU3P1Wr2vpdeNNdplObsGjgw1Qh2CSteWD/n2yyytmdKLi JPcEzZOW4fTMc1uIbn7PIWN7fKk3v5dopg3IPEdAsPE/BBeA/SnfoqlOH92fj50a EWMDT3baeNpbTHBY8EpYN7QLaSUxbMPJpisonzFPsUhHiKOCmBYV04R9Oco5OQQX nNPrJf6XdW3Y+tfg+lTlzCy1N0ie7WBork7QZUMLNnta4mVMwbeuCwbzockXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKBRJz4biKLtZ6+uu7nmMXv1fyIwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSk4hQLFx+w1RJkBa5bqRO4WcnT9bHIHmY0 OUKHZ3h5vrzWwgRfxLOY+Q+fcWqiyNhUQCMCGlyo6bixPW4wy/aOrSGh8KVHPBF9 fwVaxVzp+8xZVgqSThYmNb0sIEYxPmnRM9Y+SJIw6REXnfERhea7r3d1QSqVmsok E2CtlBbGTxDPu7NpSFixd/Otd00ud4mgwcwpWgoHDi2Du2jY34QoRSqAZKe38Sgw pJ2tk39teRJNyiwklxtVKXZn3DTeC2PvfgJvPyM+aol7eF75OWt4TActSn+jvANl Luw72clHfiKoFJq5O9eay6WD8WicyFH1H6RgrtKD2wDYWfcBQHw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:03:54 2025 by rpki-client