$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: 7osjZIb4Kp9YW65feXTWU/qpUs6odTSAzqYj6k7jwe4= Subject key identifier: 00:16:CC:CC:C4:D0:91:46:47:3A:66:32:31:D1:5B:0B:ED:2A:7A:D9 Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 0F517AE589AF08AFCF3EE9BE268B5713E7C0BC6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0229 Signing time: Fri 05 Sep 2025 10:41:41 +0000 Manifest this update: Fri 05 Sep 2025 10:36:41 +0000 Manifest next update: Mon 08 Sep 2025 15:36:41 +0000 Files and hashes: 1: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 2: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 3: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 4: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: +EV17tenphlvecNmkr67EhduX1wWbExtS0pvnrdfX2c=) 5: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 6: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:51:7a:e5:89:af:08:af:cf:3e:e9:be:26:8b:57:13:e7:c0:bc:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Sep 5 10:36:41 2025 GMT Not After : Sep 8 15:36:41 2025 GMT Subject: CN=0016CCCCC4D09146473A663231D15B0BED2A7AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:e2:e1:7d:05:7b:c0:00:df:66:a3:43:d7: 6e:23:d7:6b:48:d4:b1:6e:91:5b:ec:a8:c1:6a:53: 23:4c:e3:50:5a:f3:d8:f0:be:94:05:8d:7e:6e:9f: cd:c3:d7:e2:b8:9d:a7:93:f0:af:68:f1:96:c6:f3: c6:78:42:55:c9:5f:7c:fe:74:6e:b5:41:2d:f8:6d: 29:35:69:51:01:53:db:38:d6:54:96:83:f9:a0:83: 26:6f:61:29:24:53:f6:30:58:05:fa:b7:bb:47:9c: b7:a7:4d:81:cd:e5:8e:8d:23:c5:08:24:83:69:1d: ea:4d:96:6d:0e:e3:f1:9b:26:7f:e2:14:39:18:8b: c0:2d:84:96:44:c7:79:d8:29:60:92:d0:b8:4e:98: 2b:6b:94:00:09:51:73:e1:d2:f3:d4:03:ba:78:53: f4:e6:16:fa:d6:e2:e5:74:e1:43:17:1e:c4:70:bc: 82:b9:45:ee:c5:11:07:e4:92:b9:7b:4f:46:4a:55: 10:17:20:81:11:56:98:c2:e4:36:fd:5a:f6:e9:3f: 09:33:66:ec:d4:e2:de:ee:21:2f:9d:11:c7:15:c6: ba:18:9b:5d:89:a0:c8:b3:80:2a:fe:91:d3:54:89: a1:ed:99:22:41:71:82:77:6c:f7:b9:b5:d1:f9:ca: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:CC:CC:C4:D0:91:46:47:3A:66:32:31:D1:5B:0B:ED:2A:7A:D9 X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:36:38:32:86:44:74:a8:26:91:c0:6d:4e:f4:8c:82:d4:67: a2:9d:2a:bb:2e:4b:de:52:9c:88:75:8c:6c:40:f0:e0:6f:5c: 31:91:55:c0:01:e6:62:82:fe:2d:76:d9:34:2d:4b:ca:e1:ce: 10:1e:f7:30:04:1c:fb:62:d6:52:92:8e:b7:f5:df:3b:df:cc: e9:23:0d:0a:db:01:0a:5d:9f:19:1d:db:ec:d1:d2:b1:6e:b4: 7b:b4:d3:75:7a:d0:4d:d8:b5:59:58:ea:ed:49:35:2b:f0:bb: d9:b5:ac:99:dc:d7:ec:ab:c4:cb:55:a0:8d:68:de:bc:35:ad: d7:e2:99:0b:37:bc:87:85:e5:01:c1:e7:bb:c3:99:3e:dd:2b: 06:3c:03:30:c8:02:87:a0:f1:83:ba:af:c7:bd:22:a4:d1:c5: 1d:27:d1:2d:53:bd:1a:7d:ca:93:6d:09:3d:47:02:27:b5:5d: 06:a8:df:20:c1:09:fc:e7:a3:26:cc:3f:4a:16:30:38:3b:5d: 68:24:bf:b4:cd:2b:13:71:3d:2d:78:bd:6b:ce:ad:e7:fb:be: 4c:53:1f:27:6b:a9:eb:56:9b:ff:66:c3:4d:a8:81:7f:fb:b1: 48:50:79:b2:2f:6a:5b:96:50:8d:cf:87:d4:a7:01:54:a0:19: 76:d1:ab:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1F65YmvCK/PPum+JotXE+fAvGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTA5MDUxMDM2NDFaFw0yNTA5MDgxNTM2NDFaMDMxMTAvBgNV BAMTKDAwMTZDQ0NDQzREMDkxNDY0NzNBNjYzMjMxRDE1QjBCRUQyQTdBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zeLhfQV7wADfZqND124j12tI 1LFukVvsqMFqUyNM41Ba89jwvpQFjX5un83D1+K4naeT8K9o8ZbG88Z4QlXJX3z+ dG61QS34bSk1aVEBU9s41lSWg/mggyZvYSkkU/YwWAX6t7tHnLenTYHN5Y6NI8UI JINpHepNlm0O4/GbJn/iFDkYi8AthJZEx3nYKWCS0LhOmCtrlAAJUXPh0vPUA7p4 U/TmFvrW4uV04UMXHsRwvIK5Re7FEQfkkrl7T0ZKVRAXIIERVpjC5Db9WvbpPwkz ZuzU4t7uIS+dEccVxroYm12JoMizgCr+kdNUiaHtmSJBcYJ3bPe5tdH5yu1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABbMzMTQkUZHOmYyMdFbC+0qetkwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk2ODKGRHSoJpHAbU70jILUZ6KdKrsuS95S nIh1jGxA8OBvXDGRVcAB5mKC/i122TQtS8rhzhAe9zAEHPti1lKSjrf13zvfzOkj DQrbAQpdnxkd2+zR0rFutHu003V60E3YtVlY6u1JNSvwu9m1rJnc1+yrxMtVoI1o 3rw1rdfimQs3vIeF5QHB57vDmT7dKwY8AzDIAoeg8YO6r8e9IqTRxR0n0S1TvRp9 ypNtCT1HAie1XQao3yDBCfznoybMP0oWMDg7XWgkv7TNKxNxPS14vWvOref7vkxT HydrqetWm/9mw02ogX/7sUhQebIvaluWUI3Ph9SnAVSgGXbRq2M= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:29 2025 by rpki-client