$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: nTVZHnplIHk9o3gsg1gWMm4wHC/rql4e6QhIKc5hvno= Subject key identifier: F9:A9:1D:32:8C:44:80:F5:D9:DE:8F:97:6E:08:19:A1:B2:F5:6A:18 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 367A3795DA76801F176694724F14EDE234852EED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0218 Signing time: Thu 04 Sep 2025 16:01:05 +0000 Manifest this update: Thu 04 Sep 2025 15:56:05 +0000 Manifest next update: Sun 07 Sep 2025 20:54:05 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: UtHhit7t2F6mVWvMjEshZrgFzYRdVsoMHGnJpJlwOTk=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7a:37:95:da:76:80:1f:17:66:94:72:4f:14:ed:e2:34:85:2e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Sep 4 15:56:05 2025 GMT Not After : Sep 7 20:54:05 2025 GMT Subject: CN=F9A91D328C4480F5D9DE8F976E0819A1B2F56A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:5d:a8:5c:4e:f4:90:59:49:9e:84:34:8d: 11:47:84:72:af:a1:6b:99:09:99:92:f1:64:81:5e: ca:89:ab:2b:f1:11:c4:27:87:43:62:90:bd:a3:6e: ac:c3:e0:84:4f:a3:eb:cb:c1:49:1d:29:5b:a5:d8: d3:92:15:28:1d:6f:75:f1:c6:ed:3c:b6:59:21:48: 2b:57:97:b5:39:3a:22:72:e1:03:fb:6b:46:0a:34: bd:b2:f7:da:bb:ff:99:10:22:94:91:85:38:3e:db: b9:58:8c:22:41:bf:c0:95:79:8d:1e:f4:dd:9e:05: 2f:11:5e:5f:2b:f7:94:73:bf:f4:d0:54:6f:60:86: bb:05:41:d0:2d:1f:e5:22:cc:7c:43:b0:95:22:95: a7:ca:7d:ae:2f:4f:f8:f8:11:dd:00:b8:b4:45:6b: ce:72:3f:4d:e6:8f:0c:1e:9d:23:c1:fb:cb:0c:79: 94:20:d9:80:69:e8:6a:6e:66:00:30:e0:7d:a2:fb: e1:f1:f1:09:a4:de:5d:1d:7a:92:a5:87:4b:b2:8d: fa:55:7f:36:b0:32:7d:63:dc:4a:17:70:67:13:aa: 7c:69:d4:76:bb:df:64:ba:5e:a5:e3:98:e9:e9:5b: f6:34:ef:d0:11:02:fa:26:04:f2:e7:d3:4d:3e:64: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A9:1D:32:8C:44:80:F5:D9:DE:8F:97:6E:08:19:A1:B2:F5:6A:18 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:2c:04:09:10:3f:21:aa:9e:63:bb:2a:3c:f3:f8:6f:03:70: 36:9e:e7:ef:dc:b1:3a:54:a6:a9:2f:d1:82:ef:48:b9:bd:60: e5:1c:44:97:d9:8d:fe:b9:bc:6b:13:b6:d2:00:4d:a6:5b:d4: f1:98:31:e8:d5:f2:4a:2d:f2:3c:d7:21:be:16:8b:cf:87:bf: c4:e1:47:9b:e6:9a:e8:b7:dc:14:d7:8a:e4:f8:ff:07:97:20: fb:d3:15:df:af:a0:c3:8a:26:30:2a:fa:a2:f1:fb:a9:91:54: 2a:6e:ce:4d:03:56:2d:72:ed:27:ed:f3:32:3f:51:62:e7:d5: 4d:fd:f6:12:3a:d1:b6:46:4e:05:87:d1:e9:93:55:62:26:6a: 11:dd:02:f0:49:18:57:3b:d1:8b:15:09:9d:0b:63:a6:95:43: 99:1c:9c:05:5c:05:0d:bb:46:16:27:57:c7:8a:42:c4:aa:66: 01:4c:95:0d:9a:46:dd:65:73:94:0a:f1:03:50:80:46:91:78: e3:d9:db:ff:b7:ce:fe:c2:4a:6f:8b:2e:00:06:db:7f:ac:c9: 74:b3:96:f8:99:40:3f:b2:19:54:57:42:cd:c0:42:36:83:0b: a4:b8:bf:af:f5:0a:f0:c5:18:ec:10:5b:f1:b1:18:e8:b7:50: 5b:20:db:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNno3ldp2gB8XZpRyTxTt4jSFLu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTA5MDQxNTU2MDVaFw0yNTA5MDcyMDU0MDVaMDMxMTAvBgNV BAMTKEY5QTkxRDMyOEM0NDgwRjVEOURFOEY5NzZFMDgxOUExQjJGNTZBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9A12oXE70kFlJnoQ0jRFHhHKv oWuZCZmS8WSBXsqJqyvxEcQnh0NikL2jbqzD4IRPo+vLwUkdKVul2NOSFSgdb3Xx xu08tlkhSCtXl7U5OiJy4QP7a0YKNL2y99q7/5kQIpSRhTg+27lYjCJBv8CVeY0e 9N2eBS8RXl8r95Rzv/TQVG9ghrsFQdAtH+UizHxDsJUilafKfa4vT/j4Ed0AuLRF a85yP03mjwwenSPB+8sMeZQg2YBp6GpuZgAw4H2i++Hx8Qmk3l0depKlh0uyjfpV fzawMn1j3EoXcGcTqnxp1Ha732S6XqXjmOnpW/Y079ARAvomBPLn000+ZBBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+akdMoxEgPXZ3o+XbggZobL1ahgwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM4sBAkQPyGqnmO7Kjzz+G8DcDae5+/csTpU pqkv0YLvSLm9YOUcRJfZjf65vGsTttIATaZb1PGYMejV8kot8jzXIb4Wi8+Hv8Th R5vmmui33BTXiuT4/weXIPvTFd+voMOKJjAq+qLx+6mRVCpuzk0DVi1y7Sft8zI/ UWLn1U399hI60bZGTgWH0emTVWImahHdAvBJGFc70YsVCZ0LY6aVQ5kcnAVcBQ27 RhYnV8eKQsSqZgFMlQ2aRt1lc5QK8QNQgEaReOPZ2/+3zv7CSm+LLgAG23+syXSz lviZQD+yGVRXQs3AQjaDC6S4v6/1CvDFGOwQW/GxGOi3UFsg2z4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:50 2025 by rpki-client