$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: Arq5ZoodXVld/mwFZDfBQvM7gG/2Kk1uS9z7vnuhjlY= Subject key identifier: 5B:1C:82:0C:19:5E:A2:5A:38:DE:8D:70:A6:41:ED:AE:97:87:05:5F Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 549CAB68CFF432CDB2F8FB74EAEEC862A0C53C13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 0375 Signing time: Tue 05 Aug 2025 11:01:07 +0000 Manifest this update: Tue 05 Aug 2025 10:56:07 +0000 Manifest next update: Fri 08 Aug 2025 13:15:07 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: YUPxwr3+3vLLWVtXhETKmfikOQPL76gh6+qkduQ0YCw=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9c:ab:68:cf:f4:32:cd:b2:f8:fb:74:ea:ee:c8:62:a0:c5:3c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Aug 5 10:56:07 2025 GMT Not After : Aug 8 13:15:07 2025 GMT Subject: CN=5B1C820C195EA25A38DE8D70A641EDAE9787055F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:7a:f4:09:32:d5:f5:4f:8a:6a:56:e6:82: 5e:e8:77:21:0c:6d:37:81:89:e7:8e:54:3b:35:b4: 03:f4:ce:e7:8e:9e:ad:5c:4f:34:33:94:ae:2b:6e: 64:ee:71:a2:ae:fa:f4:33:6e:6b:9f:31:2b:10:1a: 3d:e5:eb:01:15:4a:d9:5b:ea:69:0a:4c:e4:77:d6: 9e:91:1c:25:ee:6f:d1:7e:4a:07:6a:30:b6:27:e8: 97:f7:c0:be:10:9b:2a:20:69:4c:81:10:75:f6:34: a7:44:55:01:a0:7e:03:d9:37:6f:87:fe:fa:bd:37: e3:6a:ee:c5:bf:6d:17:af:79:9a:9a:8d:f0:81:2b: 86:f8:ee:a5:7a:e0:6f:96:2e:75:90:60:87:4a:89: ae:0d:c0:f4:12:41:74:21:3e:30:43:63:65:2f:02: 38:8d:59:f4:63:cd:b3:3e:d8:33:71:f9:2c:86:5e: 9e:14:75:96:27:56:db:fe:d7:87:46:30:ab:63:78: 8c:4b:ce:df:c1:fd:a9:0a:5d:d2:83:e9:46:47:fa: 3b:99:1e:d1:1a:db:d8:78:2a:c3:25:ae:da:0f:a4: ac:48:30:6d:e1:5f:4d:ab:ea:fe:5f:60:8f:73:7d: 60:b2:0c:d3:c9:69:c8:f5:f4:d8:d0:f2:24:83:d6: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1C:82:0C:19:5E:A2:5A:38:DE:8D:70:A6:41:ED:AE:97:87:05:5F X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9f:75:ee:70:bf:44:a1:4a:38:c1:09:bc:bb:7f:f6:83:23: 23:1b:25:c0:8b:1d:7c:6b:ee:0f:73:94:78:52:d3:d3:1e:c9: 92:34:53:b5:b0:70:0d:4b:a9:06:6d:f8:08:53:57:58:ab:56: b1:75:5d:1b:6b:e5:a4:f4:5d:07:3d:32:0d:69:8c:21:29:e5: ef:04:cd:e5:4c:f6:ae:1a:e6:28:7f:15:3b:27:cc:3d:fd:24: d2:5f:87:d0:68:68:8c:41:03:6c:ad:04:0a:b0:74:e5:2a:9d: 9c:59:dc:fe:0e:bf:93:0a:6a:71:22:59:65:47:a7:cd:69:e0: 9e:ea:38:ac:5d:ea:ee:ca:a8:45:52:1f:7d:b3:59:ea:1a:d3: 85:67:50:69:dd:57:a8:2c:96:93:57:3f:a4:f0:04:9a:f5:04: dc:e8:b6:b1:5f:4b:51:0e:f2:02:ef:36:ff:38:b9:64:c1:03: 1a:ac:1e:d4:8a:b8:3a:95:4c:78:a3:ee:a9:27:28:b3:ef:35: 40:3d:1a:6b:ed:a4:d2:3f:c6:bc:54:91:2c:15:64:bb:2b:bf: 87:22:7e:8d:98:15:fa:56:33:ef:50:eb:75:93:4b:65:63:bd: e2:37:27:36:de:a7:e1:32:51:36:4c:ad:7a:87:6c:42:28:88: 69:82:15:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJyraM/0Ms2y+Pt06u7IYqDFPBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNTA4MDUxMDU2MDdaFw0yNTA4MDgxMzE1MDdaMDMxMTAvBgNV BAMTKDVCMUM4MjBDMTk1RUEyNUEzOERFOEQ3MEE2NDFFREFFOTc4NzA1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU53r0CTLV9U+Kalbmgl7odyEM bTeBieeOVDs1tAP0zueOnq1cTzQzlK4rbmTucaKu+vQzbmufMSsQGj3l6wEVStlb 6mkKTOR31p6RHCXub9F+SgdqMLYn6Jf3wL4QmyogaUyBEHX2NKdEVQGgfgPZN2+H /vq9N+Nq7sW/bReveZqajfCBK4b47qV64G+WLnWQYIdKia4NwPQSQXQhPjBDY2Uv AjiNWfRjzbM+2DNx+SyGXp4UdZYnVtv+14dGMKtjeIxLzt/B/akKXdKD6UZH+juZ HtEa29h4KsMlrtoPpKxIMG3hX02r6v5fYI9zfWCyDNPJacj19NjQ8iSD1k4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxyCDBleolo43o1wpkHtrpeHBV8wHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+fde5wv0ShSjjBCby7f/aDIyMbJcCLHXxr 7g9zlHhS09MeyZI0U7WwcA1LqQZt+AhTV1irVrF1XRtr5aT0XQc9Mg1pjCEp5e8E zeVM9q4a5ih/FTsnzD39JNJfh9BoaIxBA2ytBAqwdOUqnZxZ3P4Ov5MKanEiWWVH p81p4J7qOKxd6u7KqEVSH32zWeoa04VnUGndV6gslpNXP6TwBJr1BNzotrFfS1EO 8gLvNv84uWTBAxqsHtSKuDqVTHij7qknKLPvNUA9GmvtpNI/xrxUkSwVZLsrv4ci fo2YFfpWM+9Q63WTS2VjveI3Jzbep+EyUTZMrXqHbEIoiGmCFUA= -----END CERTIFICATE-----Generated at Wed Aug 6 14:07:29 2025 by rpki-client