$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: 5XVQYI0UcHgaY8gFkMe4AW76Ymd15ceAPO48cSc9ON0= Subject key identifier: 22:C0:12:F7:42:9F:57:8A:B9:AE:C0:64:1D:3E:03:85:0C:D9:ED:61 Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 0F739DC79828EF662846FD8C1780E983F89EAC7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 02A6 Signing time: Fri 08 Aug 2025 04:31:32 +0000 Manifest this update: Fri 08 Aug 2025 04:26:32 +0000 Manifest next update: Mon 11 Aug 2025 15:09:32 +0000 Files and hashes: 1: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: 0HKqUWxZbI9n+PEVKoTLIbRadeKyFkIWvHvlRbtvAq0=) 2: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: Mx4Sw6eVEEnoN/RHaVZfugRNLIGrAEZG+SienRXhfJU=) 3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: fmmesiS1WcI4ovgUB3oEnMzQaroROS18Jh1l+/FK5Mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:73:9d:c7:98:28:ef:66:28:46:fd:8c:17:80:e9:83:f8:9e:ac:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Aug 8 04:26:32 2025 GMT Not After : Aug 11 15:09:32 2025 GMT Subject: CN=22C012F7429F578AB9AEC0641D3E03850CD9ED61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:cc:dd:6d:f9:9b:c0:31:c4:47:7d:8a:40: 5f:1c:59:0e:77:a1:7a:8d:7f:52:e3:43:c3:33:b4: 5c:9b:bd:a0:8e:be:53:db:21:de:15:56:ed:5a:8a: c8:22:f4:b0:c7:46:b5:e9:d3:6f:09:e1:52:61:3b: 73:ef:0f:83:19:9f:9f:92:cb:e9:12:9f:d0:f6:df: 1c:58:d4:de:7b:2a:36:43:64:66:c1:b1:ac:32:7c: 5c:53:e5:22:50:ad:29:22:5f:a0:86:af:c0:6a:2a: 7f:a7:72:e7:ba:52:e9:38:f6:74:4e:8d:51:d6:48: 53:b0:e1:5b:76:24:90:f3:cd:57:78:36:0c:5a:d6: c8:bd:40:eb:d0:f8:a0:61:65:e4:1c:e0:e1:ec:77: e8:45:b6:4e:68:00:ca:5a:d5:d8:dd:82:f1:5b:be: aa:02:8c:67:56:4d:ee:ee:0e:36:98:e3:a7:07:a6: 86:9a:ce:ff:2f:85:2a:81:f4:71:80:84:ed:81:4a: 5b:8e:b0:dd:38:3d:5b:4e:76:57:9e:49:f7:f1:af: ef:16:34:6f:cb:2a:8c:b5:51:19:bb:17:b7:fe:af: 08:5e:94:a5:a9:2f:35:f8:94:d8:68:bb:c7:cf:ea: 60:b7:c1:6b:bd:2d:9d:da:8c:ec:5a:ed:4d:e2:8d: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C0:12:F7:42:9F:57:8A:B9:AE:C0:64:1D:3E:03:85:0C:D9:ED:61 X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:71:11:c7:96:87:2c:2d:1e:7c:ab:e2:bd:a9:2d:e3:d3:7d: d0:50:27:cc:84:76:8e:c0:fa:af:4a:0a:64:6d:a8:c1:50:7f: 08:d7:ba:57:68:7c:8c:c9:c1:dd:b4:ca:4f:f8:bf:98:8a:42: 87:95:54:f6:f6:78:0e:a3:59:fc:00:de:42:51:33:29:b0:ab: 2a:33:9e:4e:6e:d0:77:de:76:52:b5:15:0d:5b:58:b1:7d:a1: 34:d3:d1:fa:fd:20:f3:4b:93:71:0f:ee:4d:14:f0:c2:f6:ad: a4:76:02:9b:5d:f7:f9:aa:d7:52:de:55:d8:fb:a2:cb:48:88: 44:e2:cf:2a:6d:26:de:1c:b7:4b:8a:4c:f0:91:98:60:14:2e: 3e:b3:00:7f:3d:8e:29:2e:e2:65:c6:e5:3d:ca:b0:25:45:4b: b6:88:94:d3:b4:13:b7:b9:93:ef:5c:c4:11:63:a2:90:a4:64: ca:5a:01:2f:2f:91:36:de:11:2d:2c:42:9d:76:6e:19:74:8d: 0c:5f:63:44:cf:87:c8:c1:a8:9b:8a:38:94:bf:8e:50:37:bf: c2:b4:f5:fb:5f:49:08:76:64:9b:f2:ba:09:d1:0e:47:69:ab: e6:5f:16:c2:2b:32:f4:92:6f:3b:70:68:ad:2a:af:8c:80:08: d7:73:bf:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3Odx5go72YoRv2MF4Dpg/ierH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNTA4MDgwNDI2MzJaFw0yNTA4MTExNTA5MzJaMDMxMTAvBgNV BAMTKDIyQzAxMkY3NDI5RjU3OEFCOUFFQzA2NDFEM0UwMzg1MENEOUVENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwW8zdbfmbwDHER32KQF8cWQ53 oXqNf1LjQ8MztFybvaCOvlPbId4VVu1aisgi9LDHRrXp028J4VJhO3PvD4MZn5+S y+kSn9D23xxY1N57KjZDZGbBsawyfFxT5SJQrSkiX6CGr8BqKn+ncue6Uuk49nRO jVHWSFOw4Vt2JJDzzVd4Ngxa1si9QOvQ+KBhZeQc4OHsd+hFtk5oAMpa1djdgvFb vqoCjGdWTe7uDjaY46cHpoaazv8vhSqB9HGAhO2BSluOsN04PVtOdleeSffxr+8W NG/LKoy1URm7F7f+rwhelKWpLzX4lNhou8fP6mC3wWu9LZ3ajOxa7U3ijV0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIsAS90KfV4q5rsBkHT4DhQzZ7WEwHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5xEceWhywtHnyr4r2pLePTfdBQJ8yEdo7A +q9KCmRtqMFQfwjXuldofIzJwd20yk/4v5iKQoeVVPb2eA6jWfwA3kJRMymwqyoz nk5u0HfedlK1FQ1bWLF9oTTT0fr9IPNLk3EP7k0U8ML2raR2Aptd9/mq11LeVdj7 ostIiETizyptJt4ct0uKTPCRmGAULj6zAH89jiku4mXG5T3KsCVFS7aIlNO0E7e5 k+9cxBFjopCkZMpaAS8vkTbeES0sQp12bhl0jQxfY0TPh8jBqJuKOJS/jlA3v8K0 9ftfSQh2ZJvyugnRDkdpq+ZfFsIrMvSSbztwaK0qr4yACNdzv+w= -----END CERTIFICATE-----Generated at Sat Aug 9 05:50:52 2025 by rpki-client