$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: Pyb/XglksG2buGfrOiCW5d+rLt163ZKbz8qTg+9xb4U= Subject key identifier: 24:A5:CC:29:93:45:55:DA:6E:E2:D2:BB:6A:C3:9E:69:6D:0A:8F:04 Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 5DAB6655600F03713BD6892751F7F4AF085ADFE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 022C Signing time: Wed 06 Aug 2025 10:42:23 +0000 Manifest this update: Wed 06 Aug 2025 10:37:23 +0000 Manifest next update: Sat 09 Aug 2025 21:38:23 +0000 Files and hashes: 1: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: eHrM+LIvof0felqozMy/gIkxJueoyqoKkUla3jkA704=) 2: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ab:66:55:60:0f:03:71:3b:d6:89:27:51:f7:f4:af:08:5a:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Aug 6 10:37:23 2025 GMT Not After : Aug 9 21:38:23 2025 GMT Subject: CN=24A5CC29934555DA6EE2D2BB6AC39E696D0A8F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:aa:dc:0e:a3:57:8e:33:dd:2e:4c:5f:1e: dd:29:3a:67:79:0f:fc:b3:19:4b:98:ff:fc:42:01: a9:bb:b4:3a:32:fa:59:df:02:1e:42:6f:0f:1e:38: 9a:12:59:42:f0:0f:dc:a1:72:e5:3a:0a:75:94:23: 35:53:e8:63:56:bf:ce:9a:43:7f:f9:a0:a5:30:5f: 11:1a:88:83:c9:81:b8:31:65:8d:e3:a0:b4:59:06: c6:84:db:2c:63:7b:49:b6:59:79:ba:1b:11:1c:d0: f9:b3:f7:34:d9:87:55:28:96:7a:14:79:60:82:57: 86:a6:bf:31:44:1f:a3:7e:73:23:bd:f7:51:76:61: 8c:ce:07:ab:c8:41:1b:36:99:c9:29:ae:25:48:ed: 61:de:e8:64:62:1d:88:06:a0:e4:17:50:91:c3:a7: 39:a2:99:de:80:ca:0c:1b:65:e9:28:cf:a0:b1:09: 2c:0d:e1:46:b2:24:61:ae:f5:cd:cd:3d:54:a3:bb: 60:ff:82:88:a8:80:6c:b9:03:db:65:64:ce:8e:de: 9b:45:70:55:6e:ce:16:34:ce:ed:fc:6c:b3:84:41: 3e:17:8c:df:d5:88:a8:bc:63:94:a6:a2:bf:4d:62: 7a:89:83:96:00:d1:f1:2a:71:87:dc:c0:3b:76:36: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A5:CC:29:93:45:55:DA:6E:E2:D2:BB:6A:C3:9E:69:6D:0A:8F:04 X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:52:27:27:29:09:3f:e2:ca:2a:ba:b5:37:a6:6a:02:ec: 3e:89:cc:f0:3a:9d:bd:82:2b:28:dd:b6:78:c5:2c:e4:84:e2: bf:99:12:b2:fe:b8:fb:98:a1:2a:bc:11:ee:f3:8f:fb:53:48: d1:d1:b8:46:c3:e4:cc:54:72:77:40:36:0d:52:58:0a:6a:9f: f3:b7:c1:5d:1a:e7:73:b6:be:53:12:77:21:f1:34:69:18:37: 62:56:4a:31:d6:cc:69:97:1d:0d:29:28:da:39:5c:09:52:7b: bd:c7:0e:ba:13:a0:9c:6b:ed:7b:bf:33:b2:5a:5d:22:ab:b9: fa:a9:90:af:43:ff:8d:bc:2a:e4:be:0a:46:63:0c:70:56:29: 3a:c3:60:59:9d:39:51:bd:dc:d9:0d:a4:95:75:6b:98:65:27: 3f:b0:b1:d0:d2:4d:21:fe:e9:88:e5:ee:62:41:5e:be:1c:16: 9c:48:79:75:63:ba:b2:90:97:bd:f8:c3:cc:3a:27:ef:c4:7d: c1:16:b5:d7:68:d6:2a:ab:00:0a:20:35:de:eb:c8:fe:63:7f: 62:f5:1d:cc:14:fd:d0:b4:26:15:db:b7:8b:42:13:72:24:77: d0:d4:66:63:7b:aa:22:61:24:d7:33:b8:77:29:80:a3:bc:9b: 3d:04:45:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXatmVWAPA3E71oknUff0rwha3+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNTA4MDYxMDM3MjNaFw0yNTA4MDkyMTM4MjNaMDMxMTAvBgNV BAMTKDI0QTVDQzI5OTM0NTU1REE2RUUyRDJCQjZBQzM5RTY5NkQwQThGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YKrcDqNXjjPdLkxfHt0pOmd5 D/yzGUuY//xCAam7tDoy+lnfAh5Cbw8eOJoSWULwD9yhcuU6CnWUIzVT6GNWv86a Q3/5oKUwXxEaiIPJgbgxZY3joLRZBsaE2yxje0m2WXm6GxEc0Pmz9zTZh1UolnoU eWCCV4amvzFEH6N+cyO991F2YYzOB6vIQRs2mckpriVI7WHe6GRiHYgGoOQXUJHD pzmimd6AygwbZekoz6CxCSwN4UayJGGu9c3NPVSju2D/goiogGy5A9tlZM6O3ptF cFVuzhY0zu38bLOEQT4XjN/ViKi8Y5Smor9NYnqJg5YA0fEqcYfcwDt2Nr99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJKXMKZNFVdpu4tK7asOeaW0KjwQwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK3UicnKQk/4soqurU3pmoC7D6JzPA6nb2C KyjdtnjFLOSE4r+ZErL+uPuYoSq8Ee7zj/tTSNHRuEbD5MxUcndANg1SWApqn/O3 wV0a53O2vlMSdyHxNGkYN2JWSjHWzGmXHQ0pKNo5XAlSe73HDroToJxr7Xu/M7Ja XSKrufqpkK9D/428KuS+CkZjDHBWKTrDYFmdOVG93NkNpJV1a5hlJz+wsdDSTSH+ 6Yjl7mJBXr4cFpxIeXVjurKQl734w8w6J+/EfcEWtddo1iqrAAogNd7ryP5jf2L1 HcwU/dC0JhXbt4tCE3Ikd9DUZmN7qiJhJNczuHcpgKO8mz0ERcc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:32 2025 by rpki-client