$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: PoOabKK52wcNCRc+V6Ck4Adoqj6RIPci9f/ZqmKoLzU= Subject key identifier: FA:BD:1A:9C:FB:B8:0D:97:D0:2B:69:56:73:CB:42:B9:69:F7:15:C2 Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 47A80081D8E41DB3C09534713F3EB6B49AB825F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0159 Signing time: Thu 07 Aug 2025 04:52:09 +0000 Manifest this update: Thu 07 Aug 2025 04:47:09 +0000 Manifest next update: Sun 10 Aug 2025 06:28:09 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) 2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: e3IWGTu+lBKqLmrx30ko9OUhozzx7ydxpbckQZikSAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a8:00:81:d8:e4:1d:b3:c0:95:34:71:3f:3e:b6:b4:9a:b8:25:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Aug 7 04:47:09 2025 GMT Not After : Aug 10 06:28:09 2025 GMT Subject: CN=FABD1A9CFBB80D97D02B695673CB42B969F715C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:d5:f0:b7:71:6f:78:43:9d:9f:05:d7:97: 88:36:3a:8a:6c:d6:99:37:ac:e5:73:b4:e5:c3:f3: 25:c5:0d:9b:9f:0a:93:f4:0b:cc:6e:e5:e3:1d:19: f4:8b:b4:cc:4e:f2:83:d5:ee:e0:a7:a4:02:90:fe: 69:10:4b:82:a2:13:4d:5a:e0:58:6d:59:11:c6:96: 83:6a:19:7f:05:09:07:c0:ac:b8:06:22:a1:91:a1: 8e:33:4a:9d:54:44:46:f8:34:30:fc:bc:dc:80:00: cd:85:9f:53:46:70:3a:2c:92:a7:90:e9:b8:cd:f9: b6:1d:45:35:76:49:cf:ad:8d:19:8d:71:2e:b3:3f: ae:a7:df:a0:47:0b:81:b5:85:0f:cf:a5:96:1f:a9: b1:a9:f6:ff:fb:e8:73:9b:f8:b0:b2:41:01:84:50: 6f:1a:8f:91:89:e0:bd:c7:28:d3:ce:e5:28:4a:18: ca:2f:29:14:22:2e:69:d2:1c:8c:9a:be:87:f3:8f: 93:6e:81:03:83:34:e3:29:f0:e7:43:10:55:d6:ca: 8a:fe:0b:c0:38:b2:62:71:31:80:d9:79:c6:1e:1c: a2:e4:b8:03:4d:a4:20:e7:27:63:90:d4:4b:30:65: df:23:fe:cd:f7:96:c2:3a:31:d6:94:1f:76:f7:4f: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BD:1A:9C:FB:B8:0D:97:D0:2B:69:56:73:CB:42:B9:69:F7:15:C2 X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bf:f7:4c:f9:92:20:87:59:59:4e:7e:d6:42:cf:74:d3:5b: 70:77:bf:bc:58:93:24:e5:38:b0:b0:02:37:1d:ef:48:8a:28: c1:7b:54:f8:56:49:83:a7:14:42:d7:61:ca:f3:5c:b7:25:c6: 31:9a:0f:bb:5f:02:43:2c:7e:0e:9b:0b:bf:9b:e4:02:8f:fb: 8f:0f:aa:61:97:66:9b:13:cc:49:2e:73:5f:56:7e:6f:21:c7: fa:2d:c2:7b:a6:a4:0e:d2:24:17:2b:05:8e:f0:f5:ce:6e:1e: bf:2e:14:52:28:d7:18:3d:49:b3:e6:e6:8e:5e:95:8a:69:22: 92:09:7b:35:3c:de:fa:57:82:d8:16:56:b1:6c:9f:38:4d:b7: 40:95:dd:bf:60:2b:e1:83:a5:66:e6:a1:07:70:5b:37:fc:4f: b7:d1:e0:0f:27:6c:71:4c:81:74:67:95:eb:14:b7:c6:3f:d0: f6:9c:be:31:bd:43:3d:7a:be:c4:85:9f:2f:a4:0e:ed:c9:2c: 8e:5f:9c:14:36:86:d2:32:47:04:c8:9d:5c:3b:d0:e1:6e:b6: a0:a3:91:f3:70:96:2a:0b:20:a1:d0:d4:54:68:89:48:06:f7: 68:a6:fe:7a:f4:b4:02:4b:34:dc:db:a5:10:02:34:e6:7b:3a: c7:85:cd:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6gAgdjkHbPAlTRxPz62tJq4JfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTA4MDcwNDQ3MDlaFw0yNTA4MTAwNjI4MDlaMDMxMTAvBgNV BAMTKEZBQkQxQTlDRkJCODBEOTdEMDJCNjk1NjczQ0I0MkI5NjlGNzE1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEY9Xwt3FveEOdnwXXl4g2Oops 1pk3rOVztOXD8yXFDZufCpP0C8xu5eMdGfSLtMxO8oPV7uCnpAKQ/mkQS4KiE01a 4FhtWRHGloNqGX8FCQfArLgGIqGRoY4zSp1UREb4NDD8vNyAAM2Fn1NGcDoskqeQ 6bjN+bYdRTV2Sc+tjRmNcS6zP66n36BHC4G1hQ/PpZYfqbGp9v/76HOb+LCyQQGE UG8aj5GJ4L3HKNPO5ShKGMovKRQiLmnSHIyavofzj5NugQODNOMp8OdDEFXWyor+ C8A4smJxMYDZecYeHKLkuANNpCDnJ2OQ1EswZd8j/s33lsI6MdaUH3b3TzYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+r0anPu4DZfQK2lWc8tCuWn3FcIwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALu/90z5kiCHWVlOftZCz3TTW3B3v7xYkyTl OLCwAjcd70iKKMF7VPhWSYOnFELXYcrzXLclxjGaD7tfAkMsfg6bC7+b5AKP+48P qmGXZpsTzEkuc19Wfm8hx/otwnumpA7SJBcrBY7w9c5uHr8uFFIo1xg9SbPm5o5e lYppIpIJezU83vpXgtgWVrFsnzhNt0CV3b9gK+GDpWbmoQdwWzf8T7fR4A8nbHFM gXRnlesUt8Y/0PacvjG9Qz16vsSFny+kDu3JLI5fnBQ2htIyRwTInVw70OFutqCj kfNwlioLIKHQ1FRoiUgG92im/nr0tAJLNNzbpRACNOZ7OseFzRk= -----END CERTIFICATE-----Generated at Fri Aug 8 00:38:22 2025 by rpki-client