$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: GmCI43Ekgs1m1nsFyQKEgiiylaz1rqHhcff/m/gUXKg= Subject key identifier: BB:C5:0B:82:48:F6:4A:CD:E0:42:D4:10:8A:78:4E:0E:56:3E:45:F9 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 19E03178CFC8DE89105968CD39B517DB557D0AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: C4 Signing time: Tue 05 Aug 2025 00:22:01 +0000 Manifest this update: Tue 05 Aug 2025 00:17:01 +0000 Manifest next update: Fri 08 Aug 2025 00:35:01 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: 83l7XUwiZVuAcuQafgXFAnpaTPVRELloVQiADJQKPU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e0:31:78:cf:c8:de:89:10:59:68:cd:39:b5:17:db:55:7d:0a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Aug 5 00:17:01 2025 GMT Not After : Aug 8 00:35:01 2025 GMT Subject: CN=BBC50B8248F64ACDE042D4108A784E0E563E45F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:51:25:c5:65:21:59:ac:05:08:0d:a0:ef: 84:7d:27:4a:85:c1:33:78:f9:2f:1e:f2:72:87:cf: b3:fb:ec:48:82:27:56:73:df:01:79:01:4f:7f:38: a9:58:e8:aa:7a:1b:bb:68:7f:be:b2:0c:43:8c:86: 36:34:ef:03:4b:f0:77:36:0a:c1:24:93:13:f4:48: bd:62:67:2f:b5:57:1c:ea:03:7c:58:4d:d6:a9:c6: 9c:01:50:bd:71:07:bc:0e:33:34:d4:3a:7a:54:a3: f2:2d:3b:02:8c:b1:d6:1e:03:59:a1:eb:56:27:91: aa:49:c3:09:bb:65:82:da:a3:49:a6:32:f6:89:65: 13:0d:e0:32:c8:63:d8:cb:65:71:4d:b4:57:f8:5b: 02:16:1d:94:22:f7:5e:93:38:c5:80:6a:a5:01:8d: 46:07:4b:78:e6:05:64:8a:63:6f:d7:00:05:73:01: b8:4c:04:a7:5b:29:5d:fc:1c:9f:3c:03:95:d8:6e: f6:23:72:2f:fb:6d:92:41:d7:a6:00:2e:18:cb:7f: e5:71:ab:39:45:74:f0:12:74:a0:d0:68:64:32:94: 44:06:45:28:34:fd:8a:d8:78:42:2b:cf:48:a1:c1: 1a:60:3f:61:e8:ec:92:c9:4b:9f:75:88:e1:f5:fc: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:0B:82:48:F6:4A:CD:E0:42:D4:10:8A:78:4E:0E:56:3E:45:F9 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:22:72:46:0d:c7:11:0a:6e:4a:7f:de:67:3c:48:b2:c3:3c: 1e:8f:dc:47:89:3b:3d:2f:99:6d:6d:55:6e:c0:42:7b:b0:2f: 67:d6:98:7c:6f:95:e1:bf:2c:97:50:bf:83:3e:3e:74:ac:c6: 69:d9:ca:83:65:39:27:ba:8e:69:66:46:00:d8:eb:05:c4:c3: ed:2e:c6:a1:bf:76:1a:1a:7a:dc:de:85:94:0a:43:90:93:bd: 4c:00:a8:11:f4:b8:bf:0d:7b:4e:25:31:fe:d8:34:b9:4e:c6: 6a:89:f2:ca:ca:3d:0a:78:f7:a8:46:07:9b:fa:5a:79:49:86: 18:b8:4c:42:93:7f:e5:8e:7e:65:1b:81:bc:16:b9:96:28:4f: 28:5c:12:7c:f7:9d:64:b7:a2:20:82:c6:8b:3d:b8:79:21:a3: 05:8a:d9:1d:4d:1a:b8:44:fc:59:50:68:d4:13:f4:1f:4f:16: be:e0:ed:73:f0:f0:f2:15:47:aa:d8:e9:bf:ac:2f:11:66:81: e5:b0:76:3c:d7:be:1f:9e:f4:49:7f:85:3c:4c:e3:27:83:4e: 53:64:7e:d5:f2:7a:53:93:95:b1:09:ec:3a:9b:bc:d9:19:b5: e0:90:11:86:4a:1c:d8:12:33:b1:af:8e:b9:b7:60:b5:18:9d: 24:9d:14:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeAxeM/I3okQWWjNObUX21V9Cu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTA4MDUwMDE3MDFaFw0yNTA4MDgwMDM1MDFaMDMxMTAvBgNV BAMTKEJCQzUwQjgyNDhGNjRBQ0RFMDQyRDQxMDhBNzg0RTBFNTYzRTQ1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIX1ElxWUhWawFCA2g74R9J0qF wTN4+S8e8nKHz7P77EiCJ1Zz3wF5AU9/OKlY6Kp6G7tof76yDEOMhjY07wNL8Hc2 CsEkkxP0SL1iZy+1VxzqA3xYTdapxpwBUL1xB7wOMzTUOnpUo/ItOwKMsdYeA1mh 61YnkapJwwm7ZYLao0mmMvaJZRMN4DLIY9jLZXFNtFf4WwIWHZQi916TOMWAaqUB jUYHS3jmBWSKY2/XAAVzAbhMBKdbKV38HJ88A5XYbvYjci/7bZJB16YALhjLf+Vx qzlFdPASdKDQaGQylEQGRSg0/YrYeEIrz0ihwRpgP2Ho7JLJS591iOH1/F/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8ULgkj2Ss3gQtQQinhODlY+RfkwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoickYNxxEKbkp/3mc8SLLDPB6P3EeJOz0v mW1tVW7AQnuwL2fWmHxvleG/LJdQv4M+PnSsxmnZyoNlOSe6jmlmRgDY6wXEw+0u xqG/dhoaetzehZQKQ5CTvUwAqBH0uL8Ne04lMf7YNLlOxmqJ8srKPQp496hGB5v6 WnlJhhi4TEKTf+WOfmUbgbwWuZYoTyhcEnz3nWS3oiCCxos9uHkhowWK2R1NGrhE /FlQaNQT9B9PFr7g7XPw8PIVR6rY6b+sLxFmgeWwdjzXvh+e9El/hTxM4yeDTlNk ftXyelOTlbEJ7DqbvNkZteCQEYZKHNgSM7Gvjrm3YLUYnSSdFCo= -----END CERTIFICATE-----Generated at Wed Aug 6 18:24:17 2025 by rpki-client