$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: P2BNJDeFUw5LYULNCWNPdErDEDKt+8WSJ+BDN/GMVMM= Subject key identifier: 38:49:9A:6A:C7:62:AA:D5:D9:0E:B1:8F:29:C2:60:54:D2:37:7B:E6 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 648CD65D4DBE75E931DDB21691DAAAE751811407 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: C5 Signing time: Tue 05 Aug 2025 18:30:04 +0000 Manifest this update: Tue 05 Aug 2025 18:25:04 +0000 Manifest next update: Sat 09 Aug 2025 00:26:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: Nu4epujvUT9rAuySZXqVx+H5SolVTCaoyhbIOyB/7CM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8c:d6:5d:4d:be:75:e9:31:dd:b2:16:91:da:aa:e7:51:81:14:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Aug 5 18:25:04 2025 GMT Not After : Aug 9 00:26:04 2025 GMT Subject: CN=38499A6AC762AAD5D90EB18F29C26054D2377BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:cb:0f:e8:d6:27:4c:9e:f2:8b:5d:55:7c: 57:00:9a:ba:06:f7:48:4c:7f:b4:62:76:33:41:c3: b9:3d:85:13:79:f6:e9:9a:73:19:9a:52:b5:33:e1: 5d:eb:c0:5b:16:c4:c9:87:1f:95:e4:58:53:5b:b1: e0:71:c2:c4:61:f3:0c:01:23:be:e9:19:4f:14:8b: 42:73:97:ed:26:58:a3:11:88:48:83:8c:c5:28:4b: 54:4b:a5:1e:4e:c2:1a:e5:18:65:c8:8c:8d:fa:8b: f3:98:1e:34:99:78:3e:f4:6d:b8:43:bb:26:7e:29: 17:67:d9:fc:91:1b:04:bc:41:12:72:fa:73:e0:60: 05:2f:f0:4f:75:91:de:63:59:0a:54:f5:c6:dd:bc: eb:eb:d0:8d:23:81:4e:c6:8c:5c:ae:7c:8c:54:f2: 63:e4:17:59:92:f0:76:d7:e4:94:be:e1:61:83:0a: 37:17:7c:38:f9:21:fd:13:f2:19:a5:2f:54:d9:e5: cd:2a:9a:65:56:c7:e9:9f:2d:00:ee:0d:61:c4:a6: 2e:12:26:82:00:65:38:90:a3:0c:83:47:41:ff:ae: fe:e6:a8:23:89:b7:07:44:1b:5f:a0:ff:cf:d5:09: f9:ac:d1:bb:32:f2:fa:7e:d1:18:ce:c9:43:27:d9: d4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:49:9A:6A:C7:62:AA:D5:D9:0E:B1:8F:29:C2:60:54:D2:37:7B:E6 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4e:6c:7c:03:0f:41:e9:01:68:df:0e:0a:75:ae:8d:dc:fb: f8:23:05:06:a1:23:5f:eb:23:bf:71:71:1d:0a:70:95:d7:b9: 1d:91:17:1c:ba:94:4d:1e:73:a6:0f:71:1a:a4:cb:d3:a9:34: c5:ef:7a:f5:d6:22:e1:09:49:c3:5f:23:ca:fa:cb:ce:6d:d7: d0:f2:23:06:af:92:ac:9d:43:99:d7:38:e8:95:b5:79:63:12: 97:bb:af:f0:5f:57:98:6c:33:d9:f8:7f:b3:de:0c:6b:84:4a: c8:c4:8f:63:86:74:7d:0d:57:da:b6:1b:28:6f:d2:e3:16:4c: ab:b2:16:8b:cc:60:03:e4:6e:26:8b:78:8e:4a:16:aa:08:6d: 43:66:92:d8:a1:22:13:4b:38:be:13:8c:06:7a:a5:b2:b1:06: 42:bd:a0:51:f1:33:ce:30:33:a0:92:6d:60:40:a9:0d:4d:a0: 48:53:8c:f1:9b:2c:da:bf:fd:ea:49:58:6a:42:eb:e7:e9:6b: f5:be:04:17:55:1e:bd:c9:dc:50:45:a7:4f:35:0c:2d:35:94: 17:2a:fd:62:d8:99:c9:b7:17:87:20:3d:5e:44:f8:e7:8b:35: 57:4a:ba:33:0f:70:37:39:65:bc:71:ed:41:8e:e0:d4:3d:d1: 78:33:af:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIzWXU2+dekx3bIWkdqq51GBFAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTA4MDUxODI1MDRaFw0yNTA4MDkwMDI2MDRaMDMxMTAvBgNV BAMTKDM4NDk5QTZBQzc2MkFBRDVEOTBFQjE4RjI5QzI2MDU0RDIzNzdCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFMsP6NYnTJ7yi11VfFcAmroG 90hMf7RidjNBw7k9hRN59umacxmaUrUz4V3rwFsWxMmHH5XkWFNbseBxwsRh8wwB I77pGU8Ui0Jzl+0mWKMRiEiDjMUoS1RLpR5OwhrlGGXIjI36i/OYHjSZeD70bbhD uyZ+KRdn2fyRGwS8QRJy+nPgYAUv8E91kd5jWQpU9cbdvOvr0I0jgU7GjFyufIxU 8mPkF1mS8HbX5JS+4WGDCjcXfDj5If0T8hmlL1TZ5c0qmmVWx+mfLQDuDWHEpi4S JoIAZTiQowyDR0H/rv7mqCOJtwdEG1+g/8/VCfms0bsy8vp+0RjOyUMn2dSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEmaasdiqtXZDrGPKcJgVNI3e+YwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdObHwDD0HpAWjfDgp1ro3c+/gjBQahI1/r I79xcR0KcJXXuR2RFxy6lE0ec6YPcRqky9OpNMXvevXWIuEJScNfI8r6y85t19Dy IwavkqydQ5nXOOiVtXljEpe7r/BfV5hsM9n4f7PeDGuESsjEj2OGdH0NV9q2Gyhv 0uMWTKuyFovMYAPkbiaLeI5KFqoIbUNmktihIhNLOL4TjAZ6pbKxBkK9oFHxM84w M6CSbWBAqQ1NoEhTjPGbLNq//epJWGpC6+fpa/W+BBdVHr3J3FBFp081DC01lBcq /WLYmcm3F4cgPV5E+OeLNVdKujMPcDc5Zbxx7UGO4NQ90Xgzr68= -----END CERTIFICATE-----Generated at Thu Aug 7 14:33:06 2025 by rpki-client