$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: n2h2GHLOQm+JDbgwpFNubQmPjIiWMoQiOwhvG0y0SgI= Subject key identifier: E5:22:59:4E:A9:90:D6:F6:15:A0:37:BA:46:EC:AA:F9:6A:3C:44:B4 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 751DF75C686ACA6E2730A34E82096E1F6F1E9590 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 0186 Signing time: Tue 05 Aug 2025 19:20:49 +0000 Manifest this update: Tue 05 Aug 2025 19:15:49 +0000 Manifest next update: Sat 09 Aug 2025 00:26:49 +0000 Files and hashes: 1: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: 94QLhSrV+KDUU8kcQL8vJbEaOqQ4D3UAIwFdUy8JdW4=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1d:f7:5c:68:6a:ca:6e:27:30:a3:4e:82:09:6e:1f:6f:1e:95:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Aug 5 19:15:49 2025 GMT Not After : Aug 9 00:26:49 2025 GMT Subject: CN=E522594EA990D6F615A037BA46ECAAF96A3C44B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:46:69:3c:ad:4f:3d:31:88:0b:5f:02:04:ff: 91:b8:a8:e0:ed:55:b8:c9:07:82:ba:e2:67:76:1e: 78:9f:d1:b3:33:e6:59:00:67:59:6b:25:b1:46:1a: 52:74:3f:3e:e9:45:56:1e:f0:e5:ba:4d:69:4e:94: 14:b2:5b:35:bf:96:ce:2f:a1:9b:60:8c:76:f6:2e: 75:4c:92:f5:52:20:c9:91:7d:3d:bd:20:b5:1f:ab: 75:a6:38:6d:c2:ed:77:4f:fc:41:95:a4:db:ff:15: 5a:29:5b:f0:36:87:bf:12:e8:75:43:df:1e:4a:40: 5f:57:22:e1:34:69:10:72:07:99:68:93:40:cf:f4: 70:b3:ff:cf:9b:36:07:a7:7c:40:d5:13:7c:69:ca: 46:d0:87:93:31:ce:dd:31:0d:71:f0:cf:63:73:9e: bc:8b:10:f9:3d:cc:e2:90:4d:68:28:8d:c0:1b:1e: 91:7a:d3:56:b6:60:05:07:77:c4:4f:58:11:a5:bc: 3b:12:cd:ef:95:11:7e:a4:75:7e:9f:78:f9:54:40: 8c:1d:1a:dc:1d:29:3c:ed:08:25:24:1a:69:7a:a6: 13:03:4f:7f:31:32:93:c8:27:41:f6:9c:e3:35:4d: 22:8c:d8:86:0f:7a:82:df:c1:5c:0d:cc:41:05:69: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:22:59:4E:A9:90:D6:F6:15:A0:37:BA:46:EC:AA:F9:6A:3C:44:B4 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e6:dc:13:8a:be:0c:dc:c6:6b:e4:14:bd:48:21:39:a2:63: a5:64:10:68:14:7c:1f:cc:32:e2:b3:47:27:6e:1e:04:60:05: a7:89:8b:1c:a0:93:78:ba:9d:14:12:6f:14:e4:fa:91:e5:bd: dd:70:62:ff:14:08:7a:7a:d7:04:d6:c6:e4:b3:a5:e2:cf:7c: e4:f4:c9:30:74:37:d7:7a:a3:30:c8:8d:5b:29:7a:dd:a2:4a: 93:c2:e7:ff:ea:e6:ec:1a:b0:3b:55:94:4c:b2:91:c9:a8:f8: 3d:f1:30:60:d2:b1:2f:c9:c9:48:c1:c1:0c:85:5a:c7:01:ce: 0c:d1:5e:2c:76:ee:6a:a0:e8:2d:00:12:e8:46:90:b5:a1:ef: 66:b2:5a:29:10:7f:3d:cf:69:bb:f1:4d:14:7f:06:6b:b3:8a: 99:55:38:bf:cb:4d:18:2d:89:4f:64:06:81:10:5a:d2:66:20: 4a:56:f8:25:f8:43:42:3d:cf:60:9c:86:2c:7b:90:9e:8a:e1: 8d:14:c7:b1:6d:73:f5:3f:28:48:84:13:ad:bb:49:b2:b7:80: bf:d7:81:66:31:40:e2:e7:61:41:1f:3c:f5:7d:d0:a8:ba:91: 4a:af:21:cf:06:96:67:7b:e4:0f:19:0f:ca:1c:bf:42:6f:73: ee:fb:06:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdR33XGhqym4nMKNOggluH28elZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTA4MDUxOTE1NDlaFw0yNTA4MDkwMDI2NDlaMDMxMTAvBgNV BAMTKEU1MjI1OTRFQTk5MEQ2RjYxNUEwMzdCQTQ2RUNBQUY5NkEzQzQ0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Rmk8rU89MYgLXwIE/5G4qODt VbjJB4K64md2Hnif0bMz5lkAZ1lrJbFGGlJ0Pz7pRVYe8OW6TWlOlBSyWzW/ls4v oZtgjHb2LnVMkvVSIMmRfT29ILUfq3WmOG3C7XdP/EGVpNv/FVopW/A2h78S6HVD 3x5KQF9XIuE0aRByB5lok0DP9HCz/8+bNgenfEDVE3xpykbQh5Mxzt0xDXHwz2Nz nryLEPk9zOKQTWgojcAbHpF601a2YAUHd8RPWBGlvDsSze+VEX6kdX6fePlUQIwd GtwdKTztCCUkGml6phMDT38xMpPIJ0H2nOM1TSKM2IYPeoLfwVwNzEEFaejlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5SJZTqmQ1vYVoDe6Ruyq+Wo8RLQwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvm3BOKvgzcxmvkFL1IITmiY6VkEGgUfB/M MuKzRyduHgRgBaeJixygk3i6nRQSbxTk+pHlvd1wYv8UCHp61wTWxuSzpeLPfOT0 yTB0N9d6ozDIjVspet2iSpPC5//q5uwasDtVlEyykcmo+D3xMGDSsS/JyUjBwQyF WscBzgzRXix27mqg6C0AEuhGkLWh72ayWikQfz3PabvxTRR/BmuziplVOL/LTRgt iU9kBoEQWtJmIEpW+CX4Q0I9z2Cchix7kJ6K4Y0Ux7Ftc/U/KEiEE627SbK3gL/X gWYxQOLnYUEfPPV90Ki6kUqvIc8Glmd75A8ZD8ocv0Jvc+77BgE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:30:28 2025 by rpki-client