$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: 5lXLElSplGpUczRB8Lcn/9lm/DoYsDGYqd9QT1v91fA= Subject key identifier: 46:E0:43:71:56:71:20:65:FF:6B:EC:8F:15:96:89:A2:A9:AF:CE:19 Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 47DD5EE86E1DC2EE857530483F0F0260013F4B03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 025A Signing time: Sun 10 Aug 2025 04:01:38 +0000 Manifest this update: Sun 10 Aug 2025 03:56:38 +0000 Manifest next update: Wed 13 Aug 2025 09:49:38 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) 2: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) 3: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) 4: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: wCyJj/IMMElqHM0I81xyFxlgsiYTMZsU2R3FbCLSZyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 06:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:dd:5e:e8:6e:1d:c2:ee:85:75:30:48:3f:0f:02:60:01:3f:4b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Aug 10 03:56:38 2025 GMT Not After : Aug 13 09:49:38 2025 GMT Subject: CN=46E0437156712065FF6BEC8F159689A2A9AFCE19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:8f:58:bb:44:ed:62:3d:12:17:39:9b:5c: bf:02:4e:dc:de:7d:20:02:79:50:ce:e9:5f:9b:9d: e5:75:32:dd:b8:4f:7e:e0:23:92:67:cf:15:2b:20: 16:c2:39:bd:8f:97:d2:75:d7:ab:96:50:f4:6b:23: 06:34:27:80:1f:bb:48:32:59:25:44:cc:4f:65:58: c0:cb:bb:d5:12:27:d8:69:c1:92:02:dd:1f:10:a5: 37:c9:32:9a:32:48:5a:fc:e3:c0:4c:ba:7a:72:af: cd:7f:3f:e5:ed:da:f8:9a:a8:58:20:27:5f:91:f2: d4:0f:eb:a3:82:c2:c6:03:6f:ea:e6:6e:73:65:10: 86:18:e8:74:d8:66:05:53:f3:86:20:3b:66:83:dc: 03:04:51:d8:ef:95:de:9e:bb:ff:52:97:30:d5:42: a8:17:46:05:3a:c1:08:93:b5:02:82:c8:f2:68:1f: 74:20:81:86:3b:1d:ba:2a:7b:2d:3c:2d:24:01:c5: 27:dc:57:0d:6b:e5:e0:13:41:11:c7:9e:ee:e7:4f: d0:82:3d:7f:3d:1b:2b:26:5e:ef:4c:87:c6:06:b8: d3:27:17:1c:d1:69:7c:7a:63:36:b3:44:40:fc:7a: 1b:fc:9b:3a:bd:b3:92:67:15:14:4d:5c:73:92:e6: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E0:43:71:56:71:20:65:FF:6B:EC:8F:15:96:89:A2:A9:AF:CE:19 X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d3:ea:ce:61:10:3e:19:7f:26:52:0f:84:a2:ba:90:72:94: c6:62:eb:1d:05:93:18:b0:a8:cd:64:38:02:2d:de:12:5c:07: 44:93:6c:74:ca:21:a3:8b:ae:ac:b4:50:4a:d9:ea:72:b8:87: af:f9:8c:c3:94:17:91:9b:89:e6:06:88:5a:79:6f:f4:98:fd: 5f:39:31:b2:a2:07:8b:0e:33:cb:c7:ef:9a:98:24:e5:6f:ac: 13:1b:78:9d:4d:ca:15:a1:0f:52:f3:11:31:45:43:b7:f7:12: 59:fd:c6:12:95:19:97:41:a9:a3:c4:6b:03:cf:95:c6:bf:d7: 8d:74:15:33:97:f6:16:3d:00:bd:93:48:b3:33:89:3e:5d:48: b0:e5:cd:f2:90:87:8e:52:2c:05:43:b2:93:a1:57:81:82:c2: ac:e1:33:f5:71:d8:09:5b:57:c2:32:13:1a:58:a1:8d:cc:91: 7e:3e:df:e9:2b:14:53:13:ed:84:99:e5:54:32:6b:93:aa:a4: 38:53:38:4e:d7:21:fd:ac:2c:bf:c6:21:73:b5:8e:e2:58:ca: aa:64:23:20:6b:04:66:84:c4:5c:01:da:b4:24:e2:36:bc:52: 64:ba:61:9d:c3:46:f1:f5:2a:f6:ec:bc:76:89:33:27:aa:17: 3f:14:5f:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR91e6G4dwu6FdTBIPw8CYAE/SwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTA4MTAwMzU2MzhaFw0yNTA4MTMwOTQ5MzhaMDMxMTAvBgNV BAMTKDQ2RTA0MzcxNTY3MTIwNjVGRjZCRUM4RjE1OTY4OUEyQTlBRkNFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13I9Yu0TtYj0SFzmbXL8CTtze fSACeVDO6V+bneV1Mt24T37gI5JnzxUrIBbCOb2Pl9J116uWUPRrIwY0J4Afu0gy WSVEzE9lWMDLu9USJ9hpwZIC3R8QpTfJMpoySFr848BMunpyr81/P+Xt2viaqFgg J1+R8tQP66OCwsYDb+rmbnNlEIYY6HTYZgVT84YgO2aD3AMEUdjvld6eu/9SlzDV QqgXRgU6wQiTtQKCyPJoH3QggYY7Hboqey08LSQBxSfcVw1r5eATQRHHnu7nT9CC PX89GysmXu9Mh8YGuNMnFxzRaXx6YzazRED8ehv8mzq9s5JnFRRNXHOS5rGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuBDcVZxIGX/a+yPFZaJoqmvzhkwHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbT6s5hED4ZfyZSD4SiupBylMZi6x0Fkxiw qM1kOAIt3hJcB0STbHTKIaOLrqy0UErZ6nK4h6/5jMOUF5GbieYGiFp5b/SY/V85 MbKiB4sOM8vH75qYJOVvrBMbeJ1NyhWhD1LzETFFQ7f3Eln9xhKVGZdBqaPEawPP lca/1410FTOX9hY9AL2TSLMziT5dSLDlzfKQh45SLAVDspOhV4GCwqzhM/Vx2Alb V8IyExpYoY3MkX4+3+krFFMT7YSZ5VQya5OqpDhTOE7XIf2sLL/GIXO1juJYyqpk IyBrBGaExFwB2rQk4ja8UmS6YZ3DRvH1KvbsvHaJMyeqFz8UXz4= -----END CERTIFICATE-----Generated at Sun Aug 10 13:47:43 2025 by rpki-client