$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: niK5jgQyV5uVS/cPn7JK1kt3+10wH3HuCZ7rsSOO8gg= Subject key identifier: FC:EC:97:E1:76:DF:D8:F7:F1:B1:EC:35:8F:1C:DF:4B:C6:82:29:C6 Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 66271AA112827C1D596C96B120F85B93DA2B59FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01C5 Signing time: Tue 05 Aug 2025 15:30:38 +0000 Manifest this update: Tue 05 Aug 2025 15:25:38 +0000 Manifest next update: Sat 09 Aug 2025 03:24:38 +0000 Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: +aTbg4Bqow3tKrEemUQDnquYnyKdUDg1fr/FMfpUH2g=) 2: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: 5+zXGETugAPi3HrPmviCFDgLbg2lDQPrtwA1t0d5+aI=) 3: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) 4: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: pjEdQtDCeLXIUhPwPUDCIV7hrRUxaMC/rUQFtyn1ZkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:27:1a:a1:12:82:7c:1d:59:6c:96:b1:20:f8:5b:93:da:2b:59:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Aug 5 15:25:38 2025 GMT Not After : Aug 9 03:24:38 2025 GMT Subject: CN=FCEC97E176DFD8F7F1B1EC358F1CDF4BC68229C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:8d:3a:32:8a:e6:d4:8b:28:b0:a9:a5:d7: 9b:fa:e4:ae:15:d3:e5:49:07:9a:a8:e4:54:53:56: a0:c1:b3:ae:4e:60:34:02:1a:dd:ea:0a:aa:33:fb: be:c5:24:97:82:15:f2:53:7e:7a:bf:71:a0:3d:41: ee:ff:e8:82:15:ce:2e:53:02:9c:76:66:e8:50:97: 00:e0:78:4a:12:01:22:4c:40:8e:45:7d:0c:f4:a8: af:3b:9e:bc:fd:57:53:40:45:b3:38:35:65:98:84: ca:d2:96:bb:9d:99:62:39:d5:53:0d:fc:36:81:70: 3c:dc:a3:0e:52:f4:4d:53:a6:b3:95:61:e7:da:39: 7b:ef:79:4b:11:7e:43:32:df:3c:df:be:17:1c:79: 70:87:db:0b:85:8c:8d:26:04:b0:ca:95:99:c2:58: eb:18:84:40:25:05:6d:22:b6:4d:9e:8a:60:0e:b6: 9b:ad:3a:ed:1b:b9:ff:e4:29:a2:e9:38:60:59:ad: c8:f6:ac:60:b5:df:58:b1:0e:d9:06:c2:23:be:9b: 51:d6:24:44:78:86:5d:08:c3:a4:b5:8f:09:70:7b: b9:bc:99:a0:1f:52:80:7d:5e:72:18:6b:4e:53:7f: 96:19:42:4a:64:cb:01:a0:b5:6e:eb:08:1d:fb:30: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EC:97:E1:76:DF:D8:F7:F1:B1:EC:35:8F:1C:DF:4B:C6:82:29:C6 X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d8:00:9d:00:66:4f:63:cc:56:76:dd:26:55:08:f6:ef:94: bc:c1:88:95:8e:2c:38:dc:5f:90:05:82:78:1a:98:67:9d:ff: c6:8c:45:97:36:44:d4:69:5f:a4:58:b6:cc:1a:cd:d3:9f:b0: bb:aa:da:af:f4:fb:15:e9:a7:72:d5:b2:0e:fd:d8:86:ef:bb: 4c:69:e9:3e:d8:ec:42:cd:ed:95:fe:06:88:d7:8e:11:0c:b8: 83:3f:c5:62:ea:ac:c4:92:59:b9:25:ba:d6:7c:6d:a1:f5:11: 8a:fa:9f:f4:8d:f8:af:5c:e2:a8:48:f5:6b:e6:ce:68:da:05: b9:2d:a1:c3:f8:33:18:aa:5a:71:37:81:92:97:f9:34:b4:d3: f2:05:c5:49:11:42:1e:b7:bb:52:9d:f3:9d:d6:bb:2d:a1:0b: f7:f4:9a:51:80:c6:20:eb:73:ff:ab:92:c3:ef:b8:0e:66:fe: 0c:ee:9f:0c:1d:3f:92:88:84:bc:21:96:db:e5:f5:92:e7:67: b3:26:94:a6:5d:ae:2b:9f:a1:be:28:01:c6:31:bf:50:87:42: 17:ab:6f:50:8d:81:57:44:a7:42:0e:62:81:1f:d9:f2:c0:92: 0e:8d:10:10:ea:66:ab:57:1f:35:f1:83:ca:93:3e:18:29:04: 45:b2:3c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZicaoRKCfB1ZbJaxIPhbk9orWf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTA4MDUxNTI1MzhaFw0yNTA4MDkwMzI0MzhaMDMxMTAvBgNV BAMTKEZDRUM5N0UxNzZERkQ4RjdGMUIxRUMzNThGMUNERjRCQzY4MjI5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuu406Morm1IsosKml15v65K4V 0+VJB5qo5FRTVqDBs65OYDQCGt3qCqoz+77FJJeCFfJTfnq/caA9Qe7/6IIVzi5T Apx2ZuhQlwDgeEoSASJMQI5FfQz0qK87nrz9V1NARbM4NWWYhMrSlrudmWI51VMN /DaBcDzcow5S9E1TprOVYefaOXvveUsRfkMy3zzfvhcceXCH2wuFjI0mBLDKlZnC WOsYhEAlBW0itk2eimAOtputOu0buf/kKaLpOGBZrcj2rGC131ixDtkGwiO+m1HW JER4hl0Iw6S1jwlwe7m8maAfUoB9XnIYa05Tf5YZQkpkywGgtW7rCB37MJnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/OyX4Xbf2Pfxsew1jxzfS8aCKcYwHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnYAJ0AZk9jzFZ23SZVCPbvlLzBiJWOLDjc X5AFgngamGed/8aMRZc2RNRpX6RYtswazdOfsLuq2q/0+xXpp3LVsg792Ibvu0xp 6T7Y7ELN7ZX+BojXjhEMuIM/xWLqrMSSWbklutZ8baH1EYr6n/SN+K9c4qhI9Wvm zmjaBbktocP4MxiqWnE3gZKX+TS00/IFxUkRQh63u1Kd853Wuy2hC/f0mlGAxiDr c/+rksPvuA5m/gzunwwdP5KIhLwhltvl9ZLnZ7MmlKZdriufob4oAcYxv1CHQher b1CNgVdEp0IOYoEf2fLAkg6NEBDqZqtXHzXxg8qTPhgpBEWyPAk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:16 2025 by rpki-client