$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: Ug8XW1waR1/Jk7DevSboh1TuhxBYBF+yDvXXygneTn0= Subject key identifier: BF:E8:33:FB:9A:AB:78:B9:FE:DB:0A:CD:1C:72:D3:20:E1:AF:EE:C5 Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 1E520EDA369FA4274976AEE25A4286AD463CAE66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 02FD Signing time: Tue 05 Aug 2025 21:41:28 +0000 Manifest this update: Tue 05 Aug 2025 21:36:28 +0000 Manifest next update: Sat 09 Aug 2025 05:51:28 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=) 2: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: Cih0h9M9UQq/Tgtx+s9y7am7BcH0+xKG1lfcR6BqaWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:52:0e:da:36:9f:a4:27:49:76:ae:e2:5a:42:86:ad:46:3c:ae:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Aug 5 21:36:28 2025 GMT Not After : Aug 9 05:51:28 2025 GMT Subject: CN=BFE833FB9AAB78B9FEDB0ACD1C72D320E1AFEEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:49:14:00:26:94:16:5a:a4:49:c6:73:f2: af:26:45:b3:08:9b:de:17:32:74:11:3f:d2:8e:c6: d7:9e:8b:ec:a6:1a:44:bc:eb:5b:07:71:0b:46:93: e0:33:89:23:25:c9:0d:c6:b8:af:7d:11:86:e4:10: a3:d4:02:5c:7b:a4:19:6f:0b:4b:88:f4:6f:2a:d9: 63:20:e3:e3:65:84:8f:b2:dc:9e:45:9f:0b:10:5b: af:b8:6c:33:49:d5:13:f9:dd:3e:ba:e0:06:4e:97: d1:df:db:fc:03:0f:51:56:9f:0b:53:12:5e:bc:6f: c4:65:bf:f1:fb:ce:e3:94:c4:1e:b9:e2:94:7b:55: 47:93:49:5b:9f:f1:57:86:2a:67:c8:e1:4a:30:68: ad:65:53:21:ca:cb:98:ac:98:99:f0:c0:75:07:a0: 7d:07:53:0c:72:73:8d:70:fc:0d:b8:6f:4d:0d:20: 4b:67:37:35:58:20:ff:05:c7:13:b8:8b:cd:72:5d: 23:ce:3b:98:b9:48:6e:7c:9e:07:00:2b:7b:06:b6: 00:19:b2:02:10:48:62:c3:60:47:c8:80:29:01:5b: d9:44:d8:e3:75:cc:e8:6a:23:5f:af:68:7d:dc:a3: 0b:74:ed:39:14:c6:cc:11:b3:9e:c7:c8:87:23:7a: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:33:FB:9A:AB:78:B9:FE:DB:0A:CD:1C:72:D3:20:E1:AF:EE:C5 X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:3c:a7:6d:90:a8:9f:b5:09:64:24:e1:29:82:09:69:af:e6: c3:6c:16:e4:a5:fa:9f:ff:42:03:d2:52:1e:82:e1:8d:ec:06: 00:54:6c:5a:7e:85:9d:a7:77:60:6c:04:1e:e6:25:30:e5:d2: d7:06:3c:87:00:c4:d7:1c:27:b3:4c:07:4d:5f:2a:35:69:8f: 02:7e:5f:77:dd:44:03:5a:1c:7d:65:d5:d8:2b:80:45:05:4f: 47:c9:75:ce:2e:71:26:f6:f1:47:46:28:08:ec:5d:72:22:ba: 20:0b:4e:33:eb:42:c7:8a:88:e6:47:fa:7a:e1:cc:92:d9:e5: 87:b2:8e:6f:5f:c3:30:a8:82:14:2b:78:16:61:07:a3:6e:c6: c1:27:08:40:0c:15:7d:8c:83:62:2a:66:89:86:fc:25:fe:fd: a6:c5:c7:fd:1c:89:d1:a0:ee:0f:20:72:ed:36:3f:ac:f0:98: 98:c6:e3:25:78:db:be:08:c4:b3:74:dd:1b:7d:c1:e5:95:0d: c2:69:d3:1a:ba:f6:6f:e1:56:90:90:9c:e1:df:5a:12:42:d7: a7:e1:0d:98:c4:fb:51:33:a1:92:35:b5:9a:4d:e1:c5:91:29: 0d:b5:16:da:3e:b1:25:53:9d:90:3b:3d:8e:63:21:29:f3:4d: a0:6a:1f:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlIO2jafpCdJdq7iWkKGrUY8rmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNTA4MDUyMTM2MjhaFw0yNTA4MDkwNTUxMjhaMDMxMTAvBgNV BAMTKEJGRTgzM0ZCOUFBQjc4QjlGRURCMEFDRDFDNzJEMzIwRTFBRkVFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGkkUACaUFlqkScZz8q8mRbMI m94XMnQRP9KOxteei+ymGkS861sHcQtGk+AziSMlyQ3GuK99EYbkEKPUAlx7pBlv C0uI9G8q2WMg4+NlhI+y3J5FnwsQW6+4bDNJ1RP53T664AZOl9Hf2/wDD1FWnwtT El68b8Rlv/H7zuOUxB654pR7VUeTSVuf8VeGKmfI4UowaK1lUyHKy5ismJnwwHUH oH0HUwxyc41w/A24b00NIEtnNzVYIP8FxxO4i81yXSPOO5i5SG58ngcAK3sGtgAZ sgIQSGLDYEfIgCkBW9lE2ON1zOhqI1+vaH3cowt07TkUxswRs57HyIcjepynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+gz+5qreLn+2wrNHHLTIOGv7sUwHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMI8p22QqJ+1CWQk4SmCCWmv5sNsFuSl+p// QgPSUh6C4Y3sBgBUbFp+hZ2nd2BsBB7mJTDl0tcGPIcAxNccJ7NMB01fKjVpjwJ+ X3fdRANaHH1l1dgrgEUFT0fJdc4ucSb28UdGKAjsXXIiuiALTjPrQseKiOZH+nrh zJLZ5Yeyjm9fwzCoghQreBZhB6NuxsEnCEAMFX2Mg2IqZomG/CX+/abFx/0cidGg 7g8gcu02P6zwmJjG4yV4274IxLN03Rt9weWVDcJp0xq69m/hVpCQnOHfWhJC16fh DZjE+1EzoZI1tZpN4cWRKQ21Fto+sSVTnZA7PY5jISnzTaBqHzw= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:53 2025 by rpki-client