$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: tckvF34npcieSwnRVMC33msLa5ZcivU9+kj/6+ZNFsA= Subject key identifier: D6:67:B2:30:94:5F:1D:32:DB:48:BE:45:5D:4C:2B:3E:EC:61:C4:9A Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 5C0F556F5BAF28D7CE77712A7FE56E45249A7DD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 018B Signing time: Mon 04 Aug 2025 22:21:07 +0000 Manifest this update: Mon 04 Aug 2025 22:16:07 +0000 Manifest next update: Fri 08 Aug 2025 03:04:07 +0000 Files and hashes: 1: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: f09vYnLgCYY93d2DN2b2MW7zuCLiUB3TbKp/6J4HlRc=) 2: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) 3: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0f:55:6f:5b:af:28:d7:ce:77:71:2a:7f:e5:6e:45:24:9a:7d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Aug 4 22:16:07 2025 GMT Not After : Aug 8 03:04:07 2025 GMT Subject: CN=D667B230945F1D32DB48BE455D4C2B3EEC61C49A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:b7:ea:99:c5:27:0b:00:a3:af:66:d3:52: 7d:2f:e6:de:d7:d8:d4:b8:88:a1:95:30:08:93:30: 63:16:33:37:2f:3b:23:4a:ae:8e:5b:32:bd:55:b1: c5:7b:89:aa:e0:5d:7e:7e:ce:84:7e:0a:7c:6d:d4: 1f:4f:52:39:1e:7e:d2:71:d5:c2:dd:0c:e2:27:ba: bb:29:ac:99:37:7f:6d:02:d5:0a:eb:3a:5c:74:b7: c9:45:73:45:31:26:34:78:14:a9:b7:5f:93:b8:f0: 84:d6:60:12:e4:9e:b0:03:0d:5c:72:a0:2d:89:41: 8a:65:60:fa:b7:b6:66:7c:c4:8d:f6:d0:92:d7:25: 6f:0d:e1:4d:39:b8:e6:ca:98:ff:3a:38:b9:8c:91: 99:81:da:d0:ea:a3:ab:80:65:45:0e:c5:f7:bc:a8: aa:24:0a:2b:7f:1b:d7:0c:d0:e5:56:90:bd:a2:44: 7d:1d:e6:48:4d:88:b8:d2:f6:ff:8a:a6:6a:77:05: 4d:3e:77:1c:e3:52:82:29:27:f5:ed:17:d7:f0:f9: a0:22:ad:1b:7a:05:9f:94:a1:3a:6a:2b:7f:25:de: df:f2:d5:97:75:17:df:c7:24:63:59:40:50:0d:d2: 67:40:68:7e:28:57:df:fb:39:af:8f:36:d0:9b:be: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:67:B2:30:94:5F:1D:32:DB:48:BE:45:5D:4C:2B:3E:EC:61:C4:9A X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6c:97:b8:80:1d:c1:55:4d:7b:a6:70:05:64:99:f7:72:ff: 1c:52:d2:10:0e:5c:42:03:48:f1:1b:f8:2d:26:d7:92:47:b0: 65:8a:0c:58:83:fc:68:b8:7c:7b:39:43:30:c2:ba:0d:e8:95: 4e:32:13:e0:fd:ca:bd:7c:13:61:32:a6:ac:a9:50:fc:19:4b: 0a:71:6b:46:04:2e:07:58:cf:fc:47:c0:d9:8f:36:00:2b:b4: a1:b4:ae:3b:bc:ee:05:24:68:c0:28:8f:8a:7a:33:b9:89:db: 61:7e:bd:73:5e:57:13:6b:d5:1e:5b:69:66:33:c0:83:21:37: 43:ec:34:7d:ba:2b:23:36:0e:b5:96:47:4e:4f:57:8e:a1:f0: 4d:4c:b5:50:7f:5c:81:4e:bd:4c:fc:9a:24:a3:35:78:40:3d: 8a:10:ed:3e:86:5f:ad:1f:9e:f6:b7:93:0f:e3:1b:5d:c2:2d: 55:ef:35:cd:f7:f6:47:a1:af:18:26:ff:2d:3a:53:62:68:74: 21:e7:48:86:b3:2e:d2:3a:45:0d:25:e7:7f:c6:9e:5f:48:48: 70:b9:cb:e7:ba:09:6b:9e:e2:69:26:29:3a:35:bd:3d:34:f6: 44:46:68:c0:25:8a:ea:3d:c7:03:72:57:37:a0:b1:78:a2:fd: 8b:75:3b:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXA9Vb1uvKNfOd3Eqf+VuRSSafdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTA4MDQyMjE2MDdaFw0yNTA4MDgwMzA0MDdaMDMxMTAvBgNV BAMTKEQ2NjdCMjMwOTQ1RjFEMzJEQjQ4QkU0NTVENEMyQjNFRUM2MUM0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnbfqmcUnCwCjr2bTUn0v5t7X 2NS4iKGVMAiTMGMWMzcvOyNKro5bMr1VscV7iargXX5+zoR+Cnxt1B9PUjkeftJx 1cLdDOInursprJk3f20C1QrrOlx0t8lFc0UxJjR4FKm3X5O48ITWYBLknrADDVxy oC2JQYplYPq3tmZ8xI320JLXJW8N4U05uObKmP86OLmMkZmB2tDqo6uAZUUOxfe8 qKokCit/G9cM0OVWkL2iRH0d5khNiLjS9v+Kpmp3BU0+dxzjUoIpJ/XtF9fw+aAi rRt6BZ+UoTpqK38l3t/y1Zd1F9/HJGNZQFAN0mdAaH4oV9/7Oa+PNtCbvnp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1meyMJRfHTLbSL5FXUwrPuxhxJowHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNsl7iAHcFVTXumcAVkmfdy/xxS0hAOXEID SPEb+C0m15JHsGWKDFiD/Gi4fHs5QzDCug3olU4yE+D9yr18E2EypqypUPwZSwpx a0YELgdYz/xHwNmPNgArtKG0rju87gUkaMAoj4p6M7mJ22F+vXNeVxNr1R5baWYz wIMhN0PsNH26KyM2DrWWR05PV46h8E1MtVB/XIFOvUz8miSjNXhAPYoQ7T6GX60f nva3kw/jG13CLVXvNc339kehrxgm/y06U2JodCHnSIazLtI6RQ0l53/Gnl9ISHC5 y+e6CWue4mkmKTo1vT009kRGaMAliuo9xwNyVzegsXii/Yt1O+w= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:55 2025 by rpki-client