$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: yZjSMT7+oykVe4uEj4s5hlXg2MeAbeRB8Hw7SjgJFT8= Subject key identifier: 95:CC:43:DF:3B:C0:28:09:34:94:1D:5E:42:B4:D3:B9:BC:68:86:FA Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 682033F7FDF4BA4EA76CD23895169BD0A0DF58EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 01B0 Signing time: Thu 07 Aug 2025 03:51:50 +0000 Manifest this update: Thu 07 Aug 2025 03:46:50 +0000 Manifest next update: Sun 10 Aug 2025 09:38:50 +0000 Files and hashes: 1: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: yb+FKjFuKLSu9/5NNy0+1w1VPJ4tBxXyijc7P7217kg=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=) 3: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: xEKvL1Sy6gjieKkSQRdg2opwP1NrCxUV9PFI8nvYCrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:20:33:f7:fd:f4:ba:4e:a7:6c:d2:38:95:16:9b:d0:a0:df:58:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Aug 7 03:46:50 2025 GMT Not After : Aug 10 09:38:50 2025 GMT Subject: CN=95CC43DF3BC0280934941D5E42B4D3B9BC6886FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7f:d9:7e:84:02:33:0a:c8:5c:69:79:a5:c9: 41:85:8b:17:ee:4f:36:64:ab:d7:d1:20:ce:78:d3: b5:08:f5:a2:0f:cb:1d:e2:3f:ce:e6:61:b4:51:c8: cd:af:42:26:e8:24:0c:fd:2d:6c:38:10:e8:12:20: 48:fd:bf:68:ee:3e:8d:e3:3f:89:88:b4:34:e3:8d: 63:ce:c0:89:97:bd:cb:1c:d9:81:a8:cf:6f:1f:b3: 1a:a6:88:d1:e3:e0:94:12:0c:73:9f:58:94:4b:4e: 0d:02:8e:1f:79:36:03:51:b1:d3:80:8a:c4:91:46: 34:35:21:34:62:8a:ed:1e:1d:d9:7f:f3:d4:bf:cd: c1:b0:5d:c4:eb:0a:26:92:bf:0a:33:31:74:8f:ca: 38:51:7b:c8:cc:d6:fe:4e:12:a2:d7:c5:f4:2a:41: 75:e7:71:f8:16:4d:f1:ff:3d:a7:26:84:d4:1d:9f: 21:9f:0f:c6:e2:38:c3:1b:14:26:43:42:54:13:43: b0:b4:28:f2:3e:a9:c6:47:39:6e:80:66:f1:f4:a7: 56:25:74:87:aa:6d:db:c0:76:00:d9:4d:1a:59:4d: cb:dc:62:78:67:2c:ab:4e:93:f0:3a:33:63:d7:7c: 55:20:08:7c:74:7a:89:c7:4c:e0:aa:b3:fb:c9:d0: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CC:43:DF:3B:C0:28:09:34:94:1D:5E:42:B4:D3:B9:BC:68:86:FA X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:86:20:10:1c:7a:d0:4a:14:d0:4d:16:79:3a:62:98:b2:9d: 3e:bf:fa:00:28:e0:54:0e:36:a0:41:78:3b:68:d8:2d:f6:3c: 8d:4e:49:6c:5b:15:9f:2d:c9:c5:2b:e6:ed:3b:df:ef:e0:dd: a5:4f:8b:f6:13:20:2b:77:04:58:cf:7c:30:43:b1:25:17:b9: 4c:c5:e2:95:57:a7:f9:7f:06:f6:8b:11:2c:60:c8:30:2b:3f: 93:a8:85:7f:d8:81:8b:dd:57:55:69:7b:fa:a4:8b:e0:9f:0e: 46:c0:11:b9:03:88:c5:bc:02:d2:5f:2a:54:65:ae:7f:ea:a7: a3:6f:ee:0c:fa:28:3c:c3:af:b8:df:c5:cd:bc:33:64:ff:52: 4c:be:fc:fa:97:67:d0:d8:31:13:55:fe:aa:be:e2:18:0e:3d: 5d:63:8e:ba:b5:7b:95:f0:1c:08:61:76:a0:fe:13:e0:60:33: bd:de:cb:fc:87:89:e8:28:a7:3d:1f:69:e9:bb:2d:ef:09:03: ec:f8:dd:05:55:d0:b9:57:2e:33:79:84:a3:5a:c8:b7:9d:e5: f1:69:c8:16:91:9a:f1:d0:71:19:12:c0:90:13:4d:0f:79:a8: f0:15:e0:6b:b8:6d:3f:f5:5d:0e:20:d0:7b:39:8a:93:f7:78: 0a:17:b7:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCAz9/30uk6nbNI4lRab0KDfWO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTA4MDcwMzQ2NTBaFw0yNTA4MTAwOTM4NTBaMDMxMTAvBgNV BAMTKDk1Q0M0M0RGM0JDMDI4MDkzNDk0MUQ1RTQyQjREM0I5QkM2ODg2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqf9l+hAIzCshcaXmlyUGFixfu TzZkq9fRIM5407UI9aIPyx3iP87mYbRRyM2vQiboJAz9LWw4EOgSIEj9v2juPo3j P4mItDTjjWPOwImXvcsc2YGoz28fsxqmiNHj4JQSDHOfWJRLTg0Cjh95NgNRsdOA isSRRjQ1ITRiiu0eHdl/89S/zcGwXcTrCiaSvwozMXSPyjhRe8jM1v5OEqLXxfQq QXXncfgWTfH/PacmhNQdnyGfD8biOMMbFCZDQlQTQ7C0KPI+qcZHOW6AZvH0p1Yl dIeqbdvAdgDZTRpZTcvcYnhnLKtOk/A6M2PXfFUgCHx0eonHTOCqs/vJ0D0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcxD3zvAKAk0lB1eQrTTubxohvowHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCGIBAcetBKFNBNFnk6YpiynT6/+gAo4FQO NqBBeDto2C32PI1OSWxbFZ8tycUr5u073+/g3aVPi/YTICt3BFjPfDBDsSUXuUzF 4pVXp/l/BvaLESxgyDArP5OohX/YgYvdV1Vpe/qki+CfDkbAEbkDiMW8AtJfKlRl rn/qp6Nv7gz6KDzDr7jfxc28M2T/Uky+/PqXZ9DYMRNV/qq+4hgOPV1jjrq1e5Xw HAhhdqD+E+BgM73ey/yHiegopz0faem7Le8JA+z43QVV0LlXLjN5hKNayLed5fFp yBaRmvHQcRkSwJATTQ95qPAV4Gu4bT/1XQ4g0Hs5ipP3eAoXt2c= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:24 2025 by rpki-client