$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft File: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json) Hash identifier: moGTvD/O6WhYNCi1QtZjaJRUmHMxVG5PDgpRQehXnOg= Subject key identifier: CA:8B:B6:CE:62:82:20:1A:DA:A5:F2:52:DE:BB:C4:B3:69:6B:99:5C Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 Certificate issuer: /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Certificate serial: 5E3A3F4A3C0DA3C0BBFACBD02A3266DA0B767A2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft Manifest number: 0456 Signing time: Tue 05 Aug 2025 07:03:17 +0000 Manifest this update: Tue 05 Aug 2025 06:58:17 +0000 Manifest next update: Fri 08 Aug 2025 11:22:17 +0000 Files and hashes: 1: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: puCZfiuCcsZ3OuDLd6BEblizvc3VAE/C2swB+dQ1H2k=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: 06ISKC2CwbxxyFrx3ByMaV4Lra2B5W5rP3yiIdrne3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3a:3f:4a:3c:0d:a3:c0:bb:fa:cb:d0:2a:32:66:da:0b:76:7a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Validity Not Before: Aug 5 06:58:17 2025 GMT Not After : Aug 8 11:22:17 2025 GMT Subject: CN=CA8BB6CE6282201ADAA5F252DEBBC4B3696B995C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:74:8e:50:55:bf:8a:07:ba:3f:27:5b:8b:c2: ac:13:b2:62:11:bc:e2:df:c2:a6:1d:4e:45:ce:af: 47:8f:d1:57:31:b6:ca:9a:96:8f:9d:b1:db:fd:60: 85:27:e8:75:d3:f6:dd:56:79:73:e4:47:48:8d:de: 8e:ab:36:42:9e:48:86:9c:36:54:12:a7:3b:ed:c7: a1:cf:09:4b:59:84:5b:f8:5c:d5:37:66:c0:a4:f1: 8c:dd:8a:37:c8:54:10:02:ee:1b:f7:4e:0a:76:e7: 36:49:39:f7:91:26:59:c1:8a:d1:46:04:12:10:c9: 63:74:c6:39:9d:1e:83:f7:e7:e0:9d:8d:cb:e4:80: d4:07:45:2d:cb:14:4f:eb:90:66:e4:3b:48:cc:82: cf:a9:b7:d2:9b:a7:0e:d5:f3:1f:07:67:0e:96:db: 86:19:29:a9:9a:b7:85:8a:c2:7c:1e:26:ef:99:9c: 6c:d6:80:c8:3c:4c:bd:40:c3:6f:15:c4:80:10:67: e5:c2:b4:20:f4:ea:1c:66:2f:40:5a:6d:4b:bd:ab: 7b:c1:c5:cb:27:4d:7a:28:04:bc:5e:c5:de:87:90: b3:ed:1c:f7:b6:c9:e0:f8:c8:04:83:71:4a:ac:f3: 79:d5:b6:19:aa:58:90:17:14:49:6a:62:90:e0:ef: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:B6:CE:62:82:20:1A:DA:A5:F2:52:DE:BB:C4:B3:69:6B:99:5C X509v3 Authority Key Identifier: keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ec:a7:b6:8b:bd:01:bc:51:59:4d:c1:21:a0:5d:0a:68:5f: 97:b0:16:5a:c1:88:32:12:c4:09:2f:06:5b:6f:c2:28:f1:6e: f7:9b:ab:e3:7a:fa:f9:bb:b9:da:d9:67:30:3a:9c:58:b0:36: 68:32:75:e3:18:32:57:8a:a8:cb:da:4e:7f:7b:1d:b4:1b:56: 0a:e9:10:e1:f6:00:dc:6f:20:04:21:47:b3:7b:82:6e:6c:8f: 3d:eb:fb:39:9a:75:1e:a4:96:a2:12:62:c4:b7:55:bb:7a:07: 14:35:63:22:ba:5f:89:c6:fe:f7:cf:63:07:9d:87:18:56:c1: bf:45:59:b7:dd:95:55:d6:a3:4c:a4:14:46:c3:9d:f9:76:b2: 81:c3:40:d2:d9:b4:0e:8b:6a:fe:c8:ee:74:55:c7:c1:23:9b: 28:4b:0b:d6:b3:de:5c:f2:c4:d0:24:d2:19:e1:3f:33:42:68: c5:6a:83:53:30:62:2b:ec:69:18:46:ab:49:05:cf:ad:04:f4: aa:e2:9f:0d:38:68:e3:0e:dc:15:dd:51:e0:98:40:f1:da:4d: b8:a7:4c:ca:f0:5e:5d:c7:f4:8e:a4:04:1e:e2:2c:75:9b:ce: 92:29:ce:71:ba:d6:a7:89:85:73:0d:f9:b7:8a:93:96:04:4f: 9a:ce:ef:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjo/SjwNo8C7+svQKjJm2gt2eiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE NkI4QzY5MDAeFw0yNTA4MDUwNjU4MTdaFw0yNTA4MDgxMTIyMTdaMDMxMTAvBgNV BAMTKENBOEJCNkNFNjI4MjIwMUFEQUE1RjI1MkRFQkJDNEIzNjk2Qjk5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdI5QVb+KB7o/J1uLwqwTsmIR vOLfwqYdTkXOr0eP0Vcxtsqalo+dsdv9YIUn6HXT9t1WeXPkR0iN3o6rNkKeSIac NlQSpzvtx6HPCUtZhFv4XNU3ZsCk8YzdijfIVBAC7hv3Tgp25zZJOfeRJlnBitFG BBIQyWN0xjmdHoP35+CdjcvkgNQHRS3LFE/rkGbkO0jMgs+pt9Kbpw7V8x8HZw6W 24YZKamat4WKwnweJu+ZnGzWgMg8TL1Aw28VxIAQZ+XCtCD06hxmL0BabUu9q3vB xcsnTXooBLxexd6HkLPtHPe2yeD4yASDcUqs83nVthmqWJAXFElqYpDg7ykJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyou2zmKCIBrapfJS3rvEs2lrmVwwHwYDVR0j BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4 QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvsp7aLvQG8UVlNwSGgXQpoX5ewFlrBiDIS xAkvBltvwijxbvebq+N6+vm7udrZZzA6nFiwNmgydeMYMleKqMvaTn97HbQbVgrp EOH2ANxvIAQhR7N7gm5sjz3r+zmadR6klqISYsS3Vbt6BxQ1YyK6X4nG/vfPYwed hxhWwb9FWbfdlVXWo0ykFEbDnfl2soHDQNLZtA6Lav7I7nRVx8EjmyhLC9az3lzy xNAk0hnhPzNCaMVqg1MwYivsaRhGq0kFz60E9Krinw04aOMO3BXdUeCYQPHaTbin TMrwXl3H9I6kBB7iLHWbzpIpznG61qeJhXMN+beKk5YET5rO79Y= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:17 2025 by rpki-client