$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: IdA10tah/E+hAQ5w1ZEDwq9jK63RRekpzoAbrwVTKP4= Subject key identifier: 31:A4:5C:05:9D:9E:CE:BE:C4:AF:4D:05:3D:B6:F5:7B:F7:D2:D8:14 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 380B93CB35CB151E826DF30D233DEBD370C8287E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 79 Signing time: Tue 05 Aug 2025 04:51:04 +0000 Manifest this update: Tue 05 Aug 2025 04:46:04 +0000 Manifest next update: Fri 08 Aug 2025 09:13:04 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: 6al8+r7RIquVxtdoMDlUAaxIXYrgmUTXGG9kwRk9E2w=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0b:93:cb:35:cb:15:1e:82:6d:f3:0d:23:3d:eb:d3:70:c8:28:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Aug 5 04:46:04 2025 GMT Not After : Aug 8 09:13:04 2025 GMT Subject: CN=31A45C059D9ECEBEC4AF4D053DB6F57BF7D2D814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:4f:ea:2a:95:d5:cf:a5:43:59:38:3e:cd: 1d:2f:ad:30:4a:4d:c2:f9:3e:35:23:cb:48:40:44: 27:c7:59:2f:27:f8:2c:b5:43:37:72:d6:35:ef:28: 65:c3:ad:b8:4c:a6:fa:3c:a2:ab:ec:54:2c:4d:7b: 8a:e3:3e:8b:ae:4f:d9:b1:68:15:ee:e6:0f:67:c6: c8:3c:bc:b6:4a:87:a3:4a:1c:fe:d7:c1:5f:26:b6: 02:24:cf:25:d0:71:c5:bb:0b:96:50:e0:27:46:69: 05:9f:f7:c9:25:43:c9:75:ad:f1:b8:0a:07:19:2c: 09:4b:75:7e:c6:7c:76:bb:57:e9:ab:b6:cd:19:6e: f8:55:b9:8b:34:ca:ef:95:35:66:83:91:53:fc:ef: 7d:f2:82:dc:3e:87:71:77:8c:b2:4a:6d:9f:2f:74: 35:73:55:27:2e:8c:34:3e:38:d3:2d:5a:1a:f3:1d: 77:66:7c:49:80:63:6a:cf:0a:a9:62:2a:51:b8:60: 03:23:7a:ce:af:84:ba:fc:d5:d4:54:a5:4e:d1:01: e0:85:bd:5e:04:04:a8:0d:87:5f:81:0b:b0:46:89: cf:7f:f9:22:41:8b:26:66:3a:91:c0:df:e8:1c:5a: 2c:e7:10:63:02:fc:e8:dc:66:48:d6:c6:ab:a6:6a: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A4:5C:05:9D:9E:CE:BE:C4:AF:4D:05:3D:B6:F5:7B:F7:D2:D8:14 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7d:f5:f0:bb:11:74:7b:79:a2:07:8e:e7:11:22:cf:15:8b: fe:1c:91:50:6a:0d:c1:82:ab:be:b6:19:6e:e8:cb:94:ad:90: ef:62:52:5b:6c:1c:fd:4b:8e:12:89:b4:f2:a3:61:d8:a3:15: b5:c9:1b:d3:cd:d2:12:bf:1e:41:29:67:8d:18:dd:13:29:59: 62:1f:a4:84:85:83:12:64:2b:b8:52:22:52:79:de:11:fc:9d: 03:f7:62:b7:b5:d8:62:be:98:0f:84:34:e1:ba:26:de:ab:7b: 01:e5:1d:cb:42:45:f0:08:d9:97:9e:0b:62:86:4e:4b:22:c2: c2:9e:f6:87:08:95:8c:2a:32:00:c9:3e:f1:e9:78:4a:ef:28: 91:c7:db:75:fb:3b:20:4d:9e:f3:8d:45:c3:b4:9a:f2:30:96: 80:f7:aa:e0:68:39:4a:5f:ee:44:0e:64:a9:da:8b:db:5f:72: 3d:4d:6b:46:ba:66:7a:80:6d:c6:8f:4d:17:9f:e7:6b:17:d7: 4e:db:9f:f9:46:92:81:dc:0a:4e:fd:68:fc:49:08:f3:cd:d4: fa:1b:2d:98:a5:0f:b0:c1:04:81:19:f7:36:c6:69:4a:8d:e7: b8:92:49:b1:76:2d:0c:dc:d5:28:8e:ff:0c:bf:7f:b9:0e:4f: bf:d8:08:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAuTyzXLFR6CbfMNIz3r03DIKH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTA4MDUwNDQ2MDRaFw0yNTA4MDgwOTEzMDRaMDMxMTAvBgNV BAMTKDMxQTQ1QzA1OUQ5RUNFQkVDNEFGNEQwNTNEQjZGNTdCRjdEMkQ4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYU/qKpXVz6VDWTg+zR0vrTBK TcL5PjUjy0hARCfHWS8n+Cy1Qzdy1jXvKGXDrbhMpvo8oqvsVCxNe4rjPouuT9mx aBXu5g9nxsg8vLZKh6NKHP7XwV8mtgIkzyXQccW7C5ZQ4CdGaQWf98klQ8l1rfG4 CgcZLAlLdX7GfHa7V+mrts0ZbvhVuYs0yu+VNWaDkVP8733ygtw+h3F3jLJKbZ8v dDVzVScujDQ+ONMtWhrzHXdmfEmAY2rPCqliKlG4YAMjes6vhLr81dRUpU7RAeCF vV4EBKgNh1+BC7BGic9/+SJBiyZmOpHA3+gcWiznEGMC/OjcZkjWxqumamQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMaRcBZ2ezr7Er00FPbb1e/fS2BQwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFN99fC7EXR7eaIHjucRIs8Vi/4ckVBqDcGC q762GW7oy5StkO9iUltsHP1LjhKJtPKjYdijFbXJG9PN0hK/HkEpZ40Y3RMpWWIf pISFgxJkK7hSIlJ53hH8nQP3Yre12GK+mA+ENOG6Jt6rewHlHctCRfAI2ZeeC2KG TksiwsKe9ocIlYwqMgDJPvHpeErvKJHH23X7OyBNnvONRcO0mvIwloD3quBoOUpf 7kQOZKnai9tfcj1Na0a6ZnqAbcaPTRef52sX107bn/lGkoHcCk79aPxJCPPN1Pob LZilD7DBBIEZ9zbGaUqN57iSSbF2LQzc1SiO/wy/f7kOT7/YCGE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:15 2025 by rpki-client