$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: DnRXRuL4pTEffZLgBzV6RElbUAb1o5KztGmjtaA4Egw= Subject key identifier: 83:0F:E4:26:75:FC:C7:DA:4F:AD:A7:84:02:B0:A4:FA:A7:D2:FC:F7 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 64A39C71BC22220F7C5B42DC4A4A54B0B9AED8B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 04F3 Signing time: Tue 05 Aug 2025 07:31:28 +0000 Manifest this update: Tue 05 Aug 2025 07:26:28 +0000 Manifest next update: Fri 08 Aug 2025 08:01:28 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: kTvhbNgURcAC5HDQof01MwG619kUrfpxZEmVgz7FA8k=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a3:9c:71:bc:22:22:0f:7c:5b:42:dc:4a:4a:54:b0:b9:ae:d8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Aug 5 07:26:28 2025 GMT Not After : Aug 8 08:01:28 2025 GMT Subject: CN=830FE42675FCC7DA4FADA78402B0A4FAA7D2FCF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:0c:82:d2:84:eb:1d:9a:70:8a:48:b3:88: c2:0e:c4:b4:94:fa:ac:1c:bd:7b:2b:03:4b:cb:29: c0:29:f3:b2:de:da:9b:60:02:fb:b1:33:dd:0f:03: a8:46:ae:b0:ae:1e:be:0c:6c:f8:9f:32:b5:09:80: 02:8c:8b:3a:d8:66:a7:5e:9a:af:c0:95:ad:bc:9d: b0:33:d4:46:74:78:b8:c6:37:3b:b2:a0:94:16:27: fe:41:ee:4b:5c:d0:b0:72:40:38:e2:04:5a:e8:5e: cf:b0:fc:a2:81:a2:95:c1:9a:ee:4a:68:d9:41:e8: f1:5f:ef:9d:78:76:af:8e:a7:55:97:60:a1:80:07: 5a:25:18:8e:21:47:31:04:71:a4:b6:90:31:fe:11: 13:82:7c:9a:5a:3f:47:51:8a:cb:a6:47:0b:6f:5e: 90:74:d4:fa:60:f3:fc:d0:08:af:79:45:b5:10:44: 5e:9f:90:e6:ed:e2:82:06:ff:97:07:e6:d7:b1:f8: 81:2e:2b:6a:e3:d3:57:15:d0:48:86:80:fc:45:31: 8b:f2:b8:a0:9f:69:ad:85:a8:82:e2:32:f7:fe:99: cf:65:1a:83:10:00:58:f0:dc:b4:eb:7b:56:35:62: 7a:e2:1e:4d:5d:b6:f1:38:00:01:df:fd:5a:12:e3: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0F:E4:26:75:FC:C7:DA:4F:AD:A7:84:02:B0:A4:FA:A7:D2:FC:F7 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:40:65:ca:e2:79:50:29:d7:7e:0d:c5:94:6b:77:09:d8:03: 8d:8d:3c:74:f8:b9:0b:3a:64:f0:60:55:ee:3c:ea:e2:e4:ad: fc:36:c2:44:3b:8b:83:b0:da:87:ab:2d:70:cc:f8:a8:54:81: a7:16:8c:0f:81:59:a5:36:fa:5a:c5:5c:c2:7a:90:66:7b:ef: 5f:6d:8e:e7:a2:7d:ae:6e:77:0e:3e:ff:43:f8:30:e4:b8:ae: 72:bf:11:16:e6:17:9b:13:e1:23:27:f4:5f:cc:26:f3:18:14: 03:d5:91:d7:d7:c6:be:ef:c3:a3:02:8f:ef:43:cc:78:92:89: ee:4e:83:d7:69:32:76:86:cb:c4:60:d2:e8:2a:f3:ee:7d:28: e0:87:39:2a:27:07:e2:38:91:82:73:04:e2:36:d1:48:f9:65: a2:96:26:b8:0a:e3:76:c5:d2:ad:34:b6:66:19:85:29:2f:9b: 69:e3:8a:36:a0:3a:ba:40:6f:f0:c2:2e:d0:92:4f:86:85:11: 77:0c:9d:e9:a4:34:3c:7f:de:66:e7:26:b5:96:92:65:05:7f: d2:5b:d7:d0:92:9f:79:51:6c:23:9b:3a:d9:3b:2d:86:c8:86: 37:e3:23:81:fe:26:92:49:be:40:83:9a:1b:0f:3d:12:43:e7: 9c:72:c5:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKOccbwiIg98W0LcSkpUsLmu2LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTA4MDUwNzI2MjhaFw0yNTA4MDgwODAxMjhaMDMxMTAvBgNV BAMTKDgzMEZFNDI2NzVGQ0M3REE0RkFEQTc4NDAyQjBBNEZBQTdEMkZDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUAyC0oTrHZpwikiziMIOxLSU +qwcvXsrA0vLKcAp87Le2ptgAvuxM90PA6hGrrCuHr4MbPifMrUJgAKMizrYZqde mq/Ala28nbAz1EZ0eLjGNzuyoJQWJ/5B7ktc0LByQDjiBFroXs+w/KKBopXBmu5K aNlB6PFf7514dq+Op1WXYKGAB1olGI4hRzEEcaS2kDH+EROCfJpaP0dRisumRwtv XpB01Ppg8/zQCK95RbUQRF6fkObt4oIG/5cH5tex+IEuK2rj01cV0EiGgPxFMYvy uKCfaa2FqILiMvf+mc9lGoMQAFjw3LTre1Y1YnriHk1dtvE4AAHf/VoS45cBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgw/kJnX8x9pPraeEArCk+qfS/PcwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpAZcrieVAp134NxZRrdwnYA42NPHT4uQs6 ZPBgVe486uLkrfw2wkQ7i4Ow2oerLXDM+KhUgacWjA+BWaU2+lrFXMJ6kGZ7719t jueifa5udw4+/0P4MOS4rnK/ERbmF5sT4SMn9F/MJvMYFAPVkdfXxr7vw6MCj+9D zHiSie5Og9dpMnaGy8Rg0ugq8+59KOCHOSonB+I4kYJzBOI20Uj5ZaKWJrgK43bF 0q00tmYZhSkvm2njijagOrpAb/DCLtCST4aFEXcMnemkNDx/3mbnJrWWkmUFf9Jb 19CSn3lRbCObOtk7LYbIhjfjI4H+JpJJvkCDmhsPPRJD55xyxZ4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:32 2025 by rpki-client