$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: peZbZk//2h+7o2vd/crpQuk4AY5RWBiQUEVpEohmxeE= Subject key identifier: AE:FE:F3:FB:69:69:C2:1A:F4:9E:E1:6D:B0:94:E2:21:2D:FE:BE:B7 Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 2CAD37B34B2D9CCCBA3DA85524579FFF03F49C59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 021B Signing time: Tue 05 Aug 2025 15:31:41 +0000 Manifest this update: Tue 05 Aug 2025 15:26:41 +0000 Manifest next update: Fri 08 Aug 2025 20:44:41 +0000 Files and hashes: 1: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 2: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 3: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: aikFv9lO/eDmMrHs5Q4jb66TT6+EWTrYoYgQlgb+Ffk=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 5: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 6: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ad:37:b3:4b:2d:9c:cc:ba:3d:a8:55:24:57:9f:ff:03:f4:9c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Aug 5 15:26:41 2025 GMT Not After : Aug 8 20:44:41 2025 GMT Subject: CN=AEFEF3FB6969C21AF49EE16DB094E2212DFEBEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:9a:b7:27:dd:e9:2d:72:25:e7:3e:ae:27: 66:fb:b7:37:c2:dd:b6:bc:d1:ba:1e:ab:04:bc:5f: 94:a9:5b:46:94:01:29:df:00:6e:ee:e7:2f:18:ab: 60:09:d7:f8:f4:fd:3a:1f:0d:23:57:9e:06:5e:96: fd:91:08:2e:66:aa:15:34:f5:20:2e:9b:ac:69:e1: f7:12:39:18:d8:45:9c:e9:f4:98:a2:b3:13:b1:92: 17:ee:03:ee:11:a6:f0:0b:d0:b8:fe:45:9d:58:58: 0c:62:be:08:6a:ad:8e:55:32:8b:75:16:78:15:64: 92:d9:dd:2e:e3:83:81:2f:f4:b7:83:e4:4d:ab:91: 77:48:e6:a7:22:b5:84:67:42:bb:cd:01:d5:aa:8b: 8e:ec:7e:a8:02:ae:05:b1:b5:ab:ca:b3:4f:af:b8: 8d:71:76:70:0f:23:bb:13:41:1e:15:92:9f:d8:dd: 26:9d:c0:55:f4:7e:90:7a:b1:39:2f:d0:83:6c:ed: 57:da:f4:56:43:cd:1b:8e:ee:0a:24:8d:85:1d:ff: 91:27:13:42:a7:a0:af:8c:4f:c1:e7:f2:ae:f4:ba: b1:19:13:38:d5:bd:62:76:9d:fd:94:57:b9:bf:6a: bd:07:57:ee:35:d4:66:02:61:8d:6b:fb:82:73:6b: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FE:F3:FB:69:69:C2:1A:F4:9E:E1:6D:B0:94:E2:21:2D:FE:BE:B7 X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:cc:2e:5f:70:74:c6:e9:1c:24:90:3a:b7:96:0f:69:ec: 34:de:22:ba:f4:0a:b8:7b:43:54:e9:34:27:73:35:86:2b:c4: 73:08:a2:fd:cd:36:9b:60:2a:d5:8d:2a:d9:f5:4c:77:6e:22: 17:bf:92:ad:f4:d5:98:23:4c:42:73:b3:e1:02:60:ca:dc:26: 3a:32:ab:93:b9:86:fc:07:45:41:b0:0c:8a:f7:b9:cd:05:51: 3a:8d:e0:7d:3b:42:8b:a5:32:f9:01:62:39:7c:dc:36:d5:a8: 2f:82:fc:71:4a:1b:08:c5:2d:ed:20:04:33:ef:5e:a4:38:8f: 39:b9:8e:05:4a:9a:1f:8e:a7:6b:b3:09:c0:65:2c:52:c3:72: 05:1a:34:d9:48:8f:d1:65:bd:10:3c:1c:63:19:20:3d:a7:74: 14:30:42:c8:80:3c:57:c8:59:0d:ac:0b:bb:b4:1d:ae:d3:d6: 40:2e:7e:60:28:01:a4:3f:35:6e:ac:62:68:49:04:54:28:2e: e9:f6:da:8d:34:b0:6c:55:07:ba:8b:86:4b:32:a2:86:d4:39: 98:a2:19:03:80:b5:09:78:41:b1:04:2e:68:21:1f:60:23:22: d9:56:fc:ce:71:49:c9:4e:e2:f6:ad:26:c5:87:fb:f5:7f:4d: 99:72:fd:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULK03s0stnMy6PahVJFef/wP0nFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTA4MDUxNTI2NDFaFw0yNTA4MDgyMDQ0NDFaMDMxMTAvBgNV BAMTKEFFRkVGM0ZCNjk2OUMyMUFGNDlFRTE2REIwOTRFMjIxMkRGRUJFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQpq3J93pLXIl5z6uJ2b7tzfC 3ba80boeqwS8X5SpW0aUASnfAG7u5y8Yq2AJ1/j0/TofDSNXngZelv2RCC5mqhU0 9SAum6xp4fcSORjYRZzp9JiisxOxkhfuA+4RpvAL0Lj+RZ1YWAxivghqrY5VMot1 FngVZJLZ3S7jg4Ev9LeD5E2rkXdI5qcitYRnQrvNAdWqi47sfqgCrgWxtavKs0+v uI1xdnAPI7sTQR4Vkp/Y3SadwFX0fpB6sTkv0INs7Vfa9FZDzRuO7gokjYUd/5En E0KnoK+MT8Hn8q70urEZEzjVvWJ2nf2UV7m/ar0HV+411GYCYY1r+4Jza3MLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrv7z+2lpwhr0nuFtsJTiIS3+vrcwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYXzC5fcHTG6RwkkDq3lg9p7DTeIrr0Crh7 Q1TpNCdzNYYrxHMIov3NNptgKtWNKtn1THduIhe/kq301ZgjTEJzs+ECYMrcJjoy q5O5hvwHRUGwDIr3uc0FUTqN4H07QoulMvkBYjl83DbVqC+C/HFKGwjFLe0gBDPv XqQ4jzm5jgVKmh+Op2uzCcBlLFLDcgUaNNlIj9FlvRA8HGMZID2ndBQwQsiAPFfI WQ2sC7u0Ha7T1kAufmAoAaQ/NW6sYmhJBFQoLun22o00sGxVB7qLhksyoobUOZii GQOAtQl4QbEELmghH2AjItlW/M5xSclO4vatJsWH+/V/TZly/XE= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:22 2025 by rpki-client