$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: h5NKRG8wcGF5E7GSSeuP53+W2K02sGq4MOAVduta0LI= Subject key identifier: D5:A9:DE:8C:98:B7:F9:01:CC:C1:5B:89:E3:15:FA:76:55:C4:FC:7F Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 4D5D508A721182D478F576D3F1AD5720AC9A4254 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01AA Signing time: Tue 05 Aug 2025 07:02:43 +0000 Manifest this update: Tue 05 Aug 2025 06:57:43 +0000 Manifest next update: Fri 08 Aug 2025 13:33:43 +0000 Files and hashes: 1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=) 2: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: 0k8aOreXa32R9yIlBTXwgYcwj289bivzpFc88GIe504=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5d:50:8a:72:11:82:d4:78:f5:76:d3:f1:ad:57:20:ac:9a:42:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Aug 5 06:57:43 2025 GMT Not After : Aug 8 13:33:43 2025 GMT Subject: CN=D5A9DE8C98B7F901CCC15B89E315FA7655C4FC7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:34:0f:18:85:30:71:84:b1:bb:c7:23:c2: fc:4b:02:20:9f:45:0a:83:1b:fd:71:f2:31:73:d1: f9:56:8d:87:02:e6:49:d6:42:6b:cb:e3:d9:fa:41: a2:13:2c:dd:71:7c:46:90:bd:c5:c7:8e:7a:96:0f: 2b:7c:01:90:21:d4:19:28:42:0e:f2:f9:b7:a5:66: 17:1b:6e:34:c7:4b:1f:4b:04:80:1e:ef:a4:b0:81: ac:40:e5:69:fe:19:74:9a:ca:2c:9b:18:3a:3a:18: f3:81:6b:e0:71:7f:e0:57:62:73:d8:fb:a3:a7:01: 63:0d:d1:5d:13:41:dc:c4:64:c8:7e:af:1b:77:fc: 03:fd:f2:5a:18:ca:43:69:25:b7:0e:e1:e5:32:12: 71:ba:03:7f:32:da:20:c0:28:a1:df:86:13:8f:e9: c3:72:8c:aa:ec:50:b9:83:52:e3:09:14:b4:05:21: 3c:8f:f7:03:3f:51:d0:cc:d1:35:2d:fe:2c:a8:49: 2b:75:40:92:46:98:50:01:a3:e5:21:4d:87:7f:62: 46:2d:3e:38:d1:06:15:95:0a:df:de:b2:1c:1d:fe: 3d:34:07:e6:83:e1:16:d7:d3:7e:ef:af:fd:f7:e8: 9b:63:68:0f:de:90:1f:10:a7:c3:23:2d:bf:80:e0: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A9:DE:8C:98:B7:F9:01:CC:C1:5B:89:E3:15:FA:76:55:C4:FC:7F X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6b:f1:c4:0d:cd:f9:8d:f4:cc:03:9d:c1:c1:16:d5:89:17: 20:b4:dc:e9:1d:14:79:94:b4:df:2a:97:0e:04:cd:1b:7d:ec: 46:fe:58:e2:60:c8:62:0e:7e:85:54:6b:81:21:03:69:13:72: 26:a1:81:d2:0b:b4:97:f4:e5:10:b2:ce:5b:c1:91:55:03:ee: f4:44:89:d4:01:04:be:0e:6a:38:19:c9:82:c0:b7:46:72:82: fc:57:5f:2a:a9:e1:91:da:2d:70:95:e4:71:a1:7a:cf:f4:a8: 13:57:30:7a:f5:f7:bf:bc:43:fe:16:16:e8:c5:80:c5:2c:9e: 07:c3:7b:58:56:aa:46:a3:40:4e:2d:a9:0b:9b:6c:40:27:63: 86:75:2d:c2:0e:1c:26:b0:bb:69:16:55:11:b6:80:0c:9b:cd: 59:97:07:15:33:33:8e:65:87:60:d1:21:a0:f6:d5:58:ed:36: 25:35:8d:e2:51:d6:80:02:66:20:5a:af:f6:10:76:c4:63:62: 40:21:0e:61:ca:5f:24:1b:93:e1:2e:e0:82:42:9d:84:62:03: 4c:34:ce:d2:5d:a1:90:d0:33:5e:67:bc:5c:fa:5b:3e:c6:22: c1:be:2e:68:0c:55:2d:60:9a:9f:0e:1a:a6:d9:67:ed:2a:33: a6:dd:0a:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTV1QinIRgtR49XbT8a1XIKyaQlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTA4MDUwNjU3NDNaFw0yNTA4MDgxMzMzNDNaMDMxMTAvBgNV BAMTKEQ1QTlERThDOThCN0Y5MDFDQ0MxNUI4OUUzMTVGQTc2NTVDNEZDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEDQPGIUwcYSxu8cjwvxLAiCf RQqDG/1x8jFz0flWjYcC5knWQmvL49n6QaITLN1xfEaQvcXHjnqWDyt8AZAh1Bko Qg7y+belZhcbbjTHSx9LBIAe76SwgaxA5Wn+GXSayiybGDo6GPOBa+Bxf+BXYnPY +6OnAWMN0V0TQdzEZMh+rxt3/AP98loYykNpJbcO4eUyEnG6A38y2iDAKKHfhhOP 6cNyjKrsULmDUuMJFLQFITyP9wM/UdDM0TUt/iyoSSt1QJJGmFABo+UhTYd/YkYt PjjRBhWVCt/eshwd/j00B+aD4RbX037vr/336JtjaA/ekB8Qp8MjLb+A4FnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1anejJi3+QHMwVuJ4xX6dlXE/H8wHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVr8cQNzfmN9MwDncHBFtWJFyC03OkdFHmU tN8qlw4EzRt97Eb+WOJgyGIOfoVUa4EhA2kTciahgdILtJf05RCyzlvBkVUD7vRE idQBBL4OajgZyYLAt0ZygvxXXyqp4ZHaLXCV5HGhes/0qBNXMHr197+8Q/4WFujF gMUsngfDe1hWqkajQE4tqQubbEAnY4Z1LcIOHCawu2kWVRG2gAybzVmXBxUzM45l h2DRIaD21VjtNiU1jeJR1oACZiBar/YQdsRjYkAhDmHKXyQbk+Eu4IJCnYRiA0w0 ztJdoZDQM15nvFz6Wz7GIsG+LmgMVS1gmp8OGqbZZ+0qM6bdCk8= -----END CERTIFICATE-----Generated at Thu Aug 7 14:38:26 2025 by rpki-client