$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: L7JgYp9pBKR8OuvlgT0wEd5ElWcNyLTuOj/z3u5gp5E= Subject key identifier: 8F:F5:29:53:9A:A3:6A:65:BC:C4:72:2D:FE:0D:85:69:F3:3D:6A:C9 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 69A864A37A7A0E7CEE09F5910076CDBE83ABB0FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 020D Signing time: Sun 10 Aug 2025 21:11:05 +0000 Manifest this update: Sun 10 Aug 2025 21:06:05 +0000 Manifest next update: Thu 14 Aug 2025 07:27:05 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) 2: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: fyTXsHwin6DxnNGcP78+a3JVDkVXGAtTSr1KolT6scE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a8:64:a3:7a:7a:0e:7c:ee:09:f5:91:00:76:cd:be:83:ab:b0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Aug 10 21:06:05 2025 GMT Not After : Aug 14 07:27:05 2025 GMT Subject: CN=8FF529539AA36A65BCC4722DFE0D8569F33D6AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:c5:f3:9d:1b:e5:a9:ae:a3:60:6c:e4:4e: e5:e6:26:6d:78:59:e5:17:33:2a:da:69:d7:f6:7f: 7a:8c:d6:30:ef:00:6a:4d:9f:94:e3:ee:de:77:46: 45:a8:f7:d0:cb:ec:db:5b:f9:1f:70:22:1c:92:54: f4:ea:70:d4:f3:e2:ef:01:c8:c0:c5:84:18:4f:f4: c6:54:62:d0:7d:41:aa:cb:d1:60:e8:e0:10:11:49: 6b:63:71:af:b3:5c:b4:16:eb:ac:cb:95:37:a9:65: b9:ac:ce:ab:b8:07:1b:39:c3:24:ec:e3:28:0b:ea: e0:c5:64:b0:d5:c4:28:fe:93:19:33:83:e8:b0:f6: 38:34:2f:0e:04:2e:ab:4b:11:92:0b:8a:20:f8:32: 40:a9:35:72:0c:bd:c5:54:33:a8:95:93:b1:ca:e6: 37:0a:6f:60:59:51:8d:60:db:91:c7:c3:fb:4c:c4: 13:2a:9a:b4:08:a6:38:31:0b:50:d0:d1:c6:d4:59: 99:8a:70:88:57:45:08:d2:91:4d:ad:bf:94:37:8f: 50:a9:1a:a6:18:5a:56:44:df:55:1b:34:7a:b5:17: 9f:d2:ad:a3:44:e6:8d:f7:c3:e8:6f:10:db:35:16: 34:4b:bf:62:cd:e3:47:74:be:ac:04:dd:98:a1:b7: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F5:29:53:9A:A3:6A:65:BC:C4:72:2D:FE:0D:85:69:F3:3D:6A:C9 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5e:26:61:5d:f1:d7:7b:01:04:2a:1b:f2:15:ec:25:75:de: 27:00:ce:99:7c:bd:0f:a4:e6:cd:c4:32:ed:f0:1f:89:c9:43: cd:4b:a3:39:47:e4:27:92:c8:4f:3c:89:a9:20:6d:eb:d0:10: d7:be:db:fb:27:84:00:d5:3d:e1:5c:18:2d:25:21:21:6d:cf: dc:82:53:06:5e:81:a9:b1:79:58:a8:d0:98:33:59:91:0e:8a: 6f:e4:b5:f8:c9:95:cf:05:bc:53:ce:70:09:60:e1:7e:c8:ec: dc:0e:46:be:45:f4:58:50:e9:d3:33:91:95:63:11:ee:1a:8a: c1:9d:79:a9:99:e6:04:fd:07:03:65:28:c2:90:4f:3a:48:4f: 6b:36:89:32:10:9b:2a:1d:9c:af:67:fb:d4:87:dd:09:db:ca: 1f:2a:f9:ca:5d:61:5a:b4:f1:4a:e9:f3:72:ae:e3:88:c8:7a: f9:6b:4d:e6:be:9d:ea:6f:a4:9e:03:3d:2d:9e:a1:6a:58:7b: 7a:d0:8c:3b:d4:2a:c4:20:e0:bf:7c:fa:7f:b6:de:d9:ea:f9: 6f:04:e6:a1:e2:13:21:3f:b1:ee:c4:51:fb:2b:52:a3:95:85: a0:87:37:19:de:7f:27:42:98:a0:6c:ae:c1:c0:8a:1b:25:5f: 05:ff:d7:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaahko3p6DnzuCfWRAHbNvoOrsP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTA4MTAyMTA2MDVaFw0yNTA4MTQwNzI3MDVaMDMxMTAvBgNV BAMTKDhGRjUyOTUzOUFBMzZBNjVCQ0M0NzIyREZFMEQ4NTY5RjMzRDZBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIMXznRvlqa6jYGzkTuXmJm14 WeUXMyraadf2f3qM1jDvAGpNn5Tj7t53RkWo99DL7Ntb+R9wIhySVPTqcNTz4u8B yMDFhBhP9MZUYtB9QarL0WDo4BARSWtjca+zXLQW66zLlTepZbmszqu4Bxs5wyTs 4ygL6uDFZLDVxCj+kxkzg+iw9jg0Lw4ELqtLEZILiiD4MkCpNXIMvcVUM6iVk7HK 5jcKb2BZUY1g25HHw/tMxBMqmrQIpjgxC1DQ0cbUWZmKcIhXRQjSkU2tv5Q3j1Cp GqYYWlZE31UbNHq1F5/SraNE5o33w+hvENs1FjRLv2LN40d0vqwE3Ziht5PPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj/UpU5qjamW8xHIt/g2FafM9askwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGReJmFd8dd7AQQqG/IV7CV13icAzpl8vQ+k 5s3EMu3wH4nJQ81LozlH5CeSyE88iakgbevQENe+2/snhADVPeFcGC0lISFtz9yC UwZegamxeVio0JgzWZEOim/ktfjJlc8FvFPOcAlg4X7I7NwORr5F9FhQ6dMzkZVj Ee4aisGdeamZ5gT9BwNlKMKQTzpIT2s2iTIQmyodnK9n+9SH3Qnbyh8q+cpdYVq0 8Urp83Ku44jIevlrTea+nepvpJ4DPS2eoWpYe3rQjDvUKsQg4L98+n+23tnq+W8E 5qHiEyE/se7EUfsrUqOVhaCHNxnefydCmKBsrsHAihslXwX/1/8= -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:37 2025 by rpki-client