$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: 08EXSCrERCy8b9JZbm+5lMooUVgCVRQf6pjWDk9WSDA= Subject key identifier: 6D:7A:D9:69:F1:F1:EA:45:8E:79:93:72:27:6A:99:C1:4A:1B:B3:3B Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 36F3CA909F1E5C700F7D0F34281CBA3CFCD5F343 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 02AC Signing time: Thu 21 Aug 2025 18:41:32 +0000 Manifest this update: Thu 21 Aug 2025 18:36:32 +0000 Manifest next update: Sun 24 Aug 2025 18:50:32 +0000 Files and hashes: 1: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: 0HKqUWxZbI9n+PEVKoTLIbRadeKyFkIWvHvlRbtvAq0=) 2: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: VIGWxen3hr/tCWUsWsLfABOjY9rMKeAydYWLMRudnMs=) 3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: fmmesiS1WcI4ovgUB3oEnMzQaroROS18Jh1l+/FK5Mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f3:ca:90:9f:1e:5c:70:0f:7d:0f:34:28:1c:ba:3c:fc:d5:f3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Aug 21 18:36:32 2025 GMT Not After : Aug 24 18:50:32 2025 GMT Subject: CN=6D7AD969F1F1EA458E799372276A99C14A1BB33B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:b3:7a:3c:2a:fe:eb:38:61:48:ec:a5:61: 22:79:d8:72:49:b1:9b:7c:28:69:67:2a:85:f9:94: 16:1f:78:88:00:6b:eb:0e:b5:ca:77:1c:a3:23:87: 7c:7f:af:3b:b2:ae:9f:96:3e:b9:14:0c:6a:31:68: 05:a3:ec:ef:63:93:f7:01:59:f6:58:a8:20:ce:3a: de:7f:49:48:81:d6:73:cb:b8:e1:29:3f:cd:55:e6: 39:bc:0b:f8:6f:20:b5:eb:49:3e:a6:b0:70:f4:a0: 25:3b:a2:f1:f7:a2:ba:29:57:de:78:78:49:d3:df: d7:16:81:35:eb:a8:bb:04:64:a5:6c:d3:87:10:4c: 47:c5:b0:e3:68:a2:5a:3f:8e:4e:84:7b:bf:60:1e: 95:c5:ab:ea:a1:d8:5d:6f:ed:07:82:d5:29:5b:de: 74:3e:e8:80:87:ba:16:04:e7:67:ea:2d:1d:e8:d9: 8a:69:e8:1d:26:99:a5:32:81:9e:61:1e:0d:48:6f: b9:06:3d:42:d3:14:b1:2d:1b:e7:c6:12:30:6f:29: 20:ea:93:bd:d8:cb:de:0d:04:a0:6c:0e:e9:af:38: 6b:45:64:ef:40:bb:34:44:00:cb:33:f2:dc:6e:b5: 16:1f:4b:a6:09:c1:dc:cf:97:71:d1:18:ea:9e:79: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7A:D9:69:F1:F1:EA:45:8E:79:93:72:27:6A:99:C1:4A:1B:B3:3B X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:45:b7:52:4a:d9:76:27:2a:b9:c0:f9:83:b9:79:e1:d9:d6: a8:ff:1d:e3:30:d6:66:c1:30:dd:38:53:0b:dc:4e:d9:34:e9: 98:41:78:62:62:88:6a:57:04:74:bd:d9:cb:9c:38:39:2b:13: a6:aa:a2:fe:16:62:12:c4:9e:06:95:fb:e1:6f:65:67:06:4f: 07:7a:74:73:a9:a1:eb:09:ef:2a:df:8c:0c:9a:54:6a:fe:4b: 56:cb:7b:c7:47:9c:d8:7b:b7:b0:c0:39:a0:f3:40:12:0b:df: 01:40:45:18:7c:0a:a0:38:ad:08:7f:57:bc:37:da:e3:05:4b: eb:73:ae:f9:73:a5:7d:90:dc:33:7a:43:42:bd:f3:6e:a4:16: d3:e7:31:92:d0:52:50:c0:63:72:c8:96:f1:08:ca:3a:fe:07: f9:91:f5:ff:98:fb:a6:75:5c:eb:32:eb:ce:ff:36:b8:99:ba: f2:b7:91:7b:8a:c4:bc:7f:51:77:3e:dd:66:97:5c:69:17:16: d9:2f:42:47:e6:06:ac:20:8e:c8:57:61:ce:2f:77:f5:c2:86: 8a:66:76:be:aa:42:54:13:e8:67:50:44:43:fa:ce:2b:b4:97: d8:ab:9c:00:5b:3d:8d:15:82:2b:d0:ac:c4:d6:3d:8a:93:bd: 86:3b:cf:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvPKkJ8eXHAPfQ80KBy6PPzV80MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNTA4MjExODM2MzJaFw0yNTA4MjQxODUwMzJaMDMxMTAvBgNV BAMTKDZEN0FEOTY5RjFGMUVBNDU4RTc5OTM3MjI3NkE5OUMxNEExQkIzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4LN6PCr+6zhhSOylYSJ52HJJ sZt8KGlnKoX5lBYfeIgAa+sOtcp3HKMjh3x/rzuyrp+WPrkUDGoxaAWj7O9jk/cB WfZYqCDOOt5/SUiB1nPLuOEpP81V5jm8C/hvILXrST6msHD0oCU7ovH3oropV954 eEnT39cWgTXrqLsEZKVs04cQTEfFsONoolo/jk6Ee79gHpXFq+qh2F1v7QeC1Slb 3nQ+6ICHuhYE52fqLR3o2Ypp6B0mmaUygZ5hHg1Ib7kGPULTFLEtG+fGEjBvKSDq k73Yy94NBKBsDumvOGtFZO9AuzREAMsz8txutRYfS6YJwdzPl3HRGOqeeQSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbXrZafHx6kWOeZNyJ2qZwUobszswHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJFt1JK2XYnKrnA+YO5eeHZ1qj/HeMw1mbB MN04UwvcTtk06ZhBeGJiiGpXBHS92cucODkrE6aqov4WYhLEngaV++FvZWcGTwd6 dHOpoesJ7yrfjAyaVGr+S1bLe8dHnNh7t7DAOaDzQBIL3wFARRh8CqA4rQh/V7w3 2uMFS+tzrvlzpX2Q3DN6Q0K9826kFtPnMZLQUlDAY3LIlvEIyjr+B/mR9f+Y+6Z1 XOsy687/NriZuvK3kXuKxLx/UXc+3WaXXGkXFtkvQkfmBqwgjshXYc4vd/XChopm dr6qQlQT6GdQREP6ziu0l9irnABbPY0VgivQrMTWPYqTvYY7z3A= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:06 2025 by rpki-client