$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: UAZPqn+yeCJOpjBoFm+MntDZ7r4tnkzXRgO0oqg58Eo= Subject key identifier: 3D:E7:3E:8C:2D:A3:F1:93:14:03:F4:BF:4F:C1:25:43:F7:56:B7:E4 Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 4C1FEE0245D2AF7A24D337C15DDBC4ABE1BF36FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 0235 Signing time: Fri 22 Aug 2025 03:42:44 +0000 Manifest this update: Fri 22 Aug 2025 03:37:44 +0000 Manifest next update: Mon 25 Aug 2025 11:18:44 +0000 Files and hashes: 1: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: ocySjO08R2KIkBR00a2pFgrCahTKyPsXd0df9r/jgKw=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) 3: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1f:ee:02:45:d2:af:7a:24:d3:37:c1:5d:db:c4:ab:e1:bf:36:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Aug 22 03:37:44 2025 GMT Not After : Aug 25 11:18:44 2025 GMT Subject: CN=3DE73E8C2DA3F1931403F4BF4FC12543F756B7E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:59:8f:7a:29:26:6b:ff:9b:2f:6b:16:a0:44: 0c:20:a1:e6:a1:9f:d3:b8:ed:eb:c1:5e:b4:86:0f: 98:39:23:4a:20:0e:35:46:52:79:a4:13:ab:24:d5: c9:31:40:cd:2d:9f:8a:1a:13:c1:e3:ca:c9:b1:e4: 94:72:03:f1:50:49:ba:39:66:d7:95:f3:72:2c:c8: 21:1b:d2:8b:56:20:fc:32:e7:09:62:fa:fc:c1:9e: ba:0e:b5:f5:19:4c:61:37:8b:da:c0:a5:51:08:54: 5b:73:71:56:10:89:82:f7:af:cd:61:62:43:cf:4c: ea:aa:dd:c0:98:a8:a8:4b:22:a2:50:0f:cc:9d:cd: 96:95:ec:15:82:b8:57:9c:cb:2e:a1:6e:ce:c0:ca: 3f:05:8a:65:e3:17:7e:7a:00:53:f9:61:25:a0:01: b0:c7:ab:f4:3b:eb:11:df:8e:15:c6:fb:ea:d8:cd: 8b:11:60:b5:d3:51:0b:7c:39:c8:13:b6:b8:81:87: 09:6c:34:5a:65:0d:e8:2a:21:3b:c4:b5:89:dc:ac: 6d:ba:27:f8:31:a9:48:c9:b6:60:86:a6:7f:74:e9: 44:b0:40:4b:34:ff:99:60:bc:c8:c0:ef:27:dc:69: 51:6f:8c:b3:86:17:78:70:23:3f:61:6d:5d:61:94: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E7:3E:8C:2D:A3:F1:93:14:03:F4:BF:4F:C1:25:43:F7:56:B7:E4 X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:17:a9:5d:ac:77:23:1d:d9:a1:d9:b9:39:7e:0c:2e:0e:c2: 5a:ba:19:be:25:87:e3:9c:a2:81:27:2e:7a:f2:8a:62:72:23: 1f:47:ff:92:12:9c:8b:db:0a:fc:32:76:27:3b:e8:03:7b:91: f6:88:52:7e:5b:7d:f6:8c:9c:8e:25:ff:de:7e:d7:02:23:29: b9:50:22:13:67:3c:c7:b6:94:84:cd:7a:c3:29:75:fb:d1:ce: 32:eb:d1:de:8f:bf:5e:39:8d:25:f7:4b:0a:11:01:d4:fb:b7: e5:1f:b6:48:13:0c:dd:29:78:67:c0:02:57:f4:24:dc:ee:ff: 1c:73:6f:9c:64:1b:b2:49:e9:96:b9:0c:f2:67:60:23:fa:ea: 0a:41:77:92:65:be:cc:25:6d:08:24:47:0c:81:0f:04:da:85: a3:26:ad:a0:e3:69:2e:36:09:d2:3f:01:b7:33:c0:16:d6:76: 1f:47:93:8d:1f:72:62:48:53:f7:ce:46:46:fa:95:b6:e9:48: 28:02:a1:da:ea:8c:04:91:87:08:87:6f:41:64:8e:f0:82:82: 39:34:89:b6:84:3e:5c:44:7d:98:2b:8d:ea:cf:72:5e:e5:30: 30:2d:9c:23:39:e1:06:74:dc:c3:03:7b:ba:d0:19:bf:bf:e2: bd:ae:67:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTB/uAkXSr3ok0zfBXdvEq+G/Nv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTA4MjIwMzM3NDRaFw0yNTA4MjUxMTE4NDRaMDMxMTAvBgNV BAMTKDNERTczRThDMkRBM0YxOTMxNDAzRjRCRjRGQzEyNTQzRjc1NkI3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwWY96KSZr/5svaxagRAwgoeah n9O47evBXrSGD5g5I0ogDjVGUnmkE6sk1ckxQM0tn4oaE8Hjysmx5JRyA/FQSbo5 ZteV83IsyCEb0otWIPwy5wli+vzBnroOtfUZTGE3i9rApVEIVFtzcVYQiYL3r81h YkPPTOqq3cCYqKhLIqJQD8ydzZaV7BWCuFecyy6hbs7Ayj8FimXjF356AFP5YSWg AbDHq/Q76xHfjhXG++rYzYsRYLXTUQt8OcgTtriBhwlsNFplDegqITvEtYncrG26 J/gxqUjJtmCGpn906USwQEs0/5lgvMjA7yfcaVFvjLOGF3hwIz9hbV1hlAyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPec+jC2j8ZMUA/S/T8ElQ/dWt+QwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkXqV2sdyMd2aHZuTl+DC4Owlq6Gb4lh+Oc ooEnLnryimJyIx9H/5ISnIvbCvwydic76AN7kfaIUn5bffaMnI4l/95+1wIjKblQ IhNnPMe2lITNesMpdfvRzjLr0d6Pv145jSX3SwoRAdT7t+UftkgTDN0peGfAAlf0 JNzu/xxzb5xkG7JJ6Za5DPJnYCP66gpBd5JlvswlbQgkRwyBDwTahaMmraDjaS42 CdI/AbczwBbWdh9Hk40fcmJIU/fORkb6lbbpSCgCodrqjASRhwiHb0FkjvCCgjk0 ibaEPlxEfZgrjerPcl7lMDAtnCM54QZ03MMDe7rQGb+/4r2uZ34= -----END CERTIFICATE-----Generated at Sun Aug 24 06:02:24 2025 by rpki-client