$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json) Hash identifier: 2HKDqCXvsZlAkG/r648cEEzDIJ88Vn92mgJf14oJjqk= Subject key identifier: 56:9F:9D:D0:D7:AF:2F:18:69:4F:80:75:89:16:C9:D7:37:C1:D6:D1 Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 0D7DA939E36697810C424A876CFE619729AC3451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft Manifest number: 01C7 Signing time: Thu 21 Aug 2025 17:22:00 +0000 Manifest this update: Thu 21 Aug 2025 17:17:00 +0000 Manifest next update: Sun 24 Aug 2025 19:40:00 +0000 Files and hashes: 1: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=) 2: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=) 3: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: BDQKf6j6XDNH/Q0hp7OgaljX6Jehon8yd5dbQpnPYy8=) 4: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7d:a9:39:e3:66:97:81:0c:42:4a:87:6c:fe:61:97:29:ac:34:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Aug 21 17:17:00 2025 GMT Not After : Aug 24 19:40:00 2025 GMT Subject: CN=569F9DD0D7AF2F18694F80758916C9D737C1D6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:46:70:56:6d:3d:61:a4:d8:46:a0:f3:3a: 24:c2:f9:e7:57:a4:3b:82:26:26:18:f7:9d:ac:de: 2e:8a:2d:12:88:fc:0a:0b:9a:8c:fe:e6:f1:59:29: 44:ce:70:32:7a:54:91:18:8b:07:4a:48:a4:ed:6a: ee:a5:c4:b9:c7:e8:6c:c9:9f:e5:4c:35:52:a6:93: 74:58:8f:a8:a4:f5:43:82:df:e4:b5:10:f7:b8:93: 41:9a:29:16:82:f1:6e:14:26:a6:3d:73:4a:35:c4: 08:87:13:b8:41:00:ab:ff:ca:ae:48:41:fc:89:19: 8b:1e:06:20:e0:1b:3e:7b:f3:40:e8:a2:26:de:eb: d9:5a:a5:30:92:c8:02:4f:80:f6:61:af:00:1b:ed: bb:07:18:f8:e9:2d:7d:42:18:14:e1:bf:41:1e:3e: 34:07:1a:75:0d:97:1e:e9:14:e7:40:1b:0d:c3:3f: 31:0c:03:2c:e4:00:f9:e9:20:1f:a6:8d:94:f3:72: a4:cd:55:01:25:d3:63:98:88:50:76:77:ab:b2:5c: 3a:f0:64:ba:cd:60:2a:e4:6d:45:07:c9:35:28:85: 60:4a:aa:36:b5:6b:47:c6:75:16:d4:c3:7c:5a:88: 78:f7:ff:99:9c:4e:e9:c1:38:af:58:6a:2e:de:20: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9F:9D:D0:D7:AF:2F:18:69:4F:80:75:89:16:C9:D7:37:C1:D6:D1 X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:65:d1:12:1e:a4:b5:8f:2b:94:b3:66:5b:fe:87:62:f2:ca: f9:c7:ef:cc:1c:06:47:7a:81:84:a9:e6:7e:cd:58:66:f7:f9: 04:3d:58:e8:f2:01:14:13:ef:84:54:8e:4e:b9:e2:b4:23:42: c3:90:65:57:e8:cd:38:a1:e2:15:c6:b3:e8:6e:69:21:ae:bf: 41:66:5c:aa:98:db:81:37:78:95:0f:2a:d1:31:0b:79:c7:09: 99:e2:9d:cb:f6:ec:95:2b:3d:80:4d:2f:9b:de:21:d7:c5:94: 82:56:5b:5b:25:b2:c7:b2:5d:94:d2:ea:93:58:6a:e6:67:88: d3:43:6a:a8:96:99:c4:d1:8e:85:16:8f:8e:59:db:54:f2:2e: c1:4d:bc:02:7a:b8:78:5d:37:e6:cd:8d:ff:4a:e6:30:59:71: 9f:5f:37:b3:36:7a:65:3f:8c:f1:ad:2f:a7:a9:c8:fd:4c:69: 09:86:7e:2c:4e:05:ec:6a:f4:f9:ef:b9:70:ea:13:c1:3f:e9: b3:0c:5b:e3:12:5a:3d:92:aa:1e:7e:41:19:15:8c:29:7f:03: 00:f7:e4:ad:1c:e2:4c:f3:f6:8d:07:83:66:a6:70:97:4e:42: d7:58:f2:13:e6:58:c8:f2:68:05:37:89:04:08:8b:a0:1b:6f: 83:39:55:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDX2pOeNml4EMQkqHbP5hlymsNFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yNTA4MjExNzE3MDBaFw0yNTA4MjQxOTQwMDBaMDMxMTAvBgNV BAMTKDU2OUY5REQwRDdBRjJGMTg2OTRGODA3NTg5MTZDOUQ3MzdDMUQ2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS30ZwVm09YaTYRqDzOiTC+edX pDuCJiYY952s3i6KLRKI/AoLmoz+5vFZKUTOcDJ6VJEYiwdKSKTtau6lxLnH6GzJ n+VMNVKmk3RYj6ik9UOC3+S1EPe4k0GaKRaC8W4UJqY9c0o1xAiHE7hBAKv/yq5I QfyJGYseBiDgGz5780Dooibe69lapTCSyAJPgPZhrwAb7bsHGPjpLX1CGBThv0Ee PjQHGnUNlx7pFOdAGw3DPzEMAyzkAPnpIB+mjZTzcqTNVQEl02OYiFB2d6uyXDrw ZLrNYCrkbUUHyTUohWBKqja1a0fGdRbUw3xaiHj3/5mcTunBOK9Yai7eIGr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVp+d0NevLxhpT4B1iRbJ1zfB1tEwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIw QjAwRDUxMDE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBl0RIepLWPK5SzZlv+h2LyyvnH78wcBkd6 gYSp5n7NWGb3+QQ9WOjyARQT74RUjk654rQjQsOQZVfozTih4hXGs+huaSGuv0Fm XKqY24E3eJUPKtExC3nHCZnincv27JUrPYBNL5veIdfFlIJWW1slsseyXZTS6pNY auZniNNDaqiWmcTRjoUWj45Z21TyLsFNvAJ6uHhdN+bNjf9K5jBZcZ9fN7M2emU/ jPGtL6epyP1MaQmGfixOBexq9PnvuXDqE8E/6bMMW+MSWj2Sqh5+QRkVjCl/AwD3 5K0c4kzz9o0Hg2amcJdOQtdY8hPmWMjyaAU3iQQIi6Abb4M5VSE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:14 2025 by rpki-client