$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: dRS1DCoKnNnr5zBxe0ISwbPFAJ+pdy3vjut7iLCL3IY= Subject key identifier: 57:68:01:1E:A9:93:D5:58:0D:7C:38:A0:3F:B0:D3:7C:EC:CF:D6:01 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 14524410E8155ACC5DE967EA3D00CCBC1183DB25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 018E Signing time: Sat 23 Aug 2025 12:20:46 +0000 Manifest this update: Sat 23 Aug 2025 12:15:46 +0000 Manifest next update: Tue 26 Aug 2025 13:42:46 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: 4C9leXpQuAbGD54CAYJXiPiQlILjSf7YcEJZhYc2k5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:52:44:10:e8:15:5a:cc:5d:e9:67:ea:3d:00:cc:bc:11:83:db:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Aug 23 12:15:46 2025 GMT Not After : Aug 26 13:42:46 2025 GMT Subject: CN=5768011EA993D5580D7C38A03FB0D37CECCFD601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0b:4c:6e:f3:46:a9:14:52:a4:91:13:c8:25: 29:db:67:e9:b5:1e:c7:0e:b1:c7:fc:15:90:fc:7a: c3:79:e4:45:5a:5e:f7:38:aa:dc:68:71:e3:13:f2: 50:6b:43:62:99:14:1f:74:3d:87:ae:36:b5:51:93: 93:62:6d:0b:9f:dd:fe:89:c9:12:35:ae:6a:63:04: 37:f5:c1:3a:ff:9e:fa:8f:6f:f5:70:bb:db:76:ba: ac:d3:34:aa:79:ce:2c:35:43:5d:c4:d8:38:7e:97: ce:68:0f:a8:17:eb:22:d4:3f:46:97:45:c8:f1:0e: eb:91:20:5c:2e:9d:95:0d:37:5e:63:4b:9a:66:d6: f3:63:5c:a3:69:5c:67:1c:b6:b4:0d:f8:42:c9:5d: ce:a0:26:19:18:1e:08:5e:2a:98:cf:7b:29:a3:82: 62:88:8b:b8:e0:2d:b5:14:7f:13:ef:e8:7f:bb:56: 6a:b6:18:30:64:4d:5c:a4:e1:fd:15:1c:85:43:dc: 65:f6:74:4a:8b:a3:3a:94:f2:e3:c6:be:75:82:40: 4c:ab:c6:18:73:4f:4c:4d:dc:f6:82:f4:84:d0:24: e5:e6:ef:e4:70:18:3e:a0:e3:ef:76:f7:53:33:b2: ab:74:e7:38:ff:93:66:0a:e5:0d:c2:63:bc:17:68: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:01:1E:A9:93:D5:58:0D:7C:38:A0:3F:B0:D3:7C:EC:CF:D6:01 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b2:d9:7e:1d:52:80:88:36:9f:61:56:4e:55:8b:67:a4:5e: 26:0d:12:d0:f3:88:5c:67:ab:c8:c2:40:7b:9d:c7:7f:62:fe: 50:2e:3e:2e:b2:35:68:fa:94:cb:c9:4f:00:48:43:b3:12:a2: 89:e8:fa:2e:a6:d8:1d:11:f7:7d:65:c6:6a:1a:a3:80:46:29: 6f:47:81:fb:d2:0c:c6:d2:6f:83:1a:d1:d5:34:9e:f4:e0:0e: eb:b1:36:95:e7:d2:1e:1b:fa:8f:08:d3:ca:59:f3:6e:f0:74: cb:33:3f:4d:c9:46:55:d0:5e:a0:0b:8f:be:8a:c1:b6:4d:49: 7f:c7:bc:15:1d:8d:55:25:42:95:56:c1:f7:1e:53:af:12:5b: 79:f0:b8:fc:6c:eb:de:9c:8c:68:e2:bd:75:14:81:3f:52:27: 1b:cd:22:71:2f:65:84:e9:f8:e7:a3:6c:e9:98:68:c6:6d:40: 32:5c:5d:a5:86:5e:37:d8:da:4c:3b:cc:11:4e:05:d9:07:1d: de:1c:a4:f8:bf:e2:0f:14:70:2d:23:9b:c6:0a:42:e0:14:39: a8:37:55:ef:cb:d8:b9:15:08:54:2f:5b:0f:b3:6b:d0:5f:93: 03:c0:d3:e3:98:46:a1:2e:65:a2:cb:5a:1c:49:2c:ab:50:51: fb:18:c4:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFJEEOgVWsxd6WfqPQDMvBGD2yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTA4MjMxMjE1NDZaFw0yNTA4MjYxMzQyNDZaMDMxMTAvBgNV BAMTKDU3NjgwMTFFQTk5M0Q1NTgwRDdDMzhBMDNGQjBEMzdDRUNDRkQ2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOC0xu80apFFKkkRPIJSnbZ+m1 HscOscf8FZD8esN55EVaXvc4qtxoceMT8lBrQ2KZFB90PYeuNrVRk5NibQuf3f6J yRI1rmpjBDf1wTr/nvqPb/Vwu9t2uqzTNKp5ziw1Q13E2Dh+l85oD6gX6yLUP0aX RcjxDuuRIFwunZUNN15jS5pm1vNjXKNpXGcctrQN+ELJXc6gJhkYHgheKpjPeymj gmKIi7jgLbUUfxPv6H+7Vmq2GDBkTVyk4f0VHIVD3GX2dEqLozqU8uPGvnWCQEyr xhhzT0xN3PaC9ITQJOXm7+RwGD6g4+9291Mzsqt05zj/k2YK5Q3CY7wXaHptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2gBHqmT1VgNfDigP7DTfOzP1gEwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKey2X4dUoCINp9hVk5Vi2ekXiYNEtDziFxn q8jCQHudx39i/lAuPi6yNWj6lMvJTwBIQ7MSoono+i6m2B0R931lxmoao4BGKW9H gfvSDMbSb4Ma0dU0nvTgDuuxNpXn0h4b+o8I08pZ827wdMszP03JRlXQXqALj76K wbZNSX/HvBUdjVUlQpVWwfceU68SW3nwuPxs696cjGjivXUUgT9SJxvNInEvZYTp +OejbOmYaMZtQDJcXaWGXjfY2kw7zBFOBdkHHd4cpPi/4g8UcC0jm8YKQuAUOag3 Ve/L2LkVCFQvWw+za9BfkwPA0+OYRqEuZaLLWhxJLKtQUfsYxBI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:36 2025 by rpki-client