$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: k7shw/OIHEfFD4TrBLsYMZzPrkvu/vB/zCzYF1QUrdI= Subject key identifier: EC:8D:21:1F:9C:46:82:60:C6:6F:C6:1C:D0:E4:46:15:26:5E:F4:62 Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 4FD512746750AEF1397776318CCE89EF49A4C85E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 025F Signing time: Thu 21 Aug 2025 19:51:50 +0000 Manifest this update: Thu 21 Aug 2025 19:46:50 +0000 Manifest next update: Mon 25 Aug 2025 03:49:50 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) 2: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) 3: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: d3rGEf+zQ94Sq3NJmCIO47i/qPkLMMA3w/wWfKsEQGA=) 4: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d5:12:74:67:50:ae:f1:39:77:76:31:8c:ce:89:ef:49:a4:c8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Aug 21 19:46:50 2025 GMT Not After : Aug 25 03:49:50 2025 GMT Subject: CN=EC8D211F9C468260C66FC61CD0E44615265EF462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:50:b6:2c:92:15:16:30:76:1d:9d:21:da: dc:c1:f6:7f:06:4f:66:cc:8d:07:d4:25:74:0f:9e: d5:39:c6:a3:19:21:83:ab:92:79:59:b2:9a:ca:2e: a2:5a:85:af:52:f5:93:a8:42:55:ab:18:da:34:b9: 85:27:15:4b:5f:00:c6:c0:88:91:3f:6e:f5:2a:e8: 2e:2e:69:43:cb:e5:0f:77:b3:e5:4b:bd:c6:59:08: e2:fe:6e:fa:39:61:85:ac:81:0c:0b:b0:68:81:d5: e8:2a:28:c3:95:5a:42:4f:b9:bc:96:57:95:0e:ef: 23:fc:0c:c3:c3:21:1e:b6:66:e6:b4:0f:b1:42:93: 00:ff:09:24:af:61:10:d9:94:a3:98:0e:72:15:ad: f3:ad:84:7e:4a:45:ab:2e:9f:6e:71:8e:8b:41:87: df:22:e2:96:11:a8:64:cc:dd:04:cf:d0:5e:8a:1a: 41:d7:61:1b:3c:d0:d5:fb:d5:6e:26:62:c6:91:ff: 9c:db:70:be:04:c9:13:35:0e:01:a6:fd:62:d1:79: 41:26:1e:f6:6d:3a:8e:99:31:2a:2a:be:b9:be:e8: 16:89:ca:0d:a2:93:b7:54:e7:c8:5e:94:39:f2:54: 09:9b:94:e2:5d:52:d5:08:a3:47:b9:77:4d:8b:17: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8D:21:1F:9C:46:82:60:C6:6F:C6:1C:D0:E4:46:15:26:5E:F4:62 X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f7:8c:ee:21:77:95:81:f3:56:9c:ee:00:8f:a0:68:56:e5: 81:1f:b3:2b:28:8b:6b:a5:62:3f:51:27:e2:c5:1d:ce:55:27: c4:a3:9a:0a:8c:2d:4d:0c:18:c9:3e:76:c6:93:df:26:98:9b: 53:46:b0:6c:8a:9c:e8:19:f4:01:52:f0:e1:2e:cc:30:60:56: 5e:dc:49:83:a2:79:de:52:df:8d:0d:52:50:fe:4a:79:59:75: f6:7d:e5:f7:c4:f7:60:16:f2:c6:f2:c1:7a:50:97:3b:f3:4f: bd:86:e9:57:59:3f:84:b0:38:eb:7e:15:ff:f7:5e:ae:7b:a1: c7:c4:e0:3c:9b:50:06:5b:50:9d:7b:67:60:bc:0c:4b:6e:97: d8:be:11:ce:83:4d:32:d7:38:e7:17:4a:ec:c3:82:13:e2:fc: 7a:16:96:a6:f7:92:af:93:5a:ed:a6:30:2e:c7:d1:bf:6d:6e: 4b:e1:1d:38:df:40:e8:00:c5:35:63:3b:de:26:31:1f:0f:ec: 9e:b4:af:15:10:da:f0:c5:81:08:0e:62:86:7e:63:19:70:9c: a8:da:07:a1:74:f1:9c:95:e0:b3:f2:e8:02:b3:fd:0e:93:2d: 36:52:27:ee:57:f3:37:a3:d8:f7:c2:7d:c5:7a:0b:3b:41:63: 66:e3:5e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9USdGdQrvE5d3YxjM6J70mkyF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTA4MjExOTQ2NTBaFw0yNTA4MjUwMzQ5NTBaMDMxMTAvBgNV BAMTKEVDOEQyMTFGOUM0NjgyNjBDNjZGQzYxQ0QwRTQ0NjE1MjY1RUY0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComlC2LJIVFjB2HZ0h2tzB9n8G T2bMjQfUJXQPntU5xqMZIYOrknlZsprKLqJaha9S9ZOoQlWrGNo0uYUnFUtfAMbA iJE/bvUq6C4uaUPL5Q93s+VLvcZZCOL+bvo5YYWsgQwLsGiB1egqKMOVWkJPubyW V5UO7yP8DMPDIR62Zua0D7FCkwD/CSSvYRDZlKOYDnIVrfOthH5KRasun25xjotB h98i4pYRqGTM3QTP0F6KGkHXYRs80NX71W4mYsaR/5zbcL4EyRM1DgGm/WLReUEm HvZtOo6ZMSoqvrm+6BaJyg2ik7dU58helDnyVAmblOJdUtUIo0e5d02LF/SBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7I0hH5xGgmDGb8Yc0ORGFSZe9GIwHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL3jO4hd5WB81ac7gCPoGhW5YEfsysoi2ul Yj9RJ+LFHc5VJ8SjmgqMLU0MGMk+dsaT3yaYm1NGsGyKnOgZ9AFS8OEuzDBgVl7c SYOied5S340NUlD+SnlZdfZ95ffE92AW8sbywXpQlzvzT72G6VdZP4SwOOt+Ff/3 Xq57ocfE4DybUAZbUJ17Z2C8DEtul9i+Ec6DTTLXOOcXSuzDghPi/HoWlqb3kq+T Wu2mMC7H0b9tbkvhHTjfQOgAxTVjO94mMR8P7J60rxUQ2vDFgQgOYoZ+YxlwnKja B6F08ZyV4LPy6AKz/Q6TLTZSJ+5X8zej2PfCfcV6CztBY2bjXj4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:24 2025 by rpki-client