$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: OnLGhVNKx9AaJf9p4zkqg633uBM/QlGFC4D6Um4EZq4= Subject key identifier: 31:9F:5D:4E:B2:06:12:75:26:BF:F7:60:1D:CE:05:40:3F:FB:B1:E1 Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 23B628F6CF1F052A6B8B015545D4F1A535101E90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 01EC Signing time: Fri 22 Aug 2025 02:11:17 +0000 Manifest this update: Fri 22 Aug 2025 02:06:17 +0000 Manifest next update: Mon 25 Aug 2025 03:34:17 +0000 Files and hashes: 1: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) 2: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) 3: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 4: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: dd7CrSnUdm9UT3WM6mv7klMKXFj54wFvGkK4Glm8t/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b6:28:f6:cf:1f:05:2a:6b:8b:01:55:45:d4:f1:a5:35:10:1e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Aug 22 02:06:17 2025 GMT Not After : Aug 25 03:34:17 2025 GMT Subject: CN=319F5D4EB206127526BFF7601DCE05403FFBB1E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:8a:a4:c5:fe:d4:45:01:da:01:3b:8e:8c: 2d:72:e3:22:1f:03:7b:55:f5:08:76:8d:e9:ce:40: ff:47:72:90:5b:d2:11:f4:4e:95:ed:97:05:e3:5b: ac:9f:ca:47:f2:2b:ae:5e:22:6c:bd:b7:ca:34:2e: c9:d8:46:f1:18:60:9f:99:17:97:f4:f8:2d:6c:0d: bf:33:43:f8:bb:ff:ba:13:57:6a:39:7c:45:c1:56: 67:42:e3:4f:e9:02:18:87:e5:3b:ea:dc:7e:cc:67: 67:a7:0a:75:0d:3e:58:99:f9:bb:80:f3:2b:a2:eb: 6c:c3:20:6d:94:2a:9c:70:87:df:97:2f:66:22:28: ac:5b:a3:90:0f:97:c4:46:93:c3:6d:7d:d4:aa:73: 28:c7:82:fa:c2:6c:ab:25:12:06:11:70:e4:b9:cc: 2c:d8:8a:b1:fa:ff:af:88:40:78:05:ff:2d:47:25: ab:01:8e:28:76:48:a5:3a:31:ea:df:c0:ac:88:d4: 66:51:71:0f:7d:37:76:e9:bd:1c:83:9b:df:93:06: 17:64:f0:d1:28:0d:b9:6e:07:ba:41:e7:01:5d:33: ef:70:76:12:ae:cc:f5:57:e0:6a:72:70:6c:4c:dc: 19:20:94:40:a9:1d:ce:9f:37:cb:30:da:04:fb:96: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9F:5D:4E:B2:06:12:75:26:BF:F7:60:1D:CE:05:40:3F:FB:B1:E1 X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:98:90:1b:09:18:38:72:6e:c9:0c:12:9f:d2:96:26:e6:dc: d4:65:b1:37:94:50:7d:f0:6b:b7:6a:78:af:7f:84:03:14:a9: 8a:8f:00:23:12:47:14:16:6c:20:7b:eb:40:68:7e:a0:84:0a: e3:cb:60:32:0d:13:f0:b3:14:38:e3:74:d5:30:d4:20:8a:1a: 02:8a:b5:45:a7:d7:23:f0:c0:25:90:43:69:10:54:a7:cb:37: 91:e6:47:98:14:0b:c6:72:65:ff:b4:96:95:ee:bf:ad:e1:58: d7:e4:a3:89:74:f2:22:99:3a:05:9a:d3:e5:9e:3e:d8:9e:2b: 8c:37:02:82:c9:1f:0e:d8:2c:5c:5b:36:51:59:df:b5:5a:db: 9d:c3:70:ce:5b:ec:b1:94:61:85:9c:c4:28:53:1e:c2:c0:c4: fd:56:bf:ee:a1:00:68:59:c1:31:53:7b:f6:a9:48:1a:a3:00: 30:5f:be:43:4b:87:f5:c0:e8:3c:f0:9c:0a:2e:0f:dc:ac:ca: c4:f9:3f:7a:bf:3f:05:43:39:23:0e:c8:69:58:d4:7b:71:64: bd:a2:35:3a:48:db:8c:44:43:bb:fa:0b:cb:43:f3:98:3d:cd: 43:e4:3b:4c:8e:62:51:ef:37:1f:01:fa:dd:47:c1:f8:c9:a3: 75:9f:48:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7Yo9s8fBSpriwFVRdTxpTUQHpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNTA4MjIwMjA2MTdaFw0yNTA4MjUwMzM0MTdaMDMxMTAvBgNV BAMTKDMxOUY1RDRFQjIwNjEyNzUyNkJGRjc2MDFEQ0UwNTQwM0ZGQkIxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOroqkxf7URQHaATuOjC1y4yIf A3tV9Qh2jenOQP9HcpBb0hH0TpXtlwXjW6yfykfyK65eImy9t8o0LsnYRvEYYJ+Z F5f0+C1sDb8zQ/i7/7oTV2o5fEXBVmdC40/pAhiH5Tvq3H7MZ2enCnUNPliZ+buA 8yui62zDIG2UKpxwh9+XL2YiKKxbo5APl8RGk8NtfdSqcyjHgvrCbKslEgYRcOS5 zCzYirH6/6+IQHgF/y1HJasBjih2SKU6MerfwKyI1GZRcQ99N3bpvRyDm9+TBhdk 8NEoDbluB7pB5wFdM+9wdhKuzPVX4GpycGxM3BkglECpHc6fN8sw2gT7ln4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZ9dTrIGEnUmv/dgHc4FQD/7seEwHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOYkBsJGDhybskMEp/Slibm3NRlsTeUUH3w a7dqeK9/hAMUqYqPACMSRxQWbCB760BofqCECuPLYDINE/CzFDjjdNUw1CCKGgKK tUWn1yPwwCWQQ2kQVKfLN5HmR5gUC8ZyZf+0lpXuv63hWNfko4l08iKZOgWa0+We PtieK4w3AoLJHw7YLFxbNlFZ37Va253DcM5b7LGUYYWcxChTHsLAxP1Wv+6hAGhZ wTFTe/apSBqjADBfvkNLh/XA6DzwnAouD9ysysT5P3q/PwVDOSMOyGlY1HtxZL2i NTpI24xEQ7v6C8tD85g9zUPkO0yOYlHvNx8B+t1HwfjJo3WfSE4= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:08 2025 by rpki-client