$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: 1P8FbNvDHDLPyTssYVv/MGLbUu3BlJRYQCa2eRlTlcM= Subject key identifier: 92:AF:B3:A9:79:05:40:A8:34:17:1F:5E:8B:1B:EB:15:D4:A2:D8:98 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 79CD0590DDA86FDC6F7FC088C3CBCEB3A19106CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 01C3 Signing time: Fri 27 Jun 2025 17:30:51 +0000 Manifest this update: Fri 27 Jun 2025 17:25:51 +0000 Manifest next update: Tue 01 Jul 2025 00:54:51 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: 5drLDE3hXRgz1UUxF/qZh+s/keLXYCRvqXQkuLFTAhA=) 2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: ug9GAXVuoTq3s34ecnoiyXrbuL6XNgq6UtqmEFAi6NE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cd:05:90:dd:a8:6f:dc:6f:7f:c0:88:c3:cb:ce:b3:a1:91:06:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Jun 27 17:25:51 2025 GMT Not After : Jul 1 00:54:51 2025 GMT Subject: CN=92AFB3A9790540A834171F5E8B1BEB15D4A2D898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:0b:5e:1f:18:49:63:49:23:f2:b3:cf:9b: 21:bc:db:45:d0:d6:eb:b8:5a:5d:f6:dc:ea:c2:80: e0:ef:d8:70:1a:db:5c:49:dd:ed:dc:69:e2:0f:46: 0a:de:5d:f6:75:6d:67:34:1f:ae:9b:a5:18:4c:73: 6a:69:9e:24:16:77:2e:7e:af:c4:f7:8b:ed:cc:c7: 51:b2:c6:09:70:d4:37:59:ef:06:ae:1a:3a:69:86: ba:6e:4a:ae:72:5f:50:ff:40:b1:d4:f2:73:85:f6: 8a:0a:b4:4b:61:c1:a1:f2:8e:c0:11:a0:ff:46:40: 18:5c:c4:56:3c:23:e9:f3:6c:b8:00:37:f5:14:13: 3a:df:27:76:b7:5a:be:4b:cd:51:07:a2:d2:65:24: af:31:50:91:d6:83:c2:39:60:16:7e:96:62:cf:b2: fc:42:9e:27:34:c3:07:d4:c1:56:f0:a8:33:07:c2: b8:ae:11:5c:26:14:ba:21:c1:36:5a:9f:c6:0d:17: ba:2a:83:57:b1:79:53:37:7b:f2:df:d8:f6:74:06: 33:da:a1:21:6b:f7:85:b2:28:df:a9:00:44:2c:2f: cd:34:5b:60:8c:e6:f8:44:ae:30:0e:5b:fb:a3:61: 38:af:f0:0e:79:d5:d4:6a:83:eb:ea:e1:23:94:dc: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:B3:A9:79:05:40:A8:34:17:1F:5E:8B:1B:EB:15:D4:A2:D8:98 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fc:5b:a4:48:82:1c:d9:b7:e8:79:14:8e:a6:50:86:dd:a9: 09:d5:f4:61:56:52:bd:c3:e5:ab:60:64:cd:31:41:17:6a:6a: 68:a6:f2:05:bd:af:c7:03:b4:a8:a3:cc:72:ff:2a:f6:84:cb: 22:57:6b:bf:da:a3:a5:36:bc:b4:8b:bd:34:ff:5e:76:dd:38: be:e3:06:33:c1:4d:0f:44:e9:61:97:a7:a2:80:f3:76:12:e3: 26:4b:f9:ad:8b:5a:5f:a1:19:7f:9b:66:27:46:5e:70:d5:f2: 42:c3:5f:8c:f2:e3:5f:6f:87:33:64:d5:2b:85:07:f5:35:d8: ff:dc:ee:a9:28:41:6f:d3:9d:05:22:57:40:48:0a:2b:65:58: 0c:c2:5f:dd:e1:1b:c7:50:17:da:ea:9d:11:05:23:dd:d2:df: 1d:fa:c5:f9:11:e8:16:1b:29:3f:6c:b2:f1:56:20:a5:ef:b8: 6c:d5:00:66:e0:08:9b:7e:65:40:db:40:3a:89:95:5a:e0:46: 4e:36:4f:c2:f5:2c:57:58:b3:31:7a:48:08:b2:14:34:46:f4: 08:bb:5b:76:7f:51:4f:53:a0:9a:13:33:c5:8e:be:4d:5c:d6: 00:4d:16:fe:73:18:61:94:9d:44:9d:c8:7c:c6:49:fb:42:37: fc:7f:31:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUec0FkN2ob9xvf8CIw8vOs6GRBsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTA2MjcxNzI1NTFaFw0yNTA3MDEwMDU0NTFaMDMxMTAvBgNV BAMTKDkyQUZCM0E5NzkwNTQwQTgzNDE3MUY1RThCMUJFQjE1RDRBMkQ4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCywteHxhJY0kj8rPPmyG820XQ 1uu4Wl323OrCgODv2HAa21xJ3e3caeIPRgreXfZ1bWc0H66bpRhMc2ppniQWdy5+ r8T3i+3Mx1Gyxglw1DdZ7wauGjpphrpuSq5yX1D/QLHU8nOF9ooKtEthwaHyjsAR oP9GQBhcxFY8I+nzbLgAN/UUEzrfJ3a3Wr5LzVEHotJlJK8xUJHWg8I5YBZ+lmLP svxCnic0wwfUwVbwqDMHwriuEVwmFLohwTZan8YNF7oqg1exeVM3e/Lf2PZ0BjPa oSFr94WyKN+pAEQsL800W2CM5vhErjAOW/ujYTiv8A551dRqg+vq4SOU3IEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkq+zqXkFQKg0Fx9eixvrFdSi2JgwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD8W6RIghzZt+h5FI6mUIbdqQnV9GFWUr3D 5atgZM0xQRdqamim8gW9r8cDtKijzHL/KvaEyyJXa7/ao6U2vLSLvTT/XnbdOL7j BjPBTQ9E6WGXp6KA83YS4yZL+a2LWl+hGX+bZidGXnDV8kLDX4zy419vhzNk1SuF B/U12P/c7qkoQW/TnQUiV0BICitlWAzCX93hG8dQF9rqnREFI93S3x36xfkR6BYb KT9ssvFWIKXvuGzVAGbgCJt+ZUDbQDqJlVrgRk42T8L1LFdYszF6SAiyFDRG9Ai7 W3Z/UU9ToJoTM8WOvk1c1gBNFv5zGGGUnUSdyHzGSftCN/x/Maw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:23:38 2025 by rpki-client