$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: 1VlD5cakuHvNKvxO9TSyiAfvPLgQkDu81d1D+6/nZJY= Subject key identifier: 8B:BD:69:A3:0F:E3:94:0E:E5:F5:19:6B:59:75:C8:F8:DB:D1:C8:0E Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 67F18B17C4D11CB82C8AF9C36BBE43B72D1BB216 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 01DC Signing time: Sat 23 Aug 2025 00:10:51 +0000 Manifest this update: Sat 23 Aug 2025 00:05:51 +0000 Manifest next update: Tue 26 Aug 2025 11:07:51 +0000 Files and hashes: 1: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: zGm7u1cAVWAy5VZzwsaKPNDPm0mvkYYrnrLbHa0a/mc=) 2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f1:8b:17:c4:d1:1c:b8:2c:8a:f9:c3:6b:be:43:b7:2d:1b:b2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Aug 23 00:05:51 2025 GMT Not After : Aug 26 11:07:51 2025 GMT Subject: CN=8BBD69A30FE3940EE5F5196B5975C8F8DBD1C80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:01:d8:9b:ae:28:3e:82:c1:ad:a2:a8:32: 2a:59:3b:fe:99:fa:bf:9f:2d:85:42:42:ae:e0:67: 42:24:14:b8:88:b5:a8:d4:56:37:d1:2d:11:72:11: 3c:0b:97:45:c5:46:98:0e:6d:4d:2c:0a:92:e5:19: 7e:77:5d:4b:17:e2:a7:f5:fe:15:0b:2f:48:dd:59: 6a:e8:b4:85:4e:e0:ae:fa:8c:23:ed:52:ee:4f:fc: 24:0f:4d:7a:bd:87:04:ab:60:65:90:d5:c7:ed:f8: a5:3d:46:b7:2e:ff:ba:81:4f:b3:a4:9e:8f:38:4b: f3:a6:6f:29:0d:9d:9a:3e:78:aa:27:8e:99:af:f2: ce:f6:ae:50:cf:1c:57:3f:5d:bd:40:ce:0b:77:8f: d2:c8:36:88:5f:6f:8f:07:e7:29:2c:60:0f:1c:82: c6:60:19:23:c1:84:43:9a:5f:3d:d7:d1:f8:48:bb: 3b:7d:74:08:0a:68:67:2f:b4:c8:33:a7:54:fa:c3: 2f:06:d3:55:5a:69:85:da:e9:b6:90:b1:89:e0:7e: a5:35:46:40:35:f2:ca:cf:7b:0c:f3:4f:b6:dc:35: 59:9a:19:ce:e5:b3:3e:e5:93:5f:f1:26:92:47:84: 82:68:72:64:7d:8a:92:0b:01:a3:8c:57:2b:59:18: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BD:69:A3:0F:E3:94:0E:E5:F5:19:6B:59:75:C8:F8:DB:D1:C8:0E X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7d:76:33:28:b0:e6:d2:2a:77:bb:17:34:bf:e2:e8:d3:68: d4:b4:5d:53:57:01:7c:c8:f8:61:b5:82:12:84:93:f7:e7:bf: af:72:61:06:8f:72:6f:e8:61:de:11:45:5f:90:fb:56:6d:45: 71:8f:d2:5e:a0:81:fc:72:3f:f1:1a:5d:bb:ed:68:4a:95:0d: 68:a7:c4:a2:41:46:7e:09:6c:c0:0a:07:79:03:2a:33:4d:dc: 8c:90:b8:7f:37:a8:e2:3a:52:e5:58:c0:43:60:8f:46:10:5c: e5:1f:c8:c8:18:5e:80:41:64:2b:a0:04:48:8b:52:b1:7c:3a: c3:41:97:6d:55:b5:1d:7b:fe:ba:2e:f4:1a:fb:a8:ac:6c:1f: 9e:dd:df:d7:9c:0f:6e:46:8a:11:85:ef:0a:25:d4:67:0b:36: af:35:5b:d7:fd:fd:1b:a8:51:7e:29:10:9a:eb:ea:32:d6:72: bd:03:65:24:93:71:43:04:10:cf:ff:d0:f2:58:0f:89:23:2d: 7c:e1:66:9b:d4:3c:bc:04:56:eb:2e:6a:ce:a1:66:99:e4:6b: b6:71:26:c2:be:52:6e:3e:30:d2:c7:09:0d:ec:05:d1:d4:52: 27:3d:2d:f8:d9:ea:0f:b2:3c:74:78:1f:7d:2d:f3:76:f1:7b: 9c:6c:76:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/GLF8TRHLgsivnDa75Dty0bshYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTA4MjMwMDA1NTFaFw0yNTA4MjYxMTA3NTFaMDMxMTAvBgNV BAMTKDhCQkQ2OUEzMEZFMzk0MEVFNUY1MTk2QjU5NzVDOEY4REJEMUM4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejAHYm64oPoLBraKoMipZO/6Z +r+fLYVCQq7gZ0IkFLiItajUVjfRLRFyETwLl0XFRpgObU0sCpLlGX53XUsX4qf1 /hULL0jdWWrotIVO4K76jCPtUu5P/CQPTXq9hwSrYGWQ1cft+KU9Rrcu/7qBT7Ok no84S/OmbykNnZo+eKonjpmv8s72rlDPHFc/Xb1Azgt3j9LINohfb48H5yksYA8c gsZgGSPBhEOaXz3X0fhIuzt9dAgKaGcvtMgzp1T6wy8G01VaaYXa6baQsYngfqU1 RkA18srPewzzT7bcNVmaGc7lsz7lk1/xJpJHhIJocmR9ipILAaOMVytZGMrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi71pow/jlA7l9RlrWXXI+NvRyA4wHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFx9djMosObSKne7FzS/4ujTaNS0XVNXAXzI +GG1ghKEk/fnv69yYQaPcm/oYd4RRV+Q+1ZtRXGP0l6ggfxyP/EaXbvtaEqVDWin xKJBRn4JbMAKB3kDKjNN3IyQuH83qOI6UuVYwENgj0YQXOUfyMgYXoBBZCugBEiL UrF8OsNBl21VtR17/rou9Br7qKxsH57d39ecD25GihGF7wol1GcLNq81W9f9/Ruo UX4pEJrr6jLWcr0DZSSTcUMEEM//0PJYD4kjLXzhZpvUPLwEVusuas6hZpnka7Zx JsK+Um4+MNLHCQ3sBdHUUic9LfjZ6g+yPHR4H30t83bxe5xsdpU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:29 2025 by rpki-client