$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json) Hash identifier: QYQFDij90Dq7o5E23yFnSsHAmPTB5eipQ9Crqi++Fig= Subject key identifier: 1B:A8:8D:4A:67:08:49:4B:EE:2F:F6:43:25:C7:AA:D4:77:4A:8E:92 Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Certificate serial: 20CE50F4BDC09DFB8DEA1C4526224ABC1917C637 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft Manifest number: E3 Signing time: Thu 21 Aug 2025 18:01:15 +0000 Manifest this update: Thu 21 Aug 2025 17:56:15 +0000 Manifest next update: Sun 24 Aug 2025 20:16:15 +0000 Files and hashes: 1: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: 0KU0EMwmh1omMcK4ZWaeTjkoADcBFgmluA2MR3mE3nw=) 2: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ce:50:f4:bd:c0:9d:fb:8d:ea:1c:45:26:22:4a:bc:19:17:c6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Validity Not Before: Aug 21 17:56:15 2025 GMT Not After : Aug 24 20:16:15 2025 GMT Subject: CN=1BA88D4A6708494BEE2FF64325C7AAD4774A8E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:2d:1b:74:35:d3:a7:0d:84:b5:7c:7d:81: fe:78:2d:e5:bf:1a:21:67:90:19:2d:2c:15:a9:bb: a5:19:3c:2e:84:08:1b:50:ba:7d:62:6f:8e:b0:d0: 2a:9f:5c:3d:ac:cf:23:e7:4d:15:ca:94:85:72:4a: c3:04:e8:e2:54:b5:9f:36:3e:0a:24:c4:81:58:24: 59:a6:6d:60:78:0b:d6:08:7b:ad:91:e7:89:90:11: 1a:e5:b7:bb:5d:58:b3:11:be:84:f3:b9:3f:21:d4: 3f:cb:1d:4a:57:4e:e8:e5:42:d8:c1:33:1d:e4:83: 37:a7:05:04:10:50:33:ea:81:c5:bc:bf:d1:d7:9b: 9d:80:b0:5d:c2:6c:0f:c7:ad:9d:6e:23:4d:3e:d7: c8:ec:06:a9:f1:82:0b:1d:6f:45:6d:de:ed:f0:c9: 17:dc:88:eb:34:5b:e8:f7:e3:ef:c0:47:40:20:aa: 1e:52:aa:3a:73:74:24:24:a1:62:00:e5:43:66:1e: d8:e1:98:d5:85:54:9f:d9:b6:73:26:6e:92:96:87: a4:4e:7b:20:8b:6f:d6:a9:28:e3:fe:21:68:f5:10: 81:7f:f3:6c:27:c4:ff:75:fa:6f:cc:2b:c9:21:34: a3:bf:7c:2c:16:52:a4:bb:ec:ad:e1:95:55:a4:02: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A8:8D:4A:67:08:49:4B:EE:2F:F6:43:25:C7:AA:D4:77:4A:8E:92 X509v3 Authority Key Identifier: keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:34:81:68:94:1a:fe:3f:a9:d6:6e:27:df:61:16:0f:ff:71: 54:df:bd:a8:16:51:9b:59:a6:3e:6a:f4:9f:af:06:3a:51:f9: 57:a2:ce:e6:fd:02:82:e0:ea:e5:1c:e2:9e:cb:8c:5e:66:25: 5c:e5:53:84:20:63:4b:23:9d:22:e7:c5:0e:0d:40:28:3e:3f: 8a:c9:90:bf:c2:e7:64:6e:8c:3a:d1:23:42:74:0f:f2:bd:af: 12:03:29:53:c7:5a:bb:88:c7:de:7d:2a:e6:cf:ef:f3:3e:24: ac:0e:0f:10:92:86:a5:73:e4:39:11:95:ff:2a:72:00:f3:d2: df:45:99:e6:29:cc:55:e4:61:16:4e:6d:26:e1:c3:d0:73:3c: 64:7e:40:c6:ce:07:cc:43:a1:ba:0e:fa:2c:60:e8:87:03:91: 2a:05:1a:aa:7e:d5:7c:c9:00:a1:f6:82:cb:ff:fd:8f:ad:3f: 9a:81:cd:33:58:c4:c0:6d:7b:d6:8f:e4:17:9c:6e:00:0b:53: 5f:e9:b3:f1:a3:1a:35:f7:f6:d3:a2:16:b1:e3:84:97:10:d8: 7e:fc:07:4d:92:2f:f5:b5:3e:ae:64:86:26:c0:bf:cd:90:c6: ef:1e:09:24:21:3a:3f:70:5f:56:3f:cd:dd:40:16:1a:22:56: da:76:3e:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIM5Q9L3AnfuN6hxFJiJKvBkXxjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy NTY2NTRDNjAeFw0yNTA4MjExNzU2MTVaFw0yNTA4MjQyMDE2MTVaMDMxMTAvBgNV BAMTKDFCQTg4RDRBNjcwODQ5NEJFRTJGRjY0MzI1QzdBQUQ0Nzc0QThFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5S0bdDXTpw2EtXx9gf54LeW/ GiFnkBktLBWpu6UZPC6ECBtQun1ib46w0CqfXD2szyPnTRXKlIVySsME6OJUtZ82 PgokxIFYJFmmbWB4C9YIe62R54mQERrlt7tdWLMRvoTzuT8h1D/LHUpXTujlQtjB Mx3kgzenBQQQUDPqgcW8v9HXm52AsF3CbA/HrZ1uI00+18jsBqnxggsdb0Vt3u3w yRfciOs0W+j34+/AR0Agqh5SqjpzdCQkoWIA5UNmHtjhmNWFVJ/ZtnMmbpKWh6RO eyCLb9apKOP+IWj1EIF/82wnxP91+m/MK8khNKO/fCwWUqS77K3hlVWkAoNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6iNSmcISUvuL/ZDJceq1HdKjpIwHwYDVR0j BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2 NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKA0gWiUGv4/qdZuJ99hFg//cVTfvagWUZtZ pj5q9J+vBjpR+Veizub9AoLg6uUc4p7LjF5mJVzlU4QgY0sjnSLnxQ4NQCg+P4rJ kL/C52RujDrRI0J0D/K9rxIDKVPHWruIx959KubP7/M+JKwODxCShqVz5DkRlf8q cgDz0t9FmeYpzFXkYRZObSbhw9BzPGR+QMbOB8xDoboO+ixg6IcDkSoFGqp+1XzJ AKH2gsv//Y+tP5qBzTNYxMBte9aP5BecbgALU1/ps/GjGjX39tOiFrHjhJcQ2H78 B02SL/W1Pq5khibAv82Qxu8eCSQhOj9wX1Y/zd1AFhoiVtp2PuQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:46 2025 by rpki-client