$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: vgGX5S9rURcdeQtbHfjC4pf3a24eEKlO4dVrncOjfgg= Subject key identifier: DB:65:9B:57:11:6B:CE:70:C3:A4:87:5B:AD:97:18:F3:0E:0C:89:2A Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 6B2DD84D0A61E764BF010602C1352799DA42B9B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 025D Signing time: Fri 22 Aug 2025 23:02:02 +0000 Manifest this update: Fri 22 Aug 2025 22:57:02 +0000 Manifest next update: Mon 25 Aug 2025 23:40:02 +0000 Files and hashes: 1: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 30G0irckoWueHdL2XRvtGhNfRlze7pvxH51N/l3bYKk=) 2: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: iF3CWBPdj/rDxDSfoxnUN7KiP8CnCZy8t0+7jPyE/nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2d:d8:4d:0a:61:e7:64:bf:01:06:02:c1:35:27:99:da:42:b9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Aug 22 22:57:02 2025 GMT Not After : Aug 25 23:40:02 2025 GMT Subject: CN=DB659B57116BCE70C3A4875BAD9718F30E0C892A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:7d:a6:9c:d1:65:50:89:73:13:f6:78:8b: 24:81:14:15:15:53:c7:de:a6:9d:93:a0:07:5d:8d: 85:5b:ff:5d:ca:55:75:fb:24:c3:05:0b:3a:a0:b7: 2d:51:3b:6e:1f:4d:4f:22:fb:df:ee:e7:c5:cb:a6: e1:c3:b8:3e:3a:a7:d9:dc:81:b3:59:71:18:4b:79: af:05:c8:b5:9f:07:fe:5d:e6:e9:fb:ef:68:11:fc: f7:30:71:44:f9:00:47:e6:80:f7:a5:fe:02:a5:ad: e2:c5:70:19:29:0b:e4:4c:7f:d4:a7:11:d9:53:ad: 9d:ec:39:48:3a:50:18:9f:42:f3:6f:b2:c2:45:51: 12:c3:21:d9:8a:7f:b3:4d:06:e8:25:a6:36:36:12: 03:db:dc:94:8d:a8:f6:39:70:7c:b4:41:cd:16:44: 9b:17:b4:9c:ba:b3:6c:3c:ff:67:b8:ce:ef:ff:03: 81:97:91:d7:78:a6:13:a0:be:09:71:75:5e:17:a9: 0a:6d:8f:06:2d:ea:db:dd:ff:38:5b:c8:b3:eb:a2: 79:94:f3:e2:3f:3f:c8:a2:5c:cc:fd:57:a4:ec:20: f6:a6:a4:19:a5:1f:28:46:73:84:41:7a:bb:de:c2: 2f:98:06:d1:75:56:70:74:f2:df:6a:0e:05:3d:da: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:65:9B:57:11:6B:CE:70:C3:A4:87:5B:AD:97:18:F3:0E:0C:89:2A X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9c:a2:f2:b0:e7:b5:d4:d8:13:55:36:94:3a:18:9c:ff:d1: 07:0f:77:b6:65:51:7e:01:28:1f:f2:11:f6:1f:f4:a1:03:1f: 6e:10:24:eb:8b:00:3d:68:f4:e3:fe:bd:54:fd:02:89:68:e3: 7f:66:fe:e9:8a:a1:37:f7:16:24:c4:2c:d9:7e:79:28:df:12: 84:98:cc:b7:77:c7:32:12:17:ac:40:2d:f9:f6:93:36:75:84: a2:94:7b:6d:87:59:05:0a:dc:08:13:fd:cb:06:c9:ad:da:89: e6:50:a1:a9:15:fc:66:0a:14:73:4a:e8:a1:62:35:81:46:e4: b2:15:9e:e1:b1:4f:0a:ac:69:28:e4:e7:cf:18:53:a4:ca:a6: 42:6a:e4:8e:16:20:14:ed:73:ab:31:03:37:4c:6e:8d:9f:0d: 34:3a:ce:74:6c:07:6a:b1:04:bf:d1:17:93:e3:56:6f:23:07: 8d:c1:19:80:e6:45:9d:31:4a:d0:1f:30:e1:0d:19:89:db:48: 13:7a:44:c0:08:c2:c0:29:2e:76:a8:63:c3:b1:68:59:1d:0d: 71:bb:bc:33:cb:18:91:22:c7:cd:36:24:ab:49:c6:a5:af:e8: 1b:65:02:88:08:60:69:f8:74:28:71:ee:af:a7:f7:40:78:8d: f4:07:09:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUay3YTQph52S/AQYCwTUnmdpCubUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTA4MjIyMjU3MDJaFw0yNTA4MjUyMzQwMDJaMDMxMTAvBgNV BAMTKERCNjU5QjU3MTE2QkNFNzBDM0E0ODc1QkFEOTcxOEYzMEUwQzg5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRz32mnNFlUIlzE/Z4iySBFBUV U8fepp2ToAddjYVb/13KVXX7JMMFCzqgty1RO24fTU8i+9/u58XLpuHDuD46p9nc gbNZcRhLea8FyLWfB/5d5un772gR/PcwcUT5AEfmgPel/gKlreLFcBkpC+RMf9Sn EdlTrZ3sOUg6UBifQvNvssJFURLDIdmKf7NNBuglpjY2EgPb3JSNqPY5cHy0Qc0W RJsXtJy6s2w8/2e4zu//A4GXkdd4phOgvglxdV4XqQptjwYt6tvd/zhbyLPronmU 8+I/P8iiXMz9V6TsIPampBmlHyhGc4RBervewi+YBtF1VnB08t9qDgU92rK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22WbVxFrznDDpIdbrZcY8w4MiSowHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6covKw57XU2BNVNpQ6GJz/0QcPd7ZlUX4B KB/yEfYf9KEDH24QJOuLAD1o9OP+vVT9Aolo439m/umKoTf3FiTELNl+eSjfEoSY zLd3xzISF6xALfn2kzZ1hKKUe22HWQUK3AgT/csGya3aieZQoakV/GYKFHNK6KFi NYFG5LIVnuGxTwqsaSjk588YU6TKpkJq5I4WIBTtc6sxAzdMbo2fDTQ6znRsB2qx BL/RF5PjVm8jB43BGYDmRZ0xStAfMOENGYnbSBN6RMAIwsApLnaoY8OxaFkdDXG7 vDPLGJEix802JKtJxqWv6BtlAogIYGn4dChx7q+n90B4jfQHCfQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:53 2025 by rpki-client