$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: Sk0dm9y9VuANZq3cvDnMF+cQhpVf6NBF/Cd8p4YwOLw= Subject key identifier: 2F:EB:12:56:E0:C5:65:71:4B:F4:25:B5:DA:7A:01:F6:DA:70:D6:EE Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 31DF693FBB31D3427116C6C6FA3932E3A188125A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 01B7 Signing time: Fri 22 Aug 2025 14:31:48 +0000 Manifest this update: Fri 22 Aug 2025 14:26:48 +0000 Manifest next update: Tue 26 Aug 2025 02:08:48 +0000 Files and hashes: 1: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: R1Xmf4rSZEGEI4nEXPhZSnDBX5se1Y4c3BecXaZlgkI=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=) 3: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: xEKvL1Sy6gjieKkSQRdg2opwP1NrCxUV9PFI8nvYCrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:df:69:3f:bb:31:d3:42:71:16:c6:c6:fa:39:32:e3:a1:88:12:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Aug 22 14:26:48 2025 GMT Not After : Aug 26 02:08:48 2025 GMT Subject: CN=2FEB1256E0C565714BF425B5DA7A01F6DA70D6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:66:3c:5e:0c:2f:06:3a:90:8b:c8:f9:6b: 40:3f:b0:02:2f:bb:0e:9c:54:8d:16:e5:4c:75:c9: 14:57:6c:29:16:d7:ee:7c:a7:6e:1b:44:bc:30:ba: 84:72:d9:ee:e1:a7:44:b7:c6:11:89:6b:33:d3:6b: 99:5b:35:4d:9f:ac:a2:ff:88:a6:b3:ea:bb:9f:f0: 12:63:9a:84:74:81:50:98:e6:72:8d:8f:dd:29:9c: 44:88:7f:a1:ce:d4:73:5f:6a:eb:c2:aa:19:cd:a9: ab:31:18:f2:a2:a3:c3:18:da:3c:8f:b2:d4:d0:8a: 51:79:6c:39:8a:8a:65:dd:ce:9b:b5:18:9b:e6:5c: 23:3a:6d:aa:45:0d:a4:2f:98:a7:ac:b6:ef:e7:ba: d2:14:a8:86:13:1e:d9:05:ce:1a:1e:7c:0d:82:c5: 59:06:c1:50:f7:1e:f2:1e:cf:a0:42:f0:20:87:bf: a2:e4:aa:16:5f:ae:c4:0d:8a:62:6c:ea:4e:c8:90: 7c:ff:12:39:eb:90:6d:45:e0:e4:49:0c:01:35:a4: c2:47:90:4c:b0:df:3d:5f:30:f6:6d:4d:87:1d:82: 89:87:05:78:28:88:cf:5a:c0:c5:95:65:81:f5:75: cb:53:ff:3a:b2:a3:4f:9c:fe:ba:ff:4e:0e:fd:db: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:12:56:E0:C5:65:71:4B:F4:25:B5:DA:7A:01:F6:DA:70:D6:EE X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c0:a7:40:8d:c5:fa:4b:50:60:da:d6:9e:75:b7:e6:da:0c: 62:63:b5:78:5c:37:6c:2f:25:38:03:40:eb:d3:91:07:64:89: 24:33:bf:5f:1e:ec:12:15:a7:79:88:75:29:2c:8f:f2:1f:db: f5:de:bb:eb:e7:c3:0a:f5:f3:22:5f:51:1b:6d:4d:2a:1f:20: 51:f3:5c:d1:a2:bf:66:26:80:de:41:7b:83:46:74:db:53:ab: fe:26:24:ca:07:26:15:b2:b6:51:6a:d2:24:ac:60:38:5c:e5: 01:fc:c7:bc:5a:e2:ae:ec:7d:56:03:da:85:47:ef:4f:4e:4a: e4:e1:06:c9:bf:23:63:f9:1b:be:ff:db:38:d6:02:6a:e0:6a: 8e:68:8f:11:0d:73:37:56:01:14:5c:78:89:82:f5:18:dd:c6: cb:23:15:5b:2c:09:8d:16:54:79:b5:50:6d:84:cc:08:a1:a0: 4f:ff:41:ec:81:d6:21:f3:94:5e:73:81:b1:ca:d5:6c:32:98: 27:89:55:2f:46:7d:af:8c:27:6b:b9:8a:d7:23:06:e7:c4:63: c6:17:95:9b:e6:18:e0:8b:03:bc:51:93:3a:f1:31:b0:90:b3: 50:7b:45:93:0c:e1:da:53:ed:7d:f3:3b:b8:1e:ed:63:8f:ab: e5:ee:00:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMd9pP7sx00JxFsbG+jky46GIElowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTA4MjIxNDI2NDhaFw0yNTA4MjYwMjA4NDhaMDMxMTAvBgNV BAMTKDJGRUIxMjU2RTBDNTY1NzE0QkY0MjVCNURBN0EwMUY2REE3MEQ2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7mY8XgwvBjqQi8j5a0A/sAIv uw6cVI0W5Ux1yRRXbCkW1+58p24bRLwwuoRy2e7hp0S3xhGJazPTa5lbNU2frKL/ iKaz6ruf8BJjmoR0gVCY5nKNj90pnESIf6HO1HNfauvCqhnNqasxGPKio8MY2jyP stTQilF5bDmKimXdzpu1GJvmXCM6bapFDaQvmKestu/nutIUqIYTHtkFzhoefA2C xVkGwVD3HvIez6BC8CCHv6LkqhZfrsQNimJs6k7IkHz/EjnrkG1F4ORJDAE1pMJH kEyw3z1fMPZtTYcdgomHBXgoiM9awMWVZYH1dctT/zqyo0+c/rr/Tg79247fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+sSVuDFZXFL9CW12noB9tpw1u4wHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfAp0CNxfpLUGDa1p51t+baDGJjtXhcN2wv JTgDQOvTkQdkiSQzv18e7BIVp3mIdSksj/If2/Xeu+vnwwr18yJfURttTSofIFHz XNGiv2YmgN5Be4NGdNtTq/4mJMoHJhWytlFq0iSsYDhc5QH8x7xa4q7sfVYD2oVH 709OSuThBsm/I2P5G77/2zjWAmrgao5ojxENczdWARRceImC9RjdxssjFVssCY0W VHm1UG2EzAihoE//QeyB1iHzlF5zgbHK1WwymCeJVS9Gfa+MJ2u5itcjBufEY8YX lZvmGOCLA7xRkzrxMbCQs1B7RZMM4dpT7X3zO7ge7WOPq+XuAIY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:29 2025 by rpki-client