$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: 2bOa9f0mJVKTfpE8jdUlaGMq5k0kIC0XI48FUsK4tUU= Subject key identifier: 7B:D0:AA:BB:2D:8E:1E:8E:F1:FC:97:5A:AF:9D:6D:7F:41:A4:6E:52 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 1FEA91FCB48A3440FEBD6F46B0B363741D2A919C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 0502 Signing time: Sat 23 Aug 2025 12:40:35 +0000 Manifest this update: Sat 23 Aug 2025 12:35:35 +0000 Manifest next update: Tue 26 Aug 2025 14:31:35 +0000 Files and hashes: 1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) 2: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: p/9mjYfBn+3BAVE8elVNLyThiqp9I+jBBfcECGRhhIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ea:91:fc:b4:8a:34:40:fe:bd:6f:46:b0:b3:63:74:1d:2a:91:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Aug 23 12:35:35 2025 GMT Not After : Aug 26 14:31:35 2025 GMT Subject: CN=7BD0AABB2D8E1E8EF1FC975AAF9D6D7F41A46E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:9f:22:30:41:ec:0a:52:fb:45:6a:c0:48: fd:33:0f:29:c2:62:3e:d8:87:09:09:b8:51:cb:e2: c4:bb:72:08:66:6f:56:78:00:95:d6:87:73:77:4a: c9:b1:5c:a7:d6:2b:7c:94:7b:ec:8f:be:f2:d4:5c: 23:eb:2b:7d:f6:ac:18:64:3d:cd:a2:63:32:cd:d3: e8:1f:18:e3:bb:dc:56:aa:15:47:3c:50:d2:0a:9e: 40:ce:d8:fa:4e:2c:f9:5e:4a:1c:96:eb:d4:a6:23: 65:88:18:64:ad:de:95:56:83:a0:03:ff:de:bf:72: 6b:0f:2c:c5:d2:a0:f3:a0:76:34:b4:31:d4:37:20: 09:0c:eb:82:11:1a:a9:85:4c:83:15:df:63:02:18: 7e:6a:04:8b:e2:8d:ac:df:32:bd:db:45:d6:c3:1d: 2e:16:3d:6f:7a:74:df:39:15:5b:de:f0:a4:b9:c2: 91:2e:78:85:a9:30:99:50:09:2c:b0:30:35:8e:43: 5d:b7:0b:8e:02:73:85:61:ae:9e:db:35:60:89:3c: 81:32:52:30:49:65:38:62:db:2b:53:2c:1d:ac:20: 3e:fd:63:95:6d:9d:40:25:30:ca:bd:f7:35:18:30: f8:38:c4:9e:cc:55:41:4a:68:48:b1:c9:0f:83:ca: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:AA:BB:2D:8E:1E:8E:F1:FC:97:5A:AF:9D:6D:7F:41:A4:6E:52 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bd:8c:c0:9c:5d:7d:8d:de:6d:22:6a:82:47:ee:90:b2:a2: f1:06:ee:9c:67:d4:6b:21:75:11:de:2b:b8:50:0c:8a:d5:45: 4b:5a:f9:1e:20:a3:d8:45:22:0c:f5:62:82:a9:71:be:5e:08: d8:07:e2:ea:0e:9a:d4:a4:2e:50:7d:8d:e9:11:39:33:39:07: d7:b5:70:87:68:fa:b9:b3:ca:8f:c3:51:96:c3:09:b9:93:b7: 62:f9:dc:e3:78:98:89:c6:1e:9b:d6:bc:87:bc:16:69:03:50: e0:10:b1:06:f4:04:c4:80:db:00:86:53:54:85:11:9a:9b:a4: 24:fb:82:b5:3e:16:c9:30:0a:fc:68:bd:a3:52:b7:ef:d7:5d: 45:84:eb:65:fa:42:07:17:7f:bc:97:99:14:77:e0:3c:cc:e6: 74:ec:80:d8:82:17:32:39:a2:fa:c1:5d:8f:de:81:9a:50:f2: eb:42:05:9d:e5:8e:ce:24:ef:2b:2f:e9:a2:e7:a2:f1:90:2c: 96:c8:f4:1e:2e:5c:9e:92:32:d4:da:ed:e6:c0:e4:e7:92:77: 3a:7c:61:63:a6:53:99:93:b1:36:0a:ac:29:b4:39:02:14:81: 6b:06:43:67:79:cf:ae:4e:88:cc:ca:96:ea:df:c5:88:a0:74: 07:16:a7:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUH+qR/LSKNED+vW9GsLNjdB0qkZwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MDgyMzEyMzUzNVoX DTI1MDgyNjE0MzEzNVowMzExMC8GA1UEAxMoN0JEMEFBQkIyRDhFMUU4RUYxRkM5 NzVBQUY5RDZEN0Y0MUE0NkU1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKc5nyIwQewKUvtFasBI/TMPKcJiPtiHCQm4UcvixLtyCGZvVngAldaHc3dK ybFcp9YrfJR77I++8tRcI+srffasGGQ9zaJjMs3T6B8Y47vcVqoVRzxQ0gqeQM7Y +k4s+V5KHJbr1KYjZYgYZK3elVaDoAP/3r9yaw8sxdKg86B2NLQx1DcgCQzrghEa qYVMgxXfYwIYfmoEi+KNrN8yvdtF1sMdLhY9b3p03zkVW97wpLnCkS54hakwmVAJ LLAwNY5DXbcLjgJzhWGunts1YIk8gTJSMEllOGLbK1MsHawgPv1jlW2dQCUwyr33 NRgw+DjEnsxVQUpoSLHJD4PKvsECAwEAAaOCAgkwggIFMB0GA1UdDgQWBBR70Kq7 LY4ejvH8l1qvnW1/QaRuUjAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL2MwJxd fY3ebSJqgkfukLKi8QbunGfUayF1Ed4ruFAMitVFS1r5HiCj2EUiDPVigqlxvl4I 2Afi6g6a1KQuUH2N6RE5MzkH17Vwh2j6ubPKj8NRlsMJuZO3Yvnc43iYicYem9a8 h7wWaQNQ4BCxBvQExIDbAIZTVIURmpukJPuCtT4WyTAK/Gi9o1K379ddRYTrZfpC Bxd/vJeZFHfgPMzmdOyA2IIXMjmi+sFdj96BmlDy60IFneWOziTvKy/pouei8ZAs lsj0Hi5cnpIy1Nrt5sDk55J3OnxhY6ZTmZOxNgqsKbQ5AhSBawZDZ3nPrk6IzMqW 6t/FiKB0BxanQA== -----END CERTIFICATE-----Generated at Mon Aug 25 03:03:12 2025 by rpki-client