$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: UaOe0+7bZMvxcAJ4r3Q8XgZglPO9VyQxRnwUGi2eNWs= Subject key identifier: FA:21:B1:A0:82:0A:13:A5:3C:6F:50:62:22:D7:3B:69:F1:90:8E:78 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 796118CB599180DFD79DDC1D3A47A49BDCC1195D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 81 Signing time: Fri 22 Aug 2025 18:01:05 +0000 Manifest this update: Fri 22 Aug 2025 17:56:05 +0000 Manifest next update: Mon 25 Aug 2025 18:34:05 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: 1bicYueQzBiiXIfOMlWxj6MTcLcd25I+Qh8Tvfwq794=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:61:18:cb:59:91:80:df:d7:9d:dc:1d:3a:47:a4:9b:dc:c1:19:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Aug 22 17:56:05 2025 GMT Not After : Aug 25 18:34:05 2025 GMT Subject: CN=FA21B1A0820A13A53C6F506222D73B69F1908E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:5d:e7:1f:94:0d:58:f4:1a:d8:44:4c:41: f5:38:95:95:3c:36:05:83:11:da:f3:c8:89:2d:98: 48:e7:3f:45:8d:d9:11:57:6a:f8:81:bc:08:78:39: 83:3d:a5:ac:ec:1e:85:7f:bc:f9:bc:42:8f:a1:f9: 8e:06:17:fa:d7:21:3b:d3:94:2a:dd:e5:66:e0:6c: 60:6b:d1:20:d8:09:0d:91:39:7b:66:49:a5:52:4e: 05:9d:13:af:51:6d:9b:57:73:6f:d1:89:fb:77:4f: b8:be:80:f5:4a:e1:18:ec:d5:da:50:0f:ed:83:fb: b8:c2:22:13:36:9b:27:9a:e2:e4:d1:4d:53:95:4c: ca:d5:96:bf:cd:41:73:58:90:51:28:c1:b0:62:13: be:65:3a:4d:9f:19:c5:0f:54:33:71:8d:50:5c:68: 33:08:6e:3f:c2:a0:fe:17:8d:b6:da:ee:e4:2c:95: 52:be:ff:bb:62:fa:66:65:99:2d:9b:ef:50:08:96: 23:75:03:a1:78:81:c5:4f:71:1e:3e:80:27:63:f9: 7e:e9:46:9f:9f:71:85:1c:90:0b:ef:a6:14:08:44: d6:ea:71:8d:d8:28:a1:0c:d3:1e:ff:8c:bb:c7:22: 8c:54:fa:23:35:e9:ea:d0:fc:77:ba:f2:9e:64:6c: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:21:B1:A0:82:0A:13:A5:3C:6F:50:62:22:D7:3B:69:F1:90:8E:78 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:6f:bf:b1:bc:1c:2b:5e:fd:c1:dc:24:9f:db:c4:ad:d0:2e: 50:cd:42:ba:ab:44:d7:7c:30:cc:09:47:dc:c6:bc:b3:b9:44: 87:b5:e3:b9:ae:c5:b4:cb:bd:90:fa:b0:5c:5f:c9:d5:bc:3e: 90:16:e9:0c:ce:5b:68:5c:d8:49:96:48:5d:41:96:f0:63:8a: bc:f8:33:81:c4:5f:d8:36:d9:93:d0:d4:ed:4f:11:e2:b8:1b: 41:ab:d8:32:9d:7e:76:ad:4c:de:89:36:2c:8a:8a:84:89:77: 60:c4:4f:a6:77:30:8b:5d:04:1e:93:10:84:fa:5d:20:88:3a: bc:aa:f8:7f:60:9b:03:a2:1e:72:b6:71:01:3e:61:af:72:bc: d8:c6:e2:e6:1b:b8:ce:15:84:aa:22:ec:28:a5:8d:ef:5e:be: b6:d7:d8:2d:93:11:34:8c:47:11:95:e7:4d:7a:5a:e1:6a:03: 0a:65:7e:9b:98:a5:97:c4:c5:61:5a:4b:5b:4d:53:bb:67:0f: ca:df:a7:84:58:89:52:2b:b6:ba:15:a8:ef:37:ed:4d:d3:4a: de:3f:31:5b:34:f3:27:4d:3e:b5:5b:64:8e:c0:2c:4b:63:26: 65:70:8e:9a:2b:1e:cc:18:aa:d5:18:46:09:8b:03:67:e9:be: 07:bb:e9:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeWEYy1mRgN/XndwdOkekm9zBGV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTA4MjIxNzU2MDVaFw0yNTA4MjUxODM0MDVaMDMxMTAvBgNV BAMTKEZBMjFCMUEwODIwQTEzQTUzQzZGNTA2MjIyRDczQjY5RjE5MDhFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyy13nH5QNWPQa2ERMQfU4lZU8 NgWDEdrzyIktmEjnP0WN2RFXaviBvAh4OYM9pazsHoV/vPm8Qo+h+Y4GF/rXITvT lCrd5WbgbGBr0SDYCQ2ROXtmSaVSTgWdE69RbZtXc2/Rift3T7i+gPVK4Rjs1dpQ D+2D+7jCIhM2myea4uTRTVOVTMrVlr/NQXNYkFEowbBiE75lOk2fGcUPVDNxjVBc aDMIbj/CoP4Xjbba7uQslVK+/7ti+mZlmS2b71AIliN1A6F4gcVPcR4+gCdj+X7p Rp+fcYUckAvvphQIRNbqcY3YKKEM0x7/jLvHIoxU+iM16erQ/He68p5kbMPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iGxoIIKE6U8b1BiItc7afGQjngwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpvv7G8HCte/cHcJJ/bxK3QLlDNQrqrRNd8 MMwJR9zGvLO5RIe147muxbTLvZD6sFxfydW8PpAW6QzOW2hc2EmWSF1BlvBjirz4 M4HEX9g22ZPQ1O1PEeK4G0Gr2DKdfnatTN6JNiyKioSJd2DET6Z3MItdBB6TEIT6 XSCIOryq+H9gmwOiHnK2cQE+Ya9yvNjG4uYbuM4VhKoi7Cilje9evrbX2C2TETSM RxGV5016WuFqAwplfpuYpZfExWFaS1tNU7tnD8rfp4RYiVIrtroVqO837U3TSt4/ MVs08ydNPrVbZI7ALEtjJmVwjporHswYqtUYRgmLA2fpvge76fU= -----END CERTIFICATE-----Generated at Sat Aug 23 21:42:05 2025 by rpki-client