$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: +Iss229sDmg7+DAzWCHAynRw4vXFqzwNl4j4TaG2a30= Subject key identifier: 47:2A:97:F1:7C:AA:D8:5E:5D:20:4B:B5:82:A9:23:ED:9A:C8:22:81 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 72E4452AFA3D6CE10FFD53E28D6B9F4066ED910C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 14:01:26 +0000 Manifest this update: Fri 22 Aug 2025 13:56:26 +0000 Manifest next update: Mon 25 Aug 2025 14:11:26 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: kmZTTcrSTsqoqvaF4v81F++KXijAf5lmHOV/+1l60zk=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e4:45:2a:fa:3d:6c:e1:0f:fd:53:e2:8d:6b:9f:40:66:ed:91:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Aug 22 13:56:26 2025 GMT Not After : Aug 25 14:11:26 2025 GMT Subject: CN=472A97F17CAAD85E5D204BB582A923ED9AC82281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:be:46:2e:c3:ae:2c:40:75:26:95:2f:68: ec:36:6c:19:cf:10:67:65:e1:93:24:93:db:f1:e7: 61:d1:a1:d4:1f:29:d6:e5:80:1c:43:9b:40:1b:d8: 7a:26:ab:e5:4c:e1:cb:8e:38:13:3a:f3:62:2a:03: 2d:96:84:d9:0b:bb:c6:b9:c8:22:cd:54:e8:be:bb: d0:be:60:0d:76:43:d5:f7:82:ff:3f:5f:cb:47:46: 73:22:38:6e:d3:e7:f8:e1:88:81:27:96:b3:77:e7: 59:c6:93:63:07:91:29:97:c8:3a:b2:b6:14:e8:41: 8b:fb:ee:62:e2:95:cf:75:74:bd:a9:1e:c0:42:5d: 04:96:09:32:41:05:b7:a0:45:cc:e6:d7:3f:b0:44: e8:a7:8d:71:ad:47:e5:57:f6:ae:2a:f2:2f:72:15: ce:2a:bb:4e:93:55:8d:f7:74:c3:19:01:a0:09:0d: 4d:11:51:62:ac:de:54:c6:f2:3b:be:f5:b8:8c:01: 25:5c:2e:ff:2a:fc:4c:4c:f8:00:43:fd:ef:6b:36: 40:c5:b8:5d:de:93:58:a8:b5:39:0f:0c:8e:2b:ea: 93:86:06:34:fe:9e:59:8a:1f:d0:d3:05:57:eb:b4: df:f5:61:9e:61:f1:cb:d0:96:f0:76:cd:ce:02:25: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2A:97:F1:7C:AA:D8:5E:5D:20:4B:B5:82:A9:23:ED:9A:C8:22:81 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0d:0e:bf:aa:dc:b8:46:43:0a:0d:20:16:07:f9:3a:f7:c5: bb:9c:97:1b:21:e6:d5:0f:9a:e9:09:2c:83:b0:17:93:3c:53: bc:53:13:3d:2a:79:5f:36:30:7b:4b:62:83:bb:54:1f:53:38: d1:55:25:8f:48:a3:ef:61:cb:06:88:53:da:8f:11:be:d8:34: e7:39:00:92:90:b4:2c:e2:b7:f5:b2:7a:4b:55:9a:2c:36:85: eb:ce:c8:3a:be:48:4b:ef:62:e9:cf:4e:a2:99:b7:4c:ad:79: 1c:b7:5f:60:a3:2d:97:52:32:e5:49:bb:33:c6:a5:73:bf:70: 8d:0b:17:79:22:9a:6d:26:6f:d8:da:8a:91:2e:a0:7e:57:16: d9:4e:a6:b9:79:65:24:fc:55:af:1c:b6:63:a7:a2:fd:89:99: c3:08:c2:d7:d6:2a:86:f3:c7:8c:ca:1f:79:16:fe:f4:ab:57: a4:ae:a6:99:70:8d:04:fa:0a:7c:0b:5b:72:52:bf:29:8c:00: 44:33:8c:c0:6e:38:0d:86:1c:53:cf:4d:c2:c7:04:14:2f:0f: f2:59:7b:b1:f1:d1:3f:ce:6a:de:f9:fb:bf:9b:45:f5:ac:91: ea:17:4c:36:e8:40:9e:4e:45:4b:d6:33:ec:e9:38:4e:37:9a: 61:21:e7:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuRFKvo9bOEP/VPijWufQGbtkQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTA4MjIxMzU2MjZaFw0yNTA4MjUxNDExMjZaMDMxMTAvBgNV BAMTKDQ3MkE5N0YxN0NBQUQ4NUU1RDIwNEJCNTgyQTkyM0VEOUFDODIyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ML5GLsOuLEB1JpUvaOw2bBnP EGdl4ZMkk9vx52HRodQfKdblgBxDm0Ab2Homq+VM4cuOOBM682IqAy2WhNkLu8a5 yCLNVOi+u9C+YA12Q9X3gv8/X8tHRnMiOG7T5/jhiIEnlrN351nGk2MHkSmXyDqy thToQYv77mLilc91dL2pHsBCXQSWCTJBBbegRczm1z+wROinjXGtR+VX9q4q8i9y Fc4qu06TVY33dMMZAaAJDU0RUWKs3lTG8ju+9biMASVcLv8q/ExM+ABD/e9rNkDF uF3ek1iotTkPDI4r6pOGBjT+nlmKH9DTBVfrtN/1YZ5h8cvQlvB2zc4CJXA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyqX8Xyq2F5dIEu1gqkj7ZrIIoEwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMNDr+q3LhGQwoNIBYH+Tr3xbuclxsh5tUP mukJLIOwF5M8U7xTEz0qeV82MHtLYoO7VB9TONFVJY9Io+9hywaIU9qPEb7YNOc5 AJKQtCzit/WyektVmiw2hevOyDq+SEvvYunPTqKZt0yteRy3X2CjLZdSMuVJuzPG pXO/cI0LF3kimm0mb9jaipEuoH5XFtlOprl5ZST8Va8ctmOnov2JmcMIwtfWKobz x4zKH3kW/vSrV6SupplwjQT6CnwLW3JSvymMAEQzjMBuOA2GHFPPTcLHBBQvD/JZ e7Hx0T/Oat75+7+bRfWskeoXTDboQJ5ORUvWM+zpOE43mmEh59Q= -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:13 2025 by rpki-client