$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: IcTGz3AWi02pGQyuj39B/GFRe2P9Z0wJqt7apIzr2Cg= Subject key identifier: 77:C2:40:93:36:F9:2C:B4:1B:89:C7:27:C2:08:3C:A9:1A:B2:05:34 Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 3BBD12AACFA63152D8DC763EE94838D74BB4AFA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 04BD Signing time: Thu 21 Aug 2025 23:01:55 +0000 Manifest this update: Thu 21 Aug 2025 22:56:55 +0000 Manifest next update: Mon 25 Aug 2025 08:48:55 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: XAdZjhJ8p/Sfbf/+znyNJnyeiAlF9/1TNV8duJLhiwk=) 2: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: JdIkMGQ4lnP49VVx6YE08FZlFnB6dhklMQf+kvT+BFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:bd:12:aa:cf:a6:31:52:d8:dc:76:3e:e9:48:38:d7:4b:b4:af:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Aug 21 22:56:55 2025 GMT Not After : Aug 25 08:48:55 2025 GMT Subject: CN=77C2409336F92CB41B89C727C2083CA91AB20534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:c9:d4:23:e6:ef:5a:5f:18:72:6c:8f:99: 50:e3:95:15:be:f8:25:e8:9f:09:f8:50:a3:ae:bd: c9:27:49:3f:8a:28:77:d5:c0:74:d9:2c:a9:bc:9a: f6:1e:37:cd:39:99:e9:d5:54:5b:84:4e:1c:e0:74: a0:2f:71:fe:74:61:a7:9c:be:95:a3:58:52:2f:bd: 83:e7:de:74:68:59:6c:65:42:c7:ba:0e:e7:d3:54: 52:48:b0:11:24:8d:71:89:7b:94:8a:1e:bd:1e:c8: e5:52:b7:69:05:9a:ef:bf:0f:e1:7e:b1:d5:2a:1f: b1:f9:15:b5:80:39:3a:63:dd:19:9d:e3:49:e6:40: 1c:53:83:a1:53:99:29:e7:d6:c9:6c:6b:25:1d:3e: 85:d9:3e:62:fd:d7:0d:e9:5e:d1:be:09:84:a3:9d: bd:7c:ef:e3:9d:e3:52:88:47:c6:dd:03:ca:d1:a5: 00:ce:55:ca:26:6d:81:fa:4a:f7:6d:80:5d:7f:44: 63:99:73:5d:76:21:d3:4d:8f:e6:75:13:4e:4e:04: fd:1f:48:38:45:55:a7:b9:be:b7:4e:c6:ce:c3:be: 2e:ba:21:90:a2:a0:9b:fc:e7:de:9d:fe:20:a6:89: 66:f7:dd:a1:a4:5d:22:b9:17:c4:51:45:d9:e3:43: ee:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C2:40:93:36:F9:2C:B4:1B:89:C7:27:C2:08:3C:A9:1A:B2:05:34 X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:83:04:70:3c:3a:de:37:09:7e:e3:13:a1:99:ec:9f:ff:d2: 56:9d:c6:9b:28:ff:f1:b4:84:07:90:31:07:21:2e:a5:a9:e6: ee:c1:d4:f7:b8:33:14:52:38:4e:5d:7e:28:d6:7a:dc:56:d7: be:60:70:a9:47:4c:87:53:d7:4b:86:17:8c:e2:ef:ba:92:33: 9d:13:fd:9d:15:d2:0c:19:f9:63:dd:64:35:22:e4:21:af:ed: f4:bd:fd:d1:1b:a5:f2:1c:e6:c9:db:a6:c6:02:a6:1e:88:60: 71:2c:fe:7a:94:2b:f8:7a:10:99:6f:1c:0c:92:7d:6d:eb:a2: 2c:7a:3f:21:3f:01:11:26:5f:f0:f4:5a:f7:fa:ba:ae:19:09: c6:ac:c5:59:c2:44:73:76:95:b9:a2:ee:53:57:65:ff:d5:a0: 89:8d:b5:36:f6:ae:4c:db:bd:26:38:3a:9e:3b:8d:a2:7f:23: 4c:fb:5e:ce:6d:e1:2a:1a:be:3f:26:99:c3:94:3a:a8:d4:5d: ab:4a:0f:8f:11:b0:f9:81:8b:f5:f0:11:c0:ff:8a:84:3f:91: cf:97:2d:7d:8a:aa:a3:c5:96:93:c5:fc:11:b1:a9:07:ce:a9: d6:ae:79:fe:46:23:0c:8c:ae:9d:e5:1b:6b:8e:fa:82:c6:db: f3:c0:a1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO70Sqs+mMVLY3HY+6Ug410u0r6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNTA4MjEyMjU2NTVaFw0yNTA4MjUwODQ4NTVaMDMxMTAvBgNV BAMTKDc3QzI0MDkzMzZGOTJDQjQxQjg5QzcyN0MyMDgzQ0E5MUFCMjA1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK8nUI+bvWl8YcmyPmVDjlRW+ +CXonwn4UKOuvcknST+KKHfVwHTZLKm8mvYeN805menVVFuEThzgdKAvcf50Yaec vpWjWFIvvYPn3nRoWWxlQse6DufTVFJIsBEkjXGJe5SKHr0eyOVSt2kFmu+/D+F+ sdUqH7H5FbWAOTpj3Rmd40nmQBxTg6FTmSnn1slsayUdPoXZPmL91w3pXtG+CYSj nb187+Od41KIR8bdA8rRpQDOVcombYH6SvdtgF1/RGOZc112IdNNj+Z1E05OBP0f SDhFVae5vrdOxs7Dvi66IZCioJv8596d/iCmiWb33aGkXSK5F8RRRdnjQ+5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd8JAkzb5LLQbiccnwgg8qRqyBTQwHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeDBHA8Ot43CX7jE6GZ7J//0ladxpso//G0 hAeQMQchLqWp5u7B1Pe4MxRSOE5dfijWetxW175gcKlHTIdT10uGF4zi77qSM50T /Z0V0gwZ+WPdZDUi5CGv7fS9/dEbpfIc5snbpsYCph6IYHEs/nqUK/h6EJlvHAyS fW3roix6PyE/AREmX/D0Wvf6uq4ZCcasxVnCRHN2lbmi7lNXZf/VoImNtTb2rkzb vSY4Op47jaJ/I0z7Xs5t4Soavj8mmcOUOqjUXatKD48RsPmBi/XwEcD/ioQ/kc+X LX2KqqPFlpPF/BGxqQfOqdauef5GIwyMrp3lG2uO+oLG2/PAoZ0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:01 2025 by rpki-client