$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: muhBZ8ySJMY4Usdrnic+pIuQIVcCc3pOYRCUwcXMqcs= Subject key identifier: 2B:6C:2E:14:AD:EB:E9:C6:4F:5E:66:B9:00:06:5A:25:BB:2E:4A:0D Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 1990552EF72C2503CD45563471387F1F435A7DD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0223 Signing time: Sat 23 Aug 2025 06:51:43 +0000 Manifest this update: Sat 23 Aug 2025 06:46:43 +0000 Manifest next update: Tue 26 Aug 2025 13:57:43 +0000 Files and hashes: 1: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 2: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 3: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: gFvjdxqTMRYkT06XL89DXhqzKY4GILX2jdHCZA7TJT0=) 4: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 5: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 6: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:90:55:2e:f7:2c:25:03:cd:45:56:34:71:38:7f:1f:43:5a:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Aug 23 06:46:43 2025 GMT Not After : Aug 26 13:57:43 2025 GMT Subject: CN=2B6C2E14ADEBE9C64F5E66B900065A25BB2E4A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:16:bc:85:ce:8b:77:18:42:2a:ed:d7:51: 6a:97:e9:7e:f0:f8:9a:80:0a:e2:c2:61:5f:e4:9e: 46:0b:9a:40:53:ac:ff:cb:39:e0:52:c1:ff:b6:e7: 2e:99:24:63:4a:d5:1b:d6:55:79:e2:b6:d5:b0:4f: 84:e5:a6:f2:49:42:8a:85:09:de:51:7f:83:36:c2: 95:ea:3d:9a:9f:b2:50:b9:68:7f:a5:bb:0e:30:26: a0:64:b8:00:67:b0:03:09:65:f9:4d:87:10:ed:09: c2:c0:1c:ad:72:01:56:10:0b:b0:2e:22:e3:f6:52: 3f:ae:a7:b5:ec:4a:6e:c5:9c:e2:3d:00:cb:43:a1: 93:f9:04:45:59:23:a8:42:82:8f:73:de:70:04:77: 44:66:8c:dc:67:9b:20:9d:05:07:38:22:92:e6:9c: 8e:d9:04:ab:78:c1:f8:71:f8:43:ca:0b:50:a4:7e: d2:0a:4a:7b:c6:88:26:fe:cd:f3:58:21:2d:e0:5c: eb:1a:9b:bd:a2:b6:1a:97:c4:52:fe:ac:59:92:be: 9f:a5:63:58:9d:3a:cc:a0:06:f9:51:7e:d8:9b:89: 4a:8d:a6:9f:86:c2:1a:49:e5:ed:39:ae:41:ea:07: 4a:d9:d8:5a:7c:2e:78:87:17:e2:b5:e5:84:aa:a0: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6C:2E:14:AD:EB:E9:C6:4F:5E:66:B9:00:06:5A:25:BB:2E:4A:0D X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d1:27:72:73:01:a3:17:a9:d2:4b:2a:38:b6:19:26:ca:c2: f5:a4:2a:b2:8d:c1:0d:7f:8a:0c:ac:4a:ea:70:35:0a:e9:a0: 21:15:54:6f:a9:36:c0:4f:6d:74:df:78:12:29:61:51:c6:bb: 7e:84:cc:41:8a:ce:84:a4:ce:92:c4:17:d7:2a:f3:0c:9e:c0: 12:64:cf:5a:39:2e:7d:8b:4e:a3:20:9d:ef:68:41:72:91:b7: 70:c8:56:15:e9:d4:2d:da:92:77:1d:7f:51:9c:cd:4a:f6:79: 6a:7b:e1:a1:64:2b:8f:63:94:6b:99:87:14:68:e1:ed:a1:5c: 2a:3a:29:8c:1e:d1:d6:43:e7:f0:de:24:00:05:c8:4e:a4:e1: 43:4a:59:34:5a:39:c5:9d:24:19:49:f1:5f:ca:22:58:8e:a4: 35:47:cf:d3:a9:0b:54:60:92:d1:3e:3f:6a:ad:d3:c1:4f:0e: 8d:e8:f7:14:60:e4:ec:72:8f:0a:ba:37:a3:a7:9c:a7:b8:ad: ee:5f:19:3f:e7:e4:54:13:30:79:17:26:d6:8e:aa:c7:07:58: 18:03:35:a6:2d:4d:7e:19:50:0e:71:d3:fc:8d:49:70:1d:dc: 38:c2:a1:6c:49:a4:53:a8:18:ad:57:cc:17:7e:95:db:1c:dd: cf:14:5f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZBVLvcsJQPNRVY0cTh/H0NafdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTA4MjMwNjQ2NDNaFw0yNTA4MjYxMzU3NDNaMDMxMTAvBgNV BAMTKDJCNkMyRTE0QURFQkU5QzY0RjVFNjZCOTAwMDY1QTI1QkIyRTRBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Yxa8hc6LdxhCKu3XUWqX6X7w +JqACuLCYV/knkYLmkBTrP/LOeBSwf+25y6ZJGNK1RvWVXnittWwT4TlpvJJQoqF Cd5Rf4M2wpXqPZqfslC5aH+luw4wJqBkuABnsAMJZflNhxDtCcLAHK1yAVYQC7Au IuP2Uj+up7XsSm7FnOI9AMtDoZP5BEVZI6hCgo9z3nAEd0RmjNxnmyCdBQc4IpLm nI7ZBKt4wfhx+EPKC1CkftIKSnvGiCb+zfNYIS3gXOsam72ithqXxFL+rFmSvp+l Y1idOsygBvlRftibiUqNpp+GwhpJ5e05rkHqB0rZ2Fp8LniHF+K15YSqoIg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2wuFK3r6cZPXma5AAZaJbsuSg0wHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHRJ3JzAaMXqdJLKji2GSbKwvWkKrKNwQ1/ igysSupwNQrpoCEVVG+pNsBPbXTfeBIpYVHGu36EzEGKzoSkzpLEF9cq8wyewBJk z1o5Ln2LTqMgne9oQXKRt3DIVhXp1C3akncdf1GczUr2eWp74aFkK49jlGuZhxRo 4e2hXCo6KYwe0dZD5/DeJAAFyE6k4UNKWTRaOcWdJBlJ8V/KIliOpDVHz9OpC1Rg ktE+P2qt08FPDo3o9xRg5Oxyjwq6N6OnnKe4re5fGT/n5FQTMHkXJtaOqscHWBgD NaYtTX4ZUA5x0/yNSXAd3DjCoWxJpFOoGK1XzBd+ldsc3c8UX6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 20:00:05 2025 by rpki-client