$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: Aza6L3/AgNLAHblbFeFOro82n4S6jo5qDd487+VlRro= Subject key identifier: 2B:5C:EF:99:10:8D:EC:9E:B7:5C:D9:45:50:64:1C:F7:34:A0:54:C2 Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 5AEF47D28B455E95F77F05C42B6E626285CEB94C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 051B Signing time: Fri 22 Aug 2025 07:00:41 +0000 Manifest this update: Fri 22 Aug 2025 06:55:41 +0000 Manifest next update: Mon 25 Aug 2025 10:14:41 +0000 Files and hashes: 1: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: 66RloMNvUmQFg5ywMRcL4RL8vvZe6SpR16p6fFx40qY=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) 3: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) 4: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ef:47:d2:8b:45:5e:95:f7:7f:05:c4:2b:6e:62:62:85:ce:b9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Aug 22 06:55:41 2025 GMT Not After : Aug 25 10:14:41 2025 GMT Subject: CN=2B5CEF99108DEC9EB75CD94550641CF734A054C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:f0:d5:e3:4e:81:aa:0b:27:a4:dd:98:14: 75:13:94:31:61:ee:f7:c7:cf:34:61:32:43:15:33: 93:37:9d:34:db:d1:84:ff:05:a7:a7:12:a6:c4:1e: 76:8d:88:28:78:32:9a:93:ec:9c:66:b5:69:34:1b: 47:6a:ff:48:61:ba:85:6f:bc:79:b2:a1:53:85:59: 21:30:9c:5d:67:11:ca:d1:b7:61:9e:5a:37:3f:04: 1f:8d:85:75:4f:99:f0:6a:61:c0:1a:ca:0e:30:57: 99:cf:19:d7:e8:0d:26:a5:44:86:33:a8:d2:ef:57: fe:a6:64:ca:1d:44:72:d2:c5:e9:d1:eb:a9:df:e1: 81:1d:5e:01:f5:75:31:34:e6:a5:37:c8:a7:c0:d2: 85:80:d5:c3:1c:5c:c3:8d:de:6d:8d:a8:1b:2c:56: 4b:c3:ad:58:f1:8a:6c:76:0f:38:4f:6b:7c:33:67: 19:bb:b5:8f:35:e5:fd:7a:00:26:06:bb:28:6f:99: f8:16:09:a8:83:f8:86:29:8f:aa:e5:eb:1f:be:ef: f1:83:13:48:dc:3b:77:4a:90:5c:70:2e:f2:72:8d: e1:5e:e2:5d:d1:17:b6:f8:87:cb:95:33:94:35:1f: 64:93:68:59:1e:9f:42:bf:2b:54:18:70:7d:cc:2b: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5C:EF:99:10:8D:EC:9E:B7:5C:D9:45:50:64:1C:F7:34:A0:54:C2 X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1b:6a:a5:97:7a:4f:7e:5b:60:a4:96:37:e0:62:44:99:1e: 1b:17:88:11:d9:e3:04:ab:d9:70:cd:cc:6e:d1:08:dd:68:2d: c7:ef:5a:fd:e8:1f:e6:29:49:8d:57:db:04:ed:d5:bf:26:f6: 6c:01:6f:cb:b9:37:b9:b2:e2:02:5b:92:ca:53:de:58:0b:a4: 1a:e7:f1:3b:45:c0:09:d9:d0:0e:0c:96:40:96:3f:60:e8:78: bc:75:51:2d:df:6a:06:2e:d4:7a:80:a8:ee:f5:0c:67:00:6b: 6c:b8:ee:99:a4:65:84:9a:62:ea:c3:c7:b9:01:94:c3:c7:3a: cf:10:96:53:84:53:53:be:e3:d5:4f:3a:a0:ac:70:70:80:c0: 7a:12:7d:19:eb:2d:e1:ba:40:f8:86:e2:56:a3:d2:d7:03:7d: 8f:69:b5:cb:87:4c:c9:37:72:20:4f:a1:86:1a:cc:7b:7b:2f: 20:41:4d:f1:ac:a0:b6:87:96:6a:ba:f5:43:cf:fd:69:ed:cc: f4:85:50:9d:bd:3c:59:19:d0:9c:63:e9:df:22:ea:d4:51:f9: d5:aa:48:ff:13:8b:49:cf:8f:e7:55:95:d1:30:c7:42:cf:fc: 21:90:f8:ca:60:1b:a8:ff:df:36:78:c2:ee:ad:87:1f:c8:4a: 3e:15:a8:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWu9H0otFXpX3fwXEK25iYoXOuUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTA4MjIwNjU1NDFaFw0yNTA4MjUxMDE0NDFaMDMxMTAvBgNV BAMTKDJCNUNFRjk5MTA4REVDOUVCNzVDRDk0NTUwNjQxQ0Y3MzRBMDU0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstPDV406BqgsnpN2YFHUTlDFh 7vfHzzRhMkMVM5M3nTTb0YT/BaenEqbEHnaNiCh4MpqT7JxmtWk0G0dq/0hhuoVv vHmyoVOFWSEwnF1nEcrRt2GeWjc/BB+NhXVPmfBqYcAayg4wV5nPGdfoDSalRIYz qNLvV/6mZModRHLSxenR66nf4YEdXgH1dTE05qU3yKfA0oWA1cMcXMON3m2NqBss VkvDrVjximx2DzhPa3wzZxm7tY815f16ACYGuyhvmfgWCaiD+IYpj6rl6x++7/GD E0jcO3dKkFxwLvJyjeFe4l3RF7b4h8uVM5Q1H2STaFken0K/K1QYcH3MK8QTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK1zvmRCN7J63XNlFUGQc9zSgVMIwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkbaqWXek9+W2CkljfgYkSZHhsXiBHZ4wSr 2XDNzG7RCN1oLcfvWv3oH+YpSY1X2wTt1b8m9mwBb8u5N7my4gJbkspT3lgLpBrn 8TtFwAnZ0A4MlkCWP2DoeLx1US3fagYu1HqAqO71DGcAa2y47pmkZYSaYurDx7kB lMPHOs8QllOEU1O+49VPOqCscHCAwHoSfRnrLeG6QPiG4laj0tcDfY9ptcuHTMk3 ciBPoYYazHt7LyBBTfGsoLaHlmq69UPP/WntzPSFUJ29PFkZ0Jxj6d8i6tRR+dWq SP8Ti0nPj+dVldEwx0LP/CGQ+MpgG6j/3zZ4wu6thx/ISj4VqM8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:25 2025 by rpki-client