$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: k/JPG/280lNvbtc7UUiN9rkc7B6G4FO/Fxix44PLSGI= Subject key identifier: E1:C9:F2:32:BC:03:C8:DC:1F:A7:4C:66:10:F2:73:65:CE:74:A3:AE Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 43DE47AB814882B1B01B622E17B3FAECD87A0760 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 04CD Signing time: Thu 21 Aug 2025 17:42:18 +0000 Manifest this update: Thu 21 Aug 2025 17:37:18 +0000 Manifest next update: Mon 25 Aug 2025 01:34:18 +0000 Files and hashes: 1: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: AqVeGkcCeQqSSxTzFMHfgh7oeb2WJE9ZcEpymir7iqI=) 2: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: lmjgKUmR+2WLqdRtr0XPPPpqI5dlfsQCTzvP9H9ArMA=) 3: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: QmUK5t+kPBhbRYikNscX9LWrBhBp5pP7CeGdlMn53Do=) 4: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: e40kdwd9RGaDzut85pUqofV0tIg/vdE6e4M9mcDTUZU=) 5: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: fr5BMGMZ4/JWAtuc82Bwpon8VOaBOapImuPEr/qDXGY=) 6: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: rdX2P/62Fs2A7bSHrzzBOblACv/dlOvxDsyqbDOTmes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:de:47:ab:81:48:82:b1:b0:1b:62:2e:17:b3:fa:ec:d8:7a:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Aug 21 17:37:18 2025 GMT Not After : Aug 25 01:34:18 2025 GMT Subject: CN=E1C9F232BC03C8DC1FA74C6610F27365CE74A3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:5c:6b:e3:1f:46:16:69:00:d8:20:25:36: 14:2f:82:ac:11:8d:45:f9:f4:fa:bd:6f:93:ca:1e: 27:79:b4:ab:1c:cf:60:d6:00:14:6e:51:73:2f:b3: ed:f0:fc:2e:70:25:3d:e3:42:64:6f:19:a5:48:17: ae:1a:72:f6:9a:14:5c:b6:36:cf:bc:4d:01:82:7e: 2d:75:ae:65:44:73:ee:27:f9:61:08:01:1f:1f:75: 0e:1e:40:5c:6b:c3:89:c1:b9:cf:35:30:73:c1:41: 7e:08:d9:24:a7:2d:0a:59:0a:f6:44:0f:60:67:2e: 4b:c2:05:88:47:e5:a8:3b:7f:df:db:f2:0d:1f:b8: 96:e7:c8:5f:70:43:cc:31:15:fa:76:ea:27:64:b1: 30:c6:e1:0f:74:db:34:67:93:e8:18:7f:9d:6f:61: 15:95:96:49:06:43:0f:67:d5:1a:1d:71:93:60:f5: 7d:db:6a:a6:a3:0b:06:90:f9:5c:13:69:ae:e5:8a: 52:f8:68:4c:12:39:9d:98:f3:23:37:f8:01:d8:67: 06:88:08:82:05:60:6c:97:91:36:e4:ee:f2:ab:d2: af:d6:93:5f:f3:f1:45:9d:de:31:fc:6e:42:f9:92: 25:87:46:32:73:cd:c3:01:d7:9b:b0:cc:ff:1c:3b: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:F2:32:BC:03:C8:DC:1F:A7:4C:66:10:F2:73:65:CE:74:A3:AE X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:29:81:e2:60:7d:ec:6f:b8:e4:bf:cf:48:03:17:e2:4b:4a: c6:4b:9e:03:e8:8b:29:80:b1:9b:ab:80:02:de:dd:04:f7:40: 93:28:69:20:d5:5d:cc:4f:73:89:2c:77:b8:85:21:f3:1c:c7: 68:0d:2e:22:92:bb:99:c1:c7:a2:b1:1b:85:23:81:f7:c7:f4: ca:99:44:30:df:14:72:bf:e5:63:89:9f:94:38:66:39:d2:74: ba:74:75:0a:e3:01:5e:7d:ba:68:2d:e7:51:7e:da:04:04:2a: b8:e6:af:fe:c7:2e:49:0e:92:00:b7:ed:3b:de:cf:98:cf:3b: 16:1f:54:46:77:d7:41:c7:10:6c:c5:58:85:3c:4b:8c:0a:8d: e3:6b:97:cc:e5:67:df:70:bd:ad:e1:13:e8:3e:77:ff:18:01: 74:e3:c3:dc:99:7a:41:78:3f:94:44:d2:32:29:17:27:50:6c: 5b:05:c5:9c:e9:45:6c:b0:41:0b:17:7d:f6:46:9a:70:56:ec: 07:fa:3a:42:d3:79:6f:a3:6d:df:bd:b3:3b:69:bd:16:07:ce: b4:2e:b2:1d:32:05:8c:a2:ba:21:52:4d:e3:50:73:b1:b6:fc: 19:17:b6:db:68:73:98:08:89:ee:a4:2e:bf:8e:01:23:b5:6d: 5c:31:58:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ95Hq4FIgrGwG2IuF7P67Nh6B2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTA4MjExNzM3MThaFw0yNTA4MjUwMTM0MThaMDMxMTAvBgNV BAMTKEUxQzlGMjMyQkMwM0M4REMxRkE3NEM2NjEwRjI3MzY1Q0U3NEEzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Xlxr4x9GFmkA2CAlNhQvgqwR jUX59Pq9b5PKHid5tKscz2DWABRuUXMvs+3w/C5wJT3jQmRvGaVIF64acvaaFFy2 Ns+8TQGCfi11rmVEc+4n+WEIAR8fdQ4eQFxrw4nBuc81MHPBQX4I2SSnLQpZCvZE D2BnLkvCBYhH5ag7f9/b8g0fuJbnyF9wQ8wxFfp26idksTDG4Q902zRnk+gYf51v YRWVlkkGQw9n1RodcZNg9X3baqajCwaQ+VwTaa7lilL4aEwSOZ2Y8yM3+AHYZwaI CIIFYGyXkTbk7vKr0q/Wk1/z8UWd3jH8bkL5kiWHRjJzzcMB15uwzP8cO+YVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4cnyMrwDyNwfp0xmEPJzZc50o64wHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwpgeJgfexvuOS/z0gDF+JLSsZLngPoiymA sZurgALe3QT3QJMoaSDVXcxPc4ksd7iFIfMcx2gNLiKSu5nBx6KxG4UjgffH9MqZ RDDfFHK/5WOJn5Q4ZjnSdLp0dQrjAV59umgt51F+2gQEKrjmr/7HLkkOkgC37Tve z5jPOxYfVEZ310HHEGzFWIU8S4wKjeNrl8zlZ99wva3hE+g+d/8YAXTjw9yZekF4 P5RE0jIpFydQbFsFxZzpRWywQQsXffZGmnBW7Af6OkLTeW+jbd+9sztpvRYHzrQu sh0yBYyiuiFSTeNQc7G2/BkXtttoc5gIie6kLr+OASO1bVwxWPo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:21 2025 by rpki-client