$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: fNK+3Jxw0H+HURsiTW2vXcul8ODJvj7I7nEKUqbAJG8= Subject key identifier: 7A:09:2E:63:26:02:A4:A1:60:EE:27:B5:53:F1:1D:5A:7B:A2:D1:D9 Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 1404486A243A05CB83DF80C78066D77BD49FBDC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 0179 Signing time: Fri 22 Aug 2025 00:01:31 +0000 Manifest this update: Thu 21 Aug 2025 23:56:31 +0000 Manifest next update: Mon 25 Aug 2025 01:59:31 +0000 Files and hashes: 1: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=) 2: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=) 3: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: 9L/uHzti8EP37H9GajpwhEdb9IK2GVPHpGhprmvrNlo=) 4: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:04:48:6a:24:3a:05:cb:83:df:80:c7:80:66:d7:7b:d4:9f:bd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Aug 21 23:56:31 2025 GMT Not After : Aug 25 01:59:31 2025 GMT Subject: CN=7A092E632602A4A160EE27B553F11D5A7BA2D1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:40:fe:62:cf:e1:c8:60:bc:98:96:8d:cd: 0b:b4:8f:9f:1e:7c:e2:72:49:27:9c:8a:3a:62:e8: b7:c1:a5:b5:80:a2:43:71:b2:d3:0c:a3:16:37:aa: 28:a5:fd:b0:d6:66:8c:1a:f5:83:b7:d3:1b:d6:17: 5c:40:0a:c3:3d:5e:d4:9d:f6:cd:05:b2:0a:c9:4e: 71:8b:15:b7:c6:d0:e8:30:ee:e1:90:30:62:31:ee: 92:fe:fd:1c:99:4a:8e:f7:4e:ab:92:b2:18:2a:6a: e4:e3:1f:a2:12:b5:62:0f:51:25:f5:56:ca:65:cf: 4d:a0:4c:cd:5a:31:5f:4b:62:8b:a7:05:26:6d:cc: dd:41:57:82:9c:a5:98:9e:8f:a8:d8:9b:20:c5:29: c4:b2:fd:e4:2d:c1:85:22:0c:f3:e0:e8:c3:ba:84: dd:d2:54:b9:24:23:f6:08:71:77:fa:f3:b7:e1:ba: 5f:2f:92:cd:86:0c:0f:4d:70:7c:c8:2d:56:43:22: 49:5c:7c:20:a1:9a:f8:06:b6:ce:ac:29:ae:c0:0e: ff:57:5d:1a:f9:5a:04:ba:8c:72:4a:9b:59:44:b7: da:4e:8f:a2:aa:ed:97:cb:5f:7c:31:8a:5d:cc:8d: d6:2c:a1:a6:44:eb:15:82:ea:f2:f0:89:e1:2f:0e: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:09:2E:63:26:02:A4:A1:60:EE:27:B5:53:F1:1D:5A:7B:A2:D1:D9 X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7e:7b:89:38:8a:bd:1c:2f:2d:06:fb:e4:1e:a3:ad:38:8f: 1a:e0:c8:60:49:c8:84:9d:36:13:14:4a:fb:a7:20:77:27:07: 91:19:ed:a0:b4:cc:75:32:f4:ac:d3:41:9d:1c:1b:a2:9d:b1: 9c:56:57:20:d5:45:e6:63:7b:be:f1:3d:e4:51:12:49:1f:94: 83:f9:ac:c6:7a:64:6d:24:44:8f:ea:d6:d1:f1:f9:38:11:01: 8d:fe:8b:c6:55:de:cc:e9:0b:ff:7d:7e:f1:c7:06:2b:ed:9d: e0:37:30:9d:67:81:77:7b:7d:04:5a:82:25:8e:7d:ad:81:7d: b7:03:1a:20:df:ab:2a:7d:a6:5a:d4:3a:2c:de:01:29:18:ee: 08:40:70:dd:f8:53:39:0b:f7:b0:f9:5c:74:bc:09:45:de:df: 8f:21:45:4d:08:a5:0e:96:fb:cc:cf:cc:7c:7b:12:9f:c4:db: 2b:7c:13:6f:35:d1:aa:64:78:fe:10:32:f0:2a:3d:ec:6f:03: 10:53:bf:4a:40:2f:b9:65:32:3e:8d:2e:2a:4c:3f:88:99:fc: 5f:30:cc:17:25:19:6b:4b:6e:76:eb:f9:d0:b5:c9:18:e5:1e: 33:cf:93:5d:9c:42:c1:19:fa:52:75:ce:78:cb:b5:17:30:f0: 15:02:87:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFARIaiQ6BcuD34DHgGbXe9SfvcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNTA4MjEyMzU2MzFaFw0yNTA4MjUwMTU5MzFaMDMxMTAvBgNV BAMTKDdBMDkyRTYzMjYwMkE0QTE2MEVFMjdCNTUzRjExRDVBN0JBMkQxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLu0D+Ys/hyGC8mJaNzQu0j58e fOJySSecijpi6LfBpbWAokNxstMMoxY3qiil/bDWZowa9YO30xvWF1xACsM9XtSd 9s0FsgrJTnGLFbfG0Ogw7uGQMGIx7pL+/RyZSo73TquSshgqauTjH6IStWIPUSX1 Vsplz02gTM1aMV9LYounBSZtzN1BV4KcpZiej6jYmyDFKcSy/eQtwYUiDPPg6MO6 hN3SVLkkI/YIcXf687fhul8vks2GDA9NcHzILVZDIklcfCChmvgGts6sKa7ADv9X XRr5WgS6jHJKm1lEt9pOj6Kq7ZfLX3wxil3MjdYsoaZE6xWC6vLwieEvDqAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUegkuYyYCpKFg7ie1U/EdWnui0dkwHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHd+e4k4ir0cLy0G++Qeo604jxrgyGBJyISd NhMUSvunIHcnB5EZ7aC0zHUy9KzTQZ0cG6KdsZxWVyDVReZje77xPeRREkkflIP5 rMZ6ZG0kRI/q1tHx+TgRAY3+i8ZV3szpC/99fvHHBivtneA3MJ1ngXd7fQRagiWO fa2BfbcDGiDfqyp9plrUOizeASkY7ghAcN34UzkL97D5XHS8CUXe348hRU0IpQ6W +8zPzHx7Ep/E2yt8E2810apkeP4QMvAqPexvAxBTv0pAL7llMj6NLipMP4iZ/F8w zBclGWtLbnbr+dC1yRjlHjPPk12cQsEZ+lJ1znjLtRcw8BUChw8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:47 2025 by rpki-client