$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: XesE0qDOSVcntU5L3GFs+uXQVlChsBsY0jkaNVDZaEc= Subject key identifier: 51:C0:A2:35:47:4C:67:2E:75:CC:F6:0A:49:4A:D1:F2:CD:8B:36:2C Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 5655D32A0F435535D939FA78FB60695D695B88F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 01FC Signing time: Wed 02 Jul 2025 16:41:03 +0000 Manifest this update: Wed 02 Jul 2025 16:36:03 +0000 Manifest next update: Sun 06 Jul 2025 03:48:03 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) 2: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: lWGFeBoUzRoo8l2TsxOxVYMQCBBzptMFW4J6HO97P9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:55:d3:2a:0f:43:55:35:d9:39:fa:78:fb:60:69:5d:69:5b:88:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Jul 2 16:36:03 2025 GMT Not After : Jul 6 03:48:03 2025 GMT Subject: CN=51C0A235474C672E75CCF60A494AD1F2CD8B362C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:cf:7d:2e:fb:1c:d8:f0:1c:5a:c0:c0:2e: e7:66:00:8a:ec:0a:3a:89:aa:db:ba:f8:81:e6:48: e9:c2:30:71:f7:f6:a7:df:17:50:1d:31:ba:2c:ae: 9d:12:4d:2b:3f:c5:51:f6:06:65:89:88:b1:1f:b1: 13:2a:cc:7f:4b:da:70:5a:a8:eb:98:d4:ce:08:e1: ca:86:e4:c0:2d:7a:40:75:7f:41:18:63:cb:ee:09: 26:17:80:2a:21:d6:de:07:58:d5:c3:53:10:f5:0f: 67:7b:2a:ca:12:35:3e:47:6e:a3:4e:59:94:e0:05: 87:fc:3f:a7:c4:e9:70:d5:18:f7:25:74:12:8d:af: 63:6c:d0:ac:d1:4e:48:f4:58:c6:ec:fb:59:48:40: ae:4e:c6:fc:9f:9b:c6:bf:c9:d0:26:9c:42:5c:3c: aa:44:2b:63:47:42:54:d1:5f:36:b9:a5:6f:2b:4b: 94:ff:2b:d0:1f:90:35:f3:d0:0c:94:62:7e:83:27: 33:4a:cf:b8:12:43:cf:29:87:66:5c:a7:0d:0f:0d: 96:46:9d:11:68:ad:cb:49:56:ff:fe:4e:4d:bb:00: 2e:9d:93:9e:19:37:ba:0d:a6:e9:1f:da:15:90:3a: 77:a8:65:ed:8a:e5:1f:55:c5:22:e8:af:2b:50:23: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C0:A2:35:47:4C:67:2E:75:CC:F6:0A:49:4A:D1:F2:CD:8B:36:2C X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:63:57:0f:79:08:b6:ad:df:c5:16:de:0f:0c:03:3c:9a:ff: 98:b5:90:9b:07:70:57:ca:a4:7b:05:5a:e7:b8:b1:9f:3e:f6: 5a:74:19:15:53:90:69:4e:19:ff:88:6c:6d:70:01:11:ee:2b: 8f:42:2f:95:0a:a7:d1:5a:13:6c:77:52:77:cd:dc:9f:9d:17: 11:b3:66:c7:cb:9b:39:24:77:69:a7:22:a1:c0:ee:9d:5b:2f: 5a:6e:b8:3e:a5:2e:a6:6e:2c:35:6f:31:e5:46:8c:54:9a:ee: 9f:16:12:8b:1c:e1:0f:49:55:d8:66:38:bf:5e:6f:91:16:5a: e9:db:88:e5:50:5b:de:b4:a3:97:6c:89:bd:9e:aa:61:2e:4a: 80:c9:78:0f:1e:4b:ab:46:c0:ed:56:1e:ce:a2:08:c7:d8:5f: 42:3f:89:db:98:38:d9:7d:80:0d:e1:a2:8c:41:57:4a:80:83: c7:db:07:17:8b:d6:82:9f:b6:c9:8a:21:3a:06:4a:6c:4b:02: 62:0c:77:61:a1:a6:89:32:6e:8c:15:88:e6:53:97:5f:01:98: 36:06:42:bc:a7:ba:23:72:a6:a8:50:40:de:fd:27:2d:51:ec: 5b:8b:8c:16:1b:75:b4:16:e1:de:05:14:62:7e:94:78:72:72: d4:87:f6:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlXTKg9DVTXZOfp4+2BpXWlbiPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTA3MDIxNjM2MDNaFw0yNTA3MDYwMzQ4MDNaMDMxMTAvBgNV BAMTKDUxQzBBMjM1NDc0QzY3MkU3NUNDRjYwQTQ5NEFEMUYyQ0Q4QjM2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVM99Lvsc2PAcWsDALudmAIrs CjqJqtu6+IHmSOnCMHH39qffF1AdMbosrp0STSs/xVH2BmWJiLEfsRMqzH9L2nBa qOuY1M4I4cqG5MAtekB1f0EYY8vuCSYXgCoh1t4HWNXDUxD1D2d7KsoSNT5HbqNO WZTgBYf8P6fE6XDVGPcldBKNr2Ns0KzRTkj0WMbs+1lIQK5Oxvyfm8a/ydAmnEJc PKpEK2NHQlTRXza5pW8rS5T/K9AfkDXz0AyUYn6DJzNKz7gSQ88ph2Zcpw0PDZZG nRForctJVv/+Tk27AC6dk54ZN7oNpukf2hWQOneoZe2K5R9VxSLorytQIz3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUcCiNUdMZy51zPYKSUrR8s2LNiwwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBjVw95CLat38UW3g8MAzya/5i1kJsHcFfK pHsFWue4sZ8+9lp0GRVTkGlOGf+IbG1wARHuK49CL5UKp9FaE2x3UnfN3J+dFxGz ZsfLmzkkd2mnIqHA7p1bL1puuD6lLqZuLDVvMeVGjFSa7p8WEosc4Q9JVdhmOL9e b5EWWunbiOVQW960o5dsib2eqmEuSoDJeA8eS6tGwO1WHs6iCMfYX0I/iduYONl9 gA3hooxBV0qAg8fbBxeL1oKftsmKIToGSmxLAmIMd2GhpokybowViOZTl18BmDYG QrynuiNypqhQQN79Jy1R7FuLjBYbdbQW4d4FFGJ+lHhyctSH9oc= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:36 2025 by rpki-client