$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: svj6yKCxGlx6toVr0Q+IQMTGECAXiekuNrpA6ldGnRM= Subject key identifier: ED:60:FB:BE:EF:14:0A:64:7E:21:46:3E:92:B6:0C:68:43:01:69:24 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 504F1814FCC06F78DB2B12C965D98A9B9A75FE55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 0204 Signing time: Mon 16 Jun 2025 21:31:25 +0000 Manifest this update: Mon 16 Jun 2025 21:26:25 +0000 Manifest next update: Fri 20 Jun 2025 00:04:25 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: FnidfC7LZFfRUprCNGcmsCG07VnkFTntYIb6KYrv8uQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4f:18:14:fc:c0:6f:78:db:2b:12:c9:65:d9:8a:9b:9a:75:fe:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Jun 16 21:26:25 2025 GMT Not After : Jun 20 00:04:25 2025 GMT Subject: CN=ED60FBBEEF140A647E21463E92B60C6843016924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:30:b1:8a:d3:d1:3c:83:e4:de:0a:fd:42: ba:80:ad:58:b9:fb:af:47:5c:85:93:26:c1:3d:78: 01:e5:9c:b7:3b:00:05:7f:74:47:21:89:fa:46:de: 83:87:16:7d:1c:de:fb:a6:c0:e6:75:2a:51:4a:83: fc:20:0e:f7:7d:0f:14:cd:c1:1c:af:43:5e:05:cd: ac:05:ff:fa:d8:89:0e:71:0e:b2:ff:6e:e4:6b:28: 2a:07:e7:11:6b:af:14:9a:83:ce:36:3a:32:eb:38: 75:99:c7:54:89:e2:db:10:9d:ca:46:68:ca:15:98: 99:bb:49:eb:6c:48:ff:f7:e9:fc:3b:1e:53:c4:0f: ab:fb:0b:08:ea:3e:7c:7e:e9:f5:51:6a:1f:16:8c: fa:b6:2a:cb:84:99:03:6d:f8:c3:00:a8:12:18:46: 96:4f:27:fb:52:ae:ce:02:5b:9e:e4:fb:6e:da:f4: 32:62:c7:64:80:7a:4b:fb:89:13:03:a9:f4:3e:1e: 85:36:b6:dd:86:32:05:d0:3e:62:87:72:a2:10:e6: 97:3d:1e:79:f6:44:b5:61:b4:39:d9:6f:de:47:a0: 71:2c:78:e9:74:f0:52:12:83:ae:a2:3d:99:47:bb: 83:9c:23:ec:78:a4:c2:8f:4e:6c:e0:36:f1:d7:2c: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:60:FB:BE:EF:14:0A:64:7E:21:46:3E:92:B6:0C:68:43:01:69:24 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f1:97:71:12:ee:53:fa:07:70:65:44:20:3e:b1:ad:d7:54: 92:52:f1:72:a7:96:10:6e:45:f3:71:ce:83:8d:d5:c4:4c:1e: dc:a6:f5:37:f3:f1:91:06:6d:35:4d:a0:1e:90:ba:f9:6d:40: 59:b5:56:69:39:5d:bc:89:76:c2:bb:79:82:55:f2:0b:0b:44: 62:61:c6:25:32:96:f3:c7:f9:65:4a:fe:dc:dc:c3:82:34:79: a6:c0:be:b5:2e:d7:d9:a9:ca:2d:15:6e:95:29:ea:7e:b5:f8: ff:fc:04:19:e6:89:a5:ce:5e:3d:c2:64:ab:29:25:3a:7f:ab: 15:49:51:65:ce:0c:d9:be:ec:92:fa:d0:20:18:6c:21:b4:39: 8b:b2:42:4c:a8:af:32:1b:fa:80:dc:c1:8e:38:e4:f2:be:e1: 4e:0a:66:3a:a0:e4:70:0a:75:6c:23:64:6f:8b:ca:89:bb:4f: 63:fc:54:2c:1a:cc:ef:5d:cd:e6:b4:76:23:b8:25:59:63:9b: 4c:4d:1f:9f:d7:9e:8e:95:38:a1:e0:3e:22:58:fb:10:ad:0c: 2e:6d:be:69:72:00:14:9c:74:9f:f3:1f:f0:43:4c:88:9e:d4: c6:b2:30:42:46:05:eb:bb:ea:3b:bd:5e:fd:17:da:29:a3:19: a9:2c:42:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE8YFPzAb3jbKxLJZdmKm5p1/lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA2MTYyMTI2MjVaFw0yNTA2MjAwMDA0MjVaMDMxMTAvBgNV BAMTKEVENjBGQkJFRUYxNDBBNjQ3RTIxNDYzRTkyQjYwQzY4NDMwMTY5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORjCxitPRPIPk3gr9QrqArVi5 +69HXIWTJsE9eAHlnLc7AAV/dEchifpG3oOHFn0c3vumwOZ1KlFKg/wgDvd9DxTN wRyvQ14FzawF//rYiQ5xDrL/buRrKCoH5xFrrxSag842OjLrOHWZx1SJ4tsQncpG aMoVmJm7SetsSP/36fw7HlPED6v7CwjqPnx+6fVRah8WjPq2KsuEmQNt+MMAqBIY RpZPJ/tSrs4CW57k+27a9DJix2SAekv7iRMDqfQ+HoU2tt2GMgXQPmKHcqIQ5pc9 Hnn2RLVhtDnZb95HoHEseOl08FISg66iPZlHu4OcI+x4pMKPTmzgNvHXLMnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7WD7vu8UCmR+IUY+krYMaEMBaSQwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrxl3ES7lP6B3BlRCA+sa3XVJJS8XKnlhBu RfNxzoON1cRMHtym9Tfz8ZEGbTVNoB6QuvltQFm1Vmk5XbyJdsK7eYJV8gsLRGJh xiUylvPH+WVK/tzcw4I0eabAvrUu19mpyi0VbpUp6n61+P/8BBnmiaXOXj3CZKsp JTp/qxVJUWXODNm+7JL60CAYbCG0OYuyQkyorzIb+oDcwY445PK+4U4KZjqg5HAK dWwjZG+Lyom7T2P8VCwazO9dzea0diO4JVljm0xNH5/Xno6VOKHgPiJY+xCtDC5t vmlyABScdJ/zH/BDTIie1MayMEJGBeu76ju9Xv0X2imjGaksQhU= -----END CERTIFICATE-----Generated at Tue Jun 17 09:28:34 2025 by rpki-client