$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: AACkYIXmU87Fbq/U/BU60mBu6gDvcEtsWdXvrmzYGtQ= Subject key identifier: 9B:DC:09:2A:25:94:CA:A8:D9:15:5D:F8:87:7C:F7:4C:06:46:E7:91 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 537207E6A207629DE0578A9E937906DE89FD437A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 021A Signing time: Wed 06 Aug 2025 01:51:29 +0000 Manifest this update: Wed 06 Aug 2025 01:46:29 +0000 Manifest next update: Sat 09 Aug 2025 10:47:29 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: QAeMMn2bTl0ZKW487tTR0qXTCvB/FUWwPmppMaqRDOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:72:07:e6:a2:07:62:9d:e0:57:8a:9e:93:79:06:de:89:fd:43:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Aug 6 01:46:29 2025 GMT Not After : Aug 9 10:47:29 2025 GMT Subject: CN=9BDC092A2594CAA8D9155DF8877CF74C0646E791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:33:12:b2:fc:54:82:a2:e1:68:b1:c7:41: 05:50:00:2f:7f:d6:83:ff:98:61:58:b4:7d:47:07: 39:c6:c9:c2:ed:00:f4:6a:32:44:03:71:2d:e8:48: e4:dc:42:73:b9:45:75:da:ef:2b:2f:5e:90:eb:bf: 28:15:97:86:31:92:e4:7a:d7:2c:7e:9a:9a:05:9a: 92:f1:bd:63:35:c5:4e:c2:6c:fc:90:27:e7:5c:0b: 43:a8:ca:cc:3b:e6:b7:db:54:49:46:be:49:e0:ad: bb:0a:6f:c2:30:6f:a6:23:20:ff:a2:95:40:18:06: 79:9a:29:5e:db:5c:93:96:df:b4:66:66:de:73:05: 8b:61:5c:00:79:f1:d3:ff:d5:94:9d:41:86:83:e6: 61:12:fc:d7:2a:67:0d:e9:32:36:80:0d:09:f7:7c: 31:ce:fe:67:ad:5e:ff:b3:d7:28:5b:69:8b:c7:5a: aa:44:c7:4b:00:81:ad:81:bd:f8:4b:75:5b:83:7c: 77:a1:8d:e3:2d:39:6a:f7:2b:44:d3:56:ad:84:d2: 09:7a:44:76:a1:cb:40:65:22:0a:ba:d2:14:f1:d5: 2d:c3:f5:97:56:cc:92:31:01:82:2a:6e:1b:36:a3: 37:19:fa:d0:2d:56:eb:46:79:ac:d6:65:1c:07:68: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DC:09:2A:25:94:CA:A8:D9:15:5D:F8:87:7C:F7:4C:06:46:E7:91 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6c:3c:0d:ab:4f:7f:4f:c6:f9:9f:60:ec:e6:25:f5:f2:6a: 16:03:24:32:33:33:c9:2c:b0:91:79:0c:3c:f3:de:81:aa:78: b7:5e:b3:d3:4c:ed:d3:de:7b:cd:56:a0:48:46:d8:35:fa:5e: 55:ef:61:67:6b:d2:7e:f0:c4:7f:d9:fd:18:f6:72:d7:2c:65: 95:3e:ed:8a:f0:14:36:43:6b:03:6b:10:3d:9f:86:be:46:a2: 35:0f:6a:eb:d3:6a:1a:27:e5:9d:61:bd:1c:65:9f:9c:79:9c: 01:ad:6d:b8:e6:d1:a3:8e:91:01:79:23:2f:2d:f2:21:58:9f: bf:18:20:c1:28:b1:7e:fa:c2:3f:bf:6a:16:e2:84:f2:39:58: 6c:d1:ab:fc:01:7a:ee:56:4f:90:53:79:34:4d:77:98:23:8a: 4f:2d:e2:7e:9f:b0:ab:6c:38:2c:74:f3:9e:08:fe:be:b5:1c: 50:80:21:00:f2:92:ee:9a:a4:76:d7:9e:9c:af:8d:0a:ca:6d: a4:9f:28:51:a0:e5:ed:3b:4a:4e:9a:d0:86:f1:4a:99:bf:57: 3d:07:af:36:b0:5d:9f:15:10:f5:f8:66:3d:2c:36:f6:3a:fe: ff:73:46:57:29:6c:04:27:32:a4:3e:4e:26:c3:01:76:4e:5b: 0b:9d:a4:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3IH5qIHYp3gV4qek3kG3on9Q3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA4MDYwMTQ2MjlaFw0yNTA4MDkxMDQ3MjlaMDMxMTAvBgNV BAMTKDlCREMwOTJBMjU5NENBQThEOTE1NURGODg3N0NGNzRDMDY0NkU3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CDMSsvxUgqLhaLHHQQVQAC9/ 1oP/mGFYtH1HBznGycLtAPRqMkQDcS3oSOTcQnO5RXXa7ysvXpDrvygVl4YxkuR6 1yx+mpoFmpLxvWM1xU7CbPyQJ+dcC0Ooysw75rfbVElGvkngrbsKb8Iwb6YjIP+i lUAYBnmaKV7bXJOW37RmZt5zBYthXAB58dP/1ZSdQYaD5mES/NcqZw3pMjaADQn3 fDHO/metXv+z1yhbaYvHWqpEx0sAga2BvfhLdVuDfHehjeMtOWr3K0TTVq2E0gl6 RHahy0BlIgq60hTx1S3D9ZdWzJIxAYIqbhs2ozcZ+tAtVutGeazWZRwHaDP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9wJKiWUyqjZFV34h3z3TAZG55EwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlsPA2rT39PxvmfYOzmJfXyahYDJDIzM8ks sJF5DDzz3oGqeLdes9NM7dPee81WoEhG2DX6XlXvYWdr0n7wxH/Z/Rj2ctcsZZU+ 7YrwFDZDawNrED2fhr5GojUPauvTahon5Z1hvRxln5x5nAGtbbjm0aOOkQF5Iy8t 8iFYn78YIMEosX76wj+/ahbihPI5WGzRq/wBeu5WT5BTeTRNd5gjik8t4n6fsKts OCx0854I/r61HFCAIQDyku6apHbXnpyvjQrKbaSfKFGg5e07Sk6a0IbxSpm/Vz0H rzawXZ8VEPX4Zj0sNvY6/v9zRlcpbAQnMqQ+TibDAXZOWwudpMI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:17 2025 by rpki-client