$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: NtO/N7h6+c50Ko5XFcAJmOrnMlxy1EJDSOpB4SP1zas= Subject key identifier: 14:56:62:C5:8B:AF:A5:0E:9A:EB:80:59:CF:F7:67:4C:F7:B1:DA:37 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 3B36AB69B1BE356FE7150658E0EDF1A3D9F23210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: AF Signing time: Mon 16 Jun 2025 23:30:04 +0000 Manifest this update: Mon 16 Jun 2025 23:25:04 +0000 Manifest next update: Fri 20 Jun 2025 09:50:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: liCxAi/xshwCbRz/2lH4+mDUNdhRxj7KDBWRzxXJdkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 09:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:36:ab:69:b1:be:35:6f:e7:15:06:58:e0:ed:f1:a3:d9:f2:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Jun 16 23:25:04 2025 GMT Not After : Jun 20 09:50:04 2025 GMT Subject: CN=145662C58BAFA50E9AEB8059CFF7674CF7B1DA37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:8c:85:a2:93:32:59:f7:8b:90:dc:21:80: ad:59:a1:12:19:ad:67:6b:23:03:36:2f:4d:5e:d8: d5:61:99:69:c6:2a:05:cd:7a:b2:18:a5:c9:3b:bf: 29:00:c8:e8:03:d3:bc:ad:24:40:f0:28:95:74:3a: 25:ff:c2:d5:15:23:fb:72:62:52:72:08:79:79:9d: 19:66:57:a9:2d:15:fe:ff:20:b2:df:13:c3:6f:f3: 05:c4:2f:1f:cc:8e:a5:84:ba:2a:71:84:6f:af:01: 2f:f5:16:bd:b0:fe:59:fd:08:63:ad:53:f8:61:99: 68:8f:59:00:4b:41:3d:e5:00:c9:d7:73:25:f0:79: 64:df:14:b8:62:75:84:9b:dc:e2:c9:9d:a7:31:59: 7e:92:ba:66:c0:c2:ec:23:d7:c6:6b:81:70:8e:06: 47:e5:09:6c:89:af:9a:9b:dd:ac:d6:dd:32:1f:3e: 6e:bc:3e:3f:7a:ad:4e:8d:65:f3:71:5f:45:43:f8: 82:8d:58:8a:d4:9f:fa:20:d6:5a:50:71:42:35:e7: 01:49:0a:2f:47:f0:9e:5a:3a:43:b3:c0:3d:ab:6d: 1a:91:a5:51:8d:aa:57:01:c7:88:35:68:c8:3e:11: e3:85:78:0f:a8:13:cf:8e:da:35:c1:50:64:0d:50: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:56:62:C5:8B:AF:A5:0E:9A:EB:80:59:CF:F7:67:4C:F7:B1:DA:37 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:98:bd:f5:2a:28:5d:63:3a:5b:3b:58:2b:37:ce:0b:19:56: fb:14:86:bf:d6:a0:54:5c:3e:26:d4:f2:6b:b6:47:57:cc:0e: ff:53:92:38:4e:8f:61:ab:6b:63:7a:81:25:24:89:cb:59:bf: 39:59:9f:ed:4c:11:4c:12:df:ad:03:0b:b7:2e:2d:e1:75:51: 5b:88:d7:76:06:3c:e6:d3:2b:e3:df:fb:cd:17:a9:3b:d4:a2: 6a:05:75:67:d8:fc:bf:75:9b:7e:e7:f4:24:ac:ad:39:5b:d5: 4d:16:50:dd:56:a4:25:cf:da:92:00:1f:96:65:ba:d9:bf:17: aa:69:ff:7a:5e:05:58:ec:79:12:6f:aa:69:00:07:8b:64:99: 85:fd:8a:e8:b0:48:8a:19:8c:67:6a:39:b4:73:6a:89:c3:6a: 3a:de:59:57:c9:a1:b8:ff:04:35:30:4b:09:03:a2:ae:86:89: f8:95:ae:c3:d2:f7:ed:52:8a:ae:d5:da:48:68:bf:00:0e:78: 6e:91:79:e6:14:f5:50:b1:2e:fe:aa:82:cf:2f:a4:11:67:8f: 19:f5:60:e8:ac:6b:da:bf:5f:ae:b6:9a:92:48:1b:53:9f:cc: e8:42:89:aa:c8:81:5d:cd:25:68:23:ed:35:a8:a8:64:dd:e6: 68:54:e4:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzarabG+NW/nFQZY4O3xo9nyMhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTA2MTYyMzI1MDRaFw0yNTA2MjAwOTUwMDRaMDMxMTAvBgNV BAMTKDE0NTY2MkM1OEJBRkE1MEU5QUVCODA1OUNGRjc2NzRDRjdCMURBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGIyFopMyWfeLkNwhgK1ZoRIZ rWdrIwM2L01e2NVhmWnGKgXNerIYpck7vykAyOgD07ytJEDwKJV0OiX/wtUVI/ty YlJyCHl5nRlmV6ktFf7/ILLfE8Nv8wXELx/MjqWEuipxhG+vAS/1Fr2w/ln9CGOt U/hhmWiPWQBLQT3lAMnXcyXweWTfFLhidYSb3OLJnacxWX6SumbAwuwj18ZrgXCO BkflCWyJr5qb3azW3TIfPm68Pj96rU6NZfNxX0VD+IKNWIrUn/og1lpQcUI15wFJ Ci9H8J5aOkOzwD2rbRqRpVGNqlcBx4g1aMg+EeOFeA+oE8+O2jXBUGQNUFQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFFZixYuvpQ6a64BZz/dnTPex2jcwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGYvfUqKF1jOls7WCs3zgsZVvsUhr/WoFRc PibU8mu2R1fMDv9TkjhOj2Gra2N6gSUkictZvzlZn+1MEUwS360DC7cuLeF1UVuI 13YGPObTK+Pf+80XqTvUomoFdWfY/L91m37n9CSsrTlb1U0WUN1WpCXP2pIAH5Zl utm/F6pp/3peBVjseRJvqmkAB4tkmYX9iuiwSIoZjGdqObRzaonDajreWVfJobj/ BDUwSwkDoq6GifiVrsPS9+1Siq7V2khovwAOeG6ReeYU9VCxLv6qgs8vpBFnjxn1 YOisa9q/X662mpJIG1OfzOhCiarIgV3NJWgj7TWoqGTd5mhU5A8= -----END CERTIFICATE-----Generated at Tue Jun 17 16:04:54 2025 by rpki-client