$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: /MbQrmO6Q0V/o+bHnguNW8qOGp6xZpjhIUT+e8qoLtw= Subject key identifier: 39:9C:75:AB:CA:AD:7A:60:25:4F:0C:88:95:93:84:07:45:49:81:49 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 3CF9011AC85F0CD031610CD51124C9995DA469A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 70 Signing time: Wed 06 Aug 2025 22:51:15 +0000 Manifest this update: Wed 06 Aug 2025 22:46:15 +0000 Manifest next update: Sun 10 Aug 2025 07:11:15 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: RWCJ6c4/1wb2D5Z8k1dm8dPMmtjft44qspgtUFj1uY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f9:01:1a:c8:5f:0c:d0:31:61:0c:d5:11:24:c9:99:5d:a4:69:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Aug 6 22:46:15 2025 GMT Not After : Aug 10 07:11:15 2025 GMT Subject: CN=399C75ABCAAD7A60254F0C889593840745498149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:98:fe:79:48:dd:3e:3e:30:74:dc:4c:3e: d3:ce:54:ff:01:c5:bd:41:76:b4:c4:0a:8d:7b:f7: 35:d5:5f:fe:21:7d:61:a3:02:5a:e6:00:8d:23:b0: 23:9c:a2:fd:90:42:5c:c4:1f:fa:f5:0d:c9:90:77: 49:cd:10:49:ca:2c:dd:4c:e9:fc:24:ec:3d:50:21: 42:8c:fa:18:b1:64:44:a8:b4:c0:7d:a2:c1:33:23: 7d:4c:8a:30:af:7b:a5:88:23:a0:ec:3f:ac:3e:87: 82:a6:28:97:a8:40:59:d7:70:f5:1d:c4:bd:f4:8f: 18:30:3f:55:ac:ca:c9:ad:c0:f7:dd:f9:bc:e8:25: 54:c6:3a:c5:48:49:58:6e:27:7d:3c:67:bc:47:7f: af:fa:30:72:c4:ac:f7:e8:5d:2a:2f:7a:46:e4:05: 25:bd:38:fe:a3:08:dc:30:72:17:ec:89:61:c2:a3: e6:d9:ac:a6:f4:92:46:23:14:7f:f5:d9:f7:74:cf: 35:dc:c1:0a:ce:e2:df:f9:31:36:8d:78:2c:d1:60: 7e:12:6a:f7:9f:9e:ce:24:3d:64:da:3d:be:28:2c: 9e:c3:12:c9:37:91:6a:33:ce:c8:1c:a6:2d:d0:7a: 76:21:3c:f7:8c:83:dd:49:3c:cd:ff:2b:a7:b7:cc: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:75:AB:CA:AD:7A:60:25:4F:0C:88:95:93:84:07:45:49:81:49 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e9:11:77:bd:e2:e8:e0:9f:be:2b:13:d2:08:ee:6d:d9:ad: 2e:2c:f1:d1:e0:30:51:0d:b3:8a:ea:f3:a9:54:9c:d9:c3:84: cc:26:73:99:13:50:ad:0d:15:f6:9d:2c:de:69:35:4f:31:8e: fb:ea:12:21:78:9d:76:47:0d:0d:87:63:93:ac:0b:99:e3:64: 78:58:ab:69:6e:21:de:4a:08:61:89:39:b1:1d:a9:47:18:a8: b0:da:6f:ce:a6:ad:51:9f:49:bb:56:ed:ff:97:98:0a:fb:63: f9:65:9e:db:18:df:40:eb:80:5e:3e:4e:6b:6d:f7:b9:3a:4d: 6a:70:c9:2b:92:80:2e:76:ed:a8:05:2b:32:68:af:d9:93:81: 3e:31:93:a2:97:df:6d:3d:70:76:7e:1e:34:c0:dc:69:99:2d: 23:6c:54:e7:27:d8:a8:04:2a:e6:fa:dc:d7:f7:96:06:c8:1d: 14:2e:49:a4:b7:1e:fc:8d:83:8d:ba:2a:03:b6:fa:54:e7:e7: 1a:83:70:e9:07:fc:38:dd:ab:4a:ad:d3:3b:28:08:81:7c:69: 24:6f:e9:95:44:af:e2:5c:ea:12:14:13:3e:89:c0:81:1a:86: 31:d7:42:8d:6a:36:ea:05:0d:2c:2d:dc:24:15:f5:61:56:0d: ef:d8:5c:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPkBGshfDNAxYQzVESTJmV2kaaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTA4MDYyMjQ2MTVaFw0yNTA4MTAwNzExMTVaMDMxMTAvBgNV BAMTKDM5OUM3NUFCQ0FBRDdBNjAyNTRGMEM4ODk1OTM4NDA3NDU0OTgxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AZj+eUjdPj4wdNxMPtPOVP8B xb1BdrTECo179zXVX/4hfWGjAlrmAI0jsCOcov2QQlzEH/r1DcmQd0nNEEnKLN1M 6fwk7D1QIUKM+hixZESotMB9osEzI31MijCve6WII6DsP6w+h4KmKJeoQFnXcPUd xL30jxgwP1WsysmtwPfd+bzoJVTGOsVISVhuJ308Z7xHf6/6MHLErPfoXSovekbk BSW9OP6jCNwwchfsiWHCo+bZrKb0kkYjFH/12fd0zzXcwQrO4t/5MTaNeCzRYH4S avefns4kPWTaPb4oLJ7DEsk3kWozzsgcpi3QenYhPPeMg91JPM3/K6e3zAPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZx1q8qtemAlTwyIlZOEB0VJgUkwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTpEXe94ujgn74rE9II7m3ZrS4s8dHgMFEN s4rq86lUnNnDhMwmc5kTUK0NFfadLN5pNU8xjvvqEiF4nXZHDQ2HY5OsC5njZHhY q2luId5KCGGJObEdqUcYqLDab86mrVGfSbtW7f+XmAr7Y/llntsY30DrgF4+Tmtt 97k6TWpwySuSgC527agFKzJor9mTgT4xk6KX3209cHZ+HjTA3GmZLSNsVOcn2KgE Kub63Nf3lgbIHRQuSaS3HvyNg426KgO2+lTn5xqDcOkH/Djdq0qt0zsoCIF8aSRv 6ZVEr+Jc6hIUEz6JwIEahjHXQo1qNuoFDSwt3CQV9WFWDe/YXKc= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:18 2025 by rpki-client