$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: aWIx1JLi01sadFTf2MlRRUD0y6W3f7ef5HcN+4yvalQ= Subject key identifier: 50:F7:27:D6:78:61:1B:05:F3:59:6F:DB:88:C5:27:F9:E3:24:0B:A8 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 658FFAE6C199E4EE6152C59FDD86F0F893FA4C4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: A6 Signing time: Sat 14 Jun 2025 20:01:09 +0000 Manifest this update: Sat 14 Jun 2025 19:56:09 +0000 Manifest next update: Wed 18 Jun 2025 01:48:09 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: B1BWR0p/96z/BqVDKRGhguPeUwUfFsjYiptU8dbNVHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8f:fa:e6:c1:99:e4:ee:61:52:c5:9f:dd:86:f0:f8:93:fa:4c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Jun 14 19:56:09 2025 GMT Not After : Jun 18 01:48:09 2025 GMT Subject: CN=50F727D678611B05F3596FDB88C527F9E3240BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:2d:c3:82:33:5d:dc:77:e5:2b:7b:20:b3: c1:17:75:13:67:3f:a0:33:4c:66:71:21:b7:6c:68: b0:61:6c:9d:30:66:65:90:6b:75:74:5f:1c:12:03: 26:51:05:a5:b4:16:8f:74:74:96:8d:9f:85:87:b5: ca:17:d5:d4:f5:3b:8a:37:82:06:5f:9c:40:2d:15: e1:ef:f0:9e:2b:8c:32:25:88:b3:e1:21:64:90:5a: 82:01:d6:83:b3:ea:6a:f0:0b:e7:4f:7f:cb:23:50: 06:80:1f:ec:fa:27:4f:cc:98:8f:09:19:41:e4:74: 9e:e6:0f:fd:17:ea:0b:a5:f2:86:26:62:08:3c:47: 14:01:d9:c9:89:06:d4:1a:f7:54:5a:c1:5e:83:d2: a6:2b:2d:f6:26:f4:c4:ec:17:58:ad:8f:bb:04:e8: 8d:08:19:48:02:db:a9:de:19:f0:aa:bb:94:f7:77: 05:36:5b:e9:af:54:32:d7:72:dd:ef:e1:50:7b:04: d9:c6:46:88:aa:81:e8:87:f8:50:80:93:4d:f3:61: 85:fe:fc:55:9f:e1:a2:7e:18:f3:2c:4f:65:71:63: d9:73:1a:47:a7:de:d2:26:aa:9d:f1:20:de:e0:67: 44:47:f5:d1:84:a3:70:4d:19:e3:cb:19:63:7c:fd: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F7:27:D6:78:61:1B:05:F3:59:6F:DB:88:C5:27:F9:E3:24:0B:A8 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:5c:4a:cc:93:00:d4:fd:c8:65:15:47:1e:f5:92:4a:20:f1: d4:46:e5:2c:e4:2d:bd:c0:41:df:ab:ab:08:8c:6a:84:47:66: e3:a0:07:3e:f2:dd:5d:2f:09:a8:d9:8e:9a:e1:fb:1e:ba:96: 03:68:40:d6:41:75:03:ea:1b:74:b7:c6:fb:c4:2f:56:bf:68: aa:3b:b6:93:ac:d7:26:8a:0d:19:be:ea:cb:2d:cc:bd:02:b9: 5d:fc:61:e5:5f:1d:c8:1e:80:f5:a8:a1:05:7f:d5:88:9b:15: 8a:b7:58:bd:94:f4:bf:8e:19:12:17:d9:01:4d:e8:59:00:89: d9:06:95:5c:72:80:b9:b4:a4:d9:19:f0:9b:ab:5a:50:d3:ce: 40:7d:80:10:4f:79:00:fb:e2:1d:38:27:60:5b:ec:ff:c2:e3: 67:e6:20:18:39:ae:0c:9f:f4:68:20:91:62:cb:12:71:67:30: 0f:08:cd:c7:22:8b:24:c4:bc:88:47:44:cb:74:c2:ab:f7:3c: 14:4f:36:22:23:04:a3:93:5a:85:d7:95:4b:3b:c9:0f:d8:81: a0:16:fb:c9:ab:3e:b6:da:f0:37:e0:0f:3a:b2:bd:db:67:be: 19:cc:86:b8:51:9f:5c:b7:5d:e7:05:7b:37:56:02:7d:81:06: 1d:55:cd:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZY/65sGZ5O5hUsWf3Ybw+JP6TEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA2MTQxOTU2MDlaFw0yNTA2MTgwMTQ4MDlaMDMxMTAvBgNV BAMTKDUwRjcyN0Q2Nzg2MTFCMDVGMzU5NkZEQjg4QzUyN0Y5RTMyNDBCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFii3DgjNd3HflK3sgs8EXdRNn P6AzTGZxIbdsaLBhbJ0wZmWQa3V0XxwSAyZRBaW0Fo90dJaNn4WHtcoX1dT1O4o3 ggZfnEAtFeHv8J4rjDIliLPhIWSQWoIB1oOz6mrwC+dPf8sjUAaAH+z6J0/MmI8J GUHkdJ7mD/0X6gul8oYmYgg8RxQB2cmJBtQa91RawV6D0qYrLfYm9MTsF1itj7sE 6I0IGUgC26neGfCqu5T3dwU2W+mvVDLXct3v4VB7BNnGRoiqgeiH+FCAk03zYYX+ /FWf4aJ+GPMsT2VxY9lzGken3tImqp3xIN7gZ0RH9dGEo3BNGePLGWN8/YkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUPcn1nhhGwXzWW/biMUn+eMkC6gwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANZcSsyTANT9yGUVRx71kkog8dRG5SzkLb3A Qd+rqwiMaoRHZuOgBz7y3V0vCajZjprh+x66lgNoQNZBdQPqG3S3xvvEL1a/aKo7 tpOs1yaKDRm+6sstzL0CuV38YeVfHcgegPWooQV/1YibFYq3WL2U9L+OGRIX2QFN 6FkAidkGlVxygLm0pNkZ8JurWlDTzkB9gBBPeQD74h04J2Bb7P/C42fmIBg5rgyf 9GggkWLLEnFnMA8IzcciiyTEvIhHRMt0wqv3PBRPNiIjBKOTWoXXlUs7yQ/YgaAW +8mrPrba8DfgDzqyvdtnvhnMhrhRn1y3XecFezdWAn2BBh1VzQQ= -----END CERTIFICATE-----Generated at Mon Jun 16 02:37:28 2025 by rpki-client