$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: 1XVRIslgbBu+E4Sh6zq/uCQ/qvEbGeCRg7pZf9KJG2U= Subject key identifier: 25:23:9F:6F:05:95:13:AE:92:54:5C:16:90:2F:3D:C8:4F:22:30:13 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 5124F8A5A8150420308AE0DC1C7F72CBED3BA5CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01A4 Signing time: Sun 15 Jun 2025 21:01:39 +0000 Manifest this update: Sun 15 Jun 2025 20:56:39 +0000 Manifest next update: Thu 19 Jun 2025 06:35:39 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: YX++5xg8BNIWmynyCjrNni1c/J8NKmyy9V1ew4zp5iE=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:24:f8:a5:a8:15:04:20:30:8a:e0:dc:1c:7f:72:cb:ed:3b:a5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Jun 15 20:56:39 2025 GMT Not After : Jun 19 06:35:39 2025 GMT Subject: CN=25239F6F059513AE92545C16902F3DC84F223013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:6f:9b:b4:fb:21:03:95:36:42:2a:8e:da: 71:a2:51:c6:99:03:b9:50:03:2b:e4:48:e5:49:dd: dc:3a:17:94:46:7e:12:0d:f9:f7:3c:d5:2c:61:46: 39:cc:3f:b2:f0:80:9b:1a:e5:ef:4f:16:29:ae:33: 12:81:37:e2:55:cb:06:93:62:88:cb:70:28:e4:c3: 78:5d:de:34:e5:13:ae:1b:20:45:87:d1:35:67:42: 37:2f:49:3a:03:ed:9b:13:d8:e2:1c:96:d0:23:6e: 4c:43:21:5c:15:38:cf:88:e3:5f:4f:9a:a6:30:fc: 8c:4a:01:37:29:cf:0d:25:fe:8f:e1:73:07:a1:87: c3:db:e5:a4:b9:a5:12:ab:79:fb:2e:b3:c0:ab:32: 51:76:6b:e2:9b:e4:3f:09:15:d4:43:b3:4a:3f:bc: 6c:32:12:e0:09:37:7d:8b:62:42:ee:f2:b4:25:4c: 09:24:08:45:32:f0:98:4c:7d:51:45:e1:95:c6:33: b0:29:89:23:50:08:e0:ea:5d:14:d5:b4:3f:2f:37: 3e:3c:11:42:b1:6b:c4:f0:5e:c3:d5:5d:d5:10:47: ff:b6:a6:f5:b1:c1:88:f0:fe:90:df:e7:b2:5c:87: e3:db:80:b9:39:c9:e1:e6:d6:21:f5:24:03:9a:a6: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:9F:6F:05:95:13:AE:92:54:5C:16:90:2F:3D:C8:4F:22:30:13 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ae:e5:35:d4:a9:4e:37:ea:ee:4b:14:e8:90:65:bf:e7:4f: eb:26:2e:13:ba:42:17:ae:91:91:50:4b:06:68:57:6c:d8:df: c6:ba:75:58:7f:6b:39:10:bd:2f:96:c2:ff:73:5c:6d:d4:0d: 8c:71:c8:79:f8:ba:23:31:da:e3:e2:76:d0:96:29:12:db:0b: bd:bb:c8:c6:9f:78:e8:7f:47:8d:ce:7e:93:17:e3:40:2c:92: a4:d0:4a:7b:6a:02:dd:1a:49:60:c1:7b:74:d0:3b:69:6e:18: 07:7c:59:64:3a:67:c7:f6:65:38:5c:fd:d1:e4:3d:70:c5:6f: 0f:26:ca:23:bf:f2:2f:4b:48:10:55:36:27:c7:01:d1:dc:a6: 1e:73:aa:ae:09:c8:02:5d:87:a5:48:38:cf:d0:24:32:59:00: 92:e4:08:72:5c:02:73:e8:bd:6e:6a:8b:5c:db:a5:32:17:dd: 2a:b6:4b:4a:52:85:25:2f:3c:3f:59:38:e5:4c:1a:f5:40:44: b5:33:ad:5c:74:b0:60:e5:c0:cf:92:e7:3f:2f:ee:6e:11:f0: 82:93:06:47:f8:c2:ec:b1:3d:22:2f:af:25:b8:8c:b0:01:19: 25:0d:15:fc:ed:c8:2d:29:2e:82:a3:29:e6:32:9a:e7:5b:53: a4:4d:1b:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUST4pagVBCAwiuDcHH9yy+07pcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA2MTUyMDU2MzlaFw0yNTA2MTkwNjM1MzlaMDMxMTAvBgNV BAMTKDI1MjM5RjZGMDU5NTEzQUU5MjU0NUMxNjkwMkYzREM4NEYyMjMwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwe2+btPshA5U2QiqO2nGiUcaZ A7lQAyvkSOVJ3dw6F5RGfhIN+fc81SxhRjnMP7LwgJsa5e9PFimuMxKBN+JVywaT YojLcCjkw3hd3jTlE64bIEWH0TVnQjcvSToD7ZsT2OIcltAjbkxDIVwVOM+I419P mqYw/IxKATcpzw0l/o/hcwehh8Pb5aS5pRKrefsus8CrMlF2a+Kb5D8JFdRDs0o/ vGwyEuAJN32LYkLu8rQlTAkkCEUy8JhMfVFF4ZXGM7ApiSNQCODqXRTVtD8vNz48 EUKxa8TwXsPVXdUQR/+2pvWxwYjw/pDf57Jch+PbgLk5yeHm1iH1JAOapicvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJSOfbwWVE66SVFwWkC89yE8iMBMwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKu5TXUqU436u5LFOiQZb/nT+smLhO6Qheu kZFQSwZoV2zY38a6dVh/azkQvS+Wwv9zXG3UDYxxyHn4uiMx2uPidtCWKRLbC727 yMafeOh/R43OfpMX40AskqTQSntqAt0aSWDBe3TQO2luGAd8WWQ6Z8f2ZThc/dHk PXDFbw8myiO/8i9LSBBVNifHAdHcph5zqq4JyAJdh6VIOM/QJDJZAJLkCHJcAnPo vW5qi1zbpTIX3Sq2S0pShSUvPD9ZOOVMGvVARLUzrVx0sGDlwM+S5z8v7m4R8IKT Bkf4wuyxPSIvryW4jLABGSUNFfztyC0pLoKjKeYymudbU6RNG2w= -----END CERTIFICATE-----Generated at Wed Jun 18 05:22:24 2025 by rpki-client