$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: daxLvxImT9fdMrbuWfTL7pnT9xfnglQR5YudNxOgV9c= Subject key identifier: 0E:DC:A9:A1:32:2E:DB:1F:B0:26:17:EB:26:78:88:5B:F8:34:E4:CA Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 601FDFF6521869EA9EBFE8AF4B330D7269DDF441 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01BC Signing time: Fri 08 Aug 2025 15:31:42 +0000 Manifest this update: Fri 08 Aug 2025 15:26:42 +0000 Manifest next update: Tue 12 Aug 2025 02:52:42 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: kEyYCd73On+ZJUVynZj1Cp2vXyVfp8aIN7mI46hoaQ8=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1f:df:f6:52:18:69:ea:9e:bf:e8:af:4b:33:0d:72:69:dd:f4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Aug 8 15:26:42 2025 GMT Not After : Aug 12 02:52:42 2025 GMT Subject: CN=0EDCA9A1322EDB1FB02617EB2678885BF834E4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:4c:4f:37:7e:1a:68:d4:29:5e:fb:0d:ba: 9f:07:32:1b:c2:68:8b:75:10:69:43:4b:8b:b8:ba: 8d:f3:43:15:0b:05:56:2b:d5:84:b7:2c:c1:16:8b: ef:85:cb:be:04:1b:c7:8d:21:0e:b8:e3:77:e8:5a: 1b:d6:ed:8b:11:9a:d0:1f:3c:af:4c:30:91:c9:e8: f1:34:a2:9b:d7:69:28:82:86:e9:39:4c:08:1a:12: 9a:ae:a2:48:77:92:dc:54:f3:f6:4d:cf:6d:9b:39: 4c:ad:d7:3d:5e:37:04:2a:35:2f:97:76:ec:73:4d: f3:3f:14:77:75:fc:6a:dd:84:31:ea:48:fd:d8:59: 20:2a:ec:ce:a0:ea:a4:61:50:f2:b7:b7:e1:28:ac: d6:b9:b9:16:c6:61:41:91:b6:a7:a2:7e:e7:69:df: be:f9:18:52:ea:3f:d8:05:26:40:39:3a:78:f0:cc: 85:ac:23:6e:98:a4:df:e5:1c:2f:27:06:09:4b:48: 4e:c4:01:4b:55:a8:00:c7:de:ab:09:cd:33:4b:1c: e9:f8:f7:4e:f2:2d:c8:bd:8b:25:42:ad:b9:91:41: 6a:a8:ec:f2:0e:f9:a0:ed:ba:12:b3:b7:a1:fe:a1: f4:f9:7d:98:cf:a7:60:98:c3:1d:fd:8e:bf:20:ca: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DC:A9:A1:32:2E:DB:1F:B0:26:17:EB:26:78:88:5B:F8:34:E4:CA X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:65:2e:27:a4:e5:cc:65:0c:46:fb:9e:8e:58:ba:b2:10:55: 87:51:57:f1:3c:03:ba:be:60:d5:c7:51:30:42:08:b9:54:40: e0:4c:ed:41:6a:21:8a:6d:9b:19:3a:af:c8:91:e4:ed:07:61: 10:40:1d:37:60:c9:45:f5:58:34:a0:7c:19:11:a2:f4:b3:46: 67:e1:bb:b7:af:77:63:1a:e0:b0:b4:eb:7c:fa:f0:a7:bb:49: 36:9c:fd:87:55:b7:49:d5:b9:20:4b:70:ec:62:24:34:6f:ae: c2:64:1a:10:00:01:ac:f4:78:cd:20:14:93:6e:e9:ec:09:25: b5:16:d6:04:0b:b4:15:12:65:d6:aa:6f:d1:68:b4:25:4d:91: 9f:a1:89:ad:9d:a5:98:04:11:f7:c5:cd:23:f9:ae:c7:9d:03: 55:6c:47:91:f7:77:cf:0e:5c:84:58:f7:66:08:2b:9d:1b:cf: 21:5b:06:ae:df:5a:f0:76:da:b1:45:47:8a:29:2c:8a:25:a3: 31:17:0a:f3:d1:12:4b:c9:59:7a:9f:eb:23:28:c7:c9:ee:46: 66:ad:a3:c4:89:ba:30:26:67:50:5a:74:f8:07:c0:00:4c:38: fc:61:69:ed:8d:0e:72:6a:f7:c1:e0:0f:17:f3:91:dc:16:9e: fd:f0:79:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYB/f9lIYaeqev+ivSzMNcmnd9EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA4MDgxNTI2NDJaFw0yNTA4MTIwMjUyNDJaMDMxMTAvBgNV BAMTKDBFRENBOUExMzIyRURCMUZCMDI2MTdFQjI2Nzg4ODVCRjgzNEU0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5kxPN34aaNQpXvsNup8HMhvC aIt1EGlDS4u4uo3zQxULBVYr1YS3LMEWi++Fy74EG8eNIQ6443foWhvW7YsRmtAf PK9MMJHJ6PE0opvXaSiChuk5TAgaEpquokh3ktxU8/ZNz22bOUyt1z1eNwQqNS+X duxzTfM/FHd1/GrdhDHqSP3YWSAq7M6g6qRhUPK3t+EorNa5uRbGYUGRtqeifudp 3775GFLqP9gFJkA5OnjwzIWsI26YpN/lHC8nBglLSE7EAUtVqADH3qsJzTNLHOn4 907yLci9iyVCrbmRQWqo7PIO+aDtuhKzt6H+ofT5fZjPp2CYwx39jr8gyvUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtypoTIu2x+wJhfrJniIW/g05MowHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZlLiek5cxlDEb7no5YurIQVYdRV/E8A7q+ YNXHUTBCCLlUQOBM7UFqIYptmxk6r8iR5O0HYRBAHTdgyUX1WDSgfBkRovSzRmfh u7evd2Ma4LC063z68Ke7STac/YdVt0nVuSBLcOxiJDRvrsJkGhAAAaz0eM0gFJNu 6ewJJbUW1gQLtBUSZdaqb9FotCVNkZ+hia2dpZgEEffFzSP5rsedA1VsR5H3d88O XIRY92YIK50bzyFbBq7fWvB22rFFR4opLIolozEXCvPREkvJWXqf6yMox8nuRmat o8SJujAmZ1BadPgHwABMOPxhae2NDnJq98HgDxfzkdwWnv3weTY= -----END CERTIFICATE-----Generated at Mon Aug 11 01:46:17 2025 by rpki-client