$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: vu5jZ0GkdliQaVuGW/BQ94xrYvmpQFqASoMMTInXirk= Subject key identifier: DD:ED:34:E4:BC:BD:41:07:B6:B9:13:E3:BB:62:90:3F:25:AF:63:53 Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 504FF1ED3CCB684A937188C1D5A03C96C47849B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 05 Signing time: Sat 14 Jun 2025 17:01:46 +0000 Manifest this update: Sat 14 Jun 2025 16:56:46 +0000 Manifest next update: Wed 18 Jun 2025 04:25:46 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: eaVzJqZpVCxN6VSO/JxIWJYP1RDpL1ou4cLuAg4nI8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4f:f1:ed:3c:cb:68:4a:93:71:88:c1:d5:a0:3c:96:c4:78:49:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Jun 14 16:56:46 2025 GMT Not After : Jun 18 04:25:46 2025 GMT Subject: CN=DDED34E4BCBD4107B6B913E3BB62903F25AF6353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:1d:dd:b5:60:11:27:bf:2b:33:98:b2:0f: cd:c9:dd:b4:f5:52:4c:4c:67:8b:bb:e9:e5:e0:e7: 7d:90:1a:bf:2d:79:dc:72:36:f8:3a:8b:37:d1:b2: e5:5a:1d:5d:2e:22:1c:71:77:7e:09:1d:45:aa:4f: 75:ee:26:a7:3c:2f:a6:5b:ec:eb:82:7a:32:94:e9: 59:df:3e:d0:61:fe:80:dc:6e:09:55:ba:de:38:e0: 23:01:61:83:04:d7:cd:9a:cd:a0:74:4f:ea:2e:a7: 5b:10:74:00:8f:73:b6:54:10:35:94:98:fe:f1:fa: d6:c0:7e:c6:62:fc:63:94:a5:d7:57:7d:69:30:0e: e8:8b:b8:79:cc:d6:1c:9b:90:e0:91:44:ca:52:25: b9:16:35:61:47:1e:bd:e3:8f:c1:68:a7:dd:e4:f1: f0:63:02:d9:49:77:6d:cb:1b:2e:19:9d:80:06:c6: 8c:84:4d:b4:cc:c8:fe:ee:d7:92:3d:2e:94:9d:5f: 71:bd:0e:43:4b:3c:47:0a:d8:65:8c:5a:97:be:b4: e9:34:0c:ad:5f:53:7f:67:39:ae:22:9c:1c:77:7e: 85:d3:8f:50:4a:04:ed:6f:5d:af:93:54:ea:49:f5: f8:6d:76:f0:0f:88:fe:15:8a:d4:e6:18:9b:3c:63: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:34:E4:BC:BD:41:07:B6:B9:13:E3:BB:62:90:3F:25:AF:63:53 X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:aa:89:c5:36:2a:08:63:aa:61:44:2f:c3:1d:8e:2a:f0:2b: 70:a2:9f:79:90:fc:81:09:cf:41:7c:bb:38:7d:e2:f7:60:16: f6:5d:a7:57:c7:19:ef:e4:b3:68:37:cd:63:ee:07:4f:21:9a: 27:8a:33:fc:1a:8c:d9:31:84:7f:be:cb:1c:8c:81:07:95:d3: 84:c4:7c:cf:8f:67:e7:f8:92:0b:2a:0c:26:13:3a:44:a7:e6: d5:11:d4:fd:d7:08:24:9d:9a:a9:50:2c:e3:7f:a2:28:c3:3e: a5:97:c7:76:b6:38:c8:61:59:7f:17:20:0d:21:bc:b4:4d:bc: db:80:bb:89:10:da:7c:a4:d6:42:1d:16:12:43:68:67:43:ef: 89:92:0b:c4:41:a5:c5:03:30:59:7a:62:03:28:07:4c:15:38: c4:0d:3d:31:45:84:4e:9e:fa:2d:13:34:bc:f0:63:41:98:66: 61:41:bb:d8:f9:c0:a7:dc:5a:87:29:5e:15:0b:f9:62:83:0d: 87:58:4a:59:c4:0e:1d:79:22:fa:ae:49:e3:6a:08:56:21:3d: 50:56:93:91:82:71:3d:c4:bd:7e:11:db:82:a2:1f:39:02:33: e9:52:de:31:a1:35:77:c2:b4:2e:87:1e:dd:06:14:d4:67:a6: c7:fd:e7:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE/x7TzLaEqTcYjB1aA8lsR4SbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNTA2MTQxNjU2NDZaFw0yNTA2MTgwNDI1NDZaMDMxMTAvBgNV BAMTKERERUQzNEU0QkNCRDQxMDdCNkI5MTNFM0JCNjI5MDNGMjVBRjYzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBh3dtWARJ78rM5iyD83J3bT1 UkxMZ4u76eXg532QGr8tedxyNvg6izfRsuVaHV0uIhxxd34JHUWqT3XuJqc8L6Zb 7OuCejKU6VnfPtBh/oDcbglVut444CMBYYME182azaB0T+oup1sQdACPc7ZUEDWU mP7x+tbAfsZi/GOUpddXfWkwDuiLuHnM1hybkOCRRMpSJbkWNWFHHr3jj8Fop93k 8fBjAtlJd23LGy4ZnYAGxoyETbTMyP7u15I9LpSdX3G9DkNLPEcK2GWMWpe+tOk0 DK1fU39nOa4inBx3foXTj1BKBO1vXa+TVOpJ9fhtdvAPiP4VitTmGJs8YzU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3e005Ly9QQe2uRPju2KQPyWvY1MwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2qicU2KghjqmFEL8MdjirwK3Cin3mQ/IEJ z0F8uzh94vdgFvZdp1fHGe/ks2g3zWPuB08hmieKM/wajNkxhH++yxyMgQeV04TE fM+PZ+f4kgsqDCYTOkSn5tUR1P3XCCSdmqlQLON/oijDPqWXx3a2OMhhWX8XIA0h vLRNvNuAu4kQ2nyk1kIdFhJDaGdD74mSC8RBpcUDMFl6YgMoB0wVOMQNPTFFhE6e +i0TNLzwY0GYZmFBu9j5wKfcWocpXhUL+WKDDYdYSlnEDh15IvquSeNqCFYhPVBW k5GCcT3EvX4R24KiHzkCM+lS3jGhNXfCtC6HHt0GFNRnpsf95zs= -----END CERTIFICATE-----Generated at Sun Jun 15 22:26:38 2025 by rpki-client