$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: HkE29YyfVckCgmgpWykrWNCAh9AZ/mIoiL1v2rhWVmw= Subject key identifier: F4:60:58:A7:82:FD:2B:68:DA:33:1F:A6:1A:C6:EA:B8:D8:10:59:58 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 64C9019EA83E29D575373B5C3EBAD168A63F9E7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 0194 Signing time: Mon 16 Jun 2025 08:01:40 +0000 Manifest this update: Mon 16 Jun 2025 07:56:40 +0000 Manifest next update: Thu 19 Jun 2025 18:23:40 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: TFMYlagFkakPfi003fM6bJlEb1+eGS9a0fhXpx8zMgQ=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c9:01:9e:a8:3e:29:d5:75:37:3b:5c:3e:ba:d1:68:a6:3f:9e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Jun 16 07:56:40 2025 GMT Not After : Jun 19 18:23:40 2025 GMT Subject: CN=F46058A782FD2B68DA331FA61AC6EAB8D8105958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:83:57:bf:e0:14:2e:99:7b:49:5a:80:fd: d5:b1:cf:84:03:68:f4:c5:6e:ca:34:2b:e9:51:ee: 4b:6f:9c:af:c3:ac:ef:8c:73:e7:22:42:87:a9:37: 25:35:6a:7e:26:e7:f2:6d:b2:17:9c:20:15:69:87: 3c:e4:12:13:b7:d0:51:4a:a3:e7:80:0b:40:b1:f6: d2:2d:9f:5b:c8:1e:90:28:9b:77:fa:d8:1a:8c:10: 11:45:fe:e1:66:24:e1:1c:ea:af:79:e5:14:51:f5: 2e:6e:d1:47:69:e1:0f:02:26:6b:e1:78:31:b3:78: b7:71:11:9e:4b:1e:df:ec:11:df:d5:ab:77:b4:66: f2:a3:48:18:a9:c6:88:d3:a3:b6:06:6e:ff:81:d9: 1e:22:3c:05:8c:9e:6a:c9:ab:50:1b:49:15:22:38: b7:11:20:71:bd:5c:86:58:99:b0:d6:bc:45:61:bb: c6:ac:6e:95:e3:9c:35:64:2d:d0:b8:94:80:d0:ee: 1e:8b:eb:5c:96:3a:26:72:75:39:2d:bd:72:4b:74: 85:0e:46:16:70:ff:ee:73:aa:40:77:ad:a7:6f:92: 58:1c:74:72:91:c3:e3:64:da:f8:84:1a:9e:85:6f: 75:01:c8:ee:4c:a7:46:3a:13:47:73:f6:9e:4b:95: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:60:58:A7:82:FD:2B:68:DA:33:1F:A6:1A:C6:EA:B8:D8:10:59:58 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:dd:94:53:43:22:e7:dd:17:c1:84:d9:d8:cb:22:9b:bd:09: f6:03:16:ad:11:1b:90:d7:ea:01:82:3b:dc:77:be:bf:8b:4d: 20:4f:cb:ad:f5:0c:f4:1d:1d:c1:89:f6:84:05:7d:82:fe:86: 72:ed:48:b1:cf:63:b4:be:d4:06:90:9c:12:de:42:93:cf:dc: dc:ea:42:c3:af:4d:93:a2:47:13:e4:cd:84:44:d7:d6:f3:09: 98:09:33:c7:d4:44:4d:04:14:e6:fa:3c:c3:56:d0:12:40:97: b8:43:8c:10:73:27:6d:7b:38:e0:db:9f:70:36:ed:45:a0:e4: 1a:04:79:2f:a2:58:ee:78:e6:99:c2:25:60:b7:d3:70:9d:4c: ab:8a:4f:9b:20:34:a6:4d:cc:eb:ed:32:4d:e4:db:92:2c:14: a3:23:ce:e0:68:49:11:a9:6c:ce:66:41:67:e5:e7:0e:01:e7: 9b:f2:a2:df:83:fb:d4:69:14:29:08:c0:3b:9e:8d:de:94:53: 66:22:81:b4:ea:6b:a5:cc:24:aa:98:ff:4d:6d:35:5a:d9:8a: 1f:03:6d:56:4a:aa:f5:e2:b6:58:aa:fc:c9:2c:cc:1f:cd:f6: 97:88:bf:9a:44:ab:3e:95:2a:11:65:c9:da:94:0e:c6:e6:54: fb:30:34:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMkBnqg+KdV1NztcPrrRaKY/nn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTA2MTYwNzU2NDBaFw0yNTA2MTkxODIzNDBaMDMxMTAvBgNV BAMTKEY0NjA1OEE3ODJGRDJCNjhEQTMzMUZBNjFBQzZFQUI4RDgxMDU5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jYNXv+AULpl7SVqA/dWxz4QD aPTFbso0K+lR7ktvnK/DrO+Mc+ciQoepNyU1an4m5/JtshecIBVphzzkEhO30FFK o+eAC0Cx9tItn1vIHpAom3f62BqMEBFF/uFmJOEc6q955RRR9S5u0Udp4Q8CJmvh eDGzeLdxEZ5LHt/sEd/Vq3e0ZvKjSBipxojTo7YGbv+B2R4iPAWMnmrJq1AbSRUi OLcRIHG9XIZYmbDWvEVhu8asbpXjnDVkLdC4lIDQ7h6L61yWOiZydTktvXJLdIUO RhZw/+5zqkB3radvklgcdHKRw+Nk2viEGp6Fb3UByO5Mp0Y6E0dz9p5LlZ9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9GBYp4L9K2jaMx+mGsbquNgQWVgwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHdlFNDIufdF8GE2djLIpu9CfYDFq0RG5DX 6gGCO9x3vr+LTSBPy631DPQdHcGJ9oQFfYL+hnLtSLHPY7S+1AaQnBLeQpPP3Nzq QsOvTZOiRxPkzYRE19bzCZgJM8fURE0EFOb6PMNW0BJAl7hDjBBzJ217OODbn3A2 7UWg5BoEeS+iWO545pnCJWC303CdTKuKT5sgNKZNzOvtMk3k25IsFKMjzuBoSRGp bM5mQWfl5w4B55vyot+D+9RpFCkIwDuejd6UU2YigbTqa6XMJKqY/01tNVrZih8D bVZKqvXitliq/MkszB/N9peIv5pEqz6VKhFlydqUDsbmVPswNGQ= -----END CERTIFICATE-----Generated at Mon Jun 16 19:31:55 2025 by rpki-client