$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: x4AjwgcFJW3U4oypUkJNjstQS6Td63sUoNJlY724g1w= Subject key identifier: 02:69:58:BA:F5:9E:BD:33:5B:79:0C:1F:73:80:EA:DA:31:41:3B:E8 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 6717DFBDDC8984835A7602353E8F51BF010FB309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: CB Signing time: Tue 05 Aug 2025 20:41:07 +0000 Manifest this update: Tue 05 Aug 2025 20:36:07 +0000 Manifest next update: Sat 09 Aug 2025 08:10:07 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: N0TUhVPXXmMDGhiw2IvGubHYWsYByzCf6y/13lSZH+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:17:df:bd:dc:89:84:83:5a:76:02:35:3e:8f:51:bf:01:0f:b3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Aug 5 20:36:07 2025 GMT Not After : Aug 9 08:10:07 2025 GMT Subject: CN=026958BAF59EBD335B790C1F7380EADA31413BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:26:20:75:1f:fd:b7:b3:94:ea:38:a1:95: 87:4b:2a:38:6f:25:db:7c:2c:7c:94:13:ba:b9:9f: 86:f8:c6:0e:0a:24:98:a5:08:5c:2f:3b:51:7a:51: 86:2d:e4:8b:c3:38:86:21:30:80:f4:af:44:3d:fb: 62:00:03:67:4c:2d:b5:64:5e:0d:5a:20:c6:16:a1: ea:9f:2f:56:90:15:40:53:1b:c0:96:9f:3c:eb:97: 86:20:1f:ee:63:62:c1:c6:4d:8a:dc:1a:07:d8:f5: 0f:f7:84:92:09:f7:ee:57:43:ac:3d:1a:af:ed:b7: 0f:1b:57:c9:df:11:58:d8:4d:f3:17:c0:aa:bd:96: 03:16:f1:10:1d:95:2b:9e:51:f2:ed:27:ea:88:df: c6:95:ee:26:cc:c0:50:45:0e:63:7f:66:a8:e8:dc: b8:88:3f:e8:51:d9:35:ba:6f:cb:f5:0c:3f:4a:af: fe:66:10:9c:35:02:6a:4e:92:75:7c:76:3b:ec:83: c2:e7:9f:63:23:08:a5:8a:a4:ec:89:19:09:f6:e5: c9:08:bb:88:f9:f4:5a:5a:ae:69:b0:d9:eb:9b:8a: 2b:ed:03:16:ce:ae:0b:45:5f:3a:9b:e6:cb:aa:96: 42:e5:c5:15:fa:10:95:ad:fc:7a:4a:3b:c0:a2:fe: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:69:58:BA:F5:9E:BD:33:5B:79:0C:1F:73:80:EA:DA:31:41:3B:E8 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:14:f5:b2:d3:4c:f9:1f:65:a6:46:01:f1:0f:8d:cf:25:36: 35:31:ac:e2:a6:5d:88:1a:f6:35:d8:d0:b8:d3:19:09:92:95: be:c8:6d:9c:25:94:2e:bb:2c:a6:61:b0:cb:1a:5a:84:be:17: b5:f2:29:96:09:78:e0:b6:ba:fd:87:3d:9a:5d:67:10:c6:7e: c4:13:4e:78:a5:b8:a9:e0:db:44:5b:1f:91:8f:2b:74:c5:70: 18:2c:e3:a8:b2:8e:9e:ee:5a:40:8a:1a:fe:9a:d5:66:2c:05: 3f:52:e6:3b:d8:0b:50:d9:62:4f:5e:81:2e:01:89:02:e7:ef: c4:d5:17:4d:31:87:72:49:07:e5:4a:7f:55:96:b2:b0:84:c5: ba:67:82:88:e8:26:b4:92:a5:88:ef:2e:f6:32:fc:25:3e:08: 3b:1d:ef:05:19:ab:bd:0f:47:b8:ee:f3:95:57:8d:3d:4d:46: ef:ba:f9:ae:d8:af:dc:05:54:f6:f9:27:14:13:6c:a1:05:07: 0d:de:96:c6:6e:49:34:1a:26:7c:99:a0:f4:a5:ce:cc:7e:06: 48:71:75:e2:12:45:cd:aa:a1:4c:0a:44:15:90:d7:37:f1:6e: ed:26:bf:f5:cd:60:8e:c5:af:35:67:dc:68:8c:3b:28:68:72: 09:05:37:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxffvdyJhINadgI1Po9RvwEPswkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNTA4MDUyMDM2MDdaFw0yNTA4MDkwODEwMDdaMDMxMTAvBgNV BAMTKDAyNjk1OEJBRjU5RUJEMzM1Qjc5MEMxRjczODBFQURBMzE0MTNCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSyYgdR/9t7OU6jihlYdLKjhv Jdt8LHyUE7q5n4b4xg4KJJilCFwvO1F6UYYt5IvDOIYhMID0r0Q9+2IAA2dMLbVk Xg1aIMYWoeqfL1aQFUBTG8CWnzzrl4YgH+5jYsHGTYrcGgfY9Q/3hJIJ9+5XQ6w9 Gq/ttw8bV8nfEVjYTfMXwKq9lgMW8RAdlSueUfLtJ+qI38aV7ibMwFBFDmN/Zqjo 3LiIP+hR2TW6b8v1DD9Kr/5mEJw1AmpOknV8djvsg8Lnn2MjCKWKpOyJGQn25ckI u4j59Fparmmw2eubiivtAxbOrgtFXzqb5suqlkLlxRX6EJWt/HpKO8Ci/kjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAmlYuvWevTNbeQwfc4Dq2jFBO+gwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4U9bLTTPkfZaZGAfEPjc8lNjUxrOKmXYga 9jXY0LjTGQmSlb7IbZwllC67LKZhsMsaWoS+F7XyKZYJeOC2uv2HPZpdZxDGfsQT TniluKng20RbH5GPK3TFcBgs46iyjp7uWkCKGv6a1WYsBT9S5jvYC1DZYk9egS4B iQLn78TVF00xh3JJB+VKf1WWsrCExbpngojoJrSSpYjvLvYy/CU+CDsd7wUZq70P R7ju85VXjT1NRu+6+a7Yr9wFVPb5JxQTbKEFBw3elsZuSTQaJnyZoPSlzsx+Bkhx deISRc2qoUwKRBWQ1zfxbu0mv/XNYI7FrzVn3GiMOyhocgkFN3w= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:07 2025 by rpki-client