$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: NvMJc9pL35tbTOZBeOlMgQxVfNe6/2OaJ5h314R7URg= Subject key identifier: 7D:B7:0D:E9:7F:CA:F9:02:33:1B:71:E9:8A:0F:80:2F:CD:FA:CD:9C Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 712DDA107A130AB6A77B988587B184D575C61857 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: C3 Signing time: Sun 15 Jun 2025 12:31:41 +0000 Manifest this update: Sun 15 Jun 2025 12:26:41 +0000 Manifest next update: Wed 18 Jun 2025 16:29:41 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: /yTLpS1ZwA2xJYOFlgJS+r4R6RkQlhFyY+fvN8cUdrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2d:da:10:7a:13:0a:b6:a7:7b:98:85:87:b1:84:d5:75:c6:18:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Jun 15 12:26:41 2025 GMT Not After : Jun 18 16:29:41 2025 GMT Subject: CN=7DB70DE97FCAF902331B71E98A0F802FCDFACD9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ab:ab:08:7a:b5:df:39:77:14:89:6e:71:b7: e1:ae:07:32:5b:ea:c9:d8:65:ac:8a:46:55:d3:18: dc:7f:55:e8:0c:17:0e:7d:64:78:ad:02:a1:a2:4a: 33:9a:df:78:15:4a:8c:39:f9:8f:29:64:e8:78:86: 7a:78:3c:b1:69:6c:15:93:67:27:c6:a9:4f:b2:75: a2:4e:0a:38:0a:23:33:8f:43:70:4d:c9:7d:56:21: bd:4d:7b:0e:82:5f:9d:97:f5:57:92:1b:cd:56:82: 78:9d:be:65:2f:b8:1c:16:fd:4d:79:26:cf:df:21: 87:d9:76:08:ad:51:79:6d:82:df:9a:26:23:64:a8: 75:d8:00:c4:2a:5f:db:5f:c0:16:d2:df:aa:b3:cf: c5:91:93:63:08:c8:8f:62:4d:ca:20:55:63:70:21: 9d:67:7b:1f:dd:3e:da:67:af:7c:09:10:0e:19:56: c5:54:1c:d4:78:18:c3:53:3c:86:08:20:1d:46:c4: 7d:9a:c9:df:65:12:65:33:ba:9b:60:7f:e5:e5:09: 54:b2:64:76:e9:90:a3:27:62:ae:85:df:79:bd:a8: 26:2e:40:87:a5:c0:f0:13:97:22:77:bc:4d:1f:fe: 0d:e4:cd:e8:ad:44:08:e2:05:03:52:60:42:7d:f0: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B7:0D:E9:7F:CA:F9:02:33:1B:71:E9:8A:0F:80:2F:CD:FA:CD:9C X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:14:92:ef:f2:04:88:88:aa:5c:5d:47:d5:a7:a6:53:46:bf: 05:64:dd:74:a9:4b:f1:6d:e3:6d:19:24:3c:74:78:04:be:73: cd:be:f0:ad:bf:65:75:9d:0e:64:22:7f:62:d0:92:a6:cb:8e: 55:4a:19:3b:3c:85:b3:e3:69:ee:03:c2:4a:38:3b:4a:5d:39: 2a:90:af:15:78:35:17:62:11:10:d3:d8:e6:76:89:6b:20:f3: f6:16:17:bf:af:89:29:74:7a:85:6c:5a:43:25:6c:2e:62:a4: 90:b2:46:1c:e2:9f:59:ea:a3:22:0b:b1:6a:07:a9:ca:9f:bd: 44:7c:d0:1f:83:7f:1d:69:45:6b:49:f2:6a:8f:59:6d:ce:dc: 53:13:cb:11:20:5d:57:af:e9:f1:a8:07:5d:9a:0a:a5:af:6f: 1f:cb:15:ef:d2:45:fa:0d:f1:b9:12:35:37:6a:0c:68:a5:62: a1:44:17:06:2a:f3:54:95:dd:76:c1:65:30:55:6c:85:ed:fb: f0:58:ba:77:77:75:19:f6:b2:19:af:58:72:2e:a5:5a:e8:1c: d5:0e:93:e7:e3:cc:02:39:94:d1:88:c7:dc:03:70:22:f3:1e: ac:a9:24:16:7f:78:21:12:b9:8b:3a:ca:18:75:0c:9c:88:57: b8:b8:ec:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcS3aEHoTCrane5iFh7GE1XXGGFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA2MTUxMjI2NDFaFw0yNTA2MTgxNjI5NDFaMDMxMTAvBgNV BAMTKDdEQjcwREU5N0ZDQUY5MDIzMzFCNzFFOThBMEY4MDJGQ0RGQUNEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlq6sIerXfOXcUiW5xt+GuBzJb 6snYZayKRlXTGNx/VegMFw59ZHitAqGiSjOa33gVSow5+Y8pZOh4hnp4PLFpbBWT ZyfGqU+ydaJOCjgKIzOPQ3BNyX1WIb1New6CX52X9VeSG81WgnidvmUvuBwW/U15 Js/fIYfZdgitUXltgt+aJiNkqHXYAMQqX9tfwBbS36qzz8WRk2MIyI9iTcogVWNw IZ1nex/dPtpnr3wJEA4ZVsVUHNR4GMNTPIYIIB1GxH2ayd9lEmUzuptgf+XlCVSy ZHbpkKMnYq6F33m9qCYuQIelwPATlyJ3vE0f/g3kzeitRAjiBQNSYEJ98ONbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbcN6X/K+QIzG3Hpig+AL836zZwwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwUku/yBIiIqlxdR9WnplNGvwVk3XSpS/Ft 420ZJDx0eAS+c82+8K2/ZXWdDmQif2LQkqbLjlVKGTs8hbPjae4Dwko4O0pdOSqQ rxV4NRdiERDT2OZ2iWsg8/YWF7+viSl0eoVsWkMlbC5ipJCyRhzin1nqoyILsWoH qcqfvUR80B+Dfx1pRWtJ8mqPWW3O3FMTyxEgXVev6fGoB12aCqWvbx/LFe/SRfoN 8bkSNTdqDGilYqFEFwYq81SV3XbBZTBVbIXt+/BYund3dRn2shmvWHIupVroHNUO k+fjzAI5lNGIx9wDcCLzHqypJBZ/eCESuYs6yhh1DJyIV7i47AI= -----END CERTIFICATE-----Generated at Tue Jun 17 12:52:33 2025 by rpki-client