$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: ofKPXnNbL3eioVNduH5zCiHa5jTMS4nfXlzsncEe70g= Subject key identifier: 1D:66:84:A5:70:1F:0C:D1:B4:EA:9B:37:4D:C7:2F:F6:5F:12:12:0D Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 35C83B898D7B93F964B3950923452B5A2D322E87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: DB Signing time: Fri 08 Aug 2025 12:11:43 +0000 Manifest this update: Fri 08 Aug 2025 12:06:43 +0000 Manifest next update: Mon 11 Aug 2025 18:44:43 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: cDsCsMAMqZooZEYbVoSKKP7DsSw2i4QqU+2XGQi/Qdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c8:3b:89:8d:7b:93:f9:64:b3:95:09:23:45:2b:5a:2d:32:2e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Aug 8 12:06:43 2025 GMT Not After : Aug 11 18:44:43 2025 GMT Subject: CN=1D6684A5701F0CD1B4EA9B374DC72FF65F12120D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:10:84:a5:48:ca:41:18:31:3e:b9:5c:49:5a: 3f:98:21:67:3a:a2:b8:8c:34:32:79:bf:43:b4:f1: 2d:d3:39:dc:62:88:77:0f:bc:c5:37:5a:f6:f8:f5: 67:fb:7b:e8:09:c3:81:a3:a1:50:b3:98:92:41:3f: ad:77:1b:9b:19:be:8d:d8:d4:b9:8a:77:51:8e:de: 4b:1c:d6:4c:3c:46:26:ed:0d:f1:15:fa:26:17:10: d0:2a:52:31:e4:05:a6:2a:28:a8:81:a4:da:6c:0a: 93:f0:36:41:4b:92:41:71:db:d8:2e:e4:cc:e3:d2: 74:d3:d4:e7:16:4a:dc:bf:6a:88:34:71:5f:79:d9: 4e:f1:f3:ab:f6:d9:a5:a3:9b:03:0e:90:99:83:38: 24:06:b2:7a:18:4f:58:6d:b1:59:5f:2e:f7:0c:f7: e5:ce:5d:07:c9:6d:d7:d8:fe:aa:ba:31:45:4a:44: ce:c8:51:1b:11:4e:ae:fb:53:ba:44:a4:69:21:ce: 67:11:d9:a9:7c:b3:3f:db:39:89:a4:16:69:08:f3: a7:73:76:7d:78:0d:93:0b:41:a0:63:4c:23:58:e2: 1a:c7:2f:5c:cb:e4:be:b9:46:75:d3:70:c5:20:3c: 2b:b6:06:07:91:91:09:c6:62:ef:3d:42:3e:e1:b7: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:66:84:A5:70:1F:0C:D1:B4:EA:9B:37:4D:C7:2F:F6:5F:12:12:0D X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1c:46:75:11:36:15:ef:a6:66:af:56:24:04:4e:98:b4:86: cc:4b:57:61:2c:7c:db:f6:14:a0:9d:af:ff:4d:66:40:02:63: 5d:07:a5:62:67:08:be:96:c5:f4:57:ac:47:23:e9:f4:12:c6: 50:ca:b7:c0:8e:c0:97:88:bf:29:38:27:cf:21:e6:0b:4d:da: b4:98:f4:4e:75:f0:a3:5f:45:1b:51:43:0c:02:a2:e7:e6:02: 75:d7:ed:5e:b8:29:e9:f8:0e:fb:38:c6:24:2d:c1:f9:ca:31: b7:50:b4:13:51:98:30:ae:2b:9a:1b:77:8d:12:3b:68:35:5e: 7c:55:5c:01:c0:b8:f1:9a:2e:8f:8f:c3:28:18:27:eb:b7:eb: 01:e1:0b:00:42:e7:96:0f:24:0e:90:3b:da:01:86:a4:43:2f: 8f:d1:b1:cb:5a:ff:ce:5b:aa:25:19:94:c3:11:d9:68:1e:5f: 80:09:29:b8:03:22:c3:8d:8b:a8:7d:c4:17:cc:14:d9:e9:79: c7:ee:2b:6b:ad:63:18:97:85:c8:24:84:f0:ef:95:30:e0:21: f7:99:2c:5b:12:a7:a5:c9:41:f3:8d:6d:96:41:e8:bc:03:77: af:2c:13:21:81:6a:86:e8:34:8e:23:e3:c0:8f:81:43:52:a7: 08:5f:65:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcg7iY17k/lks5UJI0UrWi0yLocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA4MDgxMjA2NDNaFw0yNTA4MTExODQ0NDNaMDMxMTAvBgNV BAMTKDFENjY4NEE1NzAxRjBDRDFCNEVBOUIzNzREQzcyRkY2NUYxMjEyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzEISlSMpBGDE+uVxJWj+YIWc6 oriMNDJ5v0O08S3TOdxiiHcPvMU3Wvb49Wf7e+gJw4GjoVCzmJJBP613G5sZvo3Y 1LmKd1GO3ksc1kw8RibtDfEV+iYXENAqUjHkBaYqKKiBpNpsCpPwNkFLkkFx29gu 5Mzj0nTT1OcWSty/aog0cV952U7x86v22aWjmwMOkJmDOCQGsnoYT1htsVlfLvcM 9+XOXQfJbdfY/qq6MUVKRM7IURsRTq77U7pEpGkhzmcR2al8sz/bOYmkFmkI86dz dn14DZMLQaBjTCNY4hrHL1zL5L65RnXTcMUgPCu2BgeRkQnGYu89Qj7htxrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHWaEpXAfDNG06ps3Tccv9l8SEg0wHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEcRnURNhXvpmavViQETpi0hsxLV2EsfNv2 FKCdr/9NZkACY10HpWJnCL6WxfRXrEcj6fQSxlDKt8COwJeIvyk4J88h5gtN2rSY 9E518KNfRRtRQwwCoufmAnXX7V64Ken4Dvs4xiQtwfnKMbdQtBNRmDCuK5obd40S O2g1XnxVXAHAuPGaLo+PwygYJ+u36wHhCwBC55YPJA6QO9oBhqRDL4/Rscta/85b qiUZlMMR2WgeX4AJKbgDIsONi6h9xBfMFNnpecfuK2utYxiXhcgkhPDvlTDgIfeZ LFsSp6XJQfONbZZB6LwDd68sEyGBaoboNI4j48CPgUNSpwhfZQY= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:55 2025 by rpki-client