$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: NCZpPmBRnRFSxK93kYDTKnnRJv6E9SFpvJ+FMEXgViI= Subject key identifier: 0B:13:A1:6F:C9:6E:53:2D:82:7D:16:2C:B7:DA:A4:14:0F:0E:7D:81 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 37A6D494625D2B5F71D7EC0C9C08CB6D5EB8CA83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 01F5 Signing time: Fri 08 Aug 2025 21:41:57 +0000 Manifest this update: Fri 08 Aug 2025 21:36:56 +0000 Manifest next update: Tue 12 Aug 2025 01:39:56 +0000 Files and hashes: 1: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: JsTMYhJ0n7RKcqKx2ilI4kiDhr1csllt1xEARNwoNSY=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a6:d4:94:62:5d:2b:5f:71:d7:ec:0c:9c:08:cb:6d:5e:b8:ca:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Aug 8 21:36:56 2025 GMT Not After : Aug 12 01:39:56 2025 GMT Subject: CN=0B13A16FC96E532D827D162CB7DAA4140F0E7D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:37:ca:6f:40:dc:29:53:fe:61:97:4a:7f: af:dd:1f:cf:6d:e3:6c:ed:ee:bc:5a:b4:e8:4e:49: 8c:58:1f:77:c9:71:9c:e5:23:c0:ce:e5:d0:c8:57: bb:05:bc:25:b0:fb:e8:47:8c:2a:3e:6e:a1:b7:d9: 58:dd:a7:3e:56:10:e5:15:55:27:46:4f:3d:bf:d5: b2:e3:9a:e6:e5:b4:15:8d:40:44:9c:e4:e4:d9:39: 11:b7:13:e8:5e:23:92:26:02:71:96:f9:62:1b:9a: 16:ba:90:d5:01:cd:29:83:aa:fe:9a:ea:1d:d4:d4: ad:fe:bb:fe:65:ed:7c:93:10:37:2e:1c:55:09:60: c6:31:c9:40:bf:3e:c0:6a:c2:ca:d5:0b:36:8d:77: 11:ce:ed:6d:d9:3d:83:e3:5c:20:c8:78:a2:2d:a7: d8:98:d1:8a:b6:03:33:6d:d1:0c:46:d3:bc:b3:83: 9f:9c:bc:6d:45:03:c0:27:b5:23:62:fe:41:d0:b4: f7:a4:c4:b2:07:70:ef:e7:a3:2a:37:f4:4f:3f:90: 6d:06:8e:f3:c6:1d:dd:cb:f5:37:99:cb:b6:da:a5: 89:f2:f0:9b:00:8b:3a:ae:89:4c:c4:08:c6:c3:47: ba:19:d1:af:94:92:12:7b:aa:78:75:0c:0a:5b:1c: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:A1:6F:C9:6E:53:2D:82:7D:16:2C:B7:DA:A4:14:0F:0E:7D:81 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9b:0b:6f:e7:12:1a:95:e8:66:50:3b:76:bf:6b:2e:80:9c: 34:a8:2a:4f:53:7d:7d:f6:b7:3d:25:95:a0:52:9f:f6:26:60: 12:a2:8e:2d:3b:f0:f4:99:41:b7:f8:64:86:b7:ba:c2:4a:63: 7e:33:24:46:7f:2c:e0:63:39:48:1c:ce:49:3c:41:2c:32:98: 4b:55:4e:d7:f2:2a:4a:af:01:32:34:61:83:78:17:08:1a:a5: d9:b4:79:a0:99:8f:cb:8b:15:a1:d7:6d:f4:94:fc:df:9b:3d: 30:78:c9:c4:ac:3d:63:50:51:49:db:de:14:94:3b:91:7d:ef: fd:12:81:5c:d0:46:db:38:3b:98:c6:2b:4c:cf:a2:fb:be:49: b7:54:0b:c0:a3:e8:8a:3d:6d:88:f4:cb:ae:ae:49:5c:a4:44: a4:15:aa:ba:5c:81:dc:1c:1a:6e:fc:41:b9:20:ec:49:69:ba: 47:14:3e:11:be:02:6e:27:8d:57:dd:b3:12:49:66:11:07:fb: 97:dc:91:58:0b:28:60:e3:36:c3:ad:25:eb:d2:01:c3:fe:20: 3e:df:23:a1:57:6a:83:d8:05:f7:8c:92:ae:4d:31:c1:f1:f0: 7a:48:4c:a2:14:d4:94:4e:09:4a:69:27:23:28:5f:36:23:ed: 3a:40:78:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6bUlGJdK19x1+wMnAjLbV64yoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTA4MDgyMTM2NTZaFw0yNTA4MTIwMTM5NTZaMDMxMTAvBgNV BAMTKDBCMTNBMTZGQzk2RTUzMkQ4MjdEMTYyQ0I3REFBNDE0MEYwRTdEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7TfKb0DcKVP+YZdKf6/dH89t 42zt7rxatOhOSYxYH3fJcZzlI8DO5dDIV7sFvCWw++hHjCo+bqG32Vjdpz5WEOUV VSdGTz2/1bLjmubltBWNQESc5OTZORG3E+heI5ImAnGW+WIbmha6kNUBzSmDqv6a 6h3U1K3+u/5l7XyTEDcuHFUJYMYxyUC/PsBqwsrVCzaNdxHO7W3ZPYPjXCDIeKIt p9iY0Yq2AzNt0QxG07yzg5+cvG1FA8AntSNi/kHQtPekxLIHcO/noyo39E8/kG0G jvPGHd3L9TeZy7bapYny8JsAizquiUzECMbDR7oZ0a+UkhJ7qnh1DApbHMlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCxOhb8luUy2CfRYst9qkFA8OfYEwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCbC2/nEhqV6GZQO3a/ay6AnDSoKk9TfX32 tz0llaBSn/YmYBKiji078PSZQbf4ZIa3usJKY34zJEZ/LOBjOUgczkk8QSwymEtV TtfyKkqvATI0YYN4Fwgapdm0eaCZj8uLFaHXbfSU/N+bPTB4ycSsPWNQUUnb3hSU O5F97/0SgVzQRts4O5jGK0zPovu+SbdUC8Cj6Io9bYj0y66uSVykRKQVqrpcgdwc Gm78Qbkg7ElpukcUPhG+Am4njVfdsxJJZhEH+5fckVgLKGDjNsOtJevSAcP+ID7f I6FXaoPYBfeMkq5NMcHx8HpITKIU1JROCUppJyMoXzYj7TpAeGg= -----END CERTIFICATE-----Generated at Sat Aug 9 23:25:40 2025 by rpki-client