$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: yt32fKdbpjhKaBHl8XRFghZAQX+swh4C3rKvvfwUvCU= Subject key identifier: E6:61:73:81:12:CF:DB:61:5F:BE:6C:29:09:48:6F:76:BB:D4:ED:60 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 1B938B8ACD6FD145B863F126876F33178FAAE708 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 5A Signing time: Sun 15 Jun 2025 07:11:40 +0000 Manifest this update: Sun 15 Jun 2025 07:06:40 +0000 Manifest next update: Wed 18 Jun 2025 08:28:40 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: rlnFdCUGCaDGCHCZwkY1du9tOOhOPCoARim02zGBTfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:93:8b:8a:cd:6f:d1:45:b8:63:f1:26:87:6f:33:17:8f:aa:e7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Jun 15 07:06:40 2025 GMT Not After : Jun 18 08:28:40 2025 GMT Subject: CN=E661738112CFDB615FBE6C2909486F76BBD4ED60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:13:3d:84:14:37:a9:66:1a:2b:f5:e7:9c: ce:e8:fc:e9:cb:9e:a8:e9:75:96:f4:88:e7:55:be: 0e:0d:6e:03:3f:c3:5b:22:be:45:a5:f9:94:56:ce: 3c:8f:9f:8f:72:61:f7:07:b4:33:d2:d8:41:a5:54: aa:03:51:e7:f1:52:b4:23:75:5f:cc:75:b5:3c:dc: 10:29:23:d5:21:7e:ff:77:8d:61:78:e1:79:0c:72: 08:eb:df:dd:e1:f4:0b:13:e9:2c:96:8f:b8:49:da: 81:3a:e3:5c:a1:d5:d7:80:33:4b:47:78:99:82:d3: d2:e5:9a:1f:80:18:40:d2:52:d2:2a:f8:98:85:f9: 7e:ed:13:65:c1:37:7e:37:70:5e:c7:c4:89:8f:d3: 42:aa:20:44:da:55:43:98:84:86:b1:74:9e:d7:58: e2:e0:d8:57:05:48:09:8f:12:89:da:49:b6:21:ac: 47:79:8c:08:4e:46:31:a3:a5:46:9e:a5:f4:38:ef: 43:84:c0:8b:5a:dd:32:a3:54:76:30:e1:ca:92:4c: 8c:56:09:93:c3:35:b4:81:48:92:41:1f:3f:c5:2e: de:79:a4:75:a0:96:6c:f4:5d:17:98:ad:59:a8:4c: 69:1f:6f:ab:f2:43:b1:5f:3e:f8:d3:f8:a6:98:cd: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:61:73:81:12:CF:DB:61:5F:BE:6C:29:09:48:6F:76:BB:D4:ED:60 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:e5:db:1e:7f:15:f2:65:44:95:0a:4d:b2:ab:d5:56:c9:d4: 64:42:fe:a0:86:26:7a:39:6e:ec:69:00:70:1d:83:5b:18:64: 2d:ca:9a:2a:7e:f5:09:47:6c:e3:a7:33:49:09:ec:df:a9:26: 5e:04:75:e3:23:c5:51:0a:8f:88:5a:26:4e:bd:03:31:91:5b: 4e:f2:eb:99:e0:69:57:8e:e3:ed:50:df:60:90:54:47:08:aa: c2:4e:32:7a:d7:3b:04:86:31:96:e2:36:c8:5a:7c:ad:49:0c: 94:08:0d:84:16:c4:d1:4b:85:bb:2a:4e:dc:21:89:c1:34:4d: 60:66:d0:19:c9:19:b1:ac:46:b4:b8:06:1d:86:cd:fe:17:03: 22:23:b1:d3:d1:af:7a:9d:28:ef:41:7f:67:56:11:1b:d8:6a: 99:34:71:ae:56:11:89:8d:d1:55:79:91:78:74:32:08:d6:4d: ca:b0:e0:3b:c7:b6:23:3f:a6:e2:cf:98:fe:0e:aa:4a:cd:a4: eb:90:d4:82:6c:13:ee:a5:bf:f4:86:17:be:e5:b7:6b:fb:07: eb:f2:ef:eb:15:e1:37:c6:c5:87:aa:2c:76:87:a4:88:a7:66: c5:22:d1:7c:7d:8a:45:9c:34:41:42:48:9b:92:b4:b0:df:f7: 5c:2a:0d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5OLis1v0UW4Y/Emh28zF4+q5wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTA2MTUwNzA2NDBaFw0yNTA2MTgwODI4NDBaMDMxMTAvBgNV BAMTKEU2NjE3MzgxMTJDRkRCNjE1RkJFNkMyOTA5NDg2Rjc2QkJENEVENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dBM9hBQ3qWYaK/XnnM7o/OnL nqjpdZb0iOdVvg4NbgM/w1sivkWl+ZRWzjyPn49yYfcHtDPS2EGlVKoDUefxUrQj dV/MdbU83BApI9Uhfv93jWF44XkMcgjr393h9AsT6SyWj7hJ2oE641yh1deAM0tH eJmC09Llmh+AGEDSUtIq+JiF+X7tE2XBN343cF7HxImP00KqIETaVUOYhIaxdJ7X WOLg2FcFSAmPEonaSbYhrEd5jAhORjGjpUaepfQ470OEwIta3TKjVHYw4cqSTIxW CZPDNbSBSJJBHz/FLt55pHWglmz0XReYrVmoTGkfb6vyQ7FfPvjT+KaYzfZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5mFzgRLP22FfvmwpCUhvdrvU7WAwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfl2x5/FfJlRJUKTbKr1VbJ1GRC/qCGJno5 buxpAHAdg1sYZC3Kmip+9QlHbOOnM0kJ7N+pJl4EdeMjxVEKj4haJk69AzGRW07y 65ngaVeO4+1Q32CQVEcIqsJOMnrXOwSGMZbiNshafK1JDJQIDYQWxNFLhbsqTtwh icE0TWBm0BnJGbGsRrS4Bh2Gzf4XAyIjsdPRr3qdKO9Bf2dWERvYapk0ca5WEYmN 0VV5kXh0MgjWTcqw4DvHtiM/puLPmP4OqkrNpOuQ1IJsE+6lv/SGF77lt2v7B+vy 7+sV4TfGxYeqLHaHpIinZsUi0Xx9ikWcNEFCSJuStLDf91wqDY4= -----END CERTIFICATE-----Generated at Mon Jun 16 11:19:23 2025 by rpki-client