$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: PycwMjS//1/5tagYJNFoTqHOjyx+rDBOHSiS5eh+kHY= Subject key identifier: EA:C8:C2:AA:97:99:6A:29:F5:1D:56:8B:3E:96:1E:7E:6C:87:9E:60 Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 273944EAD52895D74A5C704A53FA6B8D5BC7C4DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 029B Signing time: Sat 19 Jul 2025 23:22:20 +0000 Manifest this update: Sat 19 Jul 2025 23:17:20 +0000 Manifest next update: Wed 23 Jul 2025 04:14:20 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 0vXpxdXBoxtpu0xcyCU+AYUkP5Qq7RrqqwsILvqbx7A=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: mbs2bKpcnKliI/2SRYBDCAdZYUpTYRyGDyqXalJmkCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:39:44:ea:d5:28:95:d7:4a:5c:70:4a:53:fa:6b:8d:5b:c7:c4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Jul 19 23:17:20 2025 GMT Not After : Jul 23 04:14:20 2025 GMT Subject: CN=EAC8C2AA97996A29F51D568B3E961E7E6C879E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:5f:4f:de:95:fd:ab:0e:bf:d8:11:2c:4a: 06:40:40:df:eb:65:80:17:9d:88:4e:b9:2a:61:b1: 43:1f:c8:7e:81:df:16:75:24:9b:ff:21:e1:7b:d7: af:f8:21:89:f4:8c:da:cf:b1:78:bc:4c:7f:71:14: 88:03:3b:09:bb:db:bb:46:99:a4:2f:7d:87:8a:83: e0:d3:51:c2:a9:18:e6:e5:51:8a:dd:39:33:fd:23: ff:b6:80:38:86:e3:5d:b0:a2:70:12:ee:ed:95:39: d4:1c:92:f3:db:20:40:17:bb:aa:5b:54:f3:0d:ba: 83:21:fc:6f:d4:5f:e5:75:e3:3e:04:b0:5a:84:5e: 88:53:e0:b3:93:cb:2b:2a:09:e3:7e:7a:3f:5b:90: bc:5d:25:27:e0:e3:d3:6f:af:5a:9a:2b:77:de:0b: 25:00:a0:1b:bf:4b:77:28:75:8a:4e:79:40:0c:5d: 23:9c:af:63:a9:24:4b:96:8d:a6:34:18:30:08:e1: 1e:01:55:ef:1e:1b:5e:79:30:4a:bb:1c:f3:d7:67: 9a:f1:00:6e:f6:e1:fb:ae:36:48:6a:fa:57:51:69: f8:13:9c:36:9c:54:ad:6d:76:bf:47:88:a0:9b:c9: 3a:a2:74:b2:8d:ad:f3:41:ef:2a:ea:6d:63:90:0f: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C8:C2:AA:97:99:6A:29:F5:1D:56:8B:3E:96:1E:7E:6C:87:9E:60 X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:f0:c6:92:3a:f1:e1:fa:48:6f:54:24:59:cf:80:c4:f9:10: 30:4f:bf:b6:8f:19:88:ed:42:1c:54:40:c2:60:7b:4b:6c:c0: 98:22:60:70:5f:5b:89:cb:df:e7:40:47:34:b4:0c:ca:8e:d5: 24:9e:6e:e7:58:5c:86:a3:b7:ad:00:a3:20:3b:40:26:c7:c9: 56:60:3f:23:c4:3b:e0:cf:6c:5c:d9:bd:48:fc:5f:23:da:ae: b7:3a:de:81:34:98:29:e7:d6:35:c0:d9:a6:3d:66:78:ed:cc: 18:e8:9d:c8:e6:2d:fd:31:ec:a2:26:84:2e:b1:86:1e:b2:d1: f1:4f:b7:e4:61:a0:88:46:ec:e3:a3:d0:c1:61:75:50:cd:f1: 41:be:74:83:04:61:43:c6:29:10:a4:d1:94:0a:c6:50:f1:be: d2:a0:00:bf:da:98:e5:19:9f:fb:1d:f4:7d:81:20:a6:52:d1: 72:2c:1b:0f:4f:cb:15:ca:63:59:0f:ae:6b:33:53:82:8a:6f: 8e:b9:f9:a5:03:a3:68:e5:4f:8e:0b:4a:1d:b5:e9:58:0d:b8: 97:be:ad:3f:0b:20:5b:b3:56:f7:e6:a5:cb:62:fc:7d:35:8f: 7f:d5:54:ee:32:01:3e:3a:a7:2e:8b:19:5a:d0:8e:85:e1:20: 51:ff:55:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzlE6tUolddKXHBKU/prjVvHxNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTA3MTkyMzE3MjBaFw0yNTA3MjMwNDE0MjBaMDMxMTAvBgNV BAMTKEVBQzhDMkFBOTc5OTZBMjlGNTFENTY4QjNFOTYxRTdFNkM4NzlFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qF9P3pX9qw6/2BEsSgZAQN/r ZYAXnYhOuSphsUMfyH6B3xZ1JJv/IeF716/4IYn0jNrPsXi8TH9xFIgDOwm727tG maQvfYeKg+DTUcKpGOblUYrdOTP9I/+2gDiG412wonAS7u2VOdQckvPbIEAXu6pb VPMNuoMh/G/UX+V14z4EsFqEXohT4LOTyysqCeN+ej9bkLxdJSfg49Nvr1qaK3fe CyUAoBu/S3codYpOeUAMXSOcr2OpJEuWjaY0GDAI4R4BVe8eG155MEq7HPPXZ5rx AG724fuuNkhq+ldRafgTnDacVK1tdr9HiKCbyTqidLKNrfNB7yrqbWOQD8WZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sjCqpeZain1HVaLPpYefmyHnmAwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/wxpI68eH6SG9UJFnPgMT5EDBPv7aPGYjt QhxUQMJge0tswJgiYHBfW4nL3+dARzS0DMqO1SSebudYXIajt60AoyA7QCbHyVZg PyPEO+DPbFzZvUj8XyParrc63oE0mCnn1jXA2aY9ZnjtzBjoncjmLf0x7KImhC6x hh6y0fFPt+RhoIhG7OOj0MFhdVDN8UG+dIMEYUPGKRCk0ZQKxlDxvtKgAL/amOUZ n/sd9H2BIKZS0XIsGw9PyxXKY1kPrmszU4KKb465+aUDo2jlT44LSh216VgNuJe+ rT8LIFuzVvfmpcti/H01j3/VVO4yAT46py6LGVrQjoXhIFH/Vd8= -----END CERTIFICATE-----Generated at Mon Jul 21 02:16:41 2025 by rpki-client