$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: 3B7WNcK2AXDDQeXdJmncZPnX3smNMd+HK/PuXei/Ivg= Subject key identifier: 29:E2:2F:F9:05:74:09:F1:CD:F9:53:5D:BA:FB:00:08:17:8E:9B:80 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 7D010912D55EF1EC2626EC942939C040757D8DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 0213 Signing time: Mon 21 Jul 2025 02:03:38 +0000 Manifest this update: Mon 21 Jul 2025 01:58:38 +0000 Manifest next update: Thu 24 Jul 2025 10:15:38 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: wXA7UnQmnEhJpYoXruZc+UMQeKA+pvVZp8wxTpizhjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:01:09:12:d5:5e:f1:ec:26:26:ec:94:29:39:c0:40:75:7d:8d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Jul 21 01:58:38 2025 GMT Not After : Jul 24 10:15:38 2025 GMT Subject: CN=29E22FF9057409F1CDF9535DBAFB0008178E9B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:67:9f:16:07:5a:cb:a6:2c:ff:a7:c6:47: 37:0b:cd:85:e2:e7:9e:50:ad:7b:af:20:a7:67:7c: 3b:8e:a4:4d:a7:c1:cf:f6:2a:ef:33:5f:d9:a1:a1: e7:06:f8:1b:9e:5f:28:a9:ab:4e:96:60:81:44:12: 08:b6:14:23:7c:9b:b8:13:3f:9d:a2:6a:da:79:2a: 8d:0e:9d:f8:9c:39:10:bb:d9:06:c7:6a:3b:8a:fc: 74:68:7d:9f:52:05:c0:88:50:b7:72:52:cc:3d:ec: ac:1f:54:a4:44:2a:de:14:47:3d:9e:20:57:a4:63: 95:e5:05:c2:51:e4:fa:de:43:49:e1:33:eb:9a:52: b7:9d:46:f0:b1:5f:8c:23:6a:51:dd:34:fc:f3:5f: eb:3f:52:ce:14:27:0e:da:9d:d8:ca:4c:19:6a:b7: d3:06:bc:04:18:5e:d4:d9:8e:c8:b5:2c:de:b2:4d: e0:07:c2:48:57:bd:cf:35:38:cc:3d:30:e6:75:58: 4f:e0:5b:21:79:26:47:4a:fe:f4:fe:d4:60:1b:8f: 50:83:cb:20:d3:22:e2:32:79:e1:23:b6:9a:b3:45: 49:25:54:0a:55:ad:8c:4d:1a:5d:ca:82:d9:ee:ac: e8:54:a4:b8:84:85:b5:d0:4a:a1:c3:4d:14:cf:25: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E2:2F:F9:05:74:09:F1:CD:F9:53:5D:BA:FB:00:08:17:8E:9B:80 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:61:d8:2e:50:50:88:b0:be:47:64:15:0c:3f:d0:f7:d8:0d: 1a:7b:bd:33:45:06:4f:a1:c7:9a:1b:6a:5a:71:1d:66:b4:49: 56:c1:f3:76:0b:3b:50:b1:61:55:5f:11:58:ea:49:0a:cc:7c: 8b:fb:77:61:61:4c:de:93:bc:97:12:cf:4c:f0:9e:81:f1:18: b9:6b:de:0e:c5:ef:78:27:0c:8e:d1:89:2c:72:9f:2a:ec:b5: d0:1a:4a:3e:68:bd:df:0e:a4:c4:aa:4a:7f:40:80:1c:26:55: a3:e6:6a:36:4d:0f:86:dc:8d:cb:d8:7c:c9:76:a1:3d:3d:80: 74:fa:58:bf:80:b5:cd:5f:4d:9a:a4:37:6e:5e:08:f2:87:bc: 40:1e:14:45:6a:c9:79:16:75:bc:75:ca:a9:d3:58:aa:05:30: e4:08:dc:5a:ae:31:01:b0:c3:1a:7b:59:e5:e0:85:e6:f5:50: 6e:82:0a:d8:7b:c1:1a:ed:59:76:ef:53:9a:38:57:94:7e:d2: 3e:be:fa:f0:7d:4c:59:77:e0:ba:f4:ae:42:24:63:a2:f9:f1: 99:96:28:bb:80:9c:1f:e8:23:74:54:cf:5b:f5:9b:4f:5b:a9: ca:37:6a:9d:f8:95:41:ea:9a:41:18:3b:4c:5d:e8:7a:23:84: 79:08:10:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQEJEtVe8ewmJuyUKTnAQHV9jaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA3MjEwMTU4MzhaFw0yNTA3MjQxMDE1MzhaMDMxMTAvBgNV BAMTKDI5RTIyRkY5MDU3NDA5RjFDREY5NTM1REJBRkIwMDA4MTc4RTlCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFWefFgday6Ys/6fGRzcLzYXi 555QrXuvIKdnfDuOpE2nwc/2Ku8zX9mhoecG+BueXyipq06WYIFEEgi2FCN8m7gT P52iatp5Ko0OnficORC72QbHajuK/HRofZ9SBcCIULdyUsw97KwfVKREKt4URz2e IFekY5XlBcJR5PreQ0nhM+uaUredRvCxX4wjalHdNPzzX+s/Us4UJw7andjKTBlq t9MGvAQYXtTZjsi1LN6yTeAHwkhXvc81OMw9MOZ1WE/gWyF5JkdK/vT+1GAbj1CD yyDTIuIyeeEjtpqzRUklVApVrYxNGl3KgtnurOhUpLiEhbXQSqHDTRTPJaLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKeIv+QV0CfHN+VNduvsACBeOm4AwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZh2C5QUIiwvkdkFQw/0PfYDRp7vTNFBk+h x5obalpxHWa0SVbB83YLO1CxYVVfEVjqSQrMfIv7d2FhTN6TvJcSz0zwnoHxGLlr 3g7F73gnDI7RiSxynyrstdAaSj5ovd8OpMSqSn9AgBwmVaPmajZND4bcjcvYfMl2 oT09gHT6WL+Atc1fTZqkN25eCPKHvEAeFEVqyXkWdbx1yqnTWKoFMOQI3FquMQGw wxp7WeXgheb1UG6CCth7wRrtWXbvU5o4V5R+0j6++vB9TFl34Lr0rkIkY6L58ZmW KLuAnB/oI3RUz1v1m09bqco3ap34lUHqmkEYO0xd6HojhHkIEHo= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:28 2025 by rpki-client