$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: UUDDtloh1cBP+bYIWp35cw0+gjtqB6vaSI31+hU7jEg= Subject key identifier: 28:4B:80:3A:D6:25:32:CA:55:95:0D:F6:D8:AA:02:35:ED:BF:A4:C3 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 72B82A355B6919A01B8C7FC164CCB6FA55978F5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 7D Signing time: Sun 20 Jul 2025 00:42:21 +0000 Manifest this update: Sun 20 Jul 2025 00:37:21 +0000 Manifest next update: Wed 23 Jul 2025 08:46:21 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: L6eJ4abG/K2uQ/d0zlgPMe1lGkbq2Jf6ckqO+UGZKxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b8:2a:35:5b:69:19:a0:1b:8c:7f:c1:64:cc:b6:fa:55:97:8f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Jul 20 00:37:21 2025 GMT Not After : Jul 23 08:46:21 2025 GMT Subject: CN=284B803AD62532CA55950DF6D8AA0235EDBFA4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:6b:4a:72:86:af:87:04:74:57:70:d4:68: cb:04:7e:55:37:33:db:a2:98:41:96:d3:9d:3e:05: 50:37:61:b5:43:45:76:3c:02:f7:33:94:84:cf:94: 4d:49:fc:cf:ed:bc:1d:10:42:86:7b:6c:83:62:ae: 26:2c:e7:38:51:e7:b1:66:ff:1a:2f:00:3b:5e:0b: 24:2f:40:2f:9d:74:a8:3a:63:dd:5e:06:20:2f:9b: fd:38:bb:17:41:9a:0a:eb:c7:46:4a:ce:00:98:55: a7:22:e0:1e:4e:05:79:c6:7c:bf:13:bc:f1:43:1e: 8c:dc:f2:29:da:78:88:02:2a:cd:e7:66:64:41:33: f3:b7:b7:58:28:8b:77:52:b2:f6:dd:69:16:fb:82: a7:39:4c:63:ed:b4:70:f0:38:ee:86:6f:a9:9f:63: 17:d8:a8:0f:b4:a9:e7:c4:54:c8:e3:0d:ec:db:25: f7:31:30:b9:4e:e1:9f:b7:37:8f:9f:75:80:97:c7: a7:33:7b:42:c3:8f:40:35:95:70:76:2e:f7:c3:47: f3:aa:49:f6:18:d2:5f:cc:80:97:6c:89:c8:c6:d4: be:d0:52:ef:0b:3c:fc:8f:f7:61:b3:7a:2f:1b:42: d2:ad:87:39:9c:da:76:d1:13:1a:49:7d:52:2d:0d: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4B:80:3A:D6:25:32:CA:55:95:0D:F6:D8:AA:02:35:ED:BF:A4:C3 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:8b:33:be:b2:59:58:fc:bb:c0:81:fd:bb:fa:54:ec:fa:26: b5:f7:a8:43:1f:7d:95:ff:cb:4e:91:2f:8d:b7:7c:0b:9a:2d: 51:b9:4a:58:d7:64:5f:fd:29:12:ff:35:f4:74:ad:eb:7a:0c: c5:32:7c:4a:53:c0:7c:74:6d:71:21:ed:fe:2e:9f:4f:38:93: b4:96:c7:74:26:f3:e8:f8:92:47:7e:d3:3c:82:8e:9e:1a:4e: 90:4c:97:b1:90:7c:8c:70:ca:70:c0:12:4c:2f:61:bb:44:1c: c0:cf:f6:10:97:ca:0a:9a:1c:99:5e:f0:32:fc:fa:fa:ed:a4: 61:a7:77:8d:a8:7e:36:f3:ec:cb:3f:48:89:25:46:12:90:6a: 0d:db:ec:45:ab:cb:24:d0:ae:33:14:93:27:dc:8c:77:77:2e: c2:38:47:dd:96:fe:6a:29:0d:19:d9:d8:95:1a:a1:1c:e4:18: 14:3b:c2:95:f0:91:7d:aa:f8:cf:a9:92:04:e9:d0:bd:16:b9: 82:ab:60:d0:a0:0c:71:5c:44:10:f9:33:82:c0:b1:2f:08:a4: 75:ed:f4:ac:ae:b0:db:7b:9a:af:0c:2d:fc:b0:90:a6:05:d7: 44:06:54:37:7a:14:19:c1:23:6b:f7:c6:e0:09:e7:30:68:7c: 02:ce:3b:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrgqNVtpGaAbjH/BZMy2+lWXj10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA3MjAwMDM3MjFaFw0yNTA3MjMwODQ2MjFaMDMxMTAvBgNV BAMTKDI4NEI4MDNBRDYyNTMyQ0E1NTk1MERGNkQ4QUEwMjM1RURCRkE0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyWtKcoavhwR0V3DUaMsEflU3 M9uimEGW050+BVA3YbVDRXY8AvczlITPlE1J/M/tvB0QQoZ7bINiriYs5zhR57Fm /xovADteCyQvQC+ddKg6Y91eBiAvm/04uxdBmgrrx0ZKzgCYVaci4B5OBXnGfL8T vPFDHozc8inaeIgCKs3nZmRBM/O3t1goi3dSsvbdaRb7gqc5TGPttHDwOO6Gb6mf YxfYqA+0qefEVMjjDezbJfcxMLlO4Z+3N4+fdYCXx6cze0LDj0A1lXB2LvfDR/Oq SfYY0l/MgJdsicjG1L7QUu8LPPyP92Gzei8bQtKthzmc2nbRExpJfVItDYy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKEuAOtYlMspVlQ322KoCNe2/pMMwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyLM76yWVj8u8CB/bv6VOz6JrX3qEMffZX/ y06RL423fAuaLVG5SljXZF/9KRL/NfR0ret6DMUyfEpTwHx0bXEh7f4un084k7SW x3Qm8+j4kkd+0zyCjp4aTpBMl7GQfIxwynDAEkwvYbtEHMDP9hCXygqaHJle8DL8 +vrtpGGnd42ofjbz7Ms/SIklRhKQag3b7EWryyTQrjMUkyfcjHd3LsI4R92W/mop DRnZ2JUaoRzkGBQ7wpXwkX2q+M+pkgTp0L0WuYKrYNCgDHFcRBD5M4LAsS8IpHXt 9KyusNt7mq8MLfywkKYF10QGVDd6FBnBI2v3xuAJ5zBofALOO44= -----END CERTIFICATE-----Generated at Mon Jul 21 12:49:06 2025 by rpki-client