$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: Fc67+v0Cx5MzAeB69wj0LlaQLHMtYsCYt9+yDNsZPus= Subject key identifier: 7E:A3:80:A6:58:B0:BB:FF:87:00:54:CE:D3:37:06:50:6A:B5:B5:DD Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 085BE6ABC7EC023B3443EE65467BFE29D922F8F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: BE Signing time: Mon 21 Jul 2025 10:20:04 +0000 Manifest this update: Mon 21 Jul 2025 10:15:04 +0000 Manifest next update: Thu 24 Jul 2025 18:34:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: oFMe8+3k0ORIMav9ZUcj7zJn/uHxiNd0zs2mfMmj4UA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 18:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5b:e6:ab:c7:ec:02:3b:34:43:ee:65:46:7b:fe:29:d9:22:f8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Jul 21 10:15:04 2025 GMT Not After : Jul 24 18:34:04 2025 GMT Subject: CN=7EA380A658B0BBFF870054CED33706506AB5B5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:e2:98:81:ad:b8:1a:ec:b5:cc:d7:6a:22: 66:38:6e:cd:52:82:7e:90:56:ff:54:22:eb:af:02: bf:4d:47:50:40:eb:da:af:59:d0:a3:d1:23:e5:af: d0:8c:53:6f:6a:c6:26:c1:11:c9:01:8f:19:b8:46: d6:c8:3d:80:7a:c5:06:b3:d3:2c:15:b9:98:e7:b4: 78:70:91:3a:7d:bc:4f:2b:18:6b:2a:a9:9a:04:66: fa:fa:3c:4c:af:1e:55:81:8d:3f:5d:40:05:bb:73: 64:ce:0a:69:41:5a:b3:9f:6b:d7:9b:e8:fd:30:c1: 3e:f0:ac:24:15:7c:d5:fc:95:17:07:72:48:9b:e1: 51:25:e9:b3:da:ce:a4:b1:dd:48:32:07:7f:c1:d2: d0:9f:8c:10:1c:8b:94:e0:ea:ac:99:6b:98:6b:2a: e7:9b:db:19:51:b3:03:5b:95:44:5e:9a:07:4f:bf: e4:39:3e:7d:81:e5:7c:0e:a5:02:ef:76:0e:7e:5e: 2a:1a:63:11:9c:be:40:80:9e:b7:fd:c5:e0:33:a6: b3:d3:7b:6d:91:5c:cc:4e:47:5d:fc:18:dc:57:69: 82:3a:51:4f:69:f3:19:9a:c6:8f:9c:f3:44:be:eb: 00:1c:20:ad:78:43:64:99:c8:35:d2:37:31:2d:01: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A3:80:A6:58:B0:BB:FF:87:00:54:CE:D3:37:06:50:6A:B5:B5:DD X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6d:cf:33:33:5a:a3:b4:c9:21:d6:4e:3e:eb:b8:9b:0a:ae: ee:4c:9d:c7:c5:3d:f9:27:c2:7e:8d:b6:9b:60:11:49:ad:78: 06:3d:f1:7a:f7:86:b3:69:8c:94:09:1b:75:95:05:aa:81:67: 10:c5:64:82:4e:b1:d0:4f:b0:dc:91:a6:a1:1f:39:c1:91:5c: dc:17:41:de:81:b5:24:f5:3a:1d:fb:90:69:a7:7f:ca:c7:e6: 93:00:45:a4:38:42:7b:f1:e5:85:02:03:3b:34:55:9b:0f:18: f0:32:cd:b6:d4:51:fd:b1:ef:c1:ee:86:0b:1f:b2:b7:cc:30: 32:7c:b0:66:86:5f:2c:11:04:f2:df:dc:ad:42:ca:81:d3:15: c7:69:2f:bd:65:90:a5:7d:0d:36:10:fd:bf:b2:b9:6e:52:f6: 5e:6a:ca:a5:2e:06:8a:cc:71:d1:aa:17:ea:08:b1:22:85:fb: 04:71:e2:b1:15:81:ae:bc:6a:45:81:0b:29:3b:c6:42:78:de: f0:20:6a:73:13:08:3d:17:a9:8b:d7:42:cc:76:93:7a:b1:6d: 5e:fa:05:0a:52:e3:38:5e:a9:d3:8f:3b:ff:b3:8b:ec:f0:a2: e6:d6:47:dd:d8:d0:8f:ca:c4:90:8f:84:cf:1e:f0:b1:9c:77: 84:2d:28:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFvmq8fsAjs0Q+5lRnv+Kdki+PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTA3MjExMDE1MDRaFw0yNTA3MjQxODM0MDRaMDMxMTAvBgNV BAMTKDdFQTM4MEE2NThCMEJCRkY4NzAwNTRDRUQzMzcwNjUwNkFCNUI1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41+KYga24Guy1zNdqImY4bs1S gn6QVv9UIuuvAr9NR1BA69qvWdCj0SPlr9CMU29qxibBEckBjxm4RtbIPYB6xQaz 0ywVuZjntHhwkTp9vE8rGGsqqZoEZvr6PEyvHlWBjT9dQAW7c2TOCmlBWrOfa9eb 6P0wwT7wrCQVfNX8lRcHckib4VEl6bPazqSx3UgyB3/B0tCfjBAci5Tg6qyZa5hr Kueb2xlRswNblURemgdPv+Q5Pn2B5XwOpQLvdg5+XioaYxGcvkCAnrf9xeAzprPT e22RXMxOR138GNxXaYI6UU9p8xmaxo+c80S+6wAcIK14Q2SZyDXSNzEtAaFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfqOApliwu/+HAFTO0zcGUGq1td0wHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKltzzMzWqO0ySHWTj7ruJsKru5MncfFPfkn wn6NtptgEUmteAY98Xr3hrNpjJQJG3WVBaqBZxDFZIJOsdBPsNyRpqEfOcGRXNwX Qd6BtST1Oh37kGmnf8rH5pMARaQ4Qnvx5YUCAzs0VZsPGPAyzbbUUf2x78Huhgsf srfMMDJ8sGaGXywRBPLf3K1CyoHTFcdpL71lkKV9DTYQ/b+yuW5S9l5qyqUuBorM cdGqF+oIsSKF+wRx4rEVga68akWBCyk7xkJ43vAganMTCD0XqYvXQsx2k3qxbV76 BQpS4zheqdOPO/+zi+zwoubWR93Y0I/KxJCPhM8e8LGcd4QtKIU= -----END CERTIFICATE-----Generated at Tue Jul 22 19:51:32 2025 by rpki-client