$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft File: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft (raw, json) Hash identifier: dXjI/iFFkLMehMQwgnNRuZfyVfBqEwXe08smlz4ZrDg= Subject key identifier: D6:96:AA:97:D8:AC:02:49:8C:AF:8E:FB:FF:10:90:8E:86:12:1D:68 Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB Certificate issuer: /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Certificate serial: 230E916A9FD52A88114E027A600EFC3829A1F932 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft Manifest number: F6 Signing time: Sat 19 Jul 2025 12:41:36 +0000 Manifest this update: Sat 19 Jul 2025 12:36:36 +0000 Manifest next update: Tue 22 Jul 2025 22:31:36 +0000 Files and hashes: 1: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: e/owJdVHtzdiWlc+5bYf6duathP08XcWsRrtdLiCBT0=) 2: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: hvITWyuaOSe+WcK+cnHTz44KIlJ1YZHmuFDfIdjnYxE=) 3: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl (hash: TcK/zzdyD49NnYPwI65otCjlM1OGNAv6eIIdbFZqy2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0e:91:6a:9f:d5:2a:88:11:4e:02:7a:60:0e:fc:38:29:a1:f9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Validity Not Before: Jul 19 12:36:36 2025 GMT Not After : Jul 22 22:31:36 2025 GMT Subject: CN=D696AA97D8AC02498CAF8EFBFF10908E86121D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:ec:72:9d:85:a3:94:36:e1:26:af:0d:f6: ba:b5:68:fb:6f:5a:ed:df:51:ae:9a:01:83:3c:48: 12:d5:76:96:b6:b3:11:a2:2e:7b:f3:40:ed:8b:bb: e7:84:8f:83:2f:6d:46:ff:28:fa:90:45:41:68:b6: 56:56:c7:20:48:0c:21:c8:9a:a7:ea:a4:0e:0f:23: 23:a2:10:4e:6b:41:9b:b2:a6:10:0a:45:b1:6f:02: e4:c0:06:3b:06:d9:92:72:50:d5:9b:72:4d:a8:fb: e4:96:bf:c5:05:99:1e:80:ae:0c:8e:5a:ef:e2:06: 68:ce:88:a4:c4:b2:6e:21:f3:5a:75:50:fa:5a:c2: 17:c8:74:c9:dd:72:86:0e:5d:c1:ce:de:61:9d:8d: 4c:ea:6f:0b:bb:05:9f:78:d9:09:32:e4:6b:45:d4: 6c:bf:dd:86:a9:9b:45:89:ab:3d:57:68:73:0f:6b: c3:a7:72:96:ce:ed:a3:a3:0d:a0:1f:ce:a9:3c:fc: 0a:f9:74:3e:48:5e:c9:95:bf:8d:12:8a:8f:01:cd: 30:2b:d7:da:6e:c7:9b:05:4b:72:59:1d:34:66:97: 40:f7:bd:20:d4:4d:34:2b:cf:1f:92:5f:c4:e1:30: a5:8f:20:d9:81:bc:8d:06:d3:66:35:5a:fc:8e:0a: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:96:AA:97:D8:AC:02:49:8C:AF:8E:FB:FF:10:90:8E:86:12:1D:68 X509v3 Authority Key Identifier: keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:90:d1:5f:2c:b8:d1:8f:39:0a:02:6c:dc:f7:eb:03:f4:ed: c1:dd:37:9a:98:20:96:7f:f1:e4:9d:2c:2c:e9:0e:c3:cc:bc: 96:4a:92:aa:d1:30:63:ea:1d:75:8f:38:3b:e9:50:8f:26:a1: c1:82:1a:ad:e9:54:a2:b8:32:42:d1:05:e4:3c:a8:6a:4a:a6: 87:99:eb:fb:41:fa:0b:09:e7:be:d9:09:30:6f:9d:e2:63:b4: 57:b7:2c:2b:30:6b:4a:a3:42:7d:d0:da:34:f4:03:15:87:fd: cf:e9:48:4e:8e:74:cf:f7:b5:06:95:7d:c6:06:0b:50:0a:e4: 9a:aa:a8:0f:b8:34:db:98:21:54:e3:d5:4e:33:36:0e:cd:75: bd:b6:09:f5:04:84:fc:53:68:c0:9f:3e:1e:93:fc:de:7c:f7: 87:2a:d2:a4:e6:57:fa:bc:1d:a9:87:1d:db:b1:4a:a1:f8:da: de:00:b2:33:cc:02:fa:de:25:4f:20:56:4f:4e:a7:a3:33:d4: 97:af:82:13:a2:4e:f0:4d:4f:b0:17:9b:b3:dd:d6:49:b8:f4: ae:bd:9c:27:02:78:14:08:c6:bb:6e:9b:96:95:c0:0a:48:ba: 7f:e1:38:9f:ac:73:d1:35:6a:85:27:e4:b8:5e:8a:09:91:6b: 94:49:6e:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIw6Rap/VKogRTgJ6YA78OCmh+TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FB OTg3ODJCQjAeFw0yNTA3MTkxMjM2MzZaFw0yNTA3MjIyMjMxMzZaMDMxMTAvBgNV BAMTKEQ2OTZBQTk3RDhBQzAyNDk4Q0FGOEVGQkZGMTA5MDhFODYxMjFENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhX+xynYWjlDbhJq8N9rq1aPtv Wu3fUa6aAYM8SBLVdpa2sxGiLnvzQO2Lu+eEj4MvbUb/KPqQRUFotlZWxyBIDCHI mqfqpA4PIyOiEE5rQZuyphAKRbFvAuTABjsG2ZJyUNWbck2o++SWv8UFmR6ArgyO Wu/iBmjOiKTEsm4h81p1UPpawhfIdMndcoYOXcHO3mGdjUzqbwu7BZ942Qky5GtF 1Gy/3Yapm0WJqz1XaHMPa8OncpbO7aOjDaAfzqk8/Ar5dD5IXsmVv40Sio8BzTAr 19pux5sFS3JZHTRml0D3vSDUTTQrzx+SX8ThMKWPINmBvI0G02Y1WvyOCt2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1paql9isAkmMr477/xCQjoYSHWgwHwYDVR0j BBgwFoAUH0xG4Y8hr75NismEYJC2OqmHgrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDdiMDI2NC05YTBhLTRjZTQtOTNjYi0yY2RkODQwYjg1MzQvMC8xRjRDNDZFMThG MjFBRkJFNEQ4QUM5ODQ2MDkwQjYzQUE5ODc4MkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FBOTg3 ODJCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2 M0FBOTg3ODJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOQ0V8suNGPOQoCbNz36wP07cHdN5qYIJZ/ 8eSdLCzpDsPMvJZKkqrRMGPqHXWPODvpUI8mocGCGq3pVKK4MkLRBeQ8qGpKpoeZ 6/tB+gsJ577ZCTBvneJjtFe3LCswa0qjQn3Q2jT0AxWH/c/pSE6OdM/3tQaVfcYG C1AK5JqqqA+4NNuYIVTj1U4zNg7Ndb22CfUEhPxTaMCfPh6T/N5894cq0qTmV/q8 HamHHduxSqH42t4AsjPMAvreJU8gVk9Op6Mz1JevghOiTvBNT7AXm7Pd1km49K69 nCcCeBQIxrtum5aVwApIun/hOJ+sc9E1aoUn5LheigmRa5RJbpU= -----END CERTIFICATE-----Generated at Mon Jul 21 12:28:21 2025 by rpki-client