$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: I9qEP+bmMD41rGjBV2MuO6nqApQqhAMqDKdQWVNQDAA= Subject key identifier: 58:25:E0:6D:75:2D:6A:25:8E:3D:FA:19:11:4D:D0:FB:B9:FB:DA:8A Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 3B9EE2303D567A173DD9845F034A3E12CA9E392F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 024E Signing time: Sat 19 Jul 2025 14:31:58 +0000 Manifest this update: Sat 19 Jul 2025 14:26:58 +0000 Manifest next update: Wed 23 Jul 2025 01:34:58 +0000 Files and hashes: 1: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: KWvZaTTCAaUDwwr+cQziP+XLjMPtgp9nRXOaBaqv8hc=) 2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 30G0irckoWueHdL2XRvtGhNfRlze7pvxH51N/l3bYKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9e:e2:30:3d:56:7a:17:3d:d9:84:5f:03:4a:3e:12:ca:9e:39:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Jul 19 14:26:58 2025 GMT Not After : Jul 23 01:34:58 2025 GMT Subject: CN=5825E06D752D6A258E3DFA19114DD0FBB9FBDA8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:9a:b1:1d:e2:7a:96:a0:74:69:e7:26:ae: aa:d2:71:20:16:30:ce:da:11:7e:e9:8f:53:fb:e4: 3c:c2:e5:9b:a3:de:b3:36:54:1f:a1:35:bc:02:c3: a2:18:6e:c1:7a:8d:db:20:4c:89:00:81:e1:8f:8e: f4:d2:a2:c8:78:81:54:46:f5:93:c4:e9:f9:03:c2: 3b:c3:90:8a:92:a0:73:ee:68:65:0f:1e:b2:88:bf: 62:7d:49:32:a7:66:71:3f:30:c1:da:d6:77:5a:17: f6:7c:ee:a9:71:ba:da:4d:66:82:69:10:9e:86:13: 18:cd:22:0f:90:f7:60:58:29:2d:26:96:27:81:01: 46:a1:52:8c:9f:51:c6:59:38:e5:86:54:8d:58:65: 13:79:4d:81:e5:2a:f5:14:7d:72:5f:d5:11:e0:e7: da:fc:23:d8:06:58:a2:de:d8:e3:d0:12:8f:55:e3: b0:92:9b:43:e0:0c:c1:34:b6:dc:c3:62:94:96:13: 1f:1b:e3:67:8b:df:c8:13:90:74:61:8b:2a:f3:e8: f0:d1:fb:c8:a1:35:57:c4:79:74:24:6d:df:ec:1b: 22:a4:bd:e5:0b:ef:98:03:b4:fc:0c:00:fb:ef:29: 43:11:ec:0a:84:76:58:0a:ac:7d:2b:18:87:5a:f2: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:25:E0:6D:75:2D:6A:25:8E:3D:FA:19:11:4D:D0:FB:B9:FB:DA:8A X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5c:d9:b5:b8:b3:ce:22:10:ab:64:1b:05:55:26:f5:bc:c2: a3:93:18:98:3d:d2:48:2c:23:d5:11:89:aa:57:af:95:52:67: 25:c1:7d:d3:6b:2b:82:bf:aa:84:56:c3:9c:b1:42:5f:e2:7f: 22:11:42:cc:31:51:90:29:d0:0a:14:91:8e:69:67:1c:3f:4f: 28:f7:43:ca:38:c7:4d:2f:1d:7f:27:b0:08:b1:c3:54:a1:17: d9:97:3b:3b:93:c7:80:05:be:82:86:a9:c4:8b:3f:2c:9c:3c: d1:42:bb:21:30:c9:a8:a3:b7:91:d7:df:4a:c5:71:67:65:bb: 2f:9e:39:09:93:ba:99:fd:8d:3c:ad:f5:a9:13:ad:ef:e3:02: d9:66:74:1f:4f:5d:e4:aa:d4:6b:01:7c:d0:68:bd:5e:24:04: d2:f9:72:ba:10:72:c1:b9:57:8e:93:94:da:9c:70:6f:a3:77: 3d:93:31:ae:f1:3e:3e:d7:df:3f:fe:17:6c:53:f0:51:f1:fd: f7:1f:54:2d:36:8c:84:f0:ca:51:f7:3b:62:0f:96:a8:76:c5: ad:75:3d:41:95:a3:12:9a:50:35:8f:91:2d:67:12:11:10:71: 1f:73:a9:ce:ee:92:dd:15:4e:a6:1c:5f:f7:bb:0c:19:8d:94: 4c:23:cd:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO57iMD1Wehc92YRfA0o+EsqeOS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTA3MTkxNDI2NThaFw0yNTA3MjMwMTM0NThaMDMxMTAvBgNV BAMTKDU4MjVFMDZENzUyRDZBMjU4RTNERkExOTExNEREMEZCQjlGQkRBOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNZqxHeJ6lqB0aecmrqrScSAW MM7aEX7pj1P75DzC5Zuj3rM2VB+hNbwCw6IYbsF6jdsgTIkAgeGPjvTSosh4gVRG 9ZPE6fkDwjvDkIqSoHPuaGUPHrKIv2J9STKnZnE/MMHa1ndaF/Z87qlxutpNZoJp EJ6GExjNIg+Q92BYKS0mlieBAUahUoyfUcZZOOWGVI1YZRN5TYHlKvUUfXJf1RHg 59r8I9gGWKLe2OPQEo9V47CSm0PgDME0ttzDYpSWEx8b42eL38gTkHRhiyrz6PDR +8ihNVfEeXQkbd/sGyKkveUL75gDtPwMAPvvKUMR7AqEdlgKrH0rGIda8ixHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWCXgbXUtaiWOPfoZEU3Q+7n72oowHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJc2bW4s84iEKtkGwVVJvW8wqOTGJg90kgs I9URiapXr5VSZyXBfdNrK4K/qoRWw5yxQl/ifyIRQswxUZAp0AoUkY5pZxw/Tyj3 Q8o4x00vHX8nsAixw1ShF9mXOzuTx4AFvoKGqcSLPyycPNFCuyEwyaijt5HX30rF cWdluy+eOQmTupn9jTyt9akTre/jAtlmdB9PXeSq1GsBfNBovV4kBNL5croQcsG5 V46TlNqccG+jdz2TMa7xPj7X3z/+F2xT8FHx/fcfVC02jITwylH3O2IPlqh2xa11 PUGVoxKaUDWPkS1nEhEQcR9zqc7ukt0VTqYcX/e7DBmNlEwjzbk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:52 2025 by rpki-client