$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: 9UR9xmtPoTbSf0+atag4w2HizxCO5ZGKbFr656r7Soo= Subject key identifier: C0:86:BB:DD:B9:D6:9C:48:43:32:6E:4C:C2:3B:02:A8:72:03:2C:36 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 522A61F67BAD26C2F54F9FBA2406D87D6D617420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 0462 Signing time: Wed 23 Jul 2025 19:22:23 +0000 Manifest this update: Wed 23 Jul 2025 19:17:23 +0000 Manifest next update: Sun 27 Jul 2025 06:40:23 +0000 Files and hashes: 1: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) 2: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: 9R6ARUVvnMrzGjXGKGlYv0jZrjdUUbzdn4kwECj0hD8=) 3: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) 4: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) 5: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 06:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2a:61:f6:7b:ad:26:c2:f5:4f:9f:ba:24:06:d8:7d:6d:61:74:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Jul 23 19:17:23 2025 GMT Not After : Jul 27 06:40:23 2025 GMT Subject: CN=C086BBDDB9D69C4843326E4CC23B02A872032C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:3a:aa:3f:24:88:df:5d:80:43:38:59:02: b2:67:5c:d0:fa:2a:8e:2d:29:9c:2a:cd:f4:67:63: 77:5b:65:0c:13:a5:95:7f:a4:69:18:0d:44:20:19: 3b:ad:3a:0b:20:da:e2:aa:69:3d:0d:49:c1:94:fc: 36:fb:c1:92:e8:6c:1a:11:9f:95:39:93:3e:c1:1c: 0c:2b:a9:06:3a:6c:33:56:66:a1:c3:53:cf:3b:4d: e7:da:ec:26:95:5f:94:e6:06:10:31:1a:c6:c7:a9: 55:18:5f:f0:77:ad:31:d5:3e:7b:61:5e:b7:d5:a2: 7c:85:73:b2:33:87:6d:18:63:d3:88:0b:26:15:8b: c6:c1:83:63:66:c4:aa:c0:ac:ed:dd:7e:52:cd:bb: fa:28:62:51:dd:01:c1:70:18:0b:02:83:57:18:27: af:8e:42:d9:6b:41:37:07:80:3c:80:3d:d7:65:6e: ba:65:98:ff:fa:1b:22:1e:72:49:60:ef:5b:60:b9: 94:82:c9:aa:dd:f8:16:0d:0f:9e:e1:3b:02:a8:27: 1e:eb:96:81:1f:5c:31:32:d2:39:b6:28:de:32:a5: 81:f5:82:ff:a5:03:43:03:ae:22:a7:90:cd:9f:23: eb:a4:ad:11:76:bc:85:70:93:4a:39:97:c9:82:eb: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:86:BB:DD:B9:D6:9C:48:43:32:6E:4C:C2:3B:02:A8:72:03:2C:36 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:dc:06:a8:ab:12:a3:85:a4:e1:56:51:32:61:a2:f5:1f:1a: e1:38:74:5e:89:7a:9f:19:4b:30:42:66:28:2f:58:38:45:d3: f9:80:05:78:dc:7f:4c:5a:4f:53:3d:87:12:db:e9:22:94:48: 4c:cf:b5:f0:00:68:9d:15:28:8a:4c:a2:7b:20:d9:90:58:ec: 82:8d:51:8e:fd:c3:41:e8:14:4f:13:ad:01:ba:64:24:4f:41: 95:15:ef:e7:25:69:ce:f4:1b:38:71:ec:e7:f0:c7:9a:17:54: 2a:57:ed:ed:43:fe:0a:40:68:a3:fc:40:29:ab:25:f3:57:b7: e3:92:23:df:b1:74:65:75:8c:ed:1f:d9:48:3a:42:bd:4a:ca: cf:37:34:21:5f:f7:1b:c2:78:21:7d:71:b1:95:f1:d6:a9:d4: 1f:9b:fb:c1:fb:ab:09:61:8c:a7:2d:6b:85:72:72:1f:b6:75: 29:13:3f:22:20:80:10:c4:2d:2e:6e:d6:58:64:c2:66:3d:65: 5f:a9:74:91:e5:81:06:a8:44:98:62:f5:a5:db:08:34:04:5f: 06:28:fd:e3:0d:eb:b5:5e:45:78:fa:2d:0a:38:98:2b:7c:41: d1:e6:8d:6f:e8:1b:4a:25:b0:74:06:df:c1:e6:16:6e:5b:ec: 73:e1:8b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiph9nutJsL1T5+6JAbYfW1hdCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA3MjMxOTE3MjNaFw0yNTA3MjcwNjQwMjNaMDMxMTAvBgNV BAMTKEMwODZCQkREQjlENjlDNDg0MzMyNkU0Q0MyM0IwMkE4NzIwMzJDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqTqqPySI312AQzhZArJnXND6 Ko4tKZwqzfRnY3dbZQwTpZV/pGkYDUQgGTutOgsg2uKqaT0NScGU/Db7wZLobBoR n5U5kz7BHAwrqQY6bDNWZqHDU887Tefa7CaVX5TmBhAxGsbHqVUYX/B3rTHVPnth XrfVonyFc7Izh20YY9OICyYVi8bBg2NmxKrArO3dflLNu/ooYlHdAcFwGAsCg1cY J6+OQtlrQTcHgDyAPddlbrplmP/6GyIecklg71tguZSCyard+BYND57hOwKoJx7r loEfXDEy0jm2KN4ypYH1gv+lA0MDriKnkM2fI+ukrRF2vIVwk0o5l8mC61vFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwIa73bnWnEhDMm5MwjsCqHIDLDYwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvcBqirEqOFpOFWUTJhovUfGuE4dF6Jep8Z SzBCZigvWDhF0/mABXjcf0xaT1M9hxLb6SKUSEzPtfAAaJ0VKIpMonsg2ZBY7IKN UY79w0HoFE8TrQG6ZCRPQZUV7+clac70Gzhx7Ofwx5oXVCpX7e1D/gpAaKP8QCmr JfNXt+OSI9+xdGV1jO0f2Ug6Qr1Kys83NCFf9xvCeCF9cbGV8dap1B+b+8H7qwlh jKcta4Vych+2dSkTPyIggBDELS5u1lhkwmY9ZV+pdJHlgQaoRJhi9aXbCDQEXwYo /eMN67VeRXj6LQo4mCt8QdHmjW/oG0olsHQG38HmFm5b7HPhi2Q= -----END CERTIFICATE-----Generated at Fri Jul 25 20:54:21 2025 by rpki-client