$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: 425ikRYspKhJGeekwF+0e1z/KXMABEYWffidjvxXWV0= Subject key identifier: E2:32:29:F9:30:C6:3D:E8:17:80:9C:61:72:12:D6:E1:7F:51:EC:3E Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 3E91F52BF5084B68D6452F0D063ED5B157C6F420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 68 Signing time: Sat 19 Jul 2025 20:11:15 +0000 Manifest this update: Sat 19 Jul 2025 20:06:15 +0000 Manifest next update: Wed 23 Jul 2025 00:16:15 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: qHLmGWe4EhFkW5rdWOpVU3MawLWedJgjVTS1hQ1UoQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:91:f5:2b:f5:08:4b:68:d6:45:2f:0d:06:3e:d5:b1:57:c6:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Jul 19 20:06:15 2025 GMT Not After : Jul 23 00:16:15 2025 GMT Subject: CN=E23229F930C63DE817809C617212D6E17F51EC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:05:f0:88:e1:6e:a3:93:fc:19:c5:3d:47: 61:15:b9:48:7a:bb:f1:13:09:d7:9c:f4:77:7d:d4: f5:fb:8b:18:9b:58:8f:ab:5e:23:ac:f0:48:08:5f: b6:b2:75:01:cc:e7:20:97:bd:21:72:b5:d3:af:0e: 9f:73:f8:d3:64:4c:db:4d:41:24:82:a7:eb:c7:fa: 74:cb:f8:e5:c5:62:89:97:b6:61:c3:f3:e2:db:b0: 88:e4:50:82:2e:21:20:2f:36:fb:ac:8d:b2:5a:a1: c1:57:3a:d7:02:45:6f:b8:34:17:e1:80:ce:0d:df: 81:7d:f6:9f:05:89:66:88:81:d2:de:73:a3:18:0d: b9:0d:3b:24:43:98:78:2d:59:b7:ec:04:13:87:97: 46:f6:4b:56:f6:b5:b3:98:71:14:08:1a:71:6d:84: 45:e5:6a:83:71:d7:e5:65:6b:4d:b2:2a:48:b0:91: cd:a7:ab:d5:22:6d:f4:4e:72:7b:55:31:10:43:c2: a3:4e:c2:c7:9d:4f:7d:9d:9d:cf:54:77:5e:db:e7: 0f:ea:eb:f8:98:2e:e9:73:4c:e6:82:d9:8c:ff:9d: 33:e1:51:2d:39:c0:3a:1c:87:79:d5:f4:d8:8c:39: b1:03:3f:9c:a8:22:c4:f6:02:83:5a:cd:e4:af:2a: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:32:29:F9:30:C6:3D:E8:17:80:9C:61:72:12:D6:E1:7F:51:EC:3E X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a1:e7:4f:fe:3f:bd:f1:84:94:84:64:33:0e:08:13:f8:f9: 94:b3:9e:54:1a:0b:1e:6d:fc:f3:aa:05:22:7f:45:5a:07:8c: 68:87:2a:8a:f4:3c:8e:29:04:2e:ea:e4:57:ca:74:0e:e2:25: 39:3c:57:75:85:59:cf:c5:c5:d5:64:f9:51:af:08:46:82:bf: 78:80:bc:aa:30:99:ca:55:31:bb:6e:d1:83:6a:e3:2a:f2:13: b4:81:46:49:f0:e6:93:c6:0b:7b:01:26:67:4d:1e:e8:ff:71: 43:29:01:56:ab:4a:77:cd:d6:17:1b:81:6d:67:28:31:69:3f: 80:26:c8:7a:58:25:14:97:1a:26:61:6c:b6:7a:78:30:1c:ca: b1:c0:94:9d:39:74:2e:cc:e1:13:84:b3:8f:79:62:db:a5:5a: 27:66:97:ce:47:56:50:2e:a0:e2:d5:44:05:53:21:84:b1:92: 74:b3:14:15:4f:b8:ad:43:9a:db:47:ce:4f:73:ea:6e:d7:98: 18:ec:76:cc:ae:e6:98:b0:e2:b1:30:fa:23:53:c0:19:e7:ae: e5:42:07:60:8c:fa:fe:79:df:eb:82:e1:49:a7:8f:04:2e:e8: 47:f9:64:5a:f9:b5:a1:aa:b4:c5:82:e4:87:c9:7a:a8:49:73: d4:a6:d3:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpH1K/UIS2jWRS8NBj7VsVfG9CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTA3MTkyMDA2MTVaFw0yNTA3MjMwMDE2MTVaMDMxMTAvBgNV BAMTKEUyMzIyOUY5MzBDNjNERTgxNzgwOUM2MTcyMTJENkUxN0Y1MUVDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XAXwiOFuo5P8GcU9R2EVuUh6 u/ETCdec9Hd91PX7ixibWI+rXiOs8EgIX7aydQHM5yCXvSFytdOvDp9z+NNkTNtN QSSCp+vH+nTL+OXFYomXtmHD8+LbsIjkUIIuISAvNvusjbJaocFXOtcCRW+4NBfh gM4N34F99p8FiWaIgdLec6MYDbkNOyRDmHgtWbfsBBOHl0b2S1b2tbOYcRQIGnFt hEXlaoNx1+Vla02yKkiwkc2nq9UibfROcntVMRBDwqNOwsedT32dnc9Ud17b5w/q 6/iYLulzTOaC2Yz/nTPhUS05wDoch3nV9NiMObEDP5yoIsT2AoNazeSvKmlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jIp+TDGPegXgJxhchLW4X9R7D4wHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmh50/+P73xhJSEZDMOCBP4+ZSznlQaCx5t /POqBSJ/RVoHjGiHKor0PI4pBC7q5FfKdA7iJTk8V3WFWc/FxdVk+VGvCEaCv3iA vKowmcpVMbtu0YNq4yryE7SBRknw5pPGC3sBJmdNHuj/cUMpAVarSnfN1hcbgW1n KDFpP4AmyHpYJRSXGiZhbLZ6eDAcyrHAlJ05dC7M4ROEs495YtulWidml85HVlAu oOLVRAVTIYSxknSzFBVPuK1DmttHzk9z6m7XmBjsdsyu5piw4rEw+iNTwBnnruVC B2CM+v553+uC4UmnjwQu6Ef5ZFr5taGqtMWC5IfJeqhJc9Sm000= -----END CERTIFICATE-----Generated at Mon Jul 21 08:34:23 2025 by rpki-client