$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json) Hash identifier: KEKabEmgyf/WhVncyXY7+728MrFqlIyXxIdRbX1oD4E= Subject key identifier: 67:C7:03:3D:4A:5D:E8:17:8B:D6:AB:F5:DF:40:5D:8F:90:ED:6E:1D Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD Certificate serial: 4E5C710D6C198D5C82D21A57580D753E4D69BC3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft Manifest number: 01EC Signing time: Sat 19 Jul 2025 11:51:30 +0000 Manifest this update: Sat 19 Jul 2025 11:46:30 +0000 Manifest next update: Tue 22 Jul 2025 12:36:30 +0000 Files and hashes: 1: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: qAF7JZLqhLMGg/3p3vzjQtmVHn4Lywq69CIwH8EqBuE=) 2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5c:71:0d:6c:19:8d:5c:82:d2:1a:57:58:0d:75:3e:4d:69:bc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Validity Not Before: Jul 19 11:46:30 2025 GMT Not After : Jul 22 12:36:30 2025 GMT Subject: CN=67C7033D4A5DE8178BD6ABF5DF405D8F90ED6E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:f9:1a:78:90:b2:a1:b7:50:7a:16:9a:2a: 10:46:2d:ae:dd:65:d6:86:b8:b1:d2:d5:61:a0:a3: ad:a7:a3:38:ea:51:a4:41:a8:ed:24:8b:17:b2:57: 3c:f5:43:cd:25:a3:27:6e:92:eb:25:f7:de:85:2d: e1:69:3a:b0:77:c9:66:42:5b:b8:c3:2c:2f:33:bd: 58:13:59:cf:81:60:c1:3c:4f:0a:3c:d6:9a:1a:b6: ea:47:29:7a:95:17:4f:79:c4:7b:8b:99:8a:30:ef: 81:bd:7d:c9:c1:10:94:b3:9c:6d:bd:77:6f:4c:d7: f5:21:6d:ef:f4:9d:6b:0f:82:81:a4:ce:cc:be:33: 45:ac:c2:5a:69:61:ba:ec:c7:0c:c9:10:34:73:75: a3:fe:d1:c0:b7:25:52:ad:fd:47:a5:3d:77:84:5c: b0:30:65:e9:c2:6d:02:35:0f:49:b7:9a:30:e2:6d: e0:87:d3:4c:4e:fd:64:cc:56:79:85:e4:ec:a4:36: e3:96:7c:92:e2:1d:46:cf:cd:f8:6d:b4:f2:a7:01: d7:08:29:19:cc:bc:49:ce:c6:49:2b:1c:e8:a4:35: 03:62:a9:cc:62:51:2a:63:d9:93:9b:b5:be:9a:92: d9:a3:ec:0f:6e:78:63:55:44:07:8c:e0:0d:81:32: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:03:3D:4A:5D:E8:17:8B:D6:AB:F5:DF:40:5D:8F:90:ED:6E:1D X509v3 Authority Key Identifier: keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:fa:35:12:cb:22:30:c4:2f:62:d4:4b:24:f2:90:65:51: 22:7c:a5:c7:83:8c:82:cf:06:db:72:77:54:9a:5f:48:74:8d: 0b:a9:39:c4:d9:ed:7e:83:77:63:05:9b:69:bd:e6:da:6b:e1: 43:ef:dd:65:9c:88:28:c9:08:55:21:5c:97:39:c7:bf:37:e7: 9d:97:81:5d:df:b7:c0:b6:eb:06:00:4f:e3:b8:7a:91:ca:19: d9:b8:49:0b:96:f7:b3:92:be:d7:ca:62:af:af:fb:81:96:3c: 94:78:4b:17:a6:1f:9e:bf:db:c2:20:fd:5f:70:1b:2f:aa:d4: 85:65:31:11:6b:b1:09:89:e4:26:7e:16:c7:f5:da:db:dd:f1: 9d:4c:d7:33:29:62:16:a1:26:04:e3:ac:26:fb:f8:45:46:82: 7b:e4:c1:39:19:56:1d:6c:71:27:56:b3:9e:aa:95:3c:4c:a3: 1b:e0:a1:ee:b9:2c:bd:14:86:c1:aa:e1:48:d5:a9:31:45:a8: 82:95:f4:09:7d:96:b0:50:ae:3e:dc:aa:7a:b4:78:5f:18:eb: 8b:66:ef:ae:08:a0:69:84:bc:10:a7:12:d8:e8:16:7f:fe:3c: 25:83:65:0c:8b:9a:7a:36:b2:d4:e7:dc:52:dd:c2:d3:ad:df: 69:ae:61:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlxxDWwZjVyC0hpXWA11Pk1pvD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURG NDUxOTFGRDAeFw0yNTA3MTkxMTQ2MzBaFw0yNTA3MjIxMjM2MzBaMDMxMTAvBgNV BAMTKDY3QzcwMzNENEE1REU4MTc4QkQ2QUJGNURGNDA1RDhGOTBFRDZFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFY/kaeJCyobdQehaaKhBGLa7d ZdaGuLHS1WGgo62nozjqUaRBqO0kixeyVzz1Q80loydukusl996FLeFpOrB3yWZC W7jDLC8zvVgTWc+BYME8Two81poatupHKXqVF095xHuLmYow74G9fcnBEJSznG29 d29M1/Uhbe/0nWsPgoGkzsy+M0WswlppYbrsxwzJEDRzdaP+0cC3JVKt/UelPXeE XLAwZenCbQI1D0m3mjDibeCH00xO/WTMVnmF5OykNuOWfJLiHUbPzfhttPKnAdcI KRnMvEnOxkkrHOikNQNiqcxiUSpj2ZObtb6aktmj7A9ueGNVRAeM4A2BMiBNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ8cDPUpd6BeL1qv130Bdj5Dtbh0wHwYDVR0j BBgwFoAUH1a0+t4RYwJwhlR/vLQk7fRRkf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC8xRjU2QjRGQURF MTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5MUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURGNDUx OTFGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0 RURGNDUxOTFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqm+jUSyyIwxC9i1Esk8pBlUSJ8pceDjILP Bttyd1SaX0h0jQupOcTZ7X6Dd2MFm2m95tpr4UPv3WWciCjJCFUhXJc5x783552X gV3ft8C26wYAT+O4epHKGdm4SQuW97OSvtfKYq+v+4GWPJR4SxemH56/28Ig/V9w Gy+q1IVlMRFrsQmJ5CZ+Fsf12tvd8Z1M1zMpYhahJgTjrCb7+EVGgnvkwTkZVh1s cSdWs56qlTxMoxvgoe65LL0UhsGq4UjVqTFFqIKV9Al9lrBQrj7cqnq0eF8Y64tm 764IoGmEvBCnEtjoFn/+PCWDZQyLmno2stTn3FLdwtOt32muYdI= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:00 2025 by rpki-client