$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: Gd7NCXH90wwOb/uDJNGu85ndT0rwZLd/4zL3rNEv8EU= Subject key identifier: C7:5A:33:92:89:26:A1:38:37:38:37:52:45:D0:0B:4D:76:8B:BE:8F Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 1293E55E467146D78BB9DAC3CBBBBF568BAB0C9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: B6 Signing time: Sun 20 Jul 2025 16:11:05 +0000 Manifest this update: Sun 20 Jul 2025 16:06:05 +0000 Manifest next update: Wed 23 Jul 2025 16:57:05 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: UMEPXa0SxhfNWj8/nKbPCaeFeNSZMQXS5F/IxgGP4Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:93:e5:5e:46:71:46:d7:8b:b9:da:c3:cb:bb:bf:56:8b:ab:0c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Jul 20 16:06:05 2025 GMT Not After : Jul 23 16:57:05 2025 GMT Subject: CN=C75A33928926A1383738375245D00B4D768BBE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0c:0e:b0:d3:d1:58:b6:b5:30:9a:7a:8e:46: c3:39:d1:b5:b2:56:e7:62:fc:86:1b:99:6d:34:90: a4:c7:65:b1:4d:f2:76:46:fd:02:f8:63:26:87:91: 90:81:2c:8f:b9:bc:ab:66:41:21:dc:95:38:24:50: 64:11:46:2b:e6:82:ac:97:a5:6e:a3:d2:1c:0f:08: 1b:6b:b4:39:df:c0:03:0c:d2:cd:14:4b:3c:59:23: c6:a0:f1:4c:c0:57:36:6b:25:9b:bd:6f:98:ef:b5: 04:7a:72:93:32:2f:32:eb:71:5d:67:10:81:c7:60: e7:e4:15:83:3e:52:28:e4:6d:f5:01:0b:9f:67:bf: 4f:1e:71:38:05:d4:54:22:3a:34:67:fb:7a:44:51: 3d:91:6e:a1:6c:a4:36:bd:75:0c:f6:2f:76:51:32: c4:d6:46:88:c8:e0:52:c7:41:31:f5:26:f2:bd:de: d4:23:c2:94:f1:7a:5f:de:2a:6d:19:63:5c:43:8a: 7b:8c:6b:59:76:e0:25:60:35:d0:9d:e9:09:99:c0: 5e:8d:cb:e2:c5:bc:d5:67:56:40:85:98:cf:d3:be: 81:7c:2b:59:22:07:0d:60:f2:71:08:f9:4e:4e:ba: 46:67:e6:89:0e:f5:14:1c:2f:7e:61:9e:af:e8:85: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5A:33:92:89:26:A1:38:37:38:37:52:45:D0:0B:4D:76:8B:BE:8F X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a8:99:84:0b:46:fc:5e:44:11:f1:3c:33:52:e7:80:cc:d6: b4:ac:43:3d:eb:f8:de:2f:1f:57:31:b5:3c:56:73:70:f0:e0: bb:4b:d3:89:f3:e3:ec:1f:3e:8c:c0:3b:b0:12:4d:16:45:2b: 1a:0f:8b:e9:24:08:44:4a:fc:06:16:4b:34:ce:59:c1:d3:2a: f2:c9:81:79:16:ed:c6:7f:4f:d7:46:b7:32:e5:3f:a2:d1:c0: 89:48:50:59:8a:4b:9b:1c:40:7d:d5:10:cd:c0:d0:cd:3a:e8: f4:1b:d4:35:ee:f8:27:78:df:fd:6d:2c:29:68:8b:38:40:a8: 52:2f:ed:12:16:d3:37:8e:73:4c:fb:c6:aa:9d:7a:eb:6d:0c: f2:e3:ca:5b:4b:f9:53:1d:bf:0d:83:33:d1:4e:19:ad:3c:53: ca:2a:88:fd:68:cf:e8:e9:ce:48:94:fe:19:32:b0:06:b6:b3: e2:60:37:0b:bc:25:cb:bd:eb:9e:31:32:28:ed:4c:5e:1a:f7: 9c:da:81:a7:c5:46:4c:7c:55:b6:ff:03:ed:17:c3:fe:5d:87: 7b:d7:d3:68:e0:ac:64:17:42:b6:a9:42:8d:32:0e:00:e4:49: c4:30:76:cc:0d:04:09:1b:a7:96:f9:0a:dc:d5:b3:f1:fd:1e: 21:70:e5:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpPlXkZxRteLudrDy7u/VourDJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA3MjAxNjA2MDVaFw0yNTA3MjMxNjU3MDVaMDMxMTAvBgNV BAMTKEM3NUEzMzkyODkyNkExMzgzNzM4Mzc1MjQ1RDAwQjRENzY4QkJFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDA6w09FYtrUwmnqORsM50bWy Vudi/IYbmW00kKTHZbFN8nZG/QL4YyaHkZCBLI+5vKtmQSHclTgkUGQRRivmgqyX pW6j0hwPCBtrtDnfwAMM0s0USzxZI8ag8UzAVzZrJZu9b5jvtQR6cpMyLzLrcV1n EIHHYOfkFYM+UijkbfUBC59nv08ecTgF1FQiOjRn+3pEUT2RbqFspDa9dQz2L3ZR MsTWRojI4FLHQTH1JvK93tQjwpTxel/eKm0ZY1xDinuMa1l24CVgNdCd6QmZwF6N y+LFvNVnVkCFmM/TvoF8K1kiBw1g8nEI+U5OukZn5okO9RQcL35hnq/ohYPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx1ozkokmoTg3ODdSRdALTXaLvo8wHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFComYQLRvxeRBHxPDNS54DM1rSsQz3r+N4v H1cxtTxWc3Dw4LtL04nz4+wfPozAO7ASTRZFKxoPi+kkCERK/AYWSzTOWcHTKvLJ gXkW7cZ/T9dGtzLlP6LRwIlIUFmKS5scQH3VEM3A0M066PQb1DXu+Cd43/1tLClo izhAqFIv7RIW0zeOc0z7xqqdeuttDPLjyltL+VMdvw2DM9FOGa08U8oqiP1oz+jp zkiU/hkysAa2s+JgNwu8Jcu9654xMijtTF4a95zagafFRkx8Vbb/A+0Xw/5dh3vX 02jgrGQXQrapQo0yDgDkScQwdswNBAkbp5b5CtzVs/H9HiFw5Zw= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:25 2025 by rpki-client