$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: OjLBbdpBKSkGIhB6Ml28BWmRwda58hmdcBWF+PzkY9g= Subject key identifier: AF:EA:23:3F:9F:91:54:A6:40:CC:18:E3:89:6C:0A:5C:49:60:F1:54 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 3E486B499867A08B888460F40F8BD64EC484D41D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01B3 Signing time: Sat 19 Jul 2025 07:11:41 +0000 Manifest this update: Sat 19 Jul 2025 07:06:41 +0000 Manifest next update: Tue 22 Jul 2025 14:25:41 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: 94Qn+54RiIve/navVyzNbIMol64aGy7q7qr+WV9j4Vs=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:48:6b:49:98:67:a0:8b:88:84:60:f4:0f:8b:d6:4e:c4:84:d4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Jul 19 07:06:41 2025 GMT Not After : Jul 22 14:25:41 2025 GMT Subject: CN=AFEA233F9F9154A640CC18E3896C0A5C4960F154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:08:7e:54:68:2b:e4:1a:80:19:59:a2:c4: 5f:38:0c:de:2b:c1:ed:9d:21:56:3b:1c:d8:97:a6: 9a:c4:62:ad:3e:06:e6:89:cb:39:85:35:5b:ae:e0: 3a:85:30:78:ed:d4:0e:50:e7:e5:47:dd:35:83:61: 3e:a0:f3:d0:08:e3:99:9f:20:a3:ad:2a:aa:e2:ac: b3:e4:99:22:8f:98:6e:86:04:7e:91:14:79:31:83: 5f:03:9f:03:12:3c:5b:62:ec:62:07:f0:24:16:85: 9a:e0:d2:22:ab:16:cc:94:db:33:90:7f:11:38:ae: a6:55:a7:be:a9:b5:f9:91:48:02:00:61:bc:35:75: 63:a9:05:83:07:d0:96:49:30:3e:a3:08:c3:ab:34: d2:5e:cf:6a:f7:55:9c:95:5b:48:59:aa:e9:b6:50: d4:0f:56:ef:a8:a8:25:cb:f8:1b:5c:82:32:f9:0e: 46:50:8d:5a:49:d5:6b:cd:b1:af:d4:4e:0b:2c:4d: 66:37:c7:57:d3:c2:66:e3:7a:0d:80:d5:16:87:89: d5:5d:a0:42:19:28:05:e6:eb:07:19:9f:60:bc:63: 02:bd:89:54:30:d5:73:16:5f:3b:78:30:35:d0:3e: 44:68:a3:e5:16:9e:bc:3b:44:16:6a:12:fd:74:82: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:23:3F:9F:91:54:A6:40:CC:18:E3:89:6C:0A:5C:49:60:F1:54 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:55:79:e0:ed:27:96:e5:3e:43:f6:84:c5:33:ff:f6:fb:ff: 15:bf:99:d1:0c:a1:2c:50:5d:ba:ea:01:ce:c1:ab:b7:22:f1: 3a:69:dd:ab:c3:10:1a:46:95:72:64:ce:61:a0:ba:b5:e1:84: 70:42:79:10:55:3c:b6:c5:98:21:5a:6e:22:48:94:2a:b0:e3: ab:94:08:59:9b:c9:51:f6:51:5a:ae:a0:3f:77:94:15:3b:7b: 3f:ff:35:1e:38:f0:7f:72:1f:c5:c9:a0:1d:0e:3a:20:1b:4a: ef:2b:44:c3:6a:99:78:fb:aa:b8:89:2b:33:92:8d:7d:92:c7: c3:bf:f7:1d:ed:6e:ca:ae:27:2c:ca:5a:4f:23:1b:7f:10:7b: 8b:a1:4d:8e:64:2c:5e:a9:52:93:91:b9:26:b4:e8:81:48:c3: c6:a2:ef:6d:c0:55:47:d2:f5:c8:16:53:01:52:9e:8f:78:de: 6f:83:3d:24:27:b9:01:33:1c:9a:7a:3f:99:ef:68:18:8a:22: 13:b0:fc:15:9f:36:8d:90:81:46:f9:b7:0d:80:16:1f:3e:7b: 63:25:c8:4b:a4:18:a9:8f:ab:b3:17:b5:2a:02:9a:86:52:0e: c2:1a:d0:00:31:e2:9f:0f:ee:84:87:80:15:3e:1d:63:98:5e: f3:25:2c:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkhrSZhnoIuIhGD0D4vWTsSE1B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA3MTkwNzA2NDFaFw0yNTA3MjIxNDI1NDFaMDMxMTAvBgNV BAMTKEFGRUEyMzNGOUY5MTU0QTY0MENDMThFMzg5NkMwQTVDNDk2MEYxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYAh+VGgr5BqAGVmixF84DN4r we2dIVY7HNiXpprEYq0+BuaJyzmFNVuu4DqFMHjt1A5Q5+VH3TWDYT6g89AI45mf IKOtKqrirLPkmSKPmG6GBH6RFHkxg18DnwMSPFti7GIH8CQWhZrg0iKrFsyU2zOQ fxE4rqZVp76ptfmRSAIAYbw1dWOpBYMH0JZJMD6jCMOrNNJez2r3VZyVW0hZqum2 UNQPVu+oqCXL+BtcgjL5DkZQjVpJ1WvNsa/UTgssTWY3x1fTwmbjeg2A1RaHidVd oEIZKAXm6wcZn2C8YwK9iVQw1XMWXzt4MDXQPkRoo+UWnrw7RBZqEv10gtLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr+ojP5+RVKZAzBjjiWwKXElg8VQwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJVeeDtJ5blPkP2hMUz//b7/xW/mdEMoSxQ XbrqAc7Bq7ci8Tpp3avDEBpGlXJkzmGgurXhhHBCeRBVPLbFmCFabiJIlCqw46uU CFmbyVH2UVquoD93lBU7ez//NR448H9yH8XJoB0OOiAbSu8rRMNqmXj7qriJKzOS jX2Sx8O/9x3tbsquJyzKWk8jG38Qe4uhTY5kLF6pUpORuSa06IFIw8ai723AVUfS 9cgWUwFSno943m+DPSQnuQEzHJp6P5nvaBiKIhOw/BWfNo2QgUb5tw2AFh8+e2Ml yEukGKmPq7MXtSoCmoZSDsIa0AAx4p8P7oSHgBU+HWOYXvMlLIc= -----END CERTIFICATE-----Generated at Mon Jul 21 13:01:36 2025 by rpki-client