$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: KWrP94cqwiVzcuNqVDv7s4hij4Zpdbc0dbuNh/miVPA= Subject key identifier: 38:41:A1:8C:1B:FF:54:55:04:E9:72:0D:20:B4:17:73:83:9E:43:36 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 5AFF2A6DF9F72DC2225E26AD56BE806DDDF25631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01A3 Signing time: Sun 20 Jul 2025 19:11:47 +0000 Manifest this update: Sun 20 Jul 2025 19:06:47 +0000 Manifest next update: Wed 23 Jul 2025 20:03:47 +0000 Files and hashes: 1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=) 2: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: XSelYGqtwwNwAv/MBQt1GtESx1DRsckuCv70kxkQqzk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ff:2a:6d:f9:f7:2d:c2:22:5e:26:ad:56:be:80:6d:dd:f2:56:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Jul 20 19:06:47 2025 GMT Not After : Jul 23 20:03:47 2025 GMT Subject: CN=3841A18C1BFF545504E9720D20B41773839E4336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:12:c9:71:d6:44:01:02:92:97:f6:06:3e: c3:1c:87:5f:a5:be:25:d4:ac:82:a8:b7:08:7f:10: 33:07:33:f5:e6:43:8d:da:4a:86:10:6c:13:4a:59: 90:95:48:42:a3:c3:27:e7:1b:3e:e2:db:48:56:94: 97:fd:a5:ce:fe:7e:eb:ca:38:62:89:db:14:51:00: 57:ba:4f:fa:c4:61:9c:aa:b0:c0:80:85:38:ad:e1: 46:2c:ae:c9:4d:15:46:5e:f1:8a:b6:bd:26:13:c5: 39:c6:b7:e9:26:7a:4b:28:43:38:2c:19:e1:b3:5c: 36:21:b4:e9:94:26:3e:b0:98:c8:53:6c:af:10:d5: 3d:46:df:ea:5f:0b:4f:84:16:b0:ea:cd:e5:85:0c: 4e:4a:4a:42:97:a9:ec:55:f0:3d:d5:89:81:db:a6: 85:42:a3:ee:f2:a1:e1:95:50:7e:a3:e1:af:68:cd: a2:03:88:60:c6:6c:72:85:81:7e:01:a4:f0:c6:8a: 1a:49:f3:65:4f:7d:c3:c4:6b:82:14:2c:f2:3a:ef: 99:62:eb:5d:9f:f8:05:85:c0:83:e2:c7:20:5c:82: 3c:10:df:43:e2:96:83:75:27:d8:1a:b8:3d:2d:fd: ac:4c:ba:2d:5f:54:1d:c0:d4:76:d7:05:02:df:14: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:41:A1:8C:1B:FF:54:55:04:E9:72:0D:20:B4:17:73:83:9E:43:36 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:bc:ba:d6:6b:db:73:31:62:d9:af:bf:78:33:6c:d7:82:dd: f4:25:ff:c3:c9:53:58:0a:18:94:51:e1:c1:80:90:5a:50:3d: 24:d4:2f:c4:e1:8c:cc:12:53:e3:24:c0:27:e4:b7:fa:a8:8a: f3:6b:38:98:25:33:ef:2d:5a:04:c0:7c:be:56:91:ee:e8:d9: 0c:3e:a4:81:1f:4c:12:1f:0b:cc:42:24:a0:4d:a1:4b:63:ea: e2:c7:c4:5c:ef:19:08:e6:c1:65:7b:60:c5:42:24:01:9b:44: 64:68:d0:80:4e:db:b0:16:5a:af:24:60:4e:6b:86:2e:ab:ab: 7e:33:8c:52:b7:25:01:20:bc:c2:ce:45:73:ad:19:aa:75:80: fd:c4:9c:67:86:65:16:06:26:ac:e3:62:65:61:96:20:3f:8e: 52:b4:78:8e:a9:3a:47:68:bb:86:c6:3a:69:41:56:cf:56:b9: 03:15:d2:98:d7:2a:45:a6:2f:58:ba:88:41:bb:3f:3d:95:47: 46:2f:76:53:96:55:5f:71:4b:79:5e:8b:64:a7:01:99:44:60: 49:24:a3:08:d1:30:32:ff:71:66:4c:79:06:62:44:9e:4e:2a: 43:9c:9a:34:19:ae:b1:29:9b:9e:a6:f7:0a:e1:6e:d1:de:d6: 2e:33:3f:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWv8qbfn3LcIiXiatVr6Abd3yVjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTA3MjAxOTA2NDdaFw0yNTA3MjMyMDAzNDdaMDMxMTAvBgNV BAMTKDM4NDFBMThDMUJGRjU0NTUwNEU5NzIwRDIwQjQxNzczODM5RTQzMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqRLJcdZEAQKSl/YGPsMch1+l viXUrIKotwh/EDMHM/XmQ43aSoYQbBNKWZCVSEKjwyfnGz7i20hWlJf9pc7+fuvK OGKJ2xRRAFe6T/rEYZyqsMCAhTit4UYsrslNFUZe8Yq2vSYTxTnGt+kmeksoQzgs GeGzXDYhtOmUJj6wmMhTbK8Q1T1G3+pfC0+EFrDqzeWFDE5KSkKXqexV8D3ViYHb poVCo+7yoeGVUH6j4a9ozaIDiGDGbHKFgX4BpPDGihpJ82VPfcPEa4IULPI675li 612f+AWFwIPixyBcgjwQ30PiloN1J9gauD0t/axMui1fVB3A1HbXBQLfFDARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEGhjBv/VFUE6XINILQXc4OeQzYwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi8utZr23MxYtmvv3gzbNeC3fQl/8PJU1gK GJRR4cGAkFpQPSTUL8ThjMwSU+MkwCfkt/qoivNrOJglM+8tWgTAfL5Wke7o2Qw+ pIEfTBIfC8xCJKBNoUtj6uLHxFzvGQjmwWV7YMVCJAGbRGRo0IBO27AWWq8kYE5r hi6rq34zjFK3JQEgvMLORXOtGap1gP3EnGeGZRYGJqzjYmVhliA/jlK0eI6pOkdo u4bGOmlBVs9WuQMV0pjXKkWmL1i6iEG7Pz2VR0YvdlOWVV9xS3lei2SnAZlEYEkk owjRMDL/cWZMeQZiRJ5OKkOcmjQZrrEpm56m9wrhbtHe1i4zP6E= -----END CERTIFICATE-----Generated at Mon Jul 21 08:36:41 2025 by rpki-client