$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: jT5vrIZURrIGBYCi5iKejEEvzJ8v92ttmq0lXJ8X/gg= Subject key identifier: 82:01:31:56:8B:69:12:52:8D:DF:85:95:71:6B:B6:17:CB:2D:DF:62 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 41733FD6936CC5338D488260308DE807AC34420E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: C3 Signing time: Sat 19 Jul 2025 08:11:02 +0000 Manifest this update: Sat 19 Jul 2025 08:06:02 +0000 Manifest next update: Tue 22 Jul 2025 13:24:02 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: tCgI7qQZavB7qSSpmtgItEfKuK7e4DKJ/ELFu00r0+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 13:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:73:3f:d6:93:6c:c5:33:8d:48:82:60:30:8d:e8:07:ac:34:42:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Jul 19 08:06:02 2025 GMT Not After : Jul 22 13:24:02 2025 GMT Subject: CN=820131568B6912528DDF8595716BB617CB2DDF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:e1:4d:29:4e:6b:c6:8c:4e:2c:74:52:29: e9:8e:0a:a6:90:db:ea:e1:e6:5e:65:af:cc:dd:ad: 03:56:92:c7:5e:c4:29:eb:88:2a:b4:45:c6:a9:cd: cd:e4:96:4b:6d:52:ca:f2:a2:4f:1a:b0:71:1a:cc: ed:25:f4:8e:b1:36:6d:df:8a:94:a0:ec:fa:4b:97: ca:16:d0:46:13:d7:16:58:eb:66:e3:66:33:c2:af: b0:37:60:5e:ba:8d:ba:34:00:02:b7:41:b8:fd:18: b6:bf:6b:6c:9d:d9:4b:18:b3:8c:f6:0f:d1:ee:d0: 58:d8:1f:f3:b5:98:f1:a3:23:17:04:61:bd:fa:4f: fb:94:80:91:19:7c:d5:f8:f9:29:7c:0c:b2:17:f4: cb:85:a1:15:03:b0:a1:49:72:4a:b2:78:cf:01:50: 5b:77:f9:a4:65:d0:3d:39:2f:94:3a:1a:af:b6:61: bf:ff:86:d6:c3:fd:ab:02:bf:dc:cf:c6:d8:6e:72: bf:fc:11:07:ce:9b:23:6b:4e:b0:b3:83:90:ff:9a: 78:84:a9:79:eb:73:cb:17:26:30:2f:ff:f6:30:23: 7d:ce:b1:56:19:7b:cd:bb:a6:72:00:1e:67:ea:9f: 41:b8:2a:0e:9e:d8:8f:6f:e2:48:d0:85:bb:11:f8: d3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:01:31:56:8B:69:12:52:8D:DF:85:95:71:6B:B6:17:CB:2D:DF:62 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c4:61:96:13:aa:c0:1f:7a:fc:d3:88:c9:12:9b:73:6b:0c: dd:9e:f6:57:ca:9b:23:57:e6:ca:2e:c5:62:02:fd:09:64:7e: 7a:49:38:76:09:dd:7d:9d:a6:72:3d:f7:72:a4:fd:1f:ae:88: d4:59:9b:6d:72:76:60:05:ff:09:bb:51:2f:c3:f2:82:59:e6: 69:3a:ce:61:7c:be:a6:ac:12:ff:3f:c4:34:ab:e1:0d:d3:9b: 94:27:e7:09:bd:e0:59:61:80:1e:8c:ae:e6:91:12:53:cb:14: 05:5e:b6:3b:81:4d:e3:4b:d1:85:76:a4:60:bf:bb:f1:b7:ce: 9d:37:ba:4c:97:e3:f2:49:a4:72:0d:ec:34:e9:10:a8:63:78: 76:25:45:87:23:57:74:2f:13:b9:61:9b:97:2b:d0:3a:22:d7: 0c:32:81:6a:ac:6c:b9:c0:9c:88:82:04:a8:1d:a3:9d:62:67: e8:ab:2b:50:4b:9c:84:e2:9d:46:5f:29:b8:35:29:1c:20:7d: 3f:02:65:81:4c:e8:2e:e9:8f:60:6a:56:60:ec:f1:cc:13:ef: a0:4a:9b:10:a4:a9:63:fe:f7:a3:4f:5e:a8:ed:0c:e2:12:e1: 83:7b:24:65:47:ed:90:88:18:84:87:62:1e:a4:42:bb:63:a0: 16:3c:13:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXM/1pNsxTONSIJgMI3oB6w0Qg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNTA3MTkwODA2MDJaFw0yNTA3MjIxMzI0MDJaMDMxMTAvBgNV BAMTKDgyMDEzMTU2OEI2OTEyNTI4RERGODU5NTcxNkJCNjE3Q0IyRERGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqeFNKU5rxoxOLHRSKemOCqaQ 2+rh5l5lr8zdrQNWksdexCnriCq0Rcapzc3klkttUsryok8asHEazO0l9I6xNm3f ipSg7PpLl8oW0EYT1xZY62bjZjPCr7A3YF66jbo0AAK3Qbj9GLa/a2yd2UsYs4z2 D9Hu0FjYH/O1mPGjIxcEYb36T/uUgJEZfNX4+Sl8DLIX9MuFoRUDsKFJckqyeM8B UFt3+aRl0D05L5Q6Gq+2Yb//htbD/asCv9zPxthucr/8EQfOmyNrTrCzg5D/mniE qXnrc8sXJjAv//YwI33OsVYZe827pnIAHmfqn0G4Kg6e2I9v4kjQhbsR+NNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUggExVotpElKN34WVcWu2F8st32IwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7EYZYTqsAfevzTiMkSm3NrDN2e9lfKmyNX 5souxWIC/QlkfnpJOHYJ3X2dpnI993Kk/R+uiNRZm21ydmAF/wm7US/D8oJZ5mk6 zmF8vqasEv8/xDSr4Q3Tm5Qn5wm94FlhgB6MruaRElPLFAVetjuBTeNL0YV2pGC/ u/G3zp03ukyX4/JJpHIN7DTpEKhjeHYlRYcjV3QvE7lhm5cr0Doi1wwygWqsbLnA nIiCBKgdo51iZ+irK1BLnITinUZfKbg1KRwgfT8CZYFM6C7pj2BqVmDs8cwT76BK mxCkqWP+96NPXqjtDOIS4YN7JGVH7ZCIGISHYh6kQrtjoBY8Ex4= -----END CERTIFICATE-----Generated at Mon Jul 21 10:32:40 2025 by rpki-client