$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: t+2LiE48FCCi4iuiKX4mY9+9XUa1Tye1cEPRguah4p4= Subject key identifier: 14:CD:4F:85:37:C6:9D:C2:28:6A:C2:4B:5B:76:85:38:02:C0:4A:AB Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 71B6B0A1750BB485BAC7E1D3D0A6009789F54797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: D3 Signing time: Mon 21 Jul 2025 19:11:55 +0000 Manifest this update: Mon 21 Jul 2025 19:06:55 +0000 Manifest next update: Thu 24 Jul 2025 20:10:55 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: 2T8s0YTUuTyjofvcnxtmSHx6Xn+/QYwgKHLsJkfCrPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b6:b0:a1:75:0b:b4:85:ba:c7:e1:d3:d0:a6:00:97:89:f5:47:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Jul 21 19:06:55 2025 GMT Not After : Jul 24 20:10:55 2025 GMT Subject: CN=14CD4F8537C69DC2286AC24B5B76853802C04AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3f:dc:a6:dd:a1:cb:40:3e:14:85:c1:7a:05: 65:dc:d0:b4:84:3e:df:70:92:9c:cc:24:b5:55:39: e7:47:42:0b:d6:09:b5:65:7f:22:35:60:af:6c:27: 80:fb:77:c0:35:59:f6:20:fb:d4:1e:a0:81:ea:9d: 4c:72:e4:b2:70:5c:ec:93:46:de:a3:31:2f:5c:85: e4:82:43:70:30:a8:cc:24:a1:ed:8b:ce:8e:fd:f4: ff:6e:ed:59:5e:72:e9:81:2d:89:ca:b2:b6:fd:a5: 44:65:6b:39:27:29:d7:3a:5c:dd:17:f6:3d:df:2a: de:eb:42:87:65:b4:c8:b9:57:8c:0a:a8:fb:db:fb: 1f:29:d8:1b:80:66:d8:e5:60:2f:17:65:54:ed:5c: 3a:ac:2f:4b:3d:38:d1:a6:1e:b2:77:ec:7d:9c:22: 5c:b3:37:f3:a2:a0:a8:6b:ce:80:af:95:f3:2b:71: 09:97:46:37:a5:3b:62:eb:62:34:84:ac:c2:57:b7: 90:ed:3d:09:a0:43:31:5a:10:40:73:dc:7e:a4:f1: fd:f7:3f:ff:c8:d7:f2:e9:70:8c:b3:08:bf:72:83: cd:41:68:a7:45:bc:00:ed:52:a0:40:38:6f:f0:d2: 6d:7d:60:ef:e0:f1:05:d0:6e:aa:c9:08:f8:45:eb: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CD:4F:85:37:C6:9D:C2:28:6A:C2:4B:5B:76:85:38:02:C0:4A:AB X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bc:6d:14:4e:42:7b:f0:5e:d9:a8:9b:04:c0:33:cb:d3:58: ad:53:e2:fa:0b:f0:0b:74:7c:e1:75:e4:49:ca:df:2f:10:db: 5c:c4:4a:08:fa:ba:05:8e:d3:a4:09:71:a2:60:c7:3c:30:2d: df:79:48:40:42:7e:b0:3f:5d:89:ee:4b:78:3a:01:a5:4a:c1: 75:ad:44:08:93:55:12:5d:03:39:7f:4c:60:ec:56:39:a9:d1: 99:e8:a7:4e:8e:e0:86:b4:c1:aa:d1:fb:45:11:b3:e4:e4:58: 19:c9:79:fe:e0:fc:83:f5:d2:4a:16:f4:e2:8e:07:c8:0d:8b: d5:5f:16:08:07:12:21:ed:12:a4:db:08:e0:93:3b:2e:8f:31: 85:1d:cf:23:1a:ec:0e:be:a7:02:e7:b1:d2:66:3d:d3:04:79: 74:f9:3b:bd:2d:58:1b:af:1e:09:b3:b2:9d:e1:d1:4f:ba:50: 70:2f:eb:26:24:82:88:14:ee:9d:73:83:28:fd:b0:5c:af:bf: 9a:ba:7f:3a:34:9d:c2:5b:35:14:d0:d7:7f:8e:69:3e:fb:2a: b6:c9:a0:d8:4a:c2:cc:6f:70:7b:ec:bb:87:43:5a:45:fd:0e: 4c:99:a6:1b:68:18:d0:bf:57:0e:f1:54:f5:d4:8d:50:84:60: da:0a:93:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbawoXULtIW6x+HT0KYAl4n1R5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA3MjExOTA2NTVaFw0yNTA3MjQyMDEwNTVaMDMxMTAvBgNV BAMTKDE0Q0Q0Rjg1MzdDNjlEQzIyODZBQzI0QjVCNzY4NTM4MDJDMDRBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtP9ym3aHLQD4UhcF6BWXc0LSE Pt9wkpzMJLVVOedHQgvWCbVlfyI1YK9sJ4D7d8A1WfYg+9QeoIHqnUxy5LJwXOyT Rt6jMS9cheSCQ3AwqMwkoe2Lzo799P9u7VlecumBLYnKsrb9pURlazknKdc6XN0X 9j3fKt7rQodltMi5V4wKqPvb+x8p2BuAZtjlYC8XZVTtXDqsL0s9ONGmHrJ37H2c IlyzN/OioKhrzoCvlfMrcQmXRjelO2LrYjSErMJXt5DtPQmgQzFaEEBz3H6k8f33 P//I1/LpcIyzCL9yg81BaKdFvADtUqBAOG/w0m19YO/g8QXQbqrJCPhF64tNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFM1PhTfGncIoasJLW3aFOALASqswHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu8bRROQnvwXtmomwTAM8vTWK1T4voL8At0 fOF15EnK3y8Q21zESgj6ugWO06QJcaJgxzwwLd95SEBCfrA/XYnuS3g6AaVKwXWt RAiTVRJdAzl/TGDsVjmp0Znop06O4Ia0warR+0URs+TkWBnJef7g/IP10koW9OKO B8gNi9VfFggHEiHtEqTbCOCTOy6PMYUdzyMa7A6+pwLnsdJmPdMEeXT5O70tWBuv Hgmzsp3h0U+6UHAv6yYkgogU7p1zgyj9sFyvv5q6fzo0ncJbNRTQ13+OaT77KrbJ oNhKwsxvcHvsu4dDWkX9DkyZphtoGNC/Vw7xVPXUjVCEYNoKk70= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:22 2025 by rpki-client