$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: LBOmjRq6xohJxxkPLO3nIjzzPq/KB9TotQks8z1XQkI= Subject key identifier: 66:C7:F7:E8:FD:B7:13:14:A6:41:D9:6F:1D:BD:AA:C0:F4:9C:CC:A4 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 6D45D244B4E53705DDB9A171B8AFF203D07992CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 69 Signing time: Fri 18 Jul 2025 22:41:40 +0000 Manifest this update: Fri 18 Jul 2025 22:36:40 +0000 Manifest next update: Mon 21 Jul 2025 23:56:40 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: 2DK/bBM7Vmm1S8LJojT+EZAg9jiKOEIEpDyDtbteP8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 23:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:45:d2:44:b4:e5:37:05:dd:b9:a1:71:b8:af:f2:03:d0:79:92:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Jul 18 22:36:40 2025 GMT Not After : Jul 21 23:56:40 2025 GMT Subject: CN=66C7F7E8FDB71314A641D96F1DBDAAC0F49CCCA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:a7:c1:42:a5:4f:c5:8b:c0:31:b1:67:d5: a7:a9:c2:9d:5a:2a:67:97:a2:77:00:1d:d1:35:31: 91:df:13:47:2e:45:24:e3:62:05:0b:99:3d:ff:17: f4:75:60:72:c0:da:79:b5:5c:27:dc:0e:6d:35:df: 87:2c:1c:de:a9:4d:6b:25:71:43:f7:9b:51:a1:aa: 86:3c:3b:c4:f2:c1:fc:35:9a:ad:b3:b6:68:bb:8a: 05:f9:b0:93:e0:f1:75:65:cf:7b:1e:6c:40:7e:48: 56:4d:20:9e:99:1b:15:66:68:04:73:fa:ae:5d:fc: e3:ed:28:1f:d1:b6:43:44:f0:37:09:72:81:0a:31: 1c:e9:e0:8e:fb:1d:b0:a2:0d:71:ca:2b:4d:82:d0: 53:53:09:a6:44:aa:6d:5b:2a:a2:b0:ec:d4:31:21: 7e:77:03:ce:c9:7a:1b:68:02:cf:be:75:a8:6e:28: 13:3e:8b:cc:a6:a0:2d:b3:2c:a4:95:e1:53:96:45: 05:5d:ff:03:f5:bb:40:54:4c:75:69:1c:b4:0f:df: 2c:7d:c0:8c:ca:bb:86:c3:85:cc:94:8e:f0:a6:70: 14:cb:a4:ba:39:6a:c3:4a:3e:16:0b:51:fc:cc:1f: ed:33:58:d6:4d:59:6d:f2:00:37:82:b3:40:79:ae: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C7:F7:E8:FD:B7:13:14:A6:41:D9:6F:1D:BD:AA:C0:F4:9C:CC:A4 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7d:92:97:49:3c:01:b4:02:03:f1:d5:99:03:6e:49:18:c0: d8:92:ef:45:8e:2d:35:5e:0b:ee:e6:36:c3:d1:df:9a:48:b8: 61:7f:49:d7:00:d7:0d:19:ad:1d:ab:4e:9d:b6:3e:65:6e:7e: fd:91:06:2a:d5:fb:2c:45:25:2a:f4:b6:85:47:6d:47:39:c8: 42:f9:96:5d:19:51:93:46:95:4d:e4:b8:6b:9f:a9:24:ad:d3: 6c:d4:bc:4c:13:09:54:29:81:b0:c2:48:94:5a:36:8d:5f:f4: 7a:98:5d:85:3c:30:79:7e:3a:a8:e1:89:7f:7b:0a:ae:27:6d: 94:f1:19:cd:ac:ef:a6:9d:1b:c2:02:d8:25:ef:49:ce:12:3b: cd:e2:06:cb:c3:08:18:ff:e5:60:06:f5:33:84:c0:c9:1e:07: 34:dc:70:47:23:a8:ff:a3:2c:bf:90:d1:88:63:2d:8e:4f:7f: cf:41:a1:ed:42:bf:1d:f3:e2:d2:a5:65:70:37:bf:3e:53:d5: 9f:e9:62:d1:5e:05:7a:d6:71:89:02:11:4a:ff:57:05:d8:1e: 12:42:b9:7f:78:5f:98:c8:4e:02:08:9b:bf:1d:29:18:13:84: f7:54:cc:a3:24:ef:6b:38:a9:a4:ff:bb:7b:5a:25:13:9e:21: 8f:2e:b3:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUXSRLTlNwXduaFxuK/yA9B5ksswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTA3MTgyMjM2NDBaFw0yNTA3MjEyMzU2NDBaMDMxMTAvBgNV BAMTKDY2QzdGN0U4RkRCNzEzMTRBNjQxRDk2RjFEQkRBQUMwRjQ5Q0NDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOr6fBQqVPxYvAMbFn1aepwp1a KmeXoncAHdE1MZHfE0cuRSTjYgULmT3/F/R1YHLA2nm1XCfcDm0134csHN6pTWsl cUP3m1GhqoY8O8Tywfw1mq2ztmi7igX5sJPg8XVlz3sebEB+SFZNIJ6ZGxVmaARz +q5d/OPtKB/RtkNE8DcJcoEKMRzp4I77HbCiDXHKK02C0FNTCaZEqm1bKqKw7NQx IX53A87JehtoAs++dahuKBM+i8ymoC2zLKSV4VOWRQVd/wP1u0BUTHVpHLQP3yx9 wIzKu4bDhcyUjvCmcBTLpLo5asNKPhYLUfzMH+0zWNZNWW3yADeCs0B5rtSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZsf36P23ExSmQdlvHb2qwPSczKQwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAd9kpdJPAG0AgPx1ZkDbkkYwNiS70WOLTVe C+7mNsPR35pIuGF/SdcA1w0ZrR2rTp22PmVufv2RBirV+yxFJSr0toVHbUc5yEL5 ll0ZUZNGlU3kuGufqSSt02zUvEwTCVQpgbDCSJRaNo1f9HqYXYU8MHl+OqjhiX97 Cq4nbZTxGc2s76adG8IC2CXvSc4SO83iBsvDCBj/5WAG9TOEwMkeBzTccEcjqP+j LL+Q0YhjLY5Pf89Boe1Cvx3z4tKlZXA3vz5T1Z/pYtFeBXrWcYkCEUr/VwXYHhJC uX94X5jITgIIm78dKRgThPdUzKMk72s4qaT/u3taJROeIY8us1s= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:23 2025 by rpki-client