$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: Ebhf811nvbTd4OgFagOHVfE2S4KjL55QZj63CzqaSOo= Subject key identifier: 1F:D7:D2:90:91:35:F7:4B:41:C3:C4:C7:7D:FC:DE:78:B2:C2:77:FD Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 7136F1E9E793AC1B5237D9713F3B821BBA6820E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02B1 Signing time: Sat 06 Sep 2025 07:22:21 +0000 Manifest this update: Sat 06 Sep 2025 07:17:21 +0000 Manifest next update: Tue 09 Sep 2025 11:03:21 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: a+rqhQbSGZ9OP3r3Yi4Ev+a0RYssLjH21OAy9Rh9rsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:36:f1:e9:e7:93:ac:1b:52:37:d9:71:3f:3b:82:1b:ba:68:20:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Sep 6 07:17:21 2025 GMT Not After : Sep 9 11:03:21 2025 GMT Subject: CN=1FD7D2909135F74B41C3C4C77DFCDE78B2C277FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:e4:83:46:00:b3:76:32:44:7b:47:4f:ee: a1:3b:ce:0b:39:af:6e:6c:44:08:4f:18:a3:b3:21: bf:6b:f1:ec:0d:cc:82:71:84:9e:f0:90:ee:c2:72: bc:45:b8:f8:e1:74:c0:af:ca:e5:86:b7:1b:20:a2: b7:bb:c0:68:96:6d:be:c1:c9:1c:b9:31:e4:31:5c: 64:be:30:fb:9a:d1:d5:86:88:e6:5a:6c:1a:1c:9b: 49:07:b1:00:2a:7a:39:44:52:d6:d1:08:5d:b2:ad: 66:5d:80:34:c3:2e:20:d5:69:d1:54:df:f4:07:bb: c9:c6:9e:65:60:3e:46:51:bb:bb:e8:7d:87:60:e9: 8a:8a:ab:e3:e4:93:5a:c2:75:c4:8c:f6:96:4f:18: 00:76:10:1a:2f:43:7b:87:a7:12:9b:92:06:bf:33: ce:e0:2c:b0:2e:7d:2b:ac:cf:64:43:58:2e:4a:57: 8b:5a:1a:e7:00:68:43:4b:45:22:58:b5:4e:ef:a8: d2:cb:aa:68:3c:a1:96:22:9a:a8:31:57:fa:15:ab: 82:2a:7f:ba:70:8a:3d:4c:8c:e0:57:23:d7:f1:5f: b1:de:0a:10:ef:90:96:94:10:2e:03:2d:5d:e3:48: 44:5c:0a:f2:93:cc:93:d8:f4:f6:ff:25:ad:4b:f9: ec:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D7:D2:90:91:35:F7:4B:41:C3:C4:C7:7D:FC:DE:78:B2:C2:77:FD X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3d:d8:16:6d:54:c1:8a:99:94:92:69:3c:5b:10:a0:83:47: 90:b1:63:87:20:70:6b:d4:ae:c5:a8:4c:b2:aa:81:33:40:46: 5d:ce:37:71:f2:18:41:77:ab:fe:1c:36:0f:8d:60:8f:da:6c: 22:ea:ad:82:ba:1d:33:bb:62:86:96:91:c4:78:fc:97:84:5c: 4f:ed:88:3d:e2:04:ae:ad:78:8e:28:f7:65:d3:4b:6a:6a:26: 2a:4c:9d:e7:0c:c1:6e:e2:66:44:f3:79:98:e7:4d:93:75:60: 45:f7:75:45:0c:b6:08:5a:2d:b5:fa:c8:d7:f9:01:ca:a8:4b: 54:f0:7f:a8:42:09:f7:32:4e:d5:bc:fb:49:5e:06:8e:b4:fd: 0d:b0:ca:d4:90:71:91:52:0c:93:b7:71:25:b9:05:8d:3e:4e: ea:83:81:37:b3:92:20:f7:20:3c:29:06:32:80:2d:6d:0d:89: b2:e7:eb:0a:67:4d:be:5b:5d:b1:fe:76:68:4c:bb:c3:5f:1e: 8e:e9:0c:07:5f:0e:13:a5:61:03:07:35:f6:ad:a6:24:7e:8f: 83:80:9d:29:ac:3c:d4:d0:12:c3:03:1b:ae:c8:40:53:6f:ee: e3:d9:5f:89:cf:65:51:8f:31:f6:0b:8a:6a:48:ef:34:15:d9: c7:da:d9:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTbx6eeTrBtSN9lxPzuCG7poIOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTA5MDYwNzE3MjFaFw0yNTA5MDkxMTAzMjFaMDMxMTAvBgNV BAMTKDFGRDdEMjkwOTEzNUY3NEI0MUMzQzRDNzdERkNERTc4QjJDMjc3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKuSDRgCzdjJEe0dP7qE7zgs5 r25sRAhPGKOzIb9r8ewNzIJxhJ7wkO7CcrxFuPjhdMCvyuWGtxsgore7wGiWbb7B yRy5MeQxXGS+MPua0dWGiOZabBocm0kHsQAqejlEUtbRCF2yrWZdgDTDLiDVadFU 3/QHu8nGnmVgPkZRu7vofYdg6YqKq+Pkk1rCdcSM9pZPGAB2EBovQ3uHpxKbkga/ M87gLLAufSusz2RDWC5KV4taGucAaENLRSJYtU7vqNLLqmg8oZYimqgxV/oVq4Iq f7pwij1MjOBXI9fxX7HeChDvkJaUEC4DLV3jSERcCvKTzJPY9Pb/Ja1L+eyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9fSkJE190tBw8THffzeeLLCd/0wHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY92BZtVMGKmZSSaTxbEKCDR5CxY4cgcGvU rsWoTLKqgTNARl3ON3HyGEF3q/4cNg+NYI/abCLqrYK6HTO7YoaWkcR4/JeEXE/t iD3iBK6teI4o92XTS2pqJipMnecMwW7iZkTzeZjnTZN1YEX3dUUMtghaLbX6yNf5 AcqoS1Twf6hCCfcyTtW8+0leBo60/Q2wytSQcZFSDJO3cSW5BY0+TuqDgTezkiD3 IDwpBjKALW0NibLn6wpnTb5bXbH+dmhMu8NfHo7pDAdfDhOlYQMHNfatpiR+j4OA nSmsPNTQEsMDG67IQFNv7uPZX4nPZVGPMfYLimpI7zQV2cfa2WE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:16 2025 by rpki-client