$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: PF1keEJl91jiisx2YUH3zfiJlZStCY3PryXV0ea6w8Y= Subject key identifier: F8:94:F1:C0:57:D6:92:4C:69:70:B4:71:0B:40:44:A7:01:96:8C:5E Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 5BB551B7B26B6E381A48E63D7683A5A21542A72B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 0228 Signing time: Sat 06 Sep 2025 08:11:27 +0000 Manifest this update: Sat 06 Sep 2025 08:06:27 +0000 Manifest next update: Tue 09 Sep 2025 14:43:27 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: lnfCow+acgLLPUv69HoRRhtDuKh2KakZIKjEuKejR2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b5:51:b7:b2:6b:6e:38:1a:48:e6:3d:76:83:a5:a2:15:42:a7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Sep 6 08:06:27 2025 GMT Not After : Sep 9 14:43:27 2025 GMT Subject: CN=F894F1C057D6924C6970B4710B4044A701968C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:58:82:af:33:a3:7a:a1:7a:13:42:10:e8: 3b:08:71:7a:29:b3:84:aa:32:38:67:f9:3e:66:b8: cc:8e:16:7a:8e:d9:87:e9:51:d8:2b:2b:19:0c:c7: ef:2c:c0:aa:11:34:2c:b6:2a:98:17:96:83:27:89: 17:53:1f:7c:f5:26:df:39:46:58:1b:6c:ed:3b:39: 9a:93:fa:24:ee:95:d1:48:37:59:8c:59:8c:48:e1: e1:89:c7:12:a0:61:a1:6a:e7:9e:4d:43:e8:2c:c4: e4:e6:56:2e:f7:95:52:de:73:e1:2d:7f:5e:b3:5e: d8:f2:e6:7f:8f:ac:ef:52:2c:36:ec:36:77:b5:42: 46:36:f0:eb:78:8c:d8:ec:83:a8:22:b5:75:4a:31: 91:a9:7f:c7:78:82:7b:73:db:ef:e3:77:a8:32:38: e3:94:d7:17:49:30:59:27:4c:05:93:a0:c9:04:96: a7:9d:11:52:a9:f5:51:db:6c:2d:39:54:ad:cf:ec: 7b:25:b6:52:13:d6:6e:e5:c7:f3:0c:c8:5e:39:c4: 47:37:80:7f:de:21:a4:4e:6d:07:b8:8b:7e:15:a0: cb:87:a1:26:2a:8d:f2:96:48:cf:79:25:b5:e2:d2: d5:35:90:8b:68:b3:0f:c0:06:73:26:f2:6a:1b:0c: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:94:F1:C0:57:D6:92:4C:69:70:B4:71:0B:40:44:A7:01:96:8C:5E X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:39:4a:08:75:3c:e0:85:a7:f0:ac:12:e2:1d:5e:c0:3c:03: 8a:eb:a4:b7:6b:29:43:36:9a:f7:96:0d:41:c9:ee:7d:a3:2e: 77:ec:1f:3d:1c:fb:fe:fd:30:9f:56:a1:44:c6:07:f0:20:59: e4:b8:54:03:d7:a4:d1:cb:df:4d:73:7a:31:d1:d2:8a:b8:62: 56:13:be:57:6c:b4:c7:fe:4e:43:e7:53:08:e0:71:46:f3:5c: be:c8:64:1b:31:f5:94:91:a5:dd:c7:1a:3c:94:68:21:af:59: 7e:c4:c0:15:35:68:cd:0a:12:75:e9:b8:ae:a2:58:08:84:8e: a8:2f:9d:7f:d3:01:53:c4:54:4f:82:78:d1:f7:a3:3c:b6:56: 64:0c:ff:6f:f9:a5:05:b3:45:6c:cf:ca:36:65:a6:16:6e:7d: a7:bf:3e:cf:5b:95:51:4e:0a:20:23:65:55:db:18:21:62:5f: bb:08:e4:c2:4e:92:4d:d4:ad:f6:bf:92:71:f1:47:f1:e4:64: aa:22:0e:93:4b:3a:77:f0:74:a2:2c:b0:30:a9:5d:29:46:af: 6f:c8:ec:6b:6c:60:f3:57:f7:88:c8:37:5d:53:e3:b1:ed:19: 0c:8c:41:78:5e:db:55:da:d0:63:cf:ac:e2:f1:6f:eb:25:3f: 5c:98:70:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7VRt7JrbjgaSOY9doOlohVCpyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA5MDYwODA2MjdaFw0yNTA5MDkxNDQzMjdaMDMxMTAvBgNV BAMTKEY4OTRGMUMwNTdENjkyNEM2OTcwQjQ3MTBCNDA0NEE3MDE5NjhDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/21iCrzOjeqF6E0IQ6DsIcXop s4SqMjhn+T5muMyOFnqO2YfpUdgrKxkMx+8swKoRNCy2KpgXloMniRdTH3z1Jt85 RlgbbO07OZqT+iTuldFIN1mMWYxI4eGJxxKgYaFq555NQ+gsxOTmVi73lVLec+Et f16zXtjy5n+PrO9SLDbsNne1QkY28Ot4jNjsg6gitXVKMZGpf8d4gntz2+/jd6gy OOOU1xdJMFknTAWToMkElqedEVKp9VHbbC05VK3P7HsltlIT1m7lx/MMyF45xEc3 gH/eIaRObQe4i34VoMuHoSYqjfKWSM95JbXi0tU1kItosw/ABnMm8mobDBkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+JTxwFfWkkxpcLRxC0BEpwGWjF4wHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF05Sgh1POCFp/CsEuIdXsA8A4rrpLdrKUM2 mveWDUHJ7n2jLnfsHz0c+/79MJ9WoUTGB/AgWeS4VAPXpNHL301zejHR0oq4YlYT vldstMf+TkPnUwjgcUbzXL7IZBsx9ZSRpd3HGjyUaCGvWX7EwBU1aM0KEnXpuK6i WAiEjqgvnX/TAVPEVE+CeNH3ozy2VmQM/2/5pQWzRWzPyjZlphZufae/Ps9blVFO CiAjZVXbGCFiX7sI5MJOkk3Urfa/knHxR/HkZKoiDpNLOnfwdKIssDCpXSlGr2/I 7GtsYPNX94jIN11T47HtGQyMQXhe21Xa0GPPrOLxb+slP1yYcOw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:29 2025 by rpki-client