$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: Fz7XrLl6XnVT8QIl+PHDTMT4FH69CBaUdnRcHV4I0pc= Subject key identifier: 57:4D:D1:5A:D4:05:CD:8D:61:90:6F:C0:6A:61:3B:47:11:49:1E:74 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 379DFDD8EDF1B036966634D1D37EB2DB3B550B98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 01FF Signing time: Thu 05 Jun 2025 13:51:25 +0000 Manifest this update: Thu 05 Jun 2025 13:46:25 +0000 Manifest next update: Sun 08 Jun 2025 16:10:25 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: 5FnZkLUKtB3jvl7p1s/NliEYqN51A0z0a3V/tEb4CIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 16:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9d:fd:d8:ed:f1:b0:36:96:66:34:d1:d3:7e:b2:db:3b:55:0b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Jun 5 13:46:25 2025 GMT Not After : Jun 8 16:10:25 2025 GMT Subject: CN=574DD15AD405CD8D61906FC06A613B4711491E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:f3:70:90:f8:5f:ba:56:af:e4:3e:5c:c9: 43:3a:fb:d0:cb:0f:19:29:b6:f8:db:4c:a4:37:d2: 0a:6a:71:40:25:ed:53:78:07:1e:d5:3f:2a:fd:7c: 19:a6:73:4f:d5:a8:c5:d5:6b:84:19:32:3e:3d:e9: b8:68:89:0c:7f:fc:ad:78:67:5e:dc:bd:8c:6a:9a: fd:c2:62:e6:fc:8f:76:92:5b:a2:ab:37:42:bb:ba: ea:fc:33:9c:a9:32:05:eb:7c:72:d0:e4:ef:3b:6f: e7:8d:c0:ff:fb:84:d6:6d:22:1d:70:b5:40:8f:28: 82:0e:54:1f:78:f8:5c:97:69:3a:d7:6b:f5:fc:ed: ee:0d:48:8f:fc:12:4e:de:f0:34:29:f6:72:f4:03: 5e:59:64:4a:97:7e:22:4a:68:85:82:89:fb:f8:1b: cb:50:8e:86:a6:75:6f:c1:d7:d2:1e:23:df:b8:df: 64:2f:c8:10:90:04:05:a2:fa:50:83:ce:01:1e:56: 17:a9:5c:6c:f8:15:86:3d:35:b6:7e:f3:f6:47:ac: 11:74:05:25:56:a0:78:3a:47:46:c5:10:a7:11:b4: bd:07:5c:8c:21:66:a9:4a:f6:f3:87:e2:63:43:33: ab:1e:e0:83:a7:67:61:ec:05:22:8b:65:34:f2:d3: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4D:D1:5A:D4:05:CD:8D:61:90:6F:C0:6A:61:3B:47:11:49:1E:74 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:56:1e:0a:49:96:55:14:7a:26:62:82:5a:74:82:fb:d2:1b: c4:bd:0b:32:54:3d:b8:e1:8b:e4:d3:76:8d:26:e0:d8:a1:78: 2c:68:5b:89:40:c4:e4:c9:e3:ae:63:cc:0a:8c:6d:cc:28:4c: 1c:19:49:f8:a6:14:e5:d5:84:3b:9d:51:9e:26:3b:8b:f5:5b: 56:73:bb:e1:fa:e4:89:73:0a:07:75:e0:46:09:96:7b:fb:ff: ef:4d:2b:b8:76:fe:c4:e8:ff:e7:33:9f:c6:43:a0:08:8b:71: 7e:f7:2d:18:62:20:d3:f0:5c:eb:4b:dd:70:27:36:53:42:65: 0a:ed:1e:bf:86:7a:aa:d2:fb:0c:6f:8d:ab:5d:19:05:07:39: 61:44:1e:c7:02:4f:82:d8:3e:61:86:7c:2a:ed:4f:4f:00:3a: da:70:18:54:96:bb:9a:0d:ee:3c:e9:3a:42:1b:c8:7f:ba:e7: 5d:92:6e:6c:a7:74:51:55:85:2d:ac:5e:6d:e7:89:40:35:fe: 0c:8d:16:89:54:8f:18:ba:2f:83:65:88:5c:d6:46:96:87:a9: dd:3c:e0:11:66:23:80:cb:3d:87:46:b4:96:53:77:5f:0a:43: c2:e5:3e:34:4a:25:9b:7b:d0:75:16:b8:2a:da:e2:ce:7d:7f: fc:9b:2a:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5392O3xsDaWZjTR036y2ztVC5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA2MDUxMzQ2MjVaFw0yNTA2MDgxNjEwMjVaMDMxMTAvBgNV BAMTKDU3NEREMTVBRDQwNUNEOEQ2MTkwNkZDMDZBNjEzQjQ3MTE0OTFFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClu/NwkPhfulav5D5cyUM6+9DL DxkptvjbTKQ30gpqcUAl7VN4Bx7VPyr9fBmmc0/VqMXVa4QZMj496bhoiQx//K14 Z17cvYxqmv3CYub8j3aSW6KrN0K7uur8M5ypMgXrfHLQ5O87b+eNwP/7hNZtIh1w tUCPKIIOVB94+FyXaTrXa/X87e4NSI/8Ek7e8DQp9nL0A15ZZEqXfiJKaIWCifv4 G8tQjoamdW/B19IeI9+432QvyBCQBAWi+lCDzgEeVhepXGz4FYY9NbZ+8/ZHrBF0 BSVWoHg6R0bFEKcRtL0HXIwhZqlK9vOH4mNDM6se4IOnZ2HsBSKLZTTy0yyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV03RWtQFzY1hkG/AamE7RxFJHnQwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdWHgpJllUUeiZiglp0gvvSG8S9CzJUPbjh i+TTdo0m4NiheCxoW4lAxOTJ465jzAqMbcwoTBwZSfimFOXVhDudUZ4mO4v1W1Zz u+H65IlzCgd14EYJlnv7/+9NK7h2/sTo/+czn8ZDoAiLcX73LRhiINPwXOtL3XAn NlNCZQrtHr+GeqrS+wxvjatdGQUHOWFEHscCT4LYPmGGfCrtT08AOtpwGFSWu5oN 7jzpOkIbyH+6512SbmyndFFVhS2sXm3niUA1/gyNFolUjxi6L4NliFzWRpaHqd08 4BFmI4DLPYdGtJZTd18KQ8LlPjRKJZt70HUWuCra4s59f/ybKkY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:42 2025 by rpki-client