$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: 6QULbqFU/BFfzWTKerxSCNI0K1dNhssC9HyM4ePBjxI= Subject key identifier: 36:BE:18:3B:51:7F:6E:02:40:4A:DC:74:FA:A8:8E:EB:8E:D1:EB:97 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 4457C7FA58F30FC5321119287C8AE50BB75B1678 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 92 Signing time: Thu 04 Sep 2025 21:12:19 +0000 Manifest this update: Thu 04 Sep 2025 21:07:19 +0000 Manifest next update: Sun 07 Sep 2025 22:50:19 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: DLoBXyRCy5PcCoRTDpvxWnyP5Sgv2SfTadCKV83de7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:57:c7:fa:58:f3:0f:c5:32:11:19:28:7c:8a:e5:0b:b7:5b:16:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Sep 4 21:07:19 2025 GMT Not After : Sep 7 22:50:19 2025 GMT Subject: CN=36BE183B517F6E02404ADC74FAA88EEB8ED1EB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:e5:d3:93:20:24:01:88:58:20:80:30:35: 2e:6d:13:d4:e8:12:c4:a9:93:04:99:9f:e8:ba:51: e5:2c:2a:f7:6d:b6:67:f6:b2:a3:c8:19:be:f7:0d: 2c:07:b8:cf:9f:10:d2:9b:60:43:4e:59:ea:01:1c: f1:89:ec:9f:5d:49:c1:02:6c:99:13:0a:61:f4:fd: 20:2f:87:1e:77:45:3c:a5:80:54:76:d4:16:90:1d: a8:c1:fb:d4:c7:fc:5d:41:4b:24:48:fa:d6:27:e0: ac:67:94:f8:7e:dc:16:ec:d3:d0:30:5b:d7:21:54: 24:d7:cc:5a:93:2f:1a:95:58:fe:09:19:27:1a:c2: a7:ed:8f:34:f7:55:8a:fa:ce:58:23:79:2f:d1:e7: 1e:3b:26:8e:06:c4:56:27:c8:d0:5f:07:46:ab:21: ac:81:c8:86:a5:67:ac:07:05:36:59:3d:13:ea:72: 0d:e0:9e:4d:9b:ed:ed:2f:2a:bb:a4:1e:50:0a:6c: 71:fb:23:8d:31:5d:8f:be:3e:0c:22:a0:e5:fc:d9: 2b:4d:30:ce:84:9c:41:58:a8:0e:aa:19:30:b2:8b: 5a:a1:ed:7e:e5:b4:4e:87:8c:b8:d9:79:60:93:7b: b0:da:99:f5:7f:db:b2:e1:65:80:13:49:d8:74:b9: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BE:18:3B:51:7F:6E:02:40:4A:DC:74:FA:A8:8E:EB:8E:D1:EB:97 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c2:9d:49:8e:81:c9:4f:3b:cc:31:a1:0c:04:b7:7f:06:07: ad:eb:46:bf:e7:6c:d3:f8:36:47:48:5e:54:17:d5:84:e5:09: ae:7d:fe:a0:06:27:4b:06:e0:f6:07:4a:21:ad:0a:ee:25:a8: 7b:e1:90:27:a4:fb:18:40:a6:6d:77:78:e8:ab:d0:4e:3a:e4: 78:05:ca:2d:bd:5d:a9:5c:4f:56:d8:03:1e:d4:9a:a4:0f:0e: e5:fb:9d:8b:49:a8:b9:f6:bc:0f:90:36:7e:ae:d0:cd:1f:c3: 5c:a1:7c:26:06:ac:18:a4:4a:da:89:76:36:28:78:b3:26:ac: c9:54:80:9b:12:b2:ff:8a:71:1d:10:43:cd:52:8e:8d:87:0f: d2:07:6b:58:03:82:4c:48:83:d1:a3:05:54:dd:2a:48:70:7f: 56:f8:97:4e:fc:5d:a1:c4:c1:ab:7d:e0:35:45:55:49:21:12: ed:b1:42:c8:09:30:a8:69:06:d4:ed:5b:94:6b:c7:d2:22:4f: 55:5b:fe:60:0e:5b:78:1a:01:99:c7:71:03:26:95:c6:7e:1b: e8:2f:c7:29:6b:50:62:c5:f9:fb:30:e2:ae:5a:1b:1d:4f:44: 8c:dc:80:e4:98:c7:19:90:18:31:90:86:92:88:e7:79:41:e0: 75:cc:77:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFfH+ljzD8UyERkofIrlC7dbFngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA5MDQyMTA3MTlaFw0yNTA5MDcyMjUwMTlaMDMxMTAvBgNV BAMTKDM2QkUxODNCNTE3RjZFMDI0MDRBREM3NEZBQTg4RUVCOEVEMUVCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbuXTkyAkAYhYIIAwNS5tE9To EsSpkwSZn+i6UeUsKvdttmf2sqPIGb73DSwHuM+fENKbYENOWeoBHPGJ7J9dScEC bJkTCmH0/SAvhx53RTylgFR21BaQHajB+9TH/F1BSyRI+tYn4KxnlPh+3Bbs09Aw W9chVCTXzFqTLxqVWP4JGScawqftjzT3VYr6zlgjeS/R5x47Jo4GxFYnyNBfB0ar IayByIalZ6wHBTZZPRPqcg3gnk2b7e0vKrukHlAKbHH7I40xXY++PgwioOX82StN MM6EnEFYqA6qGTCyi1qh7X7ltE6HjLjZeWCTe7DamfV/27LhZYATSdh0uX+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNr4YO1F/bgJAStx0+qiO647R65cwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnCnUmOgclPO8wxoQwEt38GB63rRr/nbNP4 NkdIXlQX1YTlCa59/qAGJ0sG4PYHSiGtCu4lqHvhkCek+xhApm13eOir0E465HgF yi29XalcT1bYAx7UmqQPDuX7nYtJqLn2vA+QNn6u0M0fw1yhfCYGrBikStqJdjYo eLMmrMlUgJsSsv+KcR0QQ81Sjo2HD9IHa1gDgkxIg9GjBVTdKkhwf1b4l078XaHE wat94DVFVUkhEu2xQsgJMKhpBtTtW5Rrx9IiT1Vb/mAOW3gaAZnHcQMmlcZ+G+gv xylrUGLF+fsw4q5aGx1PRIzcgOSYxxmQGDGQhpKI53lB4HXMdxk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:16 2025 by rpki-client