$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: ryZrdV+LR0qtopPyy7F5wEpt7pUHZZkBbX3G7CG4/bg= Subject key identifier: E5:BB:39:2C:C9:EA:B3:95:A2:3F:B5:41:97:C9:4E:58:D4:01:1C:AD Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 1254B9BC7FC8D99D24ADAD7092BF5888C2012C91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: 68 Signing time: Mon 21 Jul 2025 04:32:00 +0000 Manifest this update: Mon 21 Jul 2025 04:27:00 +0000 Manifest next update: Thu 24 Jul 2025 16:15:00 +0000 Files and hashes: 1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: bni1MEXt2pu3EGFhrLDGw6PMS2Wp/uUSxRtLnqeKGlY=) 2: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: OUGtlD7tnyqC5RBhXpLeY6wGla5b2AjWC7l7agigQ5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:54:b9:bc:7f:c8:d9:9d:24:ad:ad:70:92:bf:58:88:c2:01:2c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: Jul 21 04:27:00 2025 GMT Not After : Jul 24 16:15:00 2025 GMT Subject: CN=E5BB392CC9EAB395A23FB54197C94E58D4011CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:db:e2:12:2e:93:f3:0b:65:dc:54:35:07: b8:cf:2f:72:ed:e3:ef:32:a7:c7:8c:15:b6:00:e9: da:03:de:5e:35:14:b5:8d:e5:7c:9d:9b:b6:d9:2d: b1:4f:1c:94:92:0e:ea:64:7d:84:9e:7b:e4:6b:55: 7b:db:d2:e7:e6:1b:28:8b:89:0f:3c:2e:46:87:f6: b5:33:97:d6:b4:36:f7:d5:eb:00:e2:8d:3d:93:35: f6:d9:f8:10:44:0d:38:68:fb:0f:41:c4:7d:91:59: 16:50:fd:fd:49:17:26:d8:b8:bd:a6:48:5c:34:c4: 98:f8:bd:db:74:a7:fb:31:0f:30:96:7f:33:c2:f9: 8a:5c:32:41:ea:23:4a:ed:52:6f:d3:26:de:0e:c2: 91:35:9d:de:73:81:26:9a:bb:31:58:df:79:4c:08: ea:fe:5a:69:e2:b1:75:07:95:31:12:5f:b9:2f:eb: 05:8e:61:da:5e:42:d4:7b:c3:eb:22:2e:ec:7e:96: 78:e1:13:0a:50:74:b8:1b:54:1a:94:f8:21:71:49: 38:e3:52:2f:f6:56:a3:04:c8:e7:fb:bf:44:9a:49: 9d:f8:8f:e7:45:82:2a:12:fa:a7:b8:7f:f9:e8:22: 40:1d:97:47:65:b0:70:97:51:8e:a1:43:e1:ac:f1: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BB:39:2C:C9:EA:B3:95:A2:3F:B5:41:97:C9:4E:58:D4:01:1C:AD X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c2:4e:13:13:3c:cb:2d:5e:d9:9c:a9:86:75:51:c6:cb:c9: fa:94:05:04:5c:b7:a7:dd:43:d9:76:c3:d3:0a:a9:fa:6f:cb: 07:1d:3a:33:58:bf:0c:74:b7:10:22:b8:19:18:88:4a:9a:66: b1:13:86:61:cf:39:84:03:9d:0e:9b:4a:14:82:f1:f8:5c:9e: bb:e7:d2:70:51:b0:ad:da:d0:3b:ef:c6:18:c8:0b:58:55:1f: a8:bc:03:13:44:ae:98:63:c4:3c:ad:61:a1:fb:ae:24:62:fe: ce:35:06:5c:e9:6b:4a:5c:b7:0f:c9:28:58:f5:6c:bf:ad:1f: 46:74:4c:51:3e:56:8a:5c:42:ad:f6:88:f9:14:55:90:69:b9: 83:53:c8:35:7a:66:c0:e9:a9:b3:a8:19:58:7d:08:99:e6:8b: 5d:3c:b2:93:f5:84:b0:16:6c:be:4d:0b:4d:b9:85:52:a9:9b: 9c:64:ca:4f:5e:e0:b8:c3:b3:ab:c8:01:52:db:db:33:fc:e5: 8c:1a:a6:b3:33:d1:12:bf:7f:de:e2:a5:bf:31:56:e6:6d:f3: e8:9a:66:7e:42:6c:5e:aa:fa:c7:9f:87:f5:e0:23:87:a9:fa: 90:c0:cb:e9:38:11:dd:0b:7d:36:41:ce:cd:d0:36:19:cc:d5: 55:b1:7d:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElS5vH/I2Z0kra1wkr9YiMIBLJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNTA3MjEwNDI3MDBaFw0yNTA3MjQxNjE1MDBaMDMxMTAvBgNV BAMTKEU1QkIzOTJDQzlFQUIzOTVBMjNGQjU0MTk3Qzk0RTU4RDQwMTFDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwNviEi6T8wtl3FQ1B7jPL3Lt 4+8yp8eMFbYA6doD3l41FLWN5Xydm7bZLbFPHJSSDupkfYSee+RrVXvb0ufmGyiL iQ88LkaH9rUzl9a0NvfV6wDijT2TNfbZ+BBEDTho+w9BxH2RWRZQ/f1JFybYuL2m SFw0xJj4vdt0p/sxDzCWfzPC+YpcMkHqI0rtUm/TJt4OwpE1nd5zgSaauzFY33lM COr+WmnisXUHlTESX7kv6wWOYdpeQtR7w+siLux+lnjhEwpQdLgbVBqU+CFxSTjj Ui/2VqMEyOf7v0SaSZ34j+dFgioS+qe4f/noIkAdl0dlsHCXUY6hQ+Gs8WIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5bs5LMnqs5WiP7VBl8lOWNQBHK0wHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrCThMTPMstXtmcqYZ1UcbLyfqUBQRct6fd Q9l2w9MKqfpvywcdOjNYvwx0txAiuBkYiEqaZrEThmHPOYQDnQ6bShSC8fhcnrvn 0nBRsK3a0DvvxhjIC1hVH6i8AxNErphjxDytYaH7riRi/s41Blzpa0pctw/JKFj1 bL+tH0Z0TFE+VopcQq32iPkUVZBpuYNTyDV6ZsDpqbOoGVh9CJnmi108spP1hLAW bL5NC025hVKpm5xkyk9e4LjDs6vIAVLb2zP85YwaprMz0RK/f97ipb8xVuZt8+ia Zn5CbF6q+sefh/XgI4ep+pDAy+k4Ed0LfTZBzs3QNhnM1VWxfeQ= -----END CERTIFICATE-----Generated at Mon Jul 21 23:36:16 2025 by rpki-client