$ rpki-client -vvf repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft File: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft (raw, json) Hash identifier: HMqPr26lMwWvXB5ja3dY/J7evjEuAqVnQ2T/j1ll5h8= Subject key identifier: E0:7E:14:FD:4D:49:6D:40:4C:9A:D3:1D:B3:34:37:F5:2C:33:B5:F7 Authority key identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 Certificate issuer: /CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Certificate serial: 7AE216C06075B9CA7771E6646AB8D1405BF559A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft Manifest number: 1D Signing time: Sat 06 Sep 2025 23:42:02 +0000 Manifest this update: Sat 06 Sep 2025 23:37:02 +0000 Manifest next update: Wed 10 Sep 2025 01:44:02 +0000 Files and hashes: 1: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: gE+l6BtwnE696koy6eWA+mSXnnRQKbYtsxfkWucx8c8=) 2: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl (hash: B4AbqCJJrzgukfXDQh8xRPuIYGXuDucNlWAeXvkzm6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e2:16:c0:60:75:b9:ca:77:71:e6:64:6a:b8:d1:40:5b:f5:59:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Validity Not Before: Sep 6 23:37:02 2025 GMT Not After : Sep 10 01:44:02 2025 GMT Subject: CN=E07E14FD4D496D404C9AD31DB33437F52C33B5F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:1b:4a:c2:50:39:b1:93:6a:e0:62:ab:dd: 58:a6:84:f1:2d:2a:78:bd:2c:e9:70:25:2f:f9:1f: 96:07:61:07:bd:df:78:7b:8c:74:df:b2:ca:19:61: b4:69:da:ce:9d:eb:11:98:07:fb:03:d8:95:e7:ea: 96:87:2b:cf:c2:dc:81:59:79:a7:6b:c9:52:b7:71: a0:77:3b:8f:cd:c3:7a:09:27:a5:02:9b:7b:6e:26: 7a:ed:96:5c:1d:e2:b0:98:f6:8b:62:1d:43:40:2e: 3e:9a:ac:8c:cd:c9:2a:b1:70:bd:ce:3f:34:f0:14: 6a:f7:02:8f:91:e9:06:75:97:aa:9f:3a:d1:7f:07: 8b:5e:a6:64:31:1a:df:c7:07:81:a7:08:b1:79:40: 43:21:88:84:2e:12:30:b6:aa:e4:42:3c:ff:72:70: 01:ca:26:dc:f9:65:c2:ea:94:69:3a:2a:45:18:06: ce:3d:96:6f:b7:4a:ab:09:02:1d:df:8a:e5:42:3e: 8b:68:84:7a:2f:75:cd:cc:9c:e2:fa:62:a2:a4:91: 19:af:dc:e1:01:48:c3:44:17:96:a4:af:db:24:90: fb:a6:16:f6:08:5d:8f:79:41:d2:db:e7:41:10:ed: 8e:9c:d9:31:4f:c7:29:60:80:dc:ef:2f:c2:f3:64: 5c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:14:FD:4D:49:6D:40:4C:9A:D3:1D:B3:34:37:F5:2C:33:B5:F7 X509v3 Authority Key Identifier: keyid:C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:15:c4:82:5c:ce:60:2c:61:c2:10:7f:87:3b:b1:d4:04:d7: 13:7d:d5:8a:8b:a6:ca:74:2d:a8:05:85:27:36:8b:30:26:cb: 9a:7f:81:be:87:19:05:fd:82:29:09:77:c8:41:ed:16:ad:be: d2:3d:42:0c:0b:74:40:5e:e9:6a:d8:ad:88:84:73:7f:28:c0: a0:bb:50:6d:89:c5:7a:e6:c8:68:3e:90:76:b3:a9:a0:3a:71: 67:50:1a:5b:4f:54:c6:ed:cd:0b:fc:c6:50:c9:4d:bc:0b:5c: a7:3d:de:4d:3b:38:a6:c9:0c:ef:ff:66:af:4b:67:e3:b2:21: 49:18:1a:bb:b4:d3:f9:5a:3b:4f:3c:21:57:d5:03:0c:f4:ea: 47:2f:80:10:56:0a:8d:f1:a5:08:f9:26:6d:b2:db:7f:36:a0: 49:09:5c:15:3f:cc:ef:a7:77:c3:32:a8:0a:2a:5b:f5:b3:a6: 84:e3:65:f9:80:62:5a:94:2a:2a:21:1a:1d:cb:7c:82:9d:e6: ff:0b:02:d3:b5:ca:27:5f:6c:07:ba:c2:74:7f:98:fc:2e:80: 12:a0:c5:92:7b:35:55:d1:6f:4d:3d:86:b1:1d:74:4c:6e:da: d1:04:b8:90:b0:9d:7b:10:d2:ce:ef:d9:72:b2:83:3d:9b:42: 4d:89:51:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuIWwGB1ucp3ceZkarjRQFv1WaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3 NUU0RjU4NTAeFw0yNTA5MDYyMzM3MDJaFw0yNTA5MTAwMTQ0MDJaMDMxMTAvBgNV BAMTKEUwN0UxNEZENEQ0OTZENDA0QzlBRDMxREIzMzQzN0Y1MkMzM0I1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fBtKwlA5sZNq4GKr3VimhPEt Kni9LOlwJS/5H5YHYQe933h7jHTfssoZYbRp2s6d6xGYB/sD2JXn6paHK8/C3IFZ eadryVK3caB3O4/Nw3oJJ6UCm3tuJnrtllwd4rCY9otiHUNALj6arIzNySqxcL3O PzTwFGr3Ao+R6QZ1l6qfOtF/B4tepmQxGt/HB4GnCLF5QEMhiIQuEjC2quRCPP9y cAHKJtz5ZcLqlGk6KkUYBs49lm+3SqsJAh3fiuVCPotohHovdc3MnOL6YqKkkRmv 3OEBSMNEF5akr9skkPumFvYIXY95QdLb50EQ7Y6c2TFPxylggNzvL8LzZFz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4H4U/U1JbUBMmtMdszQ39SwztfcwHwYDVR0j BBgwFoAUwffMDI1eMVWWrxD27PRvLHXk9YUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjYyNDdmOS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMC9DMUY3Q0MwQzhE NUUzMTU1OTZBRjEwRjZFQ0Y0NkYyQzc1RTRGNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3NUU0 RjU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZG MkM3NUU0RjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIVxIJczmAsYcIQf4c7sdQE1xN91YqLpsp0 LagFhSc2izAmy5p/gb6HGQX9gikJd8hB7RatvtI9QgwLdEBe6WrYrYiEc38owKC7 UG2JxXrmyGg+kHazqaA6cWdQGltPVMbtzQv8xlDJTbwLXKc93k07OKbJDO//Zq9L Z+OyIUkYGru00/laO088IVfVAwz06kcvgBBWCo3xpQj5Jm2y2382oEkJXBU/zO+n d8MyqAoqW/WzpoTjZfmAYlqUKiohGh3LfIKd5v8LAtO1yidfbAe6wnR/mPwugBKg xZJ7NVXRb009hrEddExu2tEEuJCwnXsQ0s7v2XKygz2bQk2JUdg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:13 2025 by rpki-client