$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: MqIjQVM9b3AqlXqsuZsb1+d2RPOcg+wHArSSWXM5eHc= Subject key identifier: 19:75:84:7A:0B:70:6B:53:D6:72:6F:54:60:4B:06:89:28:C8:45:D0 Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 141F51E209167409C4BD58FC5CE676223B69881F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 0129 Signing time: Sat 06 Sep 2025 05:20:04 +0000 Manifest this update: Sat 06 Sep 2025 05:15:04 +0000 Manifest next update: Tue 09 Sep 2025 06:56:04 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: HJWLqVOy+hYl2ZEKw8o4fzRsTv+S4XUb4Qb52U/n/vg=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: ZcuLefK+yAknTSgNc0AblKwaXXvM+7Ik+wo2Htxgbns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1f:51:e2:09:16:74:09:c4:bd:58:fc:5c:e6:76:22:3b:69:88:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Sep 6 05:15:04 2025 GMT Not After : Sep 9 06:56:04 2025 GMT Subject: CN=1975847A0B706B53D6726F54604B068928C845D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:76:d6:bf:81:35:a5:ca:32:fb:32:ac:0e: 83:9c:c6:ce:94:fc:d0:6b:b0:7e:d9:33:99:da:db: ae:ff:60:33:e2:91:06:f1:77:41:9b:a8:2f:7b:8a: 6c:f5:24:41:6c:f4:3e:55:dd:76:a4:c2:85:1b:e7: 72:4e:a1:2c:59:8f:f7:2e:a7:c3:5e:12:fb:11:b7: 0b:6c:f2:05:bc:d0:a3:c4:67:d6:75:ef:43:83:59: 8f:2a:aa:23:97:bd:53:2e:dc:0e:38:b1:b8:f6:f4: 4f:61:99:f8:6f:fa:d3:d4:81:8e:29:c1:d9:ec:30: d4:d8:32:75:e9:09:9e:7f:37:8d:a5:87:a9:60:9f: c8:4d:f7:c1:43:bc:92:b3:e6:a8:77:f7:1f:ad:9e: 1e:b7:d9:22:44:0c:11:68:4a:84:c4:b4:bf:27:11: 16:2b:43:80:e1:44:3e:36:38:a4:10:98:c4:d6:54: a0:61:e7:0c:ec:f4:e0:f9:49:17:f4:b9:3c:65:c5: e1:35:6f:1e:4b:ad:3a:d7:eb:79:70:ee:15:b9:78: 55:8c:56:a2:13:5d:b3:a1:9b:48:25:53:3e:57:4e: 96:d4:ef:f3:d2:f6:54:63:31:50:81:b1:92:b3:9e: 60:d9:7a:6d:ea:95:bb:c0:41:b7:50:0a:fc:d3:80: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:75:84:7A:0B:70:6B:53:D6:72:6F:54:60:4B:06:89:28:C8:45:D0 X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:3c:d9:19:74:54:9e:17:88:0a:ba:ba:bb:5b:64:24:3a: 00:5b:aa:58:59:51:d5:f5:5a:95:5d:c6:99:8b:a7:7d:5c:8e: 71:88:4f:e6:4f:aa:b1:08:85:97:c8:1b:e1:e7:ff:95:54:df: 12:8c:5c:c2:16:7b:c8:f9:f6:c4:1d:07:82:50:ee:24:be:7f: 0c:af:d2:b3:28:39:93:9f:53:9d:58:11:80:57:94:81:dd:1d: 2b:e2:08:9a:e7:6a:71:65:ae:e0:d5:d1:82:50:07:e5:4a:20: 32:e4:b3:27:53:e9:0b:d7:3e:db:f7:1c:c7:5c:b0:3c:5f:09: ab:6e:5d:f3:2b:05:c1:21:d8:5a:ff:39:6c:88:55:ba:0e:58: 2e:ea:be:46:5e:2f:03:37:d6:9c:87:e1:a7:7c:b2:12:9d:88: 15:6d:0b:ca:34:ac:59:51:17:14:72:a9:19:e5:c7:7c:ab:01: 75:ce:64:94:4d:78:ee:87:b5:e5:4d:f2:ad:75:42:90:1f:ef: 46:df:39:13:45:fd:22:71:3d:ce:cc:c3:d4:56:ed:30:7c:c0: f1:dd:e3:be:50:f4:0b:c0:54:89:d2:48:0a:ee:80:d4:ec:76: ee:b1:a5:85:ed:33:1e:29:9e:12:9b:39:fa:15:24:55:e4:9f: 35:6d:8c:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFB9R4gkWdAnEvVj8XOZ2IjtpiB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTA5MDYwNTE1MDRaFw0yNTA5MDkwNjU2MDRaMDMxMTAvBgNV BAMTKDE5NzU4NDdBMEI3MDZCNTNENjcyNkY1NDYwNEIwNjg5MjhDODQ1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnnbWv4E1pcoy+zKsDoOcxs6U /NBrsH7ZM5na267/YDPikQbxd0GbqC97imz1JEFs9D5V3XakwoUb53JOoSxZj/cu p8NeEvsRtwts8gW80KPEZ9Z170ODWY8qqiOXvVMu3A44sbj29E9hmfhv+tPUgY4p wdnsMNTYMnXpCZ5/N42lh6lgn8hN98FDvJKz5qh39x+tnh632SJEDBFoSoTEtL8n ERYrQ4DhRD42OKQQmMTWVKBh5wzs9OD5SRf0uTxlxeE1bx5LrTrX63lw7hW5eFWM VqITXbOhm0glUz5XTpbU7/PS9lRjMVCBsZKznmDZem3qlbvAQbdQCvzTgHT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXWEegtwa1PWcm9UYEsGiSjIRdAwHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwFPNkZdFSeF4gKurq7W2QkOgBbqlhZUdX1 WpVdxpmLp31cjnGIT+ZPqrEIhZfIG+Hn/5VU3xKMXMIWe8j59sQdB4JQ7iS+fwyv 0rMoOZOfU51YEYBXlIHdHSviCJrnanFlruDV0YJQB+VKIDLksydT6QvXPtv3HMdc sDxfCatuXfMrBcEh2Fr/OWyIVboOWC7qvkZeLwM31pyH4ad8shKdiBVtC8o0rFlR FxRyqRnlx3yrAXXOZJRNeO6HteVN8q11QpAf70bfORNF/SJxPc7Mw9RW7TB8wPHd 475Q9AvAVInSSArugNTsdu6xpYXtMx4pnhKbOfoVJFXknzVtjAY= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:12 2025 by rpki-client