$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: l4B4rxxQZuUHpKMAw3DaNfGZeFs+fKXd7ro03XAziC4= Subject key identifier: DD:6E:C8:85:9F:41:96:67:9D:45:A4:A3:F9:04:55:CB:50:CC:4F:B9 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 5E8C8304DD0469D6D27EEBCE83A4633969984AEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 7D Signing time: Fri 05 Sep 2025 07:21:12 +0000 Manifest this update: Fri 05 Sep 2025 07:16:12 +0000 Manifest next update: Mon 08 Sep 2025 15:15:12 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: N1KyGInPN8D36FwnPRvpb9iiGdjZ2KPUNdXC+JYo39Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8c:83:04:dd:04:69:d6:d2:7e:eb:ce:83:a4:63:39:69:98:4a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Sep 5 07:16:12 2025 GMT Not After : Sep 8 15:15:12 2025 GMT Subject: CN=DD6EC8859F4196679D45A4A3F90455CB50CC4FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:c4:93:a8:09:30:dd:2b:52:02:47:c7:c7: 74:e9:73:4f:5a:61:80:5e:08:1c:cc:70:a1:e7:85: 6d:d5:2c:1d:94:e6:54:60:93:43:d5:2d:05:f7:5e: 56:0f:d3:57:c3:ad:5f:f3:6b:7b:5b:5f:58:81:6c: be:f7:8f:bf:93:f4:25:af:6e:cc:2f:db:72:54:53: e5:e4:cc:00:1a:fc:de:7a:75:5c:09:ae:d4:9a:8c: b6:57:13:a1:cf:86:40:20:4e:a5:d3:9b:cb:6a:a3: cc:38:5b:26:5a:60:e4:8b:7f:fa:4d:3e:84:0c:77: 6e:aa:c8:47:7b:cc:30:a6:23:73:47:0c:6f:22:0a: d2:f3:49:ae:d9:2a:9b:87:f9:bf:31:63:45:41:28: 35:0d:cb:8f:db:f5:88:6e:33:5c:b1:df:cd:98:83: 4d:93:f5:9d:8e:7e:38:cb:2a:b1:b7:94:e6:45:f4: 6b:ff:21:1e:17:fa:91:bc:b3:2f:d6:cf:fb:e8:02: 49:39:6d:8f:b1:dd:50:6a:d0:b5:e2:b6:b6:aa:33: 00:7c:e3:48:1a:66:6a:f4:df:a0:c5:7a:44:b6:10: ef:61:cf:ba:57:09:2d:15:0b:8c:f6:7d:81:63:2d: f6:d9:1e:de:f5:47:86:33:d5:a6:b9:93:cf:ac:99: 41:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:C8:85:9F:41:96:67:9D:45:A4:A3:F9:04:55:CB:50:CC:4F:B9 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:98:24:28:10:09:4d:52:66:ed:46:db:e7:c7:b4:95:d5:06: 28:37:0d:ae:90:f3:c2:7a:72:5e:c5:5a:d6:53:5c:23:3c:39: 34:07:df:dd:23:8e:0e:32:fe:a0:ae:1e:80:2d:87:b1:0e:36: 09:7c:08:b6:76:60:2f:da:35:e0:28:fc:86:89:60:ed:77:fb: f8:8f:f9:b8:20:b4:1e:fb:0d:2f:34:d1:24:f1:81:12:15:12: 56:3c:2a:9c:2e:14:bd:ac:df:33:ae:68:12:28:83:88:18:f4: a2:56:28:66:0e:2e:90:15:31:11:55:99:56:0a:bb:28:fc:fe: cd:7e:9d:ad:79:93:ff:ed:75:45:9f:e4:17:b7:46:a3:d9:92: 79:a1:35:f5:58:48:ab:49:18:78:b4:9c:30:c5:7a:d9:f9:1a: 6e:09:76:5c:5c:e7:89:8c:13:e7:b6:df:b4:20:79:4d:a7:6a: 38:76:6a:d1:52:23:2e:95:27:3b:2f:87:d3:e2:5c:e3:96:7e: 4d:22:2f:af:6f:66:4f:46:55:0c:0b:80:e7:d6:20:c9:97:75: 22:86:55:cb:9a:85:24:24:40:6a:e9:e9:3c:9b:9c:77:2e:bd: 22:da:0a:33:d7:ba:1c:dd:21:39:0e:9a:e0:21:fd:40:22:de: 6f:62:9c:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXoyDBN0EadbSfuvOg6RjOWmYSuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTA5MDUwNzE2MTJaFw0yNTA5MDgxNTE1MTJaMDMxMTAvBgNV BAMTKERENkVDODg1OUY0MTk2Njc5RDQ1QTRBM0Y5MDQ1NUNCNTBDQzRGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7MSTqAkw3StSAkfHx3Tpc09a YYBeCBzMcKHnhW3VLB2U5lRgk0PVLQX3XlYP01fDrV/za3tbX1iBbL73j7+T9CWv bswv23JUU+XkzAAa/N56dVwJrtSajLZXE6HPhkAgTqXTm8tqo8w4WyZaYOSLf/pN PoQMd26qyEd7zDCmI3NHDG8iCtLzSa7ZKpuH+b8xY0VBKDUNy4/b9YhuM1yx382Y g02T9Z2OfjjLKrG3lOZF9Gv/IR4X+pG8sy/Wz/voAkk5bY+x3VBq0LXitraqMwB8 40gaZmr036DFekS2EO9hz7pXCS0VC4z2fYFjLfbZHt71R4Yz1aa5k8+smUHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3W7IhZ9BlmedRaSj+QRVy1DMT7kwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGYJCgQCU1SZu1G2+fHtJXVBig3Da6Q88J6 cl7FWtZTXCM8OTQH390jjg4y/qCuHoAth7EONgl8CLZ2YC/aNeAo/IaJYO13+/iP +bggtB77DS800STxgRIVElY8KpwuFL2s3zOuaBIog4gY9KJWKGYOLpAVMRFVmVYK uyj8/s1+na15k//tdUWf5Be3RqPZknmhNfVYSKtJGHi0nDDFetn5Gm4Jdlxc54mM E+e237QgeU2najh2atFSIy6VJzsvh9PiXOOWfk0iL69vZk9GVQwLgOfWIMmXdSKG VcuahSQkQGrp6TybnHcuvSLaCjPXuhzdITkOmuAh/UAi3m9inKE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:10 2025 by rpki-client