$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: lxWPkkzseMvV7HXxS+wSQKX37mlyZTde+D1ODyZpuS0= Subject key identifier: 88:76:47:6A:01:A0:A6:22:7B:D1:C0:DC:F1:52:ED:EA:2C:B8:8F:2B Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 0CB6AD13C7E4583FA5703A663BB49AD4F0E3313F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: CC Signing time: Sun 07 Sep 2025 06:21:05 +0000 Manifest this update: Sun 07 Sep 2025 06:16:05 +0000 Manifest next update: Wed 10 Sep 2025 10:41:05 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: IUXW/H9fZD9WqAb3DQ/FgCr0sw3kJ48rO6koCgCr2wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b6:ad:13:c7:e4:58:3f:a5:70:3a:66:3b:b4:9a:d4:f0:e3:31:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Sep 7 06:16:05 2025 GMT Not After : Sep 10 10:41:05 2025 GMT Subject: CN=8876476A01A0A6227BD1C0DCF152EDEA2CB88F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:ce:1f:c4:be:47:69:20:14:bc:4c:62:30: 98:46:e3:9b:73:cb:55:3f:db:9a:3d:62:27:18:44: 9c:78:8a:5d:4b:07:87:d1:ab:bf:c0:0e:18:5f:28: 95:47:3e:ed:60:03:48:32:f9:5e:b1:72:41:91:3c: c2:b9:f4:ac:68:a3:52:b8:fd:78:20:5e:99:0e:6b: 17:4e:d4:33:b0:a1:1f:80:af:84:09:80:2e:fb:f3: ed:66:4a:77:45:ad:47:ad:a1:48:7a:0c:8e:9a:3f: ce:bf:45:9f:ff:6c:30:fd:65:2c:5e:1e:9a:6c:d0: cb:68:16:a3:0c:af:2c:b3:7e:0c:dc:09:c0:94:bc: da:42:89:17:ed:41:fe:1e:72:3b:da:5a:18:96:96: 24:3b:be:9c:49:22:38:f3:35:d3:fd:f4:f0:f1:a9: 10:4a:59:a6:13:7c:94:14:c4:06:0c:65:4e:2f:f2: 44:08:f0:5c:77:1f:43:db:63:ab:0c:b5:16:33:15: 65:b2:c6:c2:ef:a1:cc:db:72:58:a4:cc:78:0d:03: 2f:7f:f1:f2:fe:84:2c:29:c2:5a:a3:68:e9:14:e2: df:83:80:a4:1f:33:9a:c0:42:d4:5e:9d:5e:70:b1: aa:c5:b6:7a:0e:4a:00:fa:37:8f:08:fb:88:b1:f6: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:76:47:6A:01:A0:A6:22:7B:D1:C0:DC:F1:52:ED:EA:2C:B8:8F:2B X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:95:27:9a:1e:5f:0b:68:fc:0d:d4:ca:49:ff:85:cd:65:9c: 93:29:43:2c:6f:28:7e:78:02:97:9b:22:97:ce:88:a6:c4:23: 3c:9e:6d:35:25:6a:57:33:7a:f8:08:cc:46:0c:c2:cc:10:d7: 1f:74:e4:34:19:3c:40:2c:20:2c:af:a1:e5:dd:5d:60:22:79: 15:f6:6d:b2:f9:d8:6f:e0:ca:eb:b4:bd:65:20:ab:03:0d:bf: c5:d8:cc:ca:03:6d:a8:7d:ff:58:ed:7a:eb:b9:f0:50:16:36: c7:27:8a:e3:c4:63:ca:b2:f5:62:04:78:74:09:bb:b0:a7:a8: 05:76:18:c9:9c:49:4e:91:2f:dd:87:20:15:f6:64:b1:83:cf: d9:53:7a:18:b0:ec:3a:08:69:21:a0:a6:78:21:b2:a2:6c:08: f7:a6:51:c0:60:d3:aa:8c:83:38:6b:fe:90:fd:9e:64:8b:38: 1c:e8:c7:1b:83:1c:89:54:c2:5f:32:5b:20:24:b0:ea:15:25: cf:6b:12:f0:64:e2:b9:be:95:59:a3:e4:5d:13:78:ed:c2:d1: 48:6d:21:0c:7e:b3:57:e3:56:a1:72:ef:f2:b8:53:14:d5:07: 67:7f:dd:1f:48:db:0a:4c:f8:bc:79:fe:a7:3c:d4:d7:5e:1a: 72:e3:56:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLatE8fkWD+lcDpmO7Sa1PDjMT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA5MDcwNjE2MDVaFw0yNTA5MTAxMDQxMDVaMDMxMTAvBgNV BAMTKDg4NzY0NzZBMDFBMEE2MjI3QkQxQzBEQ0YxNTJFREVBMkNCODhGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ds4fxL5HaSAUvExiMJhG45tz y1U/25o9YicYRJx4il1LB4fRq7/ADhhfKJVHPu1gA0gy+V6xckGRPMK59Kxoo1K4 /XggXpkOaxdO1DOwoR+Ar4QJgC778+1mSndFrUetoUh6DI6aP86/RZ//bDD9ZSxe Hpps0MtoFqMMryyzfgzcCcCUvNpCiRftQf4ecjvaWhiWliQ7vpxJIjjzNdP99PDx qRBKWaYTfJQUxAYMZU4v8kQI8Fx3H0PbY6sMtRYzFWWyxsLvoczbclikzHgNAy9/ 8fL+hCwpwlqjaOkU4t+DgKQfM5rAQtRenV5wsarFtnoOSgD6N48I+4ix9o+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiHZHagGgpiJ70cDc8VLt6iy4jyswHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKVJ5oeXwto/A3Uykn/hc1lnJMpQyxvKH54 ApebIpfOiKbEIzyebTUlalczevgIzEYMwswQ1x905DQZPEAsICyvoeXdXWAieRX2 bbL52G/gyuu0vWUgqwMNv8XYzMoDbah9/1jteuu58FAWNscniuPEY8qy9WIEeHQJ u7CnqAV2GMmcSU6RL92HIBX2ZLGDz9lTehiw7DoIaSGgpnghsqJsCPemUcBg06qM gzhr/pD9nmSLOBzoxxuDHIlUwl8yWyAksOoVJc9rEvBk4rm+lVmj5F0TeO3C0Uht IQx+s1fjVqFy7/K4UxTVB2d/3R9I2wpM+Lx5/qc81NdeGnLjVkQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:28 2025 by rpki-client