$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: BCFz5CZ6EF428wPMB5nC/iVzIc0hlPRfZN0MXLZhiiE= Subject key identifier: 8B:D8:B4:F2:1E:49:D3:24:2F:EC:F4:E9:E4:94:FE:B4:32:2A:56:45 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 684D48DEB08557FE1E238AD7D2804505C0026DFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01C8 Signing time: Thu 04 Sep 2025 07:51:42 +0000 Manifest this update: Thu 04 Sep 2025 07:46:42 +0000 Manifest next update: Sun 07 Sep 2025 14:14:42 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: LXzvu93vspcytgYPVK1N4XRtdnwWVaZYOAOWnMqtHzQ=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4d:48:de:b0:85:57:fe:1e:23:8a:d7:d2:80:45:05:c0:02:6d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Sep 4 07:46:42 2025 GMT Not After : Sep 7 14:14:42 2025 GMT Subject: CN=8BD8B4F21E49D3242FECF4E9E494FEB4322A5645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:a8:3e:d7:d9:b1:3a:84:e8:ee:2f:24:26: b6:58:75:06:89:02:c4:38:da:2d:64:c3:55:54:96: d2:1f:ee:54:a4:f0:29:24:54:7e:4e:63:f4:4c:6f: 3a:cd:79:e4:ff:d1:93:d7:bb:37:7d:b3:9a:2c:67: 6c:83:32:ed:b2:b7:ce:a4:05:23:4e:03:e2:8d:df: ff:d3:08:14:7e:e5:7f:7a:91:3b:b4:a5:64:e2:77: 1e:f2:2a:66:b4:c3:2e:53:67:e6:1c:44:1d:29:5b: ed:b2:71:68:b8:86:47:48:65:35:ef:f9:d5:be:f4: 5e:8f:78:6b:ea:3c:45:82:25:3a:df:e6:54:82:ad: 86:6b:8d:d5:5e:32:0b:45:13:2e:0c:e1:a0:a6:f4: 99:1d:35:b3:71:6b:29:3a:80:28:7e:ad:f4:5e:33: 4a:f2:87:12:a8:ea:de:f7:3d:4f:8e:a3:90:8f:31: 9e:b7:24:80:0c:91:96:ff:a4:f3:3f:8b:82:25:07: 4a:7c:93:6f:0a:d4:47:f6:f9:15:0f:81:01:47:8d: cd:fa:06:f5:eb:01:4c:98:05:f7:fe:e4:a9:1c:48: 5f:c2:71:d4:7a:13:eb:94:e9:2e:e1:f7:d8:f1:8a: d9:6c:6c:7a:b6:03:0f:8a:92:c5:a1:b9:43:3a:ff: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D8:B4:F2:1E:49:D3:24:2F:EC:F4:E9:E4:94:FE:B4:32:2A:56:45 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ea:fc:6d:83:18:59:5b:ef:2e:bd:30:da:1b:9f:d6:42:43: 94:6d:a3:67:29:a1:6a:2a:c4:12:a5:f0:00:8f:cb:a8:f5:52: dd:cc:27:5b:64:7b:de:1d:af:df:a9:aa:c4:db:09:30:17:5f: 96:a9:d6:a2:fa:b0:65:bf:e5:db:e2:84:fb:c0:83:5a:6d:91: 58:c8:c2:a0:88:65:8c:13:0c:74:52:35:85:8e:d3:b8:9f:07: 15:f2:09:b3:9f:4c:22:1d:dd:d1:66:7e:97:00:51:af:7c:f8: 15:81:7f:0e:cd:a6:22:0f:11:db:b0:60:d5:c8:d0:ba:9a:c8: 57:ca:77:69:87:c6:da:9f:2d:6a:fc:32:8a:b7:26:d1:08:90: 47:c3:88:c9:64:23:04:cf:f3:fd:aa:70:d8:a7:02:d0:3c:a7: 9c:bb:56:1f:87:77:d4:ca:24:8b:2b:b4:55:5c:bb:52:dc:71: 8f:32:98:ec:70:a4:5d:6d:3a:99:85:f8:58:81:ae:6d:15:e0: 00:95:72:ef:d8:96:d8:2a:c7:2f:e5:92:e1:34:b2:e4:de:de: c1:1a:b6:47:c1:9e:d0:a0:6a:11:e9:c4:0a:c2:78:ba:7b:0f: 98:19:dc:19:3b:4b:c4:06:f5:dd:ee:cd:b8:d1:28:1c:59:9a: 59:dc:68:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaE1I3rCFV/4eI4rX0oBFBcACbfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA5MDQwNzQ2NDJaFw0yNTA5MDcxNDE0NDJaMDMxMTAvBgNV BAMTKDhCRDhCNEYyMUU0OUQzMjQyRkVDRjRFOUU0OTRGRUI0MzIyQTU2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXag+19mxOoTo7i8kJrZYdQaJ AsQ42i1kw1VUltIf7lSk8CkkVH5OY/RMbzrNeeT/0ZPXuzd9s5osZ2yDMu2yt86k BSNOA+KN3//TCBR+5X96kTu0pWTidx7yKma0wy5TZ+YcRB0pW+2ycWi4hkdIZTXv +dW+9F6PeGvqPEWCJTrf5lSCrYZrjdVeMgtFEy4M4aCm9JkdNbNxayk6gCh+rfRe M0ryhxKo6t73PU+Oo5CPMZ63JIAMkZb/pPM/i4IlB0p8k28K1Ef2+RUPgQFHjc36 BvXrAUyYBff+5KkcSF/CcdR6E+uU6S7h99jxitlsbHq2Aw+KksWhuUM6/+Z9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9i08h5J0yQv7PTp5JT+tDIqVkUwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/q/G2DGFlb7y69MNobn9ZCQ5Rto2cpoWoq xBKl8ACPy6j1Ut3MJ1tke94dr9+pqsTbCTAXX5ap1qL6sGW/5dvihPvAg1ptkVjI wqCIZYwTDHRSNYWO07ifBxXyCbOfTCId3dFmfpcAUa98+BWBfw7NpiIPEduwYNXI 0LqayFfKd2mHxtqfLWr8Moq3JtEIkEfDiMlkIwTP8/2qcNinAtA8p5y7Vh+Hd9TK JIsrtFVcu1LccY8ymOxwpF1tOpmF+FiBrm0V4ACVcu/Yltgqxy/lkuE0suTe3sEa tkfBntCgahHpxArCeLp7D5gZ3Bk7S8QG9d3uzbjRKBxZmlncaOM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:31 2025 by rpki-client