$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: KJbtF2FXhZqIVtudTm3IE8V9mA66LRiziXZ3KPL2TuI= Subject key identifier: 59:9F:D3:00:DE:7F:4A:0E:2B:86:6A:AB:67:1E:79:71:49:05:03:CF Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 46729EE3ED385B573E69DA3A25F279694C4DF495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 2A Signing time: Sat 06 Sep 2025 09:01:48 +0000 Manifest this update: Sat 06 Sep 2025 08:56:48 +0000 Manifest next update: Tue 09 Sep 2025 18:37:48 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: IW3SFOyqJg9LeCf9IxUVrKYSqj+njaI0IzkY2oXp6JM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:72:9e:e3:ed:38:5b:57:3e:69:da:3a:25:f2:79:69:4c:4d:f4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Sep 6 08:56:48 2025 GMT Not After : Sep 9 18:37:48 2025 GMT Subject: CN=599FD300DE7F4A0E2B866AAB671E7971490503CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:a4:b2:84:a1:3a:b3:4a:1e:23:be:20:64: bf:20:32:0f:56:45:51:fc:9b:9c:16:8e:8a:20:f2: f1:b6:3f:45:ef:ae:28:3a:ec:de:47:16:ba:b2:68: f8:ca:4e:b7:a1:a7:55:40:4b:3c:28:9f:f1:5d:aa: f0:7f:53:63:a1:99:a9:65:25:1b:48:07:9d:bd:bf: 02:67:56:af:a7:b8:0d:ca:81:fb:67:88:20:ec:94: e6:e3:84:b7:1c:53:cb:5d:68:94:27:b6:20:c4:48: ef:b4:de:fc:d4:86:17:53:88:6b:b0:64:d6:ca:ac: bc:d0:de:ee:ef:0f:ee:ec:f4:40:4e:c7:1a:70:63: 0e:18:a6:a8:3f:05:11:dc:9d:0f:7c:3d:7b:17:51: 35:24:e0:98:9f:41:55:23:93:21:6a:81:29:53:3e: 7c:12:23:c7:77:0d:be:c4:23:cd:ed:d2:06:33:e8: 71:04:9a:c6:be:2a:64:25:0d:c2:6f:bc:24:e9:3e: e9:65:88:b8:15:05:bf:d7:57:7d:16:2f:55:ad:41: 84:73:ab:6f:01:9d:ba:85:8e:31:5f:06:4e:ed:47: 07:25:51:76:95:93:f2:a9:cb:47:0d:e7:84:9f:e5: ce:0d:10:fb:47:3b:28:41:fb:22:6a:ed:df:20:18: a6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9F:D3:00:DE:7F:4A:0E:2B:86:6A:AB:67:1E:79:71:49:05:03:CF X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9e:fc:ea:dd:60:0d:f4:ac:d5:69:dc:c5:75:a3:49:92:55: 11:ca:5e:74:63:24:68:ac:e3:d3:5e:95:1b:8b:fb:94:12:e2: 37:74:7e:44:83:39:2b:b2:f4:28:0d:08:92:4e:e3:cf:96:17: 43:2e:3e:ad:e9:70:58:f9:e1:38:f3:47:11:c2:14:af:a2:18: 11:2e:cd:3a:57:0a:e7:18:76:60:44:ba:25:70:99:0f:ec:40: 5b:9c:1d:f7:d1:bf:47:0b:f2:f2:3c:f5:03:80:62:ba:af:22: ff:82:63:be:99:88:3b:19:75:c4:f6:50:4c:0f:5b:89:8c:39: 7c:1a:77:81:fc:84:d1:5c:a3:90:34:67:30:1e:c5:77:24:90: c6:1a:d0:69:28:74:6d:a3:86:75:d8:24:d0:4b:8e:e2:35:e6: 67:f2:4e:d8:fe:dd:86:e4:13:ea:cb:d7:9f:6f:df:ba:07:5a: 8e:96:81:fe:65:e1:f7:37:b2:44:ef:10:8f:cb:e9:84:d8:67: a7:f4:35:90:0e:57:ab:53:e3:7d:69:62:9a:1e:aa:5b:d7:ea: ce:94:cf:40:62:0c:1d:b1:b9:2e:4a:07:5e:96:35:48:6c:22: ef:24:9b:45:cb:45:2f:6d:0e:f6:9e:a6:61:58:ff:46:46:2c: c2:53:b3:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnKe4+04W1c+ado6JfJ5aUxN9JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNTA5MDYwODU2NDhaFw0yNTA5MDkxODM3NDhaMDMxMTAvBgNV BAMTKDU5OUZEMzAwREU3RjRBMEUyQjg2NkFBQjY3MUU3OTcxNDkwNTAzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CqSyhKE6s0oeI74gZL8gMg9W RVH8m5wWjoog8vG2P0Xvrig67N5HFrqyaPjKTrehp1VASzwon/FdqvB/U2Ohmall JRtIB529vwJnVq+nuA3KgftniCDslObjhLccU8tdaJQntiDESO+03vzUhhdTiGuw ZNbKrLzQ3u7vD+7s9EBOxxpwYw4Ypqg/BRHcnQ98PXsXUTUk4JifQVUjkyFqgSlT PnwSI8d3Db7EI83t0gYz6HEEmsa+KmQlDcJvvCTpPulliLgVBb/XV30WL1WtQYRz q28BnbqFjjFfBk7tRwclUXaVk/Kpy0cN54Sf5c4NEPtHOyhB+yJq7d8gGKZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZ/TAN5/Sg4rhmqrZx55cUkFA88wHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIme/OrdYA30rNVp3MV1o0mSVRHKXnRjJGis 49NelRuL+5QS4jd0fkSDOSuy9CgNCJJO48+WF0MuPq3pcFj54TjzRxHCFK+iGBEu zTpXCucYdmBEuiVwmQ/sQFucHffRv0cL8vI89QOAYrqvIv+CY76ZiDsZdcT2UEwP W4mMOXwad4H8hNFco5A0ZzAexXckkMYa0GkodG2jhnXYJNBLjuI15mfyTtj+3Ybk E+rL159v37oHWo6Wgf5l4fc3skTvEI/L6YTYZ6f0NZAOV6tT431pYpoeqlvX6s6U z0BiDB2xuS5KB16WNUhsIu8km0XLRS9tDvaepmFY/0ZGLMJTs6I= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:51 2025 by rpki-client