$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: RNCe7Jx6FKSLv5nkDHE1cizIWyC3JhUTpUudTfUV+iw= Subject key identifier: 1F:D0:5C:FC:DD:64:EB:55:3E:63:3B:0A:40:75:CF:56:00:83:72:60 Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 434A8DB2D4A64EB8EBDD6447B1ACD64F387A6A92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 02 Signing time: Sat 07 Jun 2025 20:51:47 +0000 Manifest this update: Sat 07 Jun 2025 20:46:47 +0000 Manifest next update: Tue 10 Jun 2025 21:45:47 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: E/LsbC/EaAqutC3cnYLqf8yAUqEN7kuL7CukXeVNRiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4a:8d:b2:d4:a6:4e:b8:eb:dd:64:47:b1:ac:d6:4f:38:7a:6a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Jun 7 20:46:47 2025 GMT Not After : Jun 10 21:45:47 2025 GMT Subject: CN=1FD05CFCDD64EB553E633B0A4075CF5600837260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:aa:f3:2f:95:27:48:77:7c:7b:5d:92:1d:8d: d4:86:23:48:fd:20:9d:7f:4c:ea:76:70:1d:43:10: e7:85:09:5b:fa:de:78:ba:6b:98:a7:7d:28:db:d6: 4d:de:61:07:0e:49:2c:7c:4c:06:91:61:07:88:8a: 2c:09:af:84:d9:56:33:1b:3c:96:d2:ba:d9:97:27: aa:e9:5b:86:34:7f:ab:3d:89:3a:e1:e3:3a:8b:d1: 0d:9f:ef:01:53:38:ab:2b:75:08:af:b1:20:5f:8e: af:fa:7d:dc:26:56:a3:fc:bb:20:1c:97:a5:23:5a: 0b:6d:bb:e9:f8:a2:5e:5d:56:29:47:f3:47:c8:51: 3b:4e:f2:d6:8d:ae:a7:53:45:06:ea:a2:a0:44:49: fd:33:23:7a:dc:6b:e4:1a:e4:14:05:48:03:2b:8b: 40:c7:03:be:f1:b8:b5:92:61:53:a6:a8:ac:93:42: 2a:d2:57:4a:44:6e:43:2e:6e:0e:71:61:55:c1:64: d3:34:d8:85:cb:29:4b:33:33:20:2d:6b:dc:91:1a: 4f:30:09:32:0f:fb:40:a0:1c:66:25:1d:70:80:09: a1:0f:80:c3:66:55:89:91:a0:94:3d:ff:5e:43:a0: cf:31:6a:f6:46:7a:5d:d7:1d:58:8e:d0:e3:d2:6b: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:5C:FC:DD:64:EB:55:3E:63:3B:0A:40:75:CF:56:00:83:72:60 X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1a:ba:97:7f:df:bf:5a:37:e9:a3:2e:14:cb:6b:9a:24:86: 5b:81:25:3a:4d:de:5f:7c:fc:d5:1a:fa:e3:55:dc:30:2e:b8: 5e:f4:54:cb:02:a9:9d:00:93:d1:2b:3f:65:48:57:54:28:00: f0:66:d0:c9:f2:28:60:45:31:f4:2e:28:b1:6c:40:08:14:43: 27:70:4f:82:10:9b:5e:d2:99:33:58:4f:c5:f7:5b:4f:64:31: f0:8b:6e:a5:85:45:cc:64:91:21:f0:96:01:cd:dd:cd:0e:44: d1:57:7e:ee:d0:48:27:e6:f6:67:81:be:a0:25:84:f0:45:21: 5a:72:af:c1:db:71:f0:af:f6:c2:6e:59:e7:ee:06:43:43:d1: 8e:c9:c9:b4:d3:fe:5b:97:4c:00:0f:f9:1e:a2:22:e0:0d:7c: 16:23:8e:80:ee:ec:45:b4:4f:b9:86:f6:c5:5c:45:6e:da:c4: 35:09:23:38:93:f9:29:eb:50:15:92:8b:27:30:8b:aa:5a:89: ab:21:39:4e:02:55:16:bf:08:61:fa:25:ae:da:8f:79:fc:35: 4d:70:de:ac:d9:92:e9:e9:f2:f6:81:69:24:8e:a4:44:a6:d1: c7:3a:51:95:42:c0:d8:f8:d9:bf:83:7e:98:7d:66:a9:fa:57: 6b:1d:2a:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0qNstSmTrjr3WRHsazWTzh6apIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNTA2MDcyMDQ2NDdaFw0yNTA2MTAyMTQ1NDdaMDMxMTAvBgNV BAMTKDFGRDA1Q0ZDREQ2NEVCNTUzRTYzM0IwQTQwNzVDRjU2MDA4MzcyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlqvMvlSdId3x7XZIdjdSGI0j9 IJ1/TOp2cB1DEOeFCVv63ni6a5infSjb1k3eYQcOSSx8TAaRYQeIiiwJr4TZVjMb PJbSutmXJ6rpW4Y0f6s9iTrh4zqL0Q2f7wFTOKsrdQivsSBfjq/6fdwmVqP8uyAc l6UjWgttu+n4ol5dVilH80fIUTtO8taNrqdTRQbqoqBESf0zI3rca+Qa5BQFSAMr i0DHA77xuLWSYVOmqKyTQirSV0pEbkMubg5xYVXBZNM02IXLKUszMyAta9yRGk8w CTIP+0CgHGYlHXCACaEPgMNmVYmRoJQ9/15DoM8xavZGel3XHViO0OPSa54HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9Bc/N1k61U+YzsKQHXPVgCDcmAwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQaupd/379aN+mjLhTLa5okhluBJTpN3l98 /NUa+uNV3DAuuF70VMsCqZ0Ak9ErP2VIV1QoAPBm0MnyKGBFMfQuKLFsQAgUQydw T4IQm17SmTNYT8X3W09kMfCLbqWFRcxkkSHwlgHN3c0ORNFXfu7QSCfm9meBvqAl hPBFIVpyr8HbcfCv9sJuWefuBkND0Y7JybTT/luXTAAP+R6iIuANfBYjjoDu7EW0 T7mG9sVcRW7axDUJIziT+SnrUBWSiycwi6paiashOU4CVRa/CGH6Ja7aj3n8NU1w 3qzZkunp8vaBaSSOpESm0cc6UZVCwNj42b+Dfph9Zqn6V2sdKrs= -----END CERTIFICATE-----Generated at Sun Jun 8 01:36:57 2025 by rpki-client