$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: Ar3ZlhX/qqMNcXBsNWaYZOV3SeNili/Iv8X3iCRUqqs= Subject key identifier: 1B:AC:E6:BF:AD:5B:F2:4F:2E:63:40:C0:E0:B8:48:EC:0F:FC:B0:2C Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 618044D997CFB42F11D8C30CBF14D1D4B0D893EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01B7 Signing time: Thu 04 Sep 2025 13:11:39 +0000 Manifest this update: Thu 04 Sep 2025 13:06:39 +0000 Manifest next update: Sun 07 Sep 2025 23:35:39 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: PcCFaLmJy6THLzOf3XqHQAkmFZt0/GPh2yhn/zKxh9s=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 23:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:80:44:d9:97:cf:b4:2f:11:d8:c3:0c:bf:14:d1:d4:b0:d8:93:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Sep 4 13:06:39 2025 GMT Not After : Sep 7 23:35:39 2025 GMT Subject: CN=1BACE6BFAD5BF24F2E6340C0E0B848EC0FFCB02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c7:6d:2d:90:d3:41:ac:ad:d9:4f:3c:77:bf: d2:8d:e0:fb:0c:c9:1e:38:25:60:32:b3:8b:03:ad: 4f:64:78:c1:02:60:0d:47:4c:fb:a3:56:46:e1:06: 77:43:45:de:e2:9c:35:7d:f5:5b:c1:32:89:2a:7d: 4b:e7:19:6c:37:68:33:09:25:1d:70:bd:98:8c:df: 6e:96:9e:28:6d:9c:b8:8e:83:09:bf:fe:96:fc:11: 40:b5:89:ed:39:8f:17:e4:01:f6:7d:ab:74:0f:cb: 2e:30:87:32:78:07:25:06:5b:28:0f:8b:3b:a7:a9: 0c:99:8a:bd:51:f8:f0:32:0f:c2:5f:cf:eb:5d:5b: 4c:cf:aa:0d:85:0e:58:52:83:0e:11:dd:e9:74:e6: 58:e4:af:0f:aa:e6:ef:10:fe:d0:f8:36:d9:6c:0a: 59:59:91:0c:2c:5f:49:15:8c:68:6d:33:aa:b1:cb: f8:01:07:1d:7f:06:42:79:8a:5a:ef:25:1a:51:8b: 3a:26:c2:6d:d0:ac:e0:a3:d4:03:d8:cc:37:b9:6f: 5d:82:e1:3d:6c:38:53:b0:c9:bd:0e:b6:c3:d2:63: d9:f2:68:33:9e:57:c1:77:1a:14:1f:8a:8b:af:2f: a2:ba:45:5e:a1:b8:ce:db:15:db:74:ea:e7:38:0d: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AC:E6:BF:AD:5B:F2:4F:2E:63:40:C0:E0:B8:48:EC:0F:FC:B0:2C X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:43:0e:9a:b0:09:36:88:f3:7d:06:22:40:b0:6b:a0:69:ea: ee:1b:e2:08:93:8e:5c:73:f6:87:18:37:90:98:45:c8:74:ef: 3d:82:1f:aa:8a:9f:4d:c6:a6:f2:63:b0:f1:9d:d0:02:32:ab: 51:c0:9d:af:54:a9:7e:fd:e4:66:d1:1d:19:de:14:26:be:29: 77:22:6a:da:f9:ad:22:ba:80:8d:ff:92:53:9c:be:90:07:2f: da:9e:01:27:80:40:63:94:14:68:2b:a3:fb:13:14:d5:9c:32: aa:dd:35:36:1b:72:b3:cb:47:f5:20:7b:1b:ee:31:b8:6d:38: 08:53:2f:4d:19:80:6d:09:18:ad:64:ec:58:72:e1:47:28:03: 62:05:de:79:d9:d2:f2:fa:8d:e1:7d:ea:a6:2b:44:43:c9:74: bb:d4:ba:9b:85:af:42:8e:db:ad:24:bd:7c:35:b4:08:3c:93: 1e:a5:0c:2a:03:3a:78:80:f8:b6:5c:87:e4:f0:f3:90:27:e6: 3f:00:cd:16:6e:65:31:d2:fa:0f:b3:3a:68:77:69:02:ba:b3: 37:bb:34:34:c3:ef:66:1b:55:0d:a6:05:82:6f:8b:2a:4a:2f: 63:2f:fe:19:d6:53:db:59:fa:13:8d:3f:d1:f4:0f:bb:61:a3: fd:7a:bc:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYBE2ZfPtC8R2MMMvxTR1LDYk+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTA5MDQxMzA2MzlaFw0yNTA5MDcyMzM1MzlaMDMxMTAvBgNV BAMTKDFCQUNFNkJGQUQ1QkYyNEYyRTYzNDBDMEUwQjg0OEVDMEZGQ0IwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxx20tkNNBrK3ZTzx3v9KN4PsM yR44JWAys4sDrU9keMECYA1HTPujVkbhBndDRd7inDV99VvBMokqfUvnGWw3aDMJ JR1wvZiM326WnihtnLiOgwm//pb8EUC1ie05jxfkAfZ9q3QPyy4whzJ4ByUGWygP izunqQyZir1R+PAyD8Jfz+tdW0zPqg2FDlhSgw4R3el05ljkrw+q5u8Q/tD4Ntls CllZkQwsX0kVjGhtM6qxy/gBBx1/BkJ5ilrvJRpRizomwm3QrOCj1APYzDe5b12C 4T1sOFOwyb0OtsPSY9nyaDOeV8F3GhQfiouvL6K6RV6huM7bFdt06uc4DRpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6zmv61b8k8uY0DA4LhI7A/8sCwwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdDDpqwCTaI830GIkCwa6Bp6u4b4giTjlxz 9ocYN5CYRch07z2CH6qKn03GpvJjsPGd0AIyq1HAna9UqX795GbRHRneFCa+KXci atr5rSK6gI3/klOcvpAHL9qeASeAQGOUFGgro/sTFNWcMqrdNTYbcrPLR/Ugexvu MbhtOAhTL00ZgG0JGK1k7Fhy4UcoA2IF3nnZ0vL6jeF96qYrREPJdLvUupuFr0KO 260kvXw1tAg8kx6lDCoDOniA+LZch+Tw85An5j8AzRZuZTHS+g+zOmh3aQK6sze7 NDTD72YbVQ2mBYJviypKL2Mv/hnWU9tZ+hONP9H0D7tho/16vKU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:55 2025 by rpki-client