$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: bZaENeVIfqwyv6+S/YjXHwXib/D2aun1jqtkaH+R3J8= Subject key identifier: DD:84:E5:06:B1:1B:CA:25:DF:D5:B1:EE:B9:8E:C8:70:A7:FF:4A:8D Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 5C5752B82E94A941ADBFB3EE4E0F2BE599CE80C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: AF Signing time: Tue 03 Jun 2025 20:11:58 +0000 Manifest this update: Tue 03 Jun 2025 20:06:58 +0000 Manifest next update: Fri 06 Jun 2025 21:37:58 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: /U+LviEnotBt692H+SItjM2Zo8aJce0ye967mjn6roQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:57:52:b8:2e:94:a9:41:ad:bf:b3:ee:4e:0f:2b:e5:99:ce:80:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Jun 3 20:06:58 2025 GMT Not After : Jun 6 21:37:58 2025 GMT Subject: CN=DD84E506B11BCA25DFD5B1EEB98EC870A7FF4A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:65:2a:b7:b2:d6:56:c3:c1:c4:38:79:0c: 75:6e:4e:a0:16:f9:9e:cb:f9:9e:93:1c:12:5f:57: be:67:25:f7:e5:a8:82:fe:2b:50:90:07:0c:4a:10: 43:c8:b4:5f:2d:92:89:1f:3b:c9:80:13:24:ac:68: 5e:3a:ca:d8:e5:02:ea:c7:94:9f:c0:fa:84:c4:8a: ab:33:17:01:3f:bc:f4:51:c9:8c:e3:ba:07:d6:cf: 4d:4f:8c:8a:c7:1c:1c:74:88:80:b4:38:aa:63:74: 99:1a:31:4e:be:cf:05:4d:17:ff:07:1e:ea:f6:cf: 62:16:cc:9f:08:62:f2:29:5e:24:9b:93:87:e7:09: e9:2e:ff:5a:a3:e3:40:82:09:86:e5:b4:34:e4:2b: d5:8a:73:ea:6d:ec:33:24:be:4c:f1:97:31:ba:30: e1:ed:3a:e4:cc:fd:d4:77:b2:86:0f:52:c8:07:c6: 18:d2:3b:68:3a:52:9c:ca:02:02:ef:d8:98:88:9d: d8:b6:67:49:58:c1:3d:35:eb:2b:2a:3b:fb:3e:05: 7e:e6:5f:b6:c1:fa:22:70:70:e4:37:00:71:5c:99: 8b:f4:72:c4:34:aa:d7:46:de:ac:ed:c4:09:ad:3d: 32:0d:ab:d6:c8:6b:43:ba:2a:94:6a:28:cd:12:94: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:84:E5:06:B1:1B:CA:25:DF:D5:B1:EE:B9:8E:C8:70:A7:FF:4A:8D X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ee:b9:b5:b7:d6:cf:65:90:4b:1a:f2:47:a4:d3:9e:02:d6: 07:61:36:5c:36:63:53:9c:5f:4e:db:b3:c3:af:d1:2f:fb:2c: ed:e0:a3:1e:0c:5e:7c:72:eb:44:77:96:39:17:4b:fe:63:68: fa:c5:38:22:fb:47:dd:ff:77:99:07:e7:e1:6a:6e:16:40:56: 3b:18:bb:65:f2:56:88:6a:ad:3e:9a:39:c4:70:74:16:ef:6a: 42:fd:a6:de:08:5f:7f:e5:31:28:67:8f:58:c5:f7:a9:31:0d: 0d:d0:ae:af:9e:53:37:de:c4:38:8d:8e:7c:a1:42:7b:63:46: 7a:8f:a9:8d:a7:6c:a2:64:85:d2:f5:3c:56:80:b7:f6:a0:63: 33:8f:43:85:05:49:15:67:e7:4f:6f:91:11:5d:0d:cc:dc:43: 29:07:e5:a8:d1:f8:55:2c:7f:27:9a:d7:87:62:e6:b6:8c:87: 7c:a9:f2:ad:55:5d:27:a8:b3:69:65:2c:a0:04:a7:0e:86:f8: 3f:74:6a:85:f1:cc:d4:0c:68:12:81:9d:bf:63:39:e3:53:b9: e4:01:84:e5:e0:fa:ad:56:c6:5a:01:35:ff:25:86:8c:b3:b2: b1:ce:09:cd:22:78:20:2c:30:cb:40:1e:b1:28:40:ff:b8:42: bb:e9:a3:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFdSuC6UqUGtv7PuTg8r5ZnOgMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNTA2MDMyMDA2NThaFw0yNTA2MDYyMTM3NThaMDMxMTAvBgNV BAMTKEREODRFNTA2QjExQkNBMjVERkQ1QjFFRUI5OEVDODcwQTdGRjRBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYGUqt7LWVsPBxDh5DHVuTqAW +Z7L+Z6THBJfV75nJfflqIL+K1CQBwxKEEPItF8tkokfO8mAEySsaF46ytjlAurH lJ/A+oTEiqszFwE/vPRRyYzjugfWz01PjIrHHBx0iIC0OKpjdJkaMU6+zwVNF/8H Hur2z2IWzJ8IYvIpXiSbk4fnCeku/1qj40CCCYbltDTkK9WKc+pt7DMkvkzxlzG6 MOHtOuTM/dR3soYPUsgHxhjSO2g6UpzKAgLv2JiIndi2Z0lYwT016ysqO/s+BX7m X7bB+iJwcOQ3AHFcmYv0csQ0qtdG3qztxAmtPTINq9bIa0O6KpRqKM0SlOYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YTlBrEbyiXf1bHuuY7IcKf/So0wHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLuubW31s9lkEsa8kek054C1gdhNlw2Y1Oc X07bs8Ov0S/7LO3gox4MXnxy60R3ljkXS/5jaPrFOCL7R93/d5kH5+FqbhZAVjsY u2XyVohqrT6aOcRwdBbvakL9pt4IX3/lMShnj1jF96kxDQ3Qrq+eUzfexDiNjnyh QntjRnqPqY2nbKJkhdL1PFaAt/agYzOPQ4UFSRVn509vkRFdDczcQykH5ajR+FUs fyea14di5raMh3yp8q1VXSeos2llLKAEpw6G+D90aoXxzNQMaBKBnb9jOeNTueQB hOXg+q1WxloBNf8lhoyzsrHOCc0ieCAsMMtAHrEoQP+4Qrvpo38= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:30 2025 by rpki-client