$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: dWAu50g0//cTda50c+P9g7PDkd+dbBLlC37dJqRH+Hk= Subject key identifier: 03:AC:2E:4B:4A:5C:61:7A:4C:9B:91:0E:3C:27:D5:AE:CC:4D:31:A5 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 136C9ABD0FB76184FEA71B409011FEFE90863E9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: D9 Signing time: Sat 06 Sep 2025 14:41:05 +0000 Manifest this update: Sat 06 Sep 2025 14:36:05 +0000 Manifest next update: Tue 09 Sep 2025 23:06:05 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: rGD9qGLhEnwc92jokJxtRwq+2NyBB39Y+F7ZP5huAQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6c:9a:bd:0f:b7:61:84:fe:a7:1b:40:90:11:fe:fe:90:86:3e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Sep 6 14:36:05 2025 GMT Not After : Sep 9 23:06:05 2025 GMT Subject: CN=03AC2E4B4A5C617A4C9B910E3C27D5AECC4D31A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:0d:df:95:f6:44:24:d9:bb:fa:07:53:b2: ee:58:ba:32:0c:63:31:b9:21:11:ed:ee:70:d5:37: cb:71:e4:fd:37:2f:4a:85:bc:bb:c4:8a:2f:10:e9: f1:93:96:fa:1a:2a:d3:02:fa:ea:b5:08:70:ac:3f: 80:43:f6:7d:3c:57:28:ba:7b:c5:a7:6c:8e:91:43: 7f:26:4a:f3:8d:bd:53:44:19:6b:8c:0a:4a:ec:1c: 59:98:9b:a2:06:dc:01:d8:8c:88:3c:fb:76:f5:e0: 33:48:c3:f4:c0:93:e2:56:7d:d5:c1:6c:69:c1:cc: b3:21:f5:6d:34:5c:a0:a7:8b:19:80:9c:07:96:b7: 49:9a:d3:62:9b:c7:af:36:ab:e3:8e:bd:eb:76:9b: 70:8c:70:21:54:d6:c2:24:f7:5e:73:13:cf:7c:09: 3a:5b:ae:4a:28:ab:08:9a:be:48:4c:66:99:b6:a6: df:26:5e:4e:32:62:ba:fb:a3:37:71:e5:5d:31:91: 4d:2f:dd:dd:61:bc:bb:8d:d3:5c:8f:2f:71:0d:fc: fe:65:b8:f2:70:07:7e:f6:d7:20:df:40:57:8b:e3: 80:15:45:3b:3f:ef:12:47:ed:fe:63:fa:c4:b7:fb: e4:68:66:65:ed:e5:df:43:71:1c:ad:57:50:2a:ef: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AC:2E:4B:4A:5C:61:7A:4C:9B:91:0E:3C:27:D5:AE:CC:4D:31:A5 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:da:b0:f8:9f:1c:fd:bc:7c:58:d0:53:0c:09:8c:0a:18:e8: 13:49:c6:0f:aa:aa:b9:9e:ec:d9:5f:b1:02:0e:2b:9a:0a:c0: cb:a1:e1:b0:2a:3b:7b:70:ea:97:a6:8d:bc:31:dd:5d:1d:f5: 99:6e:f3:94:52:79:ef:f3:9e:a4:92:cf:6d:36:62:40:d0:0f: 1a:48:d2:04:89:b5:58:46:78:b0:02:14:fa:c1:7b:a4:09:f6: 66:76:d5:0c:42:e0:9c:27:28:8e:7d:92:cf:34:16:a2:dd:43: ef:46:1b:36:83:b4:c5:d3:4b:8a:97:7f:84:83:d6:df:cf:7c: dd:5f:8a:fd:f4:ad:a4:23:aa:33:6d:fd:6b:bc:dc:ad:dd:46: 6a:97:4c:15:64:6d:53:ab:c3:e4:0f:44:f3:61:4a:93:9d:90: 87:8b:aa:bb:3d:3f:15:31:b8:60:fc:81:2a:b0:c3:56:89:ab: fc:77:92:b6:38:e5:b4:37:79:83:ba:72:5d:da:f1:11:c6:b5: 28:f5:1f:b1:e1:ad:75:be:b0:7c:ed:42:46:7b:97:2a:d3:cb: 9d:be:be:ae:26:c2:f7:91:d5:8e:e1:4f:08:50:4f:9e:4f:a9: 4b:2e:f4:93:e6:16:1b:0f:7f:de:8f:d0:fe:f7:de:a1:ca:0e: 28:d9:f5:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2yavQ+3YYT+pxtAkBH+/pCGPpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNTA5MDYxNDM2MDVaFw0yNTA5MDkyMzA2MDVaMDMxMTAvBgNV BAMTKDAzQUMyRTRCNEE1QzYxN0E0QzlCOTEwRTNDMjdENUFFQ0M0RDMxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlA3flfZEJNm7+gdTsu5YujIM YzG5IRHt7nDVN8tx5P03L0qFvLvEii8Q6fGTlvoaKtMC+uq1CHCsP4BD9n08Vyi6 e8WnbI6RQ38mSvONvVNEGWuMCkrsHFmYm6IG3AHYjIg8+3b14DNIw/TAk+JWfdXB bGnBzLMh9W00XKCnixmAnAeWt0ma02Kbx682q+OOvet2m3CMcCFU1sIk915zE898 CTpbrkooqwiavkhMZpm2pt8mXk4yYrr7ozdx5V0xkU0v3d1hvLuN01yPL3EN/P5l uPJwB3721yDfQFeL44AVRTs/7xJH7f5j+sS3++RoZmXt5d9DcRytV1Aq701VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6wuS0pcYXpMm5EOPCfVrsxNMaUwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzasPifHP28fFjQUwwJjAoY6BNJxg+qqrme 7NlfsQIOK5oKwMuh4bAqO3tw6pemjbwx3V0d9Zlu85RSee/znqSSz202YkDQDxpI 0gSJtVhGeLACFPrBe6QJ9mZ21QxC4JwnKI59ks80FqLdQ+9GGzaDtMXTS4qXf4SD 1t/PfN1fiv30raQjqjNt/Wu83K3dRmqXTBVkbVOrw+QPRPNhSpOdkIeLqrs9PxUx uGD8gSqww1aJq/x3krY45bQ3eYO6cl3a8RHGtSj1H7HhrXW+sHztQkZ7lyrTy52+ vq4mwveR1Y7hTwhQT55PqUsu9JPmFhsPf96P0P733qHKDijZ9aU= -----END CERTIFICATE-----Generated at Mon Sep 8 03:04:42 2025 by rpki-client