$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: GrLvIGPmpZ5vGT9Bnk5slxlwTWJxBdobnfLo7GAGvEo= Subject key identifier: E6:A4:A3:D4:B2:70:EF:FC:76:E1:E8:B5:A4:30:B7:AC:43:21:BA:97 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 072686F4FB7030B80736F3405BF1953C4349EDE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 55 Signing time: Tue 03 Jun 2025 16:01:51 +0000 Manifest this update: Tue 03 Jun 2025 15:56:51 +0000 Manifest next update: Sat 07 Jun 2025 02:35:51 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: KabI5qUGVEAZcfBOqI+dP3phmAwd2Xy/fAJ3dKh8rts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:26:86:f4:fb:70:30:b8:07:36:f3:40:5b:f1:95:3c:43:49:ed:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Jun 3 15:56:51 2025 GMT Not After : Jun 7 02:35:51 2025 GMT Subject: CN=E6A4A3D4B270EFFC76E1E8B5A430B7AC4321BA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:16:b8:ce:da:39:95:92:40:16:12:cc:06: fe:94:eb:52:40:a2:29:e9:45:d0:c5:56:c9:72:61: 37:a5:7b:6e:bb:c5:00:9d:13:73:00:d3:02:f7:1d: cb:d9:65:d2:31:ea:19:45:fd:b8:69:1f:17:c1:97: f6:ed:13:01:34:eb:53:7f:77:f6:db:03:a2:35:01: 1d:4e:3d:21:45:76:2f:62:4b:3a:88:31:59:26:94: 54:a2:fc:46:d3:c3:1c:f5:72:40:f7:49:1d:47:ae: 70:da:41:9b:d3:76:de:2e:56:ef:1a:ee:7c:53:5d: 6e:3f:17:f2:bb:50:af:8b:74:41:7e:13:ca:43:69: 96:5e:e5:82:a5:ad:f6:ca:6d:6e:26:5e:ac:0d:b6: 9f:86:af:37:31:d4:01:21:fc:9d:ce:1d:49:ea:d5: 84:d8:e6:34:4d:17:49:85:09:39:80:59:bc:ef:b1: d5:0e:c2:d8:e5:ff:f2:1f:f3:a7:49:11:7c:c9:1b: d8:fc:fa:4e:25:1c:ca:f6:9d:a8:10:ac:0e:4a:ce: 38:e6:b8:58:0b:9a:cf:70:e7:6d:72:73:e1:e8:31: e0:74:bd:23:f0:8d:d3:4c:7d:9f:0a:81:69:cc:77: 2d:a2:d8:d2:4f:80:c9:2c:a8:da:a1:1d:62:3a:46: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:A3:D4:B2:70:EF:FC:76:E1:E8:B5:A4:30:B7:AC:43:21:BA:97 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e3:52:71:7b:03:70:de:e7:4d:e5:1d:b3:4d:d1:d7:21:47: 77:6b:20:24:cd:64:19:f9:83:07:37:6f:15:b6:d3:63:24:f9: 76:41:fa:dc:70:95:29:99:25:ac:b8:02:c7:18:8c:aa:52:05: 03:58:2a:eb:66:1b:b9:5e:45:53:32:06:63:90:1e:24:0e:f1: 9b:b3:d2:7c:44:bf:6a:6d:25:ef:a0:9e:48:2b:f4:44:8b:19: f3:8b:1f:91:f4:fd:00:00:9d:7e:1d:2d:93:07:ce:94:bd:28: 23:ab:42:7d:1d:60:51:b5:f4:c6:89:be:c8:b3:3c:b1:da:b4: ea:92:c4:41:d0:ae:88:00:51:8b:bd:ef:c1:93:59:c6:f9:1a: bd:e1:31:f5:15:56:d7:d2:f8:b9:00:01:63:e6:a7:b2:bb:2c: 1c:fa:1f:ac:6f:06:e8:8f:37:25:19:fc:ad:37:8a:2a:ee:7c: df:c7:a5:ff:49:9a:07:10:8c:82:8f:28:6e:b6:13:d1:5d:06: 5d:67:ac:f0:9e:a2:1b:8f:7c:f9:2a:8c:72:e9:99:9d:95:53: dc:75:5b:5a:22:fb:75:26:51:5a:53:28:bf:10:56:db:34:c1: 88:2a:ab:96:ee:f6:16:3e:b9:74:8e:45:28:bf:4f:f3:1a:7c: b4:60:70:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByaG9PtwMLgHNvNAW/GVPENJ7eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTA2MDMxNTU2NTFaFw0yNTA2MDcwMjM1NTFaMDMxMTAvBgNV BAMTKEU2QTRBM0Q0QjI3MEVGRkM3NkUxRThCNUE0MzBCN0FDNDMyMUJBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgxa4zto5lZJAFhLMBv6U61JA oinpRdDFVslyYTele267xQCdE3MA0wL3HcvZZdIx6hlF/bhpHxfBl/btEwE061N/ d/bbA6I1AR1OPSFFdi9iSzqIMVkmlFSi/EbTwxz1ckD3SR1HrnDaQZvTdt4uVu8a 7nxTXW4/F/K7UK+LdEF+E8pDaZZe5YKlrfbKbW4mXqwNtp+Grzcx1AEh/J3OHUnq 1YTY5jRNF0mFCTmAWbzvsdUOwtjl//If86dJEXzJG9j8+k4lHMr2nagQrA5Kzjjm uFgLms9w521yc+HoMeB0vSPwjdNMfZ8KgWnMdy2i2NJPgMksqNqhHWI6Ru+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5qSj1LJw7/x24ei1pDC3rEMhupcwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/jUnF7A3De503lHbNN0dchR3drICTNZBn5 gwc3bxW202Mk+XZB+txwlSmZJay4AscYjKpSBQNYKutmG7leRVMyBmOQHiQO8Zuz 0nxEv2ptJe+gnkgr9ESLGfOLH5H0/QAAnX4dLZMHzpS9KCOrQn0dYFG19MaJvsiz PLHatOqSxEHQrogAUYu978GTWcb5Gr3hMfUVVtfS+LkAAWPmp7K7LBz6H6xvBuiP NyUZ/K03iirufN/Hpf9JmgcQjIKPKG62E9FdBl1nrPCeohuPfPkqjHLpmZ2VU9x1 W1oi+3UmUVpTKL8QVts0wYgqq5bu9hY+uXSORSi/T/MafLRgcAI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:14 2025 by rpki-client