$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: rQxYrvRk6xXGfq+sDWxSDdjQmxzle2WPUlRAfQwVzP8= Subject key identifier: 3F:2B:F1:78:55:15:39:66:D4:BD:4C:02:A9:DE:86:9E:84:C9:12:84 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 22734B209A2BF7E385B350BCB4D8E9D4561EC099 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 7E Signing time: Wed 03 Sep 2025 13:31:41 +0000 Manifest this update: Wed 03 Sep 2025 13:26:41 +0000 Manifest next update: Sat 06 Sep 2025 22:11:41 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: 6ippUt3yuiD6j6cvyW1zbDkZNqEap5FHmhzjV62CURg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:73:4b:20:9a:2b:f7:e3:85:b3:50:bc:b4:d8:e9:d4:56:1e:c0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Sep 3 13:26:41 2025 GMT Not After : Sep 6 22:11:41 2025 GMT Subject: CN=3F2BF17855153966D4BD4C02A9DE869E84C91284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f9:93:15:b5:48:24:2f:f7:85:7c:a8:52:bf: ac:86:04:88:fa:f8:58:23:26:86:0e:87:b0:72:f0: 43:fc:49:3e:f1:d4:15:71:11:eb:21:2f:c6:e0:6d: b2:c8:d0:a2:1d:35:05:69:c1:cb:7e:02:6d:a6:93: 1d:2b:5b:e5:5b:1f:4b:2e:de:19:65:36:20:88:25: 9d:c8:4c:c4:a1:15:55:21:0c:bf:50:74:c5:c3:19: dc:7c:19:54:16:b3:11:8b:71:fe:f3:37:e7:03:51: aa:09:2c:d4:56:50:c3:da:e3:a6:47:eb:0e:2f:66: ea:87:c5:7d:fe:cb:92:db:b1:35:53:3b:20:75:85: 3c:6c:e3:00:16:a7:d6:cb:2b:54:5a:0b:be:1d:15: e9:3a:6c:9f:09:ed:b4:f2:e2:a3:cf:a4:a0:a7:0d: 32:8d:89:0d:4f:57:de:45:6a:4d:04:40:7e:67:8b: 02:7e:fc:4f:6f:97:e2:fb:cc:37:c8:46:52:fa:c0: 8c:29:d4:66:96:43:7f:5f:30:73:e4:6e:9d:6e:a6: 71:33:dd:b0:e4:61:f0:56:25:b3:94:b1:a6:33:16: c7:d7:0e:85:fd:20:bb:6a:77:49:6c:5a:28:2a:ed: e9:13:09:62:45:9a:80:e8:8f:6c:63:d5:36:58:17: 2f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2B:F1:78:55:15:39:66:D4:BD:4C:02:A9:DE:86:9E:84:C9:12:84 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ac:58:f6:71:98:ad:1e:99:41:39:b0:27:87:5f:4f:f8:02: a6:55:59:a6:82:bf:c6:43:6b:f1:6d:99:03:8d:b5:79:cc:3c: 61:9b:94:aa:16:5d:b9:d4:1a:93:92:9f:df:99:43:3e:30:48: f4:ac:b3:05:4f:f1:b1:f2:7c:53:38:1b:16:31:36:0a:34:de: 2f:cb:21:14:c6:b6:58:31:6c:0c:06:f7:b1:4d:ef:12:f2:52: 75:b8:d4:74:bb:1c:8d:95:53:e5:63:da:54:f9:b3:3a:db:99: e3:81:1c:ba:1e:31:27:05:a9:83:d4:92:e2:48:1d:6f:a3:cf: e7:2c:06:69:03:10:21:ae:a0:3b:ab:8e:32:12:f6:f6:96:27: c8:83:4d:44:74:91:6b:67:71:ef:16:de:0d:ce:08:0b:80:1b: 15:55:8f:ac:b8:e7:c8:e3:43:72:05:d9:41:e2:3c:b2:d2:19: 26:b0:39:1e:ec:be:09:e9:43:88:b0:5d:14:e0:d6:79:72:4f: c2:ac:da:fb:26:49:6f:86:ad:4d:93:5f:0b:3f:1d:65:e3:4e: 4e:f7:75:dc:8f:35:21:fc:df:0d:b8:4a:f0:25:f5:71:12:f0: 3f:38:62:7f:60:1c:3c:c5:e6:7d:be:6d:46:34:ff:2e:3b:f6: a1:9e:25:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInNLIJor9+OFs1C8tNjp1FYewJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTA5MDMxMzI2NDFaFw0yNTA5MDYyMjExNDFaMDMxMTAvBgNV BAMTKDNGMkJGMTc4NTUxNTM5NjZENEJENEMwMkE5REU4NjlFODRDOTEyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+ZMVtUgkL/eFfKhSv6yGBIj6 +FgjJoYOh7By8EP8ST7x1BVxEeshL8bgbbLI0KIdNQVpwct+Am2mkx0rW+VbH0su 3hllNiCIJZ3ITMShFVUhDL9QdMXDGdx8GVQWsxGLcf7zN+cDUaoJLNRWUMPa46ZH 6w4vZuqHxX3+y5LbsTVTOyB1hTxs4wAWp9bLK1RaC74dFek6bJ8J7bTy4qPPpKCn DTKNiQ1PV95Fak0EQH5niwJ+/E9vl+L7zDfIRlL6wIwp1GaWQ39fMHPkbp1upnEz 3bDkYfBWJbOUsaYzFsfXDoX9ILtqd0lsWigq7ekTCWJFmoDoj2xj1TZYFy83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPyvxeFUVOWbUvUwCqd6GnoTJEoQwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGsWPZxmK0emUE5sCeHX0/4AqZVWaaCv8ZD a/FtmQONtXnMPGGblKoWXbnUGpOSn9+ZQz4wSPSsswVP8bHyfFM4GxYxNgo03i/L IRTGtlgxbAwG97FN7xLyUnW41HS7HI2VU+Vj2lT5szrbmeOBHLoeMScFqYPUkuJI HW+jz+csBmkDECGuoDurjjIS9vaWJ8iDTUR0kWtnce8W3g3OCAuAGxVVj6y458jj Q3IF2UHiPLLSGSawOR7svgnpQ4iwXRTg1nlyT8Ks2vsmSW+GrU2TXws/HWXjTk73 ddyPNSH83w24SvAl9XES8D84Yn9gHDzF5n2+bUY0/y479qGeJVY= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:12 2025 by rpki-client