$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: 7DN7w0NsMH1vnAl78rsXvWwKtF6NqyPjKfLmt4TIGBg= Subject key identifier: A4:0A:7E:18:AC:EF:50:A4:C7:B9:94:89:C5:DF:5A:81:A8:E9:10:71 Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 105B026A8809F3713F1237513845F59146ADDE17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02AA Signing time: Thu 21 Aug 2025 15:52:22 +0000 Manifest this update: Thu 21 Aug 2025 15:47:22 +0000 Manifest next update: Mon 25 Aug 2025 03:49:22 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: alBVvHvkIDZz7Qfe3l/6+wAoYFme4uf10O/Pc/QBpcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5b:02:6a:88:09:f3:71:3f:12:37:51:38:45:f5:91:46:ad:de:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Aug 21 15:47:22 2025 GMT Not After : Aug 25 03:49:22 2025 GMT Subject: CN=A40A7E18ACEF50A4C7B99489C5DF5A81A8E91071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:ec:5b:d2:06:52:c9:b7:b3:65:65:12:66: ef:ea:8b:b8:d0:32:05:17:ef:a6:91:57:cd:87:02: 84:e6:5a:8f:55:64:28:d5:d8:7e:ce:01:b0:9e:7e: 07:05:29:9b:3d:c5:7a:d6:6a:86:71:dc:16:33:b2: c2:19:cb:cf:c9:2d:9a:55:fd:b7:94:e8:e5:28:2f: 3b:d9:a4:46:39:fd:63:90:ce:6b:c8:bc:b7:a2:41: 64:0c:ac:15:2b:df:70:fc:d4:e4:a7:bb:8e:84:1d: eb:27:6b:14:fe:d3:ba:75:55:3f:43:61:59:a3:16: 3a:cf:be:40:6b:de:d3:c7:0f:6a:10:c0:a5:52:77: a0:4d:69:c6:3d:ba:95:88:cc:ff:e2:09:cd:c7:62: 9b:c8:0e:b4:d5:a4:57:cf:28:65:d1:b2:e5:e1:cc: bb:17:ae:e2:cb:58:c6:ec:62:68:c3:95:0c:7f:c3: 71:b2:76:2e:ae:aa:d4:8e:24:8b:52:47:74:3d:ae: 03:f6:86:5d:04:d7:f4:90:0d:37:6a:72:d1:2b:98: f8:17:3d:7a:6b:78:bd:01:88:ee:d9:b0:e1:e9:ee: 33:2a:6b:54:ee:94:fc:45:22:03:34:8d:0e:19:95: d3:a3:d5:b9:8f:01:bd:8c:85:24:9d:b0:82:fc:19: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0A:7E:18:AC:EF:50:A4:C7:B9:94:89:C5:DF:5A:81:A8:E9:10:71 X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:72:58:cc:71:72:40:3d:c7:b5:77:fe:14:38:ec:ca:5a:e3: 9e:63:9d:65:cc:89:ef:61:1b:ef:79:df:40:81:8d:90:95:c5: 37:a5:52:9b:0b:6d:fb:0b:31:0b:09:43:c8:59:6b:31:5e:4d: ac:0d:86:d1:1a:0e:00:ec:2b:a7:90:de:b2:26:6c:b2:b6:0b: ae:a7:57:0b:5b:5a:b8:86:25:89:f3:f1:67:9b:b0:e6:2d:8e: 69:65:c2:9e:7e:d3:6b:30:9e:d1:d0:27:01:7e:33:4d:bf:4d: 3f:1e:33:3e:ae:b0:95:db:db:17:43:df:a0:3e:a7:3a:e6:25: 20:61:fe:51:10:32:d9:70:f7:7d:b3:6f:12:20:13:2c:57:3c: ac:32:0d:43:56:6e:d9:d6:2e:90:42:2b:5d:41:7a:5f:3b:75: 65:37:1c:6b:36:6e:6a:c8:f4:f5:2b:d3:41:81:b8:82:c9:0d: 7b:d3:f9:85:19:30:25:30:f8:d5:ab:0e:46:d3:27:54:18:17: 1b:23:4c:72:70:9e:e8:03:78:7f:2e:03:8a:fd:ba:9a:1b:c0: 94:27:e4:8a:ee:cf:69:98:67:d4:11:aa:7d:56:da:73:5b:8a: d5:27:a8:73:c1:f7:89:94:70:48:f4:bc:f6:74:b5:40:3c:a8: db:46:93:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFsCaogJ83E/EjdROEX1kUat3hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTA4MjExNTQ3MjJaFw0yNTA4MjUwMzQ5MjJaMDMxMTAvBgNV BAMTKEE0MEE3RTE4QUNFRjUwQTRDN0I5OTQ4OUM1REY1QTgxQThFOTEwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQexb0gZSybezZWUSZu/qi7jQ MgUX76aRV82HAoTmWo9VZCjV2H7OAbCefgcFKZs9xXrWaoZx3BYzssIZy8/JLZpV /beU6OUoLzvZpEY5/WOQzmvIvLeiQWQMrBUr33D81OSnu46EHesnaxT+07p1VT9D YVmjFjrPvkBr3tPHD2oQwKVSd6BNacY9upWIzP/iCc3HYpvIDrTVpFfPKGXRsuXh zLsXruLLWMbsYmjDlQx/w3Gydi6uqtSOJItSR3Q9rgP2hl0E1/SQDTdqctErmPgX PXpreL0BiO7ZsOHp7jMqa1TulPxFIgM0jQ4ZldOj1bmPAb2MhSSdsIL8GawLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpAp+GKzvUKTHuZSJxd9agajpEHEwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5yWMxxckA9x7V3/hQ47Mpa455jnWXMie9h G+9530CBjZCVxTelUpsLbfsLMQsJQ8hZazFeTawNhtEaDgDsK6eQ3rImbLK2C66n VwtbWriGJYnz8WebsOYtjmllwp5+02swntHQJwF+M02/TT8eMz6usJXb2xdD36A+ pzrmJSBh/lEQMtlw932zbxIgEyxXPKwyDUNWbtnWLpBCK11Bel87dWU3HGs2bmrI 9PUr00GBuILJDXvT+YUZMCUw+NWrDkbTJ1QYFxsjTHJwnugDeH8uA4r9upobwJQn 5Iruz2mYZ9QRqn1W2nNbitUnqHPB94mUcEj0vPZ0tUA8qNtGk+k= -----END CERTIFICATE-----Generated at Sat Aug 23 19:53:48 2025 by rpki-client