$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: FtnFq9mxr4b94sSoNmTOyRykblz0/GP3e63aQ829FRI= Subject key identifier: 3C:F0:2C:01:5B:0F:61:4D:BB:58:1A:78:9A:4E:72:04:17:D0:3D:4F Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 1E96A9616E1290754F9FA398EA7F0247CCB38CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 0221 Signing time: Thu 21 Aug 2025 19:21:31 +0000 Manifest this update: Thu 21 Aug 2025 19:16:31 +0000 Manifest next update: Sun 24 Aug 2025 21:01:31 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: LZ13HGmeavqwjXVf+1MRQuhvhwtItvEtabQjONzRnPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:96:a9:61:6e:12:90:75:4f:9f:a3:98:ea:7f:02:47:cc:b3:8c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Aug 21 19:16:31 2025 GMT Not After : Aug 24 21:01:31 2025 GMT Subject: CN=3CF02C015B0F614DBB581A789A4E720417D03D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:a2:c7:b0:1f:62:83:94:aa:ae:31:42:e9: 94:71:5f:b1:51:94:9c:1f:c7:8e:d2:a7:c6:4f:0b: 1a:a5:61:8e:31:37:50:91:0a:8e:14:de:8d:59:33: 12:bf:59:36:07:b0:ba:55:31:17:d4:3f:af:8b:16: 85:f9:3b:31:5f:a2:99:84:79:a1:35:fe:6f:2f:31: ff:0b:1a:1c:26:f7:02:8d:fe:e3:6e:54:45:07:9d: 18:0f:a3:87:cc:aa:59:da:5f:09:d3:4d:c8:7a:f6: 73:5f:2b:3e:94:3f:06:db:2a:a3:bc:78:e4:20:72: 72:45:be:70:39:df:62:47:00:57:7d:c4:d3:11:b6: 45:61:86:76:11:bd:b1:48:48:72:b5:d7:21:6e:f3: 84:36:03:46:d4:39:d9:4c:a8:07:c2:42:ba:35:2e: d2:15:ac:53:d3:05:f3:61:2d:06:d9:b2:e9:2c:54: 87:97:6b:c0:d3:f1:45:dd:11:f9:a7:f3:7a:ed:77: 35:37:24:ad:c7:90:a6:23:1a:0d:3a:e9:74:ee:62: 81:a9:44:f3:20:71:e5:87:10:66:3e:88:27:c3:b3: 28:16:7a:64:9e:92:d4:e3:c1:e5:08:cd:13:34:77: 1c:bd:71:38:94:ae:07:08:6e:6b:5e:a2:0d:bc:3a: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F0:2C:01:5B:0F:61:4D:BB:58:1A:78:9A:4E:72:04:17:D0:3D:4F X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5f:b7:43:0a:a4:e3:f5:99:02:d3:66:39:2b:89:21:ef:03: fd:50:cf:92:eb:0c:39:82:89:66:df:46:1a:11:74:1e:78:23: 17:dc:fb:5f:62:7b:70:c3:84:4e:91:95:c2:26:8d:43:93:9e: 55:02:7a:32:64:a6:bb:7b:cd:0b:46:4a:7a:9d:8c:35:4b:18: 25:cb:3e:cb:ca:13:9b:0c:c2:94:70:4b:d9:05:49:c0:cd:ff: 60:16:1e:23:18:92:52:4f:8a:0d:9b:28:a0:37:b0:52:26:20: d3:81:97:80:6b:7d:c7:1b:0b:2f:0f:5b:74:8e:87:01:a5:6b: 77:34:0c:62:a6:69:d1:ee:a9:a8:9e:54:a7:a3:5b:4b:47:cc: 98:b6:7e:67:84:69:36:47:50:08:8f:f9:09:bc:88:fb:a2:83: 12:65:a3:34:a3:af:97:f0:cc:71:04:0f:22:f3:8e:14:f7:30: 84:3a:41:47:23:aa:f8:21:49:10:51:ce:97:0d:08:ad:d4:48: 47:a2:4f:1a:1f:d1:3d:21:23:cd:45:8d:4e:ee:13:a8:77:46: b5:98:77:83:64:0c:d7:ba:55:f8:c0:7d:c4:cc:7b:ad:58:c6: 37:f9:7d:d9:69:77:00:80:33:19:93:8c:ea:fa:cc:55:b3:b2: c9:f6:c8:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpapYW4SkHVPn6OY6n8CR8yzjKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA4MjExOTE2MzFaFw0yNTA4MjQyMTAxMzFaMDMxMTAvBgNV BAMTKDNDRjAyQzAxNUIwRjYxNERCQjU4MUE3ODlBNEU3MjA0MTdEMDNENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6e6LHsB9ig5SqrjFC6ZRxX7FR lJwfx47Sp8ZPCxqlYY4xN1CRCo4U3o1ZMxK/WTYHsLpVMRfUP6+LFoX5OzFfopmE eaE1/m8vMf8LGhwm9wKN/uNuVEUHnRgPo4fMqlnaXwnTTch69nNfKz6UPwbbKqO8 eOQgcnJFvnA532JHAFd9xNMRtkVhhnYRvbFISHK11yFu84Q2A0bUOdlMqAfCQro1 LtIVrFPTBfNhLQbZsuksVIeXa8DT8UXdEfmn83rtdzU3JK3HkKYjGg066XTuYoGp RPMgceWHEGY+iCfDsygWemSektTjweUIzRM0dxy9cTiUrgcIbmteog28OvqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPPAsAVsPYU27WBp4mk5yBBfQPU8wHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJft0MKpOP1mQLTZjkriSHvA/1Qz5LrDDmC iWbfRhoRdB54Ixfc+19ie3DDhE6RlcImjUOTnlUCejJkprt7zQtGSnqdjDVLGCXL PsvKE5sMwpRwS9kFScDN/2AWHiMYklJPig2bKKA3sFImINOBl4BrfccbCy8PW3SO hwGla3c0DGKmadHuqaieVKejW0tHzJi2fmeEaTZHUAiP+Qm8iPuigxJlozSjr5fw zHEEDyLzjhT3MIQ6QUcjqvghSRBRzpcNCK3USEeiTxof0T0hI81FjU7uE6h3RrWY d4NkDNe6VfjAfcTMe61Yxjf5fdlpdwCAMxmTjOr6zFWzssn2yBc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:44:20 2025 by rpki-client