$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: Ahu5ok+FjfgnBhItbNDk1clj9NpvbiDiwlkT7RjQC+w= Subject key identifier: 40:C1:6C:9C:FF:73:5A:87:5D:24:DE:9F:34:15:E3:9D:48:21:28:51 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 348A3C4159FD36FD89FA4682F04A4CD57AF08D04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 8C Signing time: Fri 22 Aug 2025 14:52:19 +0000 Manifest this update: Fri 22 Aug 2025 14:47:19 +0000 Manifest next update: Mon 25 Aug 2025 20:02:19 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: 6mzAhg3HlDjw4+MSHR8gQK+3cDWKDjJbNjWsRj+SAxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8a:3c:41:59:fd:36:fd:89:fa:46:82:f0:4a:4c:d5:7a:f0:8d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Aug 22 14:47:19 2025 GMT Not After : Aug 25 20:02:19 2025 GMT Subject: CN=40C16C9CFF735A875D24DE9F3415E39D48212851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:f6:8e:ce:92:26:a7:69:68:4c:42:f1:a7: a2:1f:45:bd:c0:a6:80:7f:2b:e2:13:ae:36:55:12: c8:fe:c8:63:7d:0d:3f:cc:2d:73:f3:a0:d8:ea:17: 1e:61:d0:74:20:7e:8a:13:52:41:c3:b7:c2:87:52: 3e:ae:e2:26:8e:10:a1:4a:b0:95:09:e6:b3:6c:f5: 0a:29:fc:6a:09:f3:d8:78:0d:13:9d:6c:d5:58:9d: 34:5c:70:ab:44:d5:1e:8a:a9:ac:f0:23:c1:f8:26: 9e:76:5c:df:23:ca:e8:67:a2:5c:c2:bb:4b:d0:76: 84:91:c1:98:a4:08:d3:4b:52:bf:37:05:5a:df:9b: 94:0f:6f:74:dd:9f:32:09:70:93:1c:29:2a:89:9c: a7:0a:ec:ea:f2:43:52:95:f6:4b:a5:f4:52:ce:67: 0d:74:c5:a0:17:e8:04:e9:c0:e4:c8:c1:78:7c:f8: c0:4b:43:d6:a8:b0:b0:07:2d:ee:88:6d:6f:0d:95: 6d:1e:07:a5:55:6b:26:cb:dd:e1:39:04:62:ee:01: 05:eb:56:29:ee:ef:00:28:38:f3:cc:50:5b:48:b6: 31:b3:8a:01:21:2a:fc:78:14:76:24:c5:ee:9c:d3: 94:e9:04:5f:c6:89:ec:7f:6c:8f:eb:7b:5e:44:82: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C1:6C:9C:FF:73:5A:87:5D:24:DE:9F:34:15:E3:9D:48:21:28:51 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a0:d0:10:2d:99:c5:66:c6:67:79:66:ac:94:ba:cc:5d:7b: 57:50:3c:88:88:b8:5f:b9:ac:9d:38:8a:ea:e6:98:a1:65:d1: 4f:3d:bf:c7:14:fa:ff:b7:56:29:34:74:9c:93:32:f5:35:b5: 68:e9:ff:ed:04:52:52:50:97:e8:e7:74:03:fb:be:e4:66:8d: d0:a1:bf:e2:d9:14:50:e3:d0:2c:92:f0:95:80:7e:45:47:55: e8:77:d6:6d:c0:9e:08:23:cd:54:4e:cb:c3:10:ed:9a:88:60: 32:66:08:ab:91:17:04:b9:21:c9:f9:3c:18:7d:e9:c2:01:58: 7b:52:9f:85:9f:f3:0d:ac:f5:c8:8d:3a:39:c3:31:45:3e:ce: 1c:37:9c:8f:c5:6b:56:f5:bd:59:01:13:d1:d7:ee:99:b9:a5: 20:c0:62:5a:2b:e9:5b:90:f6:f2:36:4a:06:29:87:f5:51:91: 41:25:bd:42:00:03:dc:8d:77:74:bf:14:5d:ac:35:d3:37:8e: 8d:11:c7:85:69:14:ea:ca:fd:8f:45:b1:cb:1a:6f:ba:ca:c0: 62:22:41:49:65:c1:fa:54:45:90:eb:ba:fd:ff:1c:26:cb:78: 7b:a7:f4:bb:1d:b0:5c:7a:7a:d7:ed:1b:a4:bd:91:fc:7e:6b: fb:43:1f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIo8QVn9Nv2J+kaC8EpM1XrwjQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA4MjIxNDQ3MTlaFw0yNTA4MjUyMDAyMTlaMDMxMTAvBgNV BAMTKDQwQzE2QzlDRkY3MzVBODc1RDI0REU5RjM0MTVFMzlENDgyMTI4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5vaOzpImp2loTELxp6IfRb3A poB/K+ITrjZVEsj+yGN9DT/MLXPzoNjqFx5h0HQgfooTUkHDt8KHUj6u4iaOEKFK sJUJ5rNs9Qop/GoJ89h4DROdbNVYnTRccKtE1R6KqazwI8H4Jp52XN8jyuhnolzC u0vQdoSRwZikCNNLUr83BVrfm5QPb3TdnzIJcJMcKSqJnKcK7OryQ1KV9kul9FLO Zw10xaAX6ATpwOTIwXh8+MBLQ9aosLAHLe6IbW8NlW0eB6VVaybL3eE5BGLuAQXr Vinu7wAoOPPMUFtItjGzigEhKvx4FHYkxe6c05TpBF/Giex/bI/re15EgvkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQMFsnP9zWoddJN6fNBXjnUghKFEwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeg0BAtmcVmxmd5ZqyUusxde1dQPIiIuF+5 rJ04iurmmKFl0U89v8cU+v+3Vik0dJyTMvU1tWjp/+0EUlJQl+jndAP7vuRmjdCh v+LZFFDj0CyS8JWAfkVHVeh31m3AnggjzVROy8MQ7ZqIYDJmCKuRFwS5Icn5PBh9 6cIBWHtSn4Wf8w2s9ciNOjnDMUU+zhw3nI/Fa1b1vVkBE9HX7pm5pSDAYlor6VuQ 9vI2SgYph/VRkUElvUIAA9yNd3S/FF2sNdM3jo0Rx4VpFOrK/Y9Fscsab7rKwGIi QUllwfpURZDruv3/HCbLeHun9LsdsFx6etftG6S9kfx+a/tDHzs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:10 2025 by rpki-client