$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: KN7SqCde40hSFWffNPGXhZIcaR/pPs5mV9Tf/vnEWmA= Subject key identifier: 31:8A:1F:9D:B1:3D:54:76:8C:46:7C:E3:21:52:6B:93:08:EA:8E:49 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 0E8364544D3B7ADFC6DDCC1A39F54F861DBCB972 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 74 Signing time: Mon 30 Jun 2025 10:42:17 +0000 Manifest this update: Mon 30 Jun 2025 10:37:17 +0000 Manifest next update: Thu 03 Jul 2025 18:42:17 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: dH2khhv1IoN/F1Cs9hbJ6d9DOYE0esr1OxDzwHVl30c=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:83:64:54:4d:3b:7a:df:c6:dd:cc:1a:39:f5:4f:86:1d:bc:b9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Jun 30 10:37:17 2025 GMT Not After : Jul 3 18:42:17 2025 GMT Subject: CN=318A1F9DB13D54768C467CE321526B9308EA8E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:44:4c:d2:b0:e5:a9:ea:01:3b:37:60:48: f4:ea:ac:a5:a6:25:8f:71:f1:66:2f:59:3d:40:09: ac:9f:b4:9f:9f:1e:ba:e0:59:57:c5:7a:97:97:bd: 42:1b:1f:0b:b6:32:9c:83:c6:2e:52:19:6d:7e:7a: 9f:81:74:62:9a:60:aa:9b:f2:20:96:48:af:2c:58: f4:30:d8:fc:77:4e:f7:29:5f:9b:e9:7a:fa:75:43: 04:47:d6:e7:be:30:fb:bc:74:5b:52:fd:1d:fa:6f: 01:31:e4:35:b5:62:78:8e:6f:0b:6b:48:64:ea:f8: a0:c1:7d:a0:fd:9f:ff:56:15:2f:bb:34:54:5e:53: 24:b3:73:60:55:1c:75:ac:fc:a8:27:da:81:1d:7e: fc:d9:6a:ba:18:0e:69:11:8e:a5:42:16:4f:72:5e: 67:e4:7e:1a:0a:f5:dc:98:2f:13:42:7f:ce:08:e6: eb:b2:9c:af:76:56:eb:89:2f:fb:d9:65:72:89:11: 86:5a:17:c5:9c:66:5e:3d:a8:96:49:88:a7:94:6e: 4f:3b:61:0e:fe:5c:88:c0:d6:55:d6:96:e2:7e:26: ef:de:f6:c2:1f:72:82:75:29:e4:e1:65:29:71:87: 6d:ca:1d:0b:51:02:74:1f:a7:03:cd:2f:e7:53:cd: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8A:1F:9D:B1:3D:54:76:8C:46:7C:E3:21:52:6B:93:08:EA:8E:49 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2f:79:82:23:8d:14:8c:83:41:18:eb:11:8b:b7:39:50:a1: af:87:e9:d1:29:a9:04:70:25:41:ef:ff:78:c6:a0:ff:c7:ba: 33:a4:8d:82:05:a8:4f:2d:80:91:fd:b3:a7:50:7e:20:64:87: 71:27:d6:fa:81:2d:6f:0e:c5:02:02:cb:be:6a:22:67:eb:a7: 3e:3f:a0:aa:3e:77:02:a4:48:3b:38:aa:8b:dd:f4:c5:3e:66: 57:79:c3:2b:fd:ea:5c:ab:ed:af:ab:55:e2:af:cd:1b:7d:86: 91:b0:26:81:68:d7:49:4f:54:58:18:4d:b1:71:77:9c:c2:a2: 04:9b:24:7b:54:53:84:da:c7:29:23:9b:38:86:74:0d:3a:ec: 7d:2c:42:9e:c7:26:ba:7c:4c:67:9a:b4:ae:69:3c:04:64:38: 7a:3a:45:e6:15:61:fd:cd:d8:5b:e2:33:a5:f9:3c:f7:68:cc: 9d:e2:c4:f0:e2:49:06:0a:1e:00:e9:c2:b5:6d:c2:6d:ef:0e: 53:50:29:d0:1c:a9:de:35:64:4f:7a:8d:f9:aa:85:e0:87:43: 81:34:c4:15:20:6d:8c:cf:f1:65:e8:0c:43:7b:52:90:57:48: 14:71:45:60:7c:dd:74:ff:0b:15:a9:54:c7:fd:a3:2a:a3:a4: b3:64:a5:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoNkVE07et/G3cwaOfVPhh28uXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA2MzAxMDM3MTdaFw0yNTA3MDMxODQyMTdaMDMxMTAvBgNV BAMTKDMxOEExRjlEQjEzRDU0NzY4QzQ2N0NFMzIxNTI2QjkzMDhFQThFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdERM0rDlqeoBOzdgSPTqrKWm JY9x8WYvWT1ACayftJ+fHrrgWVfFepeXvUIbHwu2MpyDxi5SGW1+ep+BdGKaYKqb 8iCWSK8sWPQw2Px3TvcpX5vpevp1QwRH1ue+MPu8dFtS/R36bwEx5DW1YniObwtr SGTq+KDBfaD9n/9WFS+7NFReUySzc2BVHHWs/Kgn2oEdfvzZaroYDmkRjqVCFk9y XmfkfhoK9dyYLxNCf84I5uuynK92VuuJL/vZZXKJEYZaF8WcZl49qJZJiKeUbk87 YQ7+XIjA1lXWluJ+Ju/e9sIfcoJ1KeThZSlxh23KHQtRAnQfpwPNL+dTzZpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMYofnbE9VHaMRnzjIVJrkwjqjkkwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsveYIjjRSMg0EY6xGLtzlQoa+H6dEpqQRw JUHv/3jGoP/HujOkjYIFqE8tgJH9s6dQfiBkh3En1vqBLW8OxQICy75qImfrpz4/ oKo+dwKkSDs4qovd9MU+Zld5wyv96lyr7a+rVeKvzRt9hpGwJoFo10lPVFgYTbFx d5zCogSbJHtUU4TaxykjmziGdA067H0sQp7HJrp8TGeatK5pPARkOHo6ReYVYf3N 2FviM6X5PPdozJ3ixPDiSQYKHgDpwrVtwm3vDlNQKdAcqd41ZE96jfmqheCHQ4E0 xBUgbYzP8WXoDEN7UpBXSBRxRWB83XT/CxWpVMf9oyqjpLNkpfo= -----END CERTIFICATE-----Generated at Tue Jul 1 17:07:43 2025 by rpki-client