$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: 7+kBbFOS6dWW6J950aEfZUOo1BZKmrgoSAT3z5qx4i0= Subject key identifier: 4D:DB:C7:27:25:F2:17:77:14:6B:14:2D:E9:70:05:D3:07:99:17:04 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 213A36B91D0407EE00E9772189BE2F3A74586909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: B5 Signing time: Tue 01 Jul 2025 02:30:04 +0000 Manifest this update: Tue 01 Jul 2025 02:25:04 +0000 Manifest next update: Fri 04 Jul 2025 08:25:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: idy4+fKbLY3+zUpgVo7mD5arHJGh7Q4qsWNs6gZX7Gg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3a:36:b9:1d:04:07:ee:00:e9:77:21:89:be:2f:3a:74:58:69:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Jul 1 02:25:04 2025 GMT Not After : Jul 4 08:25:04 2025 GMT Subject: CN=4DDBC72725F21777146B142DE97005D307991704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:ba:ff:ba:a8:5a:dd:ed:2e:71:3f:a0:33: a2:26:e3:fc:7a:a1:0b:26:f5:95:ee:b1:91:a2:2f: 19:e8:f8:54:d0:3f:e5:f4:26:07:ce:10:f2:5b:02: 0f:5d:df:83:89:bd:ba:e4:45:07:1a:b9:68:3b:55: d5:d4:65:8c:50:d8:91:de:cf:48:13:56:a8:de:e5: ac:c4:78:1a:1d:89:7d:a4:53:34:d0:6a:0a:aa:88: 4c:5d:c1:63:5b:a1:00:28:ad:01:7b:55:cc:23:f2: 77:30:e6:2f:91:36:73:ea:70:b6:7b:8d:22:43:44: 6b:fb:d7:9c:d1:dd:16:19:fd:3d:b0:86:2e:d4:08: d2:ab:6d:f3:91:3d:1c:4f:94:90:f0:85:92:52:84: 23:52:c0:d3:61:0a:e7:3e:c6:f6:07:6c:8c:8f:70: fc:97:e7:a0:14:bb:42:6b:79:30:95:83:b8:a2:c9: 56:1e:d4:43:12:04:47:32:d5:96:c6:92:b1:b6:72: c8:25:d5:f0:18:e6:09:a1:bf:43:d2:9e:2c:2b:c3: cd:40:3c:24:b2:9f:36:8b:f5:b1:56:98:2a:ca:0b: 64:67:f1:58:ca:a1:e7:f3:20:61:47:c2:e0:ca:8b: 01:2e:17:c3:cf:5c:30:31:8f:9b:75:f5:83:ca:09: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DB:C7:27:25:F2:17:77:14:6B:14:2D:E9:70:05:D3:07:99:17:04 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a5:ba:e5:47:ab:78:e4:b8:22:57:59:76:dc:ef:7f:f3:ab: 2e:30:03:8f:2c:38:c7:5a:c6:c3:a3:dc:e3:fd:81:c9:2d:13: 5a:44:49:0e:02:d0:c0:42:82:c1:d3:3d:74:37:33:b9:71:e7: 83:15:2d:e5:99:2c:fa:ef:dd:a3:44:b6:2b:0e:da:a0:ef:a2: ea:b8:06:51:9d:23:db:af:65:6e:a2:67:b2:51:d3:3e:47:a4: d1:22:53:27:0a:0e:53:3f:18:44:f5:e0:47:ba:f9:e4:34:b8: f9:d2:75:92:cd:5c:29:0d:e1:99:2b:d2:fa:27:fb:9c:b2:a4: c6:93:5c:3d:1f:fd:9d:11:5a:ee:16:80:c7:1c:aa:17:16:76: d4:33:30:c6:3d:02:3f:bd:e7:e3:0d:95:cd:2a:c6:66:45:61: 57:02:b8:23:57:cc:41:20:df:6a:b5:b4:af:28:53:cf:6e:23: 84:30:88:f9:7b:e7:55:49:a5:d6:a8:ee:fa:ec:4b:cd:78:b6: bb:c2:4b:3e:ff:99:cf:c5:07:93:2a:22:17:8f:44:a2:03:d1: 8e:be:31:9b:3a:73:fc:4d:07:4f:0d:3a:f5:7f:4a:60:14:11: 10:4a:ae:83:a7:bc:bc:49:9c:62:3a:26:78:9e:55:d7:cb:4b: 8b:cc:a8:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITo2uR0EB+4A6Xchib4vOnRYaQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTA3MDEwMjI1MDRaFw0yNTA3MDQwODI1MDRaMDMxMTAvBgNV BAMTKDREREJDNzI3MjVGMjE3NzcxNDZCMTQyREU5NzAwNUQzMDc5OTE3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5y7r/uqha3e0ucT+gM6Im4/x6 oQsm9ZXusZGiLxno+FTQP+X0JgfOEPJbAg9d34OJvbrkRQcauWg7VdXUZYxQ2JHe z0gTVqje5azEeBodiX2kUzTQagqqiExdwWNboQAorQF7Vcwj8ncw5i+RNnPqcLZ7 jSJDRGv715zR3RYZ/T2whi7UCNKrbfORPRxPlJDwhZJShCNSwNNhCuc+xvYHbIyP cPyX56AUu0JreTCVg7iiyVYe1EMSBEcy1ZbGkrG2csgl1fAY5gmhv0PSniwrw81A PCSynzaL9bFWmCrKC2Rn8VjKoefzIGFHwuDKiwEuF8PPXDAxj5t19YPKCa4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdvHJyXyF3cUaxQt6XAF0weZFwQwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOluuVHq3jkuCJXWXbc73/zqy4wA48sOMda xsOj3OP9gcktE1pESQ4C0MBCgsHTPXQ3M7lx54MVLeWZLPrv3aNEtisO2qDvouq4 BlGdI9uvZW6iZ7JR0z5HpNEiUycKDlM/GET14Ee6+eQ0uPnSdZLNXCkN4Zkr0von +5yypMaTXD0f/Z0RWu4WgMccqhcWdtQzMMY9Aj+95+MNlc0qxmZFYVcCuCNXzEEg 32q1tK8oU89uI4QwiPl751VJpdao7vrsS814trvCSz7/mc/FB5MqIhePRKID0Y6+ MZs6c/xNB08NOvV/SmAUERBKroOnvLxJnGI6JnieVdfLS4vMqPU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:44:12 2025 by rpki-client