$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: z6SKZNFBFBkPZHeS31ZwQh7SRxUZipIVwuzl5jfJfGo= Subject key identifier: 15:A7:BF:37:48:12:D7:44:FA:8E:06:2A:44:C4:BA:62:C0:AC:2B:3A Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 3737A84187A74154028490BF7B2A856E1F4E0D22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 61 Signing time: Fri 04 Jul 2025 13:52:03 +0000 Manifest this update: Fri 04 Jul 2025 13:47:03 +0000 Manifest next update: Mon 07 Jul 2025 14:18:03 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: L7qAUlpKcIkRG4Q4HnnGKkreg5tYsAgL+qm2XgLF154=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:37:a8:41:87:a7:41:54:02:84:90:bf:7b:2a:85:6e:1f:4e:0d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Jul 4 13:47:03 2025 GMT Not After : Jul 7 14:18:03 2025 GMT Subject: CN=15A7BF374812D744FA8E062A44C4BA62C0AC2B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:07:32:86:ee:7c:a9:99:7e:4d:ff:54:25: 7e:50:90:05:3f:39:14:28:44:38:b5:97:b5:e3:8b: 39:f9:fa:34:f6:78:d6:d8:2c:08:fe:39:6a:a5:fd: d8:3a:9f:a2:ae:5b:71:d9:9b:ae:3a:eb:f4:30:d5: 8a:fd:fa:45:36:12:5e:8f:7c:12:5d:df:08:a8:75: e1:14:5f:44:75:57:48:6c:27:79:89:70:93:4d:45: 3c:44:16:c6:37:1a:e2:3a:a6:a6:fe:84:00:a9:af: 13:ae:5d:83:3d:d0:5e:4c:68:7b:49:77:a1:6e:83: 75:72:0c:a5:46:15:8d:b1:ea:75:bf:fd:1a:86:f2: 16:e9:c9:d2:72:92:13:24:71:33:55:f2:a5:51:da: 8c:fe:c7:7a:48:d2:b1:35:95:c2:1c:aa:86:5a:c7: 97:03:07:2c:80:e5:28:1b:13:e8:d2:30:89:18:e1: 88:16:c0:ae:85:87:69:28:02:84:0f:ca:f9:d9:92: 6d:d3:5b:b1:e7:01:bf:65:20:78:03:41:33:a9:37: 3c:48:14:62:44:e7:68:ea:fc:07:09:58:67:e8:0e: 46:5b:9e:77:7b:93:c3:93:6c:fb:e1:36:b3:1c:93: d9:ec:83:c8:be:a2:7c:39:18:56:93:70:9e:9c:7e: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A7:BF:37:48:12:D7:44:FA:8E:06:2A:44:C4:BA:62:C0:AC:2B:3A X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:7e:42:c1:4c:1b:27:27:57:02:05:51:53:bc:49:4a:cb:e9: c6:aa:1b:b8:73:90:cb:9a:d4:ba:d1:87:a8:57:da:07:11:3d: 1e:64:2b:b7:f2:90:ef:c0:e7:22:bd:b7:8e:22:f2:2d:56:20: da:29:79:4f:72:32:e2:89:4f:54:fd:50:24:44:03:2c:11:4c: e9:41:4c:b4:a9:28:78:aa:58:4d:64:9f:72:b0:00:08:5b:50: 1e:7a:a3:63:c7:e5:cc:39:af:46:96:4a:10:f3:65:f7:d0:c5: bd:44:e3:eb:66:c2:1f:7b:d7:6f:8f:81:65:f5:05:b6:14:63: b0:c0:ae:e0:5b:92:43:61:6f:02:44:47:02:da:ab:43:ec:83: e2:99:ef:ec:de:c8:4a:7b:51:59:af:7a:90:7f:81:8d:6d:90: 89:2d:85:9d:37:f3:f2:49:e2:19:56:78:52:ae:3c:c7:4b:12: 08:f5:dd:bc:a4:4f:e0:c4:22:2b:fa:bf:a9:49:98:81:29:5c: e5:79:65:db:fb:63:8e:64:81:6f:1e:a2:ce:e8:a4:ac:73:29: 05:6d:e1:57:e9:ca:f2:86:90:5f:90:d0:20:72:c1:4f:97:35: 94:fe:8b:25:f1:ef:9c:65:0d:62:8f:06:e6:79:43:61:d2:71: 36:3d:ac:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzeoQYenQVQChJC/eyqFbh9ODSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTA3MDQxMzQ3MDNaFw0yNTA3MDcxNDE4MDNaMDMxMTAvBgNV BAMTKDE1QTdCRjM3NDgxMkQ3NDRGQThFMDYyQTQ0QzRCQTYyQzBBQzJCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWQcyhu58qZl+Tf9UJX5QkAU/ ORQoRDi1l7Xjizn5+jT2eNbYLAj+OWql/dg6n6KuW3HZm6466/Qw1Yr9+kU2El6P fBJd3wiodeEUX0R1V0hsJ3mJcJNNRTxEFsY3GuI6pqb+hACprxOuXYM90F5MaHtJ d6Fug3VyDKVGFY2x6nW//RqG8hbpydJykhMkcTNV8qVR2oz+x3pI0rE1lcIcqoZa x5cDByyA5SgbE+jSMIkY4YgWwK6Fh2koAoQPyvnZkm3TW7HnAb9lIHgDQTOpNzxI FGJE52jq/AcJWGfoDkZbnnd7k8OTbPvhNrMck9nsg8i+onw5GFaTcJ6cfrCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFae/N0gS10T6jgYqRMS6YsCsKzowHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANt+QsFMGycnVwIFUVO8SUrL6caqG7hzkMua 1LrRh6hX2gcRPR5kK7fykO/A5yK9t44i8i1WINopeU9yMuKJT1T9UCREAywRTOlB TLSpKHiqWE1kn3KwAAhbUB56o2PH5cw5r0aWShDzZffQxb1E4+tmwh9712+PgWX1 BbYUY7DAruBbkkNhbwJERwLaq0Psg+KZ7+zeyEp7UVmvepB/gY1tkIkthZ038/JJ 4hlWeFKuPMdLEgj13bykT+DEIiv6v6lJmIEpXOV5Zdv7Y45kgW8eos7opKxzKQVt 4VfpyvKGkF+Q0CBywU+XNZT+iyXx75xlDWKPBuZ5Q2HScTY9rNY= -----END CERTIFICATE-----Generated at Fri Jul 4 17:20:41 2025 by rpki-client