$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: 1vjxt4o9AdCSMC5IZwOqw0XY4d7pFnL4r+LowAdNqnA= Subject key identifier: 5E:D8:B1:D3:5B:25:5F:16:02:EF:7C:3C:CE:9C:5F:E2:D9:E7:13:65 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 2F0916849265A98D8D3F952FE32C9474C2F11EDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 77 Signing time: Fri 22 Aug 2025 12:31:13 +0000 Manifest this update: Fri 22 Aug 2025 12:26:13 +0000 Manifest next update: Mon 25 Aug 2025 23:07:13 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: GNGckhWzh5N5JYySUUm3wk8shHM/P4OVog4vHsHzWgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:09:16:84:92:65:a9:8d:8d:3f:95:2f:e3:2c:94:74:c2:f1:1e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Aug 22 12:26:13 2025 GMT Not After : Aug 25 23:07:13 2025 GMT Subject: CN=5ED8B1D35B255F1602EF7C3CCE9C5FE2D9E71365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a1:25:b9:4a:d7:bf:22:8a:dd:3f:28:d6:55: e1:ea:4b:00:a2:85:75:2f:f4:3d:d9:41:11:fe:b8: ee:bc:d2:cb:dd:6d:f5:a1:40:db:8e:e1:4f:37:b3: 6f:21:45:6c:71:85:13:da:c1:d4:17:72:a5:b8:63: b9:db:66:07:70:03:fd:45:86:34:50:9d:17:25:97: 8e:d7:1a:42:65:f0:35:aa:87:e5:59:7f:a0:c4:14: 7c:3f:59:d4:00:b0:f1:ef:b2:b0:82:69:9d:35:33: fa:b1:1a:85:3e:89:da:cb:b6:0c:e1:c1:cf:60:8c: 32:d6:ea:84:9b:79:59:5f:0f:29:38:91:a6:ff:9f: 5f:ef:c2:52:8f:a9:8d:6e:f0:d9:49:e7:8c:0b:99: 90:fd:c4:bb:29:43:c7:3a:40:30:19:91:ec:1c:2e: 7d:f1:ab:04:c9:93:34:1a:b1:1b:3c:f6:99:6f:7b: 18:f1:31:54:d8:96:f9:be:14:b3:93:73:72:c8:c7: 74:37:94:e4:e5:4b:d9:08:5b:19:90:52:de:bd:e8: 50:49:9e:1c:5a:23:9a:62:52:1b:07:df:4a:3f:bc: 69:a3:99:49:f4:d4:9d:d3:a3:69:a4:b0:e3:8c:fa: cc:52:97:0d:05:83:f0:92:ce:f4:fb:72:92:ca:8e: 27:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:B1:D3:5B:25:5F:16:02:EF:7C:3C:CE:9C:5F:E2:D9:E7:13:65 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2a:7a:e1:5e:b3:9a:79:93:1a:17:61:f3:23:76:ce:cd:d5: 58:9b:47:4c:3c:59:08:15:32:ab:00:7d:09:7e:b6:76:e2:fe: 5b:f2:ac:9b:3c:18:71:6d:ae:cb:b7:bb:54:15:1e:de:81:c0: a2:e8:56:e3:5d:55:d0:93:5b:3c:6a:a3:07:c0:27:7c:a0:da: 9d:6a:5a:9a:7c:ea:6f:85:f7:42:ab:12:bb:cd:d2:f7:81:6e: 2a:5e:3a:10:30:c5:7e:88:72:6f:76:27:37:3f:a8:65:81:76: f9:6e:bf:81:f7:73:1d:07:7d:f3:83:62:dc:a4:49:1c:1d:e9: b0:9a:c7:72:24:fc:59:3f:3c:70:83:19:8b:c1:5a:80:c2:49: 9f:90:67:20:1a:e0:67:20:c0:b7:1c:03:fe:0e:77:bd:e1:e6: 87:6d:51:81:94:ff:1a:f9:b6:e7:2f:3a:e6:ac:62:ce:16:f8: 24:76:f1:5b:72:b8:27:b5:d7:2a:d5:ca:94:0a:c8:91:83:b3: 3b:21:be:88:97:86:76:0c:3b:0b:90:e5:b4:35:f2:2d:01:84: cc:db:61:6e:d6:7a:90:ad:e9:ce:1a:41:88:a0:c6:26:dc:c3: 77:19:73:0e:35:42:bc:07:c4:05:f6:e6:d7:15:0e:7b:2a:c8: bd:08:10:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwkWhJJlqY2NP5Uv4yyUdMLxHtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTA4MjIxMjI2MTNaFw0yNTA4MjUyMzA3MTNaMDMxMTAvBgNV BAMTKDVFRDhCMUQzNUIyNTVGMTYwMkVGN0MzQ0NFOUM1RkUyRDlFNzEzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDooSW5Ste/IordPyjWVeHqSwCi hXUv9D3ZQRH+uO680svdbfWhQNuO4U83s28hRWxxhRPawdQXcqW4Y7nbZgdwA/1F hjRQnRcll47XGkJl8DWqh+VZf6DEFHw/WdQAsPHvsrCCaZ01M/qxGoU+idrLtgzh wc9gjDLW6oSbeVlfDyk4kab/n1/vwlKPqY1u8NlJ54wLmZD9xLspQ8c6QDAZkewc Ln3xqwTJkzQasRs89plvexjxMVTYlvm+FLOTc3LIx3Q3lOTlS9kIWxmQUt696FBJ nhxaI5piUhsH30o/vGmjmUn01J3To2mksOOM+sxSlw0Fg/CSzvT7cpLKjifHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtix01slXxYC73w8zpxf4tnnE2UwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQqeuFes5p5kxoXYfMjds7N1VibR0w8WQgV MqsAfQl+tnbi/lvyrJs8GHFtrsu3u1QVHt6BwKLoVuNdVdCTWzxqowfAJ3yg2p1q Wpp86m+F90KrErvN0veBbipeOhAwxX6Icm92Jzc/qGWBdvluv4H3cx0HffODYtyk SRwd6bCax3Ik/Fk/PHCDGYvBWoDCSZ+QZyAa4GcgwLccA/4Od73h5odtUYGU/xr5 tucvOuasYs4W+CR28VtyuCe11yrVypQKyJGDszshvoiXhnYMOwuQ5bQ18i0BhMzb YW7WepCt6c4aQYigxibcw3cZcw41QrwHxAX25tcVDnsqyL0IEK8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:47 2025 by rpki-client