$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: tYapeCdF2NN71Fm6jAyKjy5uKogZT4ZjNKytsLy67M0= Subject key identifier: CD:E6:5E:BF:26:82:C7:3F:E9:CA:D9:A2:94:62:23:B3:7C:5D:5B:A9 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 0847849CAD3549BBA2E0D08A641085574D624E2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: C5 Signing time: Fri 22 Aug 2025 20:31:11 +0000 Manifest this update: Fri 22 Aug 2025 20:26:11 +0000 Manifest next update: Tue 26 Aug 2025 05:56:11 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: 2bJ0TeqzwPxrjr0Ebm5lEbQ92/CSbdf46ivZeushd9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:47:84:9c:ad:35:49:bb:a2:e0:d0:8a:64:10:85:57:4d:62:4e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Aug 22 20:26:11 2025 GMT Not After : Aug 26 05:56:11 2025 GMT Subject: CN=CDE65EBF2682C73FE9CAD9A2946223B37C5D5BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:38:86:b2:74:fc:00:8e:0b:1a:4f:76:b8: 6d:26:19:01:fb:22:b1:9e:fd:91:25:54:26:a6:65: 6f:fe:3e:28:c0:18:81:cb:56:ee:95:eb:68:75:4f: 80:40:58:70:d2:af:bc:2d:99:b1:06:aa:22:8c:97: 9a:bd:5d:9d:a4:e0:d3:0c:10:4c:4d:e9:80:cd:10: ca:81:a9:a8:8c:17:fd:16:4c:d3:71:8a:b7:ec:21: c7:3a:08:6f:19:ac:d0:09:75:f2:dc:e6:07:b8:ec: a7:00:02:ad:fd:93:48:9a:b4:08:35:89:a8:4a:ee: f0:97:1c:82:03:b5:e7:8f:91:43:51:63:5d:d1:4c: e6:12:65:f7:54:93:b5:a2:62:2d:aa:ef:ab:1a:51: c8:30:5b:ff:38:ca:5a:9a:28:63:66:4f:43:6b:fb: 8d:62:3a:18:10:e5:05:9a:2f:1b:5a:0e:e8:0a:91: 16:df:bf:9d:02:b3:25:c9:ea:d2:d7:92:97:08:dc: e0:a5:5c:54:cf:35:77:66:48:28:a5:fc:95:9f:c3: 41:ac:9c:dd:17:bd:13:dc:f2:09:ae:d0:bb:d1:f0: a1:73:72:ce:32:14:62:9f:94:0b:f4:0b:c7:14:66: 08:c6:1d:cb:85:86:b4:6e:94:82:da:63:ba:81:d9: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E6:5E:BF:26:82:C7:3F:E9:CA:D9:A2:94:62:23:B3:7C:5D:5B:A9 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:13:1c:58:dd:ed:17:cd:18:94:be:e6:82:98:85:de:d6:21: 75:07:ef:5c:d1:08:64:bf:fd:af:95:b3:5a:87:4a:30:6b:4b: 94:0f:e1:05:79:56:01:23:e6:40:12:24:d6:9f:1d:f5:b8:f4: ba:0a:7b:65:ce:93:8d:24:06:5c:84:73:a0:67:e4:8d:f5:8f: 73:d3:87:ed:5f:3e:a7:4e:d8:c9:93:1a:09:57:3b:d5:fd:ea: 69:f1:49:36:ac:bd:1e:91:04:3a:b5:75:7e:56:dd:1e:b6:13: 87:c4:1e:ed:31:67:3e:c5:15:39:3b:59:5e:67:37:aa:37:1b: 82:08:04:34:c3:91:14:86:3a:4f:a6:14:01:30:6f:5c:f0:29: 2a:04:d4:01:0d:a7:c2:8b:1a:17:79:a5:a0:bb:fc:7f:6a:54: 85:19:cb:4f:95:19:6a:63:2b:36:1f:ec:a7:2c:bb:11:c3:99: 6d:10:84:11:8c:98:75:cf:a7:5d:f3:1f:8c:a1:1e:de:76:4f: 1c:b5:24:bb:f9:99:94:fb:4f:2c:89:ba:a6:c1:16:40:ee:eb: 64:70:49:28:ae:93:f5:99:9a:88:90:0d:17:33:6f:17:1c:3d: 68:43:3f:30:d9:43:62:4e:70:97:22:aa:49:b5:9a:64:ca:9d: 50:7d:fb:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEeEnK01Sbui4NCKZBCFV01iTiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA4MjIyMDI2MTFaFw0yNTA4MjYwNTU2MTFaMDMxMTAvBgNV BAMTKENERTY1RUJGMjY4MkM3M0ZFOUNBRDlBMjk0NjIyM0IzN0M1RDVCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58jiGsnT8AI4LGk92uG0mGQH7 IrGe/ZElVCamZW/+PijAGIHLVu6V62h1T4BAWHDSr7wtmbEGqiKMl5q9XZ2k4NMM EExN6YDNEMqBqaiMF/0WTNNxirfsIcc6CG8ZrNAJdfLc5ge47KcAAq39k0iatAg1 iahK7vCXHIIDteePkUNRY13RTOYSZfdUk7WiYi2q76saUcgwW/84ylqaKGNmT0Nr +41iOhgQ5QWaLxtaDugKkRbfv50CsyXJ6tLXkpcI3OClXFTPNXdmSCil/JWfw0Gs nN0XvRPc8gmu0LvR8KFzcs4yFGKflAv0C8cUZgjGHcuFhrRulILaY7qB2cijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzeZevyaCxz/pytmilGIjs3xdW6kwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMATHFjd7RfNGJS+5oKYhd7WIXUH71zRCGS/ /a+Vs1qHSjBrS5QP4QV5VgEj5kASJNafHfW49LoKe2XOk40kBlyEc6Bn5I31j3PT h+1fPqdO2MmTGglXO9X96mnxSTasvR6RBDq1dX5W3R62E4fEHu0xZz7FFTk7WV5n N6o3G4IIBDTDkRSGOk+mFAEwb1zwKSoE1AENp8KLGhd5paC7/H9qVIUZy0+VGWpj KzYf7KcsuxHDmW0QhBGMmHXPp13zH4yhHt52Txy1JLv5mZT7TyyJuqbBFkDu62Rw SSiuk/WZmoiQDRczbxccPWhDPzDZQ2JOcJciqkm1mmTKnVB9+7M= -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:22 2025 by rpki-client