$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: 49w9cbaqZLP8E5ogy2VnelluMtLFIhbgviEt7Eh2SSU= Subject key identifier: A0:1C:46:98:B7:4A:26:08:98:F4:31:6F:C9:06:B5:54:11:17:17:67 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 73424E0AF62C45B2A7B9FE0FE147ECB2ACF74D5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: AC Signing time: Sat 28 Jun 2025 03:21:04 +0000 Manifest this update: Sat 28 Jun 2025 03:16:04 +0000 Manifest next update: Tue 01 Jul 2025 05:16:04 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: NFCRbZQ56usGNhQW9nm7qLFEtoQHtEIsak5JGT7VyGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:42:4e:0a:f6:2c:45:b2:a7:b9:fe:0f:e1:47:ec:b2:ac:f7:4d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Jun 28 03:16:04 2025 GMT Not After : Jul 1 05:16:04 2025 GMT Subject: CN=A01C4698B74A260898F4316FC906B55411171767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:9a:ec:6c:02:5a:2b:fb:22:e4:c1:86:b8: e9:ae:ea:f5:d7:84:6a:3e:2e:61:30:5f:74:ae:97: 56:2a:e1:67:0b:fc:46:6b:9b:a1:72:00:09:04:39: 71:71:a7:e2:b7:3e:54:99:c9:86:f7:80:53:25:87: b4:98:99:1b:11:a6:91:fb:57:b5:06:5f:43:3a:a1: cd:b0:68:d3:80:26:81:30:ff:38:df:d1:d1:34:dc: 7c:d3:e8:b0:e1:fb:4e:ea:fd:a5:b5:cf:5a:78:13: c7:b7:ba:1a:e4:fe:9d:8b:5f:dc:af:2e:0c:7d:3d: 52:2b:3a:0a:45:54:7d:17:52:29:9e:a4:0b:bd:91: e2:75:b0:92:f9:8d:33:9a:48:bc:bf:49:b0:41:22: d7:62:6e:d6:5c:79:dc:27:82:30:34:4f:da:9a:6c: de:cb:ee:bd:cc:1a:da:76:9d:28:ef:0b:0b:74:4f: e6:a0:64:dc:68:b5:5c:4d:35:94:fa:bd:d2:ea:41: 88:66:23:ba:64:d9:a1:81:74:be:1c:65:b2:75:ad: b6:e1:f7:b6:09:8a:41:62:68:6c:7e:f0:99:ab:1f: c1:75:6b:0d:d7:42:f8:7f:8f:5a:b7:13:41:dc:11: a2:58:7a:d5:50:00:31:92:de:e9:eb:72:bd:a2:69: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1C:46:98:B7:4A:26:08:98:F4:31:6F:C9:06:B5:54:11:17:17:67 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f9:bb:cd:3a:24:c3:8d:37:77:8c:30:42:40:ff:06:0f:c2: a0:39:9f:d7:11:fd:bd:29:57:02:cf:ca:f5:93:2a:a1:7c:92: 8a:52:c3:d4:c9:50:0a:1b:6a:80:61:17:dd:03:e4:3b:5c:6f: 16:df:1d:e8:b9:d7:aa:99:db:24:53:9e:ba:a1:c8:5f:12:09: 60:2c:6f:e4:d8:98:6c:62:a5:17:a2:e6:59:17:09:a0:31:de: 0f:4e:d6:4e:05:f4:d6:39:f2:9a:f6:c2:cd:e9:3b:39:53:8c: 96:b8:a4:38:4f:32:37:bb:9a:1a:fe:0b:0d:dd:f9:d7:be:e4: 62:28:f8:72:37:39:0f:12:06:c4:10:44:37:4b:de:99:8b:91: 45:1f:7d:bc:25:f1:04:f3:c6:75:8b:cd:be:3c:e2:09:23:b9: 1a:f1:57:19:3d:f2:c3:37:a2:d1:0b:3a:a9:63:af:c7:72:94: 4b:9e:00:d7:ef:cf:d4:ac:79:3b:4c:40:28:42:62:dd:c6:9f: 23:cc:e5:fb:74:85:cd:b6:54:59:f4:d8:10:6a:4e:3e:48:dc: 78:04:3f:8e:8a:78:42:53:4c:57:78:8e:ce:dd:78:56:fd:e8: ad:2f:fa:fa:2a:b7:31:8f:af:6f:8e:c0:71:9f:01:3e:e7:1d: a5:27:a3:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0JOCvYsRbKnuf4P4Ufssqz3TVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA2MjgwMzE2MDRaFw0yNTA3MDEwNTE2MDRaMDMxMTAvBgNV BAMTKEEwMUM0Njk4Qjc0QTI2MDg5OEY0MzE2RkM5MDZCNTU0MTExNzE3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aZrsbAJaK/si5MGGuOmu6vXX hGo+LmEwX3Sul1Yq4WcL/EZrm6FyAAkEOXFxp+K3PlSZyYb3gFMlh7SYmRsRppH7 V7UGX0M6oc2waNOAJoEw/zjf0dE03HzT6LDh+07q/aW1z1p4E8e3uhrk/p2LX9yv Lgx9PVIrOgpFVH0XUimepAu9keJ1sJL5jTOaSLy/SbBBItdibtZcedwngjA0T9qa bN7L7r3MGtp2nSjvCwt0T+agZNxotVxNNZT6vdLqQYhmI7pk2aGBdL4cZbJ1rbbh 97YJikFiaGx+8JmrH8F1aw3XQvh/j1q3E0HcEaJYetVQADGS3unrcr2iadV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBxGmLdKJgiY9DFvyQa1VBEXF2cwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADL5u806JMONN3eMMEJA/wYPwqA5n9cR/b0p VwLPyvWTKqF8kopSw9TJUAobaoBhF90D5DtcbxbfHei516qZ2yRTnrqhyF8SCWAs b+TYmGxipRei5lkXCaAx3g9O1k4F9NY58pr2ws3pOzlTjJa4pDhPMje7mhr+Cw3d +de+5GIo+HI3OQ8SBsQQRDdL3pmLkUUffbwl8QTzxnWLzb484gkjuRrxVxk98sM3 otELOqljr8dylEueANfvz9SseTtMQChCYt3GnyPM5ft0hc22VFn02BBqTj5I3HgE P46KeEJTTFd4js7deFb96K0v+voqtzGPr2+OwHGfAT7nHaUno/o= -----END CERTIFICATE-----Generated at Mon Jun 30 02:36:37 2025 by rpki-client