$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: wTH72fZayRvKtfVUHS7VZ0/xPL0OJikOPaYCw65gsCQ= Subject key identifier: 8C:D2:52:E8:49:1E:F9:A4:41:A5:17:97:31:F0:66:A6:E1:80:E2:35 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 2D2D9EB3501B299381CD48DEA87F9A9C6971EF50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01AC Signing time: Thu 03 Jul 2025 15:51:37 +0000 Manifest this update: Thu 03 Jul 2025 15:46:37 +0000 Manifest next update: Mon 07 Jul 2025 00:19:37 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: xXhHYFD0K3ZY9vLbqYX3xdj0hmZplzUuV++Vl7HLHi4=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 00:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2d:9e:b3:50:1b:29:93:81:cd:48:de:a8:7f:9a:9c:69:71:ef:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Jul 3 15:46:37 2025 GMT Not After : Jul 7 00:19:37 2025 GMT Subject: CN=8CD252E8491EF9A441A5179731F066A6E180E235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:e1:47:df:e4:ec:7e:9c:c8:f4:83:6e:b8: b1:8b:12:c3:1f:3b:3d:3a:13:a7:93:c1:79:4e:87: a7:b1:18:2b:b5:03:36:3e:74:27:94:31:69:fa:fd: 44:09:1a:5c:83:7a:6d:a0:aa:9c:7c:55:e5:dc:ae: 25:a5:19:db:9f:e3:76:41:ba:bf:5f:01:18:34:8c: 25:78:6b:ec:d8:e3:fb:48:cd:9b:00:09:cd:05:fb: 99:af:57:81:62:d9:8d:cf:c3:c6:d2:60:c5:c0:af: 46:96:aa:6e:0c:45:6b:e3:f7:96:5f:1d:27:8c:b3: ba:f7:0a:9b:e6:46:eb:5c:ca:5b:80:57:ae:9d:ac: ce:db:1b:28:22:7c:e0:ab:3d:89:2f:34:9c:31:3d: af:f8:96:94:44:f0:2a:dc:3d:2d:f2:a1:35:04:74: b4:32:c5:31:72:ed:73:26:7b:84:ca:f1:a2:4f:06: 95:31:0f:14:db:ed:c9:d0:32:53:7a:9a:9e:87:0e: 7e:b7:48:84:63:f1:85:6c:c8:c6:fe:79:db:62:09: 5a:cb:30:f7:3c:d8:7a:26:af:22:94:ad:8a:cc:45: 7c:df:02:dd:7f:f9:1b:19:c5:d6:9a:7a:45:8b:4d: 51:67:f4:2f:5b:06:91:d8:a2:36:a5:74:7b:99:8b: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D2:52:E8:49:1E:F9:A4:41:A5:17:97:31:F0:66:A6:E1:80:E2:35 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9c:09:8a:9f:a1:92:56:06:34:e7:82:55:cc:c7:b5:b7:a0: 65:8f:f8:36:b1:47:13:bd:8d:41:8f:54:9b:a8:af:b0:52:34: 2b:4b:94:9d:b5:fa:64:f5:7e:72:7d:d8:d3:b3:e3:43:c6:44: be:f6:86:f3:8e:c1:b8:c6:8f:71:b7:4e:72:30:3f:b9:ff:79: 48:b0:0a:f4:4f:35:c8:95:a2:13:27:5f:a9:f8:72:5c:94:b8: 5f:ab:64:d0:44:08:c7:79:2e:71:d3:ef:67:97:60:90:0e:03: a0:d5:9f:44:ec:b3:e2:b9:4f:42:58:fe:ea:7e:1b:71:5c:be: eb:0c:92:6c:a2:71:be:64:d6:04:f7:f3:92:a0:5f:e9:6b:fb: c1:09:10:f9:54:69:74:29:38:fc:14:88:ab:70:f9:88:f4:88: a5:55:9b:aa:bf:a0:79:df:ee:61:19:a6:d9:ca:69:7a:87:8b: ba:4a:26:a0:76:8a:eb:16:bc:62:9e:d8:dd:21:53:14:70:83: d4:56:18:83:c4:9a:ee:55:6d:64:49:8f:cd:e3:4e:9d:69:5e: 29:b0:2c:48:c3:0e:4b:0f:59:58:09:4c:2f:9d:7d:94:7a:11: 30:38:b8:25:4a:aa:8d:3f:9f:f2:6e:39:3b:3a:88:1a:7c:bf: df:56:1c:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULS2es1AbKZOBzUjeqH+anGlx71AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA3MDMxNTQ2MzdaFw0yNTA3MDcwMDE5MzdaMDMxMTAvBgNV BAMTKDhDRDI1MkU4NDkxRUY5QTQ0MUE1MTc5NzMxRjA2NkE2RTE4MEUyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqeFH3+TsfpzI9INuuLGLEsMf Oz06E6eTwXlOh6exGCu1AzY+dCeUMWn6/UQJGlyDem2gqpx8VeXcriWlGduf43ZB ur9fARg0jCV4a+zY4/tIzZsACc0F+5mvV4Fi2Y3Pw8bSYMXAr0aWqm4MRWvj95Zf HSeMs7r3CpvmRutcyluAV66drM7bGygifOCrPYkvNJwxPa/4lpRE8CrcPS3yoTUE dLQyxTFy7XMme4TK8aJPBpUxDxTb7cnQMlN6mp6HDn63SIRj8YVsyMb+edtiCVrL MPc82HomryKUrYrMRXzfAt1/+RsZxdaaekWLTVFn9C9bBpHYojaldHuZi96fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNJS6Eke+aRBpReXMfBmpuGA4jUwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2cCYqfoZJWBjTnglXMx7W3oGWP+DaxRxO9 jUGPVJuor7BSNCtLlJ21+mT1fnJ92NOz40PGRL72hvOOwbjGj3G3TnIwP7n/eUiw CvRPNciVohMnX6n4clyUuF+rZNBECMd5LnHT72eXYJAOA6DVn0Tss+K5T0JY/up+ G3FcvusMkmyicb5k1gT385KgX+lr+8EJEPlUaXQpOPwUiKtw+Yj0iKVVm6q/oHnf 7mEZptnKaXqHi7pKJqB2iusWvGKe2N0hUxRwg9RWGIPEmu5VbWRJj83jTp1pXimw LEjDDksPWVgJTC+dfZR6ETA4uCVKqo0/n/JuOTs6iBp8v99WHMY= -----END CERTIFICATE-----Generated at Sat Jul 5 23:55:02 2025 by rpki-client