$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: XQtM+3m3MCjSUgQuPvb6adFlcM58IWUnd3GtiXDr6TE= Subject key identifier: 8B:B7:19:FE:1E:0B:25:D7:0D:82:20:92:60:33:9E:DC:84:02:45:ED Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 6CB539FD54653342EA5A3179758D9A1643E57B1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01C2 Signing time: Thu 21 Aug 2025 21:21:41 +0000 Manifest this update: Thu 21 Aug 2025 21:16:41 +0000 Manifest next update: Mon 25 Aug 2025 01:50:41 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: 1n5vUA9JxQ54Zv6LIUxDV0amHgZcfNC2NbAz4L6v6ZM=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b5:39:fd:54:65:33:42:ea:5a:31:79:75:8d:9a:16:43:e5:7b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Aug 21 21:16:41 2025 GMT Not After : Aug 25 01:50:41 2025 GMT Subject: CN=8BB719FE1E0B25D70D82209260339EDC840245ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:a0:07:1c:05:f5:f4:b4:2f:87:0f:2d:ae: 87:5b:4f:90:20:e9:93:cf:56:19:44:d9:93:c6:ea: 1c:fb:cb:f1:b7:7f:90:48:ef:6e:b0:ba:0d:92:49: 0e:91:84:90:ba:22:16:76:4c:8a:5c:8a:0c:ef:bf: ef:6c:90:7f:39:55:f2:df:5a:12:c4:56:0f:b8:84: 70:38:cd:d6:6c:23:9e:bf:7b:7d:5e:50:11:ed:b9: fe:ad:21:b9:78:90:4c:85:fb:e1:24:4d:7b:51:f9: 71:b6:03:02:c1:16:cf:17:b8:b3:fd:c1:0e:13:30: 47:14:bb:12:f6:25:cd:77:3a:75:10:fa:7a:c4:c9: 3b:3d:25:25:85:c9:4e:ef:aa:48:26:a8:32:b6:ea: 1a:87:e6:23:1a:59:49:df:0d:81:82:5a:74:d2:aa: a8:a8:f1:c4:91:ed:52:63:9e:21:2d:39:9b:9a:b1: bd:da:6e:d4:2b:64:7b:b9:27:a7:34:4e:a6:4f:5a: b3:f5:18:ba:9a:b9:29:90:d1:8d:35:f2:b3:45:cd: 8a:5f:44:c2:4e:65:87:74:9f:6a:f6:0c:77:d7:12: 1d:bf:b1:9c:d9:6b:68:fb:dc:12:17:d8:61:3e:44: 8a:02:9e:f3:71:a3:5c:5c:38:ba:8a:0a:c8:ad:a9: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B7:19:FE:1E:0B:25:D7:0D:82:20:92:60:33:9E:DC:84:02:45:ED X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:88:4c:bc:eb:f1:e4:51:ea:33:40:ee:5d:69:0a:37:ee:e6: 5f:0d:91:72:3a:6e:79:20:8a:49:f1:6d:d8:b0:cf:6f:0e:1b: 6d:f4:72:61:52:05:f7:4f:99:c3:3f:b8:05:f1:cc:7b:c6:59: 8e:a4:46:61:09:97:a0:82:21:3f:c9:1b:45:35:ca:ad:bb:5f: e8:7b:4f:ef:e5:3e:bf:ee:ba:62:b2:11:2a:3f:83:9d:f5:ef: b5:98:81:92:4d:2f:3f:6d:d5:b8:19:e5:d0:a4:4a:63:46:c9: 14:0f:8c:ee:b4:47:ed:c9:38:2f:09:be:ba:03:9b:53:ac:f1: ed:34:2f:b2:79:4d:fc:8f:2d:23:14:29:ce:55:e9:92:01:0b: bd:20:59:98:0b:22:3c:3f:a2:84:aa:82:7a:21:7a:17:4a:53: 90:4f:07:25:11:aa:f6:36:ce:22:a9:82:ed:93:3e:1f:83:d5: 50:88:3a:da:ad:f2:92:31:a5:a1:b6:1d:75:96:44:88:ce:e2: fe:e1:19:95:b0:81:d4:db:2b:45:6e:a8:4f:15:54:a6:71:a1: 8d:c7:e6:d3:1c:8f:e6:c4:ef:03:e9:d7:a1:e8:53:f7:6e:76: 02:ee:9f:c5:c4:52:ef:68:6b:b0:e7:7d:6e:01:be:72:d4:60: 63:4c:a9:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLU5/VRlM0LqWjF5dY2aFkPlexswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA4MjEyMTE2NDFaFw0yNTA4MjUwMTUwNDFaMDMxMTAvBgNV BAMTKDhCQjcxOUZFMUUwQjI1RDcwRDgyMjA5MjYwMzM5RURDODQwMjQ1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaaAHHAX19LQvhw8trodbT5Ag 6ZPPVhlE2ZPG6hz7y/G3f5BI726wug2SSQ6RhJC6IhZ2TIpcigzvv+9skH85VfLf WhLEVg+4hHA4zdZsI56/e31eUBHtuf6tIbl4kEyF++EkTXtR+XG2AwLBFs8XuLP9 wQ4TMEcUuxL2Jc13OnUQ+nrEyTs9JSWFyU7vqkgmqDK26hqH5iMaWUnfDYGCWnTS qqio8cSR7VJjniEtOZuasb3abtQrZHu5J6c0TqZPWrP1GLqauSmQ0Y018rNFzYpf RMJOZYd0n2r2DHfXEh2/sZzZa2j73BIX2GE+RIoCnvNxo1xcOLqKCsitqQYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi7cZ/h4LJdcNgiCSYDOe3IQCRe0wHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeITLzr8eRR6jNA7l1pCjfu5l8NkXI6bnkg iknxbdiwz28OG230cmFSBfdPmcM/uAXxzHvGWY6kRmEJl6CCIT/JG0U1yq27X+h7 T+/lPr/uumKyESo/g53177WYgZJNLz9t1bgZ5dCkSmNGyRQPjO60R+3JOC8JvroD m1Os8e00L7J5TfyPLSMUKc5V6ZIBC70gWZgLIjw/ooSqgnohehdKU5BPByURqvY2 ziKpgu2TPh+D1VCIOtqt8pIxpaG2HXWWRIjO4v7hGZWwgdTbK0VuqE8VVKZxoY3H 5tMcj+bE7wPp16HoU/dudgLun8XEUu9oa7DnfW4BvnLUYGNMqcc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:13 2025 by rpki-client