$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: ofmRWsKKU3yRWg3u4uWmS72h4IN+6XMcFOoTDTfjOXM= Subject key identifier: A9:C1:D2:9F:25:BD:3F:EF:B5:91:43:D1:F9:4D:17:CA:6A:F2:CB:E7 Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 777217AD3588FEABA7D795C43F7EDC2679A54413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 23 Signing time: Thu 21 Aug 2025 14:41:48 +0000 Manifest this update: Thu 21 Aug 2025 14:36:48 +0000 Manifest next update: Mon 25 Aug 2025 00:11:48 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: 4iuj+qauEXz3E1Kx/oG4gwhpzKpGHxwiQz0tw2OZpJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:72:17:ad:35:88:fe:ab:a7:d7:95:c4:3f:7e:dc:26:79:a5:44:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Aug 21 14:36:48 2025 GMT Not After : Aug 25 00:11:48 2025 GMT Subject: CN=A9C1D29F25BD3FEFB59143D1F94D17CA6AF2CBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:a8:c5:82:fa:c0:d6:03:9b:fa:f2:e8:fd: f6:86:b6:36:23:43:49:ef:42:fc:8c:96:21:25:b9: bc:5e:06:d7:a8:b1:35:f4:c9:36:53:bf:df:1f:df: 93:ed:ae:6c:28:85:dd:75:f7:7a:69:a9:23:54:1f: 7f:61:34:54:34:6d:49:d8:fe:6a:40:d6:da:dc:70: 37:dc:b0:0b:4f:c1:d4:99:19:9b:12:bd:ad:42:6f: d2:86:d4:4f:e4:63:32:2f:24:0a:6d:90:05:f5:25: b0:96:01:6a:b3:50:9c:7d:c1:29:c5:58:a8:ba:78: f2:28:aa:e9:d7:00:5c:b2:a6:4d:a3:03:31:c6:39: cc:d4:26:44:73:99:aa:3f:2b:41:4d:85:b5:98:bd: 5c:91:c3:16:61:32:32:a2:3a:8b:04:60:74:d7:be: 19:8e:80:d6:3b:1c:4c:a1:b8:d2:02:d6:32:ea:ab: 94:cf:58:93:f3:ab:29:8b:ac:6d:fa:69:86:d2:e0: 2d:b0:30:40:05:bb:6e:c8:b5:f6:45:87:c2:dd:ff: 37:7f:6c:a0:41:32:de:d1:d6:47:e3:49:eb:30:be: d9:66:a6:17:25:65:03:45:0f:ff:40:38:29:c9:96: c9:70:e2:cb:33:36:37:3a:d7:a0:19:e4:71:75:af: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C1:D2:9F:25:BD:3F:EF:B5:91:43:D1:F9:4D:17:CA:6A:F2:CB:E7 X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:47:29:98:f9:fc:e1:cb:e1:8b:67:68:0f:08:cc:31:ce:15: 3c:78:fa:c6:3c:31:b6:a0:08:e3:bc:f3:f4:82:1b:c7:db:9b: ff:90:69:72:d1:c1:3f:01:5e:50:3e:e6:05:39:d7:34:3a:86: 6d:4e:c9:bd:64:71:4a:25:84:5f:40:a4:e4:cb:7c:ba:e3:cc: 88:5c:78:74:0f:df:74:88:3d:84:dc:63:c5:e2:4a:88:a3:4d: a0:93:33:c9:96:e4:08:a2:41:30:9a:57:e6:b7:ea:f6:ec:f5: a2:bd:2a:88:f0:be:9d:2f:5c:8f:c7:ea:27:36:d0:57:f9:17: ca:f7:50:0f:e8:b2:aa:cb:00:67:d2:b3:e7:24:79:79:97:de: 7d:70:f1:b8:f0:9e:a9:8a:ca:93:56:8f:9a:c7:a9:12:64:29: ed:87:3b:1d:64:61:c0:c2:e6:2f:c1:15:d7:e5:0c:e9:e8:68: fe:d4:96:7d:02:fc:f8:28:1e:36:b2:79:ef:8d:41:fb:aa:d1: 27:e0:85:08:e8:cd:84:b9:ff:78:83:3c:5b:bb:fa:08:62:ac: a8:44:fc:28:bd:96:96:e7:f5:b2:ed:97:67:fd:62:3c:40:5d: 6b:aa:68:43:5d:aa:71:06:f7:ab:6f:d1:00:08:0c:14:5b:36: 6f:fb:2c:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3IXrTWI/qun15XEP37cJnmlRBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNTA4MjExNDM2NDhaFw0yNTA4MjUwMDExNDhaMDMxMTAvBgNV BAMTKEE5QzFEMjlGMjVCRDNGRUZCNTkxNDNEMUY5NEQxN0NBNkFGMkNCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVKjFgvrA1gOb+vLo/faGtjYj Q0nvQvyMliElubxeBteosTX0yTZTv98f35Ptrmwohd1193ppqSNUH39hNFQ0bUnY /mpA1trccDfcsAtPwdSZGZsSva1Cb9KG1E/kYzIvJAptkAX1JbCWAWqzUJx9wSnF WKi6ePIoqunXAFyypk2jAzHGOczUJkRzmao/K0FNhbWYvVyRwxZhMjKiOosEYHTX vhmOgNY7HEyhuNIC1jLqq5TPWJPzqymLrG36aYbS4C2wMEAFu27ItfZFh8Ld/zd/ bKBBMt7R1kfjSeswvtlmphclZQNFD/9AOCnJlslw4sszNjc616AZ5HF1rxs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqcHSnyW9P++1kUPR+U0Xymryy+cwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZHKZj5/OHL4YtnaA8IzDHOFTx4+sY8Mbag COO88/SCG8fbm/+QaXLRwT8BXlA+5gU51zQ6hm1Oyb1kcUolhF9ApOTLfLrjzIhc eHQP33SIPYTcY8XiSoijTaCTM8mW5AiiQTCaV+a36vbs9aK9Kojwvp0vXI/H6ic2 0Ff5F8r3UA/osqrLAGfSs+ckeXmX3n1w8bjwnqmKypNWj5rHqRJkKe2HOx1kYcDC 5i/BFdflDOnoaP7Uln0C/PgoHjayee+NQfuq0SfghQjozYS5/3iDPFu7+ghirKhE /Ci9lpbn9bLtl2f9YjxAXWuqaENdqnEG96tv0QAIDBRbNm/7LB8= -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:03 2025 by rpki-client