$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: PAPAJb1Q2xw5ruGkZZqCjIiCj31BeKednX9+ZxXJgxQ= Subject key identifier: 9A:DB:B7:1C:FB:54:4D:A0:7A:00:A2:F3:86:F0:8F:32:3C:46:CE:7E Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 6B0F145DFD8F38F42809133BA19C230DC5406AFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 019A Signing time: Mon 30 Jun 2025 07:31:39 +0000 Manifest this update: Mon 30 Jun 2025 07:26:39 +0000 Manifest next update: Thu 03 Jul 2025 08:38:39 +0000 Files and hashes: 1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=) 2: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: 1kwgIQHYpaIEfXoue28DrYM9QpQ8NQ6Up9yDtKVkzo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0f:14:5d:fd:8f:38:f4:28:09:13:3b:a1:9c:23:0d:c5:40:6a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Jun 30 07:26:39 2025 GMT Not After : Jul 3 08:38:39 2025 GMT Subject: CN=9ADBB71CFB544DA07A00A2F386F08F323C46CE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:05:3d:7a:a8:4d:bc:7d:c7:72:d2:a9:4d: aa:fd:78:81:69:74:e9:d9:74:47:a2:f7:aa:c5:92: cc:e4:7e:13:f4:23:72:f5:c7:7e:32:55:3b:95:8a: 80:a1:8e:55:bb:9d:f3:e1:ee:ac:39:e9:2c:d7:65: 8b:82:73:84:96:aa:ae:b9:c3:b1:e1:c5:08:76:c6: 74:b2:d5:a2:43:7f:c6:da:9a:62:50:1a:e2:c0:c2: 37:e8:23:12:c8:f4:43:8f:cb:ea:ae:54:72:43:74: 81:2a:af:d7:43:61:58:85:b5:e4:3d:99:b6:71:cc: 46:03:c7:ab:c1:e3:b4:ee:ba:59:59:4b:a7:17:f0: a1:ac:7a:4a:cc:b2:8c:2e:71:a7:d7:14:15:64:bf: bd:0d:1f:c6:17:a1:07:0a:30:f3:f2:a4:6d:95:6e: 42:4d:a0:53:85:74:98:99:38:cb:6e:26:bf:eb:a2: 2c:b7:33:b3:14:a9:f1:68:1b:0b:2b:03:87:4f:b2: 96:10:83:ae:51:a7:bd:58:b1:71:6b:50:99:9c:dc: 08:4c:44:ad:62:6c:89:c8:1f:4c:ab:1d:20:10:29: d4:0b:28:1c:4b:1b:82:23:db:b5:b8:0f:b0:9d:25: 39:ca:aa:62:68:bd:f3:eb:47:a0:d1:ad:13:ca:77: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:B7:1C:FB:54:4D:A0:7A:00:A2:F3:86:F0:8F:32:3C:46:CE:7E X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:df:65:fa:4e:c1:ce:0f:2f:55:43:36:a2:1c:ab:a4:6c:1d: be:39:2b:5e:79:3e:dc:df:29:b3:9a:e4:bf:84:0b:00:0e:8f: 51:ee:66:9b:52:eb:54:6d:c1:6a:be:7a:57:e3:e7:d3:63:87: 83:34:00:3f:de:69:e0:15:b7:26:a3:27:a4:ac:e0:53:d7:4c: e0:32:34:e9:47:1a:36:9d:ca:29:16:81:e8:e2:ac:84:a5:5a: a2:95:ea:76:bf:0a:39:22:33:98:df:b6:ea:8b:54:43:5f:2a: 64:cb:b5:22:c1:3f:24:d1:2f:29:e6:0c:0f:c9:3c:07:0e:f0: d2:70:3b:a4:4e:ca:dc:d4:6e:62:10:50:38:62:67:9e:89:b1: 60:8b:a1:54:97:7f:61:2c:be:99:f0:80:7d:f1:8e:e9:bd:1c: 30:1c:6a:2e:be:11:eb:da:06:d0:66:3b:46:ff:6b:af:9a:fd: 49:a9:c1:ee:07:a7:ff:b0:dc:dd:86:3c:5c:55:82:50:d7:36: df:72:9c:77:63:32:54:1d:1d:d3:c3:91:81:dd:6d:f9:c3:fb: 4b:dc:c8:13:4e:a9:4f:96:60:3b:0d:11:89:9f:af:1c:63:4b: d0:69:09:23:2b:21:79:51:2b:24:b0:78:9e:1e:31:2f:80:89: 3c:f8:c2:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaw8UXf2POPQoCRM7oZwjDcVAav8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTA2MzAwNzI2MzlaFw0yNTA3MDMwODM4MzlaMDMxMTAvBgNV BAMTKDlBREJCNzFDRkI1NDREQTA3QTAwQTJGMzg2RjA4RjMyM0M0NkNFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFAU9eqhNvH3HctKpTar9eIFp dOnZdEei96rFkszkfhP0I3L1x34yVTuVioChjlW7nfPh7qw56SzXZYuCc4SWqq65 w7HhxQh2xnSy1aJDf8bammJQGuLAwjfoIxLI9EOPy+quVHJDdIEqr9dDYViFteQ9 mbZxzEYDx6vB47TuullZS6cX8KGsekrMsowucafXFBVkv70NH8YXoQcKMPPypG2V bkJNoFOFdJiZOMtuJr/roiy3M7MUqfFoGwsrA4dPspYQg65Rp71YsXFrUJmc3AhM RK1ibInIH0yrHSAQKdQLKBxLG4Ij27W4D7CdJTnKqmJovfPrR6DRrRPKd7xFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtu3HPtUTaB6AKLzhvCPMjxGzn4wHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/fZfpOwc4PL1VDNqIcq6RsHb45K155Ptzf KbOa5L+ECwAOj1HuZptS61RtwWq+elfj59Njh4M0AD/eaeAVtyajJ6Ss4FPXTOAy NOlHGjadyikWgejirISlWqKV6na/CjkiM5jftuqLVENfKmTLtSLBPyTRLynmDA/J PAcO8NJwO6ROytzUbmIQUDhiZ56JsWCLoVSXf2EsvpnwgH3xjum9HDAcai6+Eeva BtBmO0b/a6+a/Umpwe4Hp/+w3N2GPFxVglDXNt9ynHdjMlQdHdPDkYHdbfnD+0vc yBNOqU+WYDsNEYmfrxxjS9BpCSMrIXlRKySweJ4eMS+AiTz4wkA= -----END CERTIFICATE-----Generated at Tue Jul 1 16:04:20 2025 by rpki-client