$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: vR8EyTArhrANoAzjF6ld+jdapYjj34s6uqm9yWWHWh4= Subject key identifier: BA:5C:FD:C2:5C:36:DD:1D:8A:99:80:DA:88:FB:18:93:3E:96:DE:6D Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 31E1DC61768E2D84A8B37E977D4E35647791D787 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: D2 Signing time: Thu 21 Aug 2025 18:01:03 +0000 Manifest this update: Thu 21 Aug 2025 17:56:03 +0000 Manifest next update: Sun 24 Aug 2025 22:28:03 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: bimkbOKfF4Gx0XRN0buzEcyBmL7ZGHPj6dFTdbB/xPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e1:dc:61:76:8e:2d:84:a8:b3:7e:97:7d:4e:35:64:77:91:d7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Aug 21 17:56:03 2025 GMT Not After : Aug 24 22:28:03 2025 GMT Subject: CN=BA5CFDC25C36DD1D8A9980DA88FB18933E96DE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2e:67:30:73:97:1e:01:dc:2e:c8:c3:e5:08: 2c:31:a2:1a:be:f9:cd:c5:af:4b:8c:89:aa:3c:0a: 73:c0:8f:98:34:e6:bd:fc:69:6f:6b:86:be:14:c8: 7a:19:1a:9c:25:4f:9a:c5:ff:f5:83:52:d4:a7:cf: 10:4a:68:5c:52:c4:38:81:7c:22:f0:d7:b6:56:72: 3f:57:52:82:15:eb:b9:0c:2d:15:0f:21:32:b7:03: 2b:78:b3:e4:92:5f:64:7f:52:6f:4c:d7:c0:3c:26: f3:e5:04:b2:0c:ed:f4:c6:f2:fd:a1:08:32:2e:02: 15:76:8a:dd:48:43:68:fb:30:71:5e:a0:90:e0:97: ad:eb:bf:f3:e1:94:11:ed:ee:0f:6e:b7:e3:e6:d7: 01:9d:cf:12:86:0e:c4:df:41:89:14:78:de:b6:3c: 59:80:b9:0e:8e:c7:2d:da:bf:08:fd:b9:f1:e1:c9: ff:f5:17:e4:eb:5f:1e:83:f8:9a:0b:bd:10:cb:c4: 67:ae:51:fa:e5:d9:59:ec:1f:b0:f0:fa:5d:5d:b6: 67:19:b9:d9:9d:83:c4:72:db:3c:f5:40:d3:23:23: 25:7a:81:e0:f5:54:90:93:eb:28:07:81:d6:dc:f5: f9:c5:76:a2:f6:59:e0:17:ca:b4:f3:f2:2f:a7:b7: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5C:FD:C2:5C:36:DD:1D:8A:99:80:DA:88:FB:18:93:3E:96:DE:6D X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:18:6e:6d:32:45:08:0e:39:08:2d:24:e8:c8:c2:92:e1:7b: 15:83:b2:fc:52:84:84:b0:99:09:42:29:28:56:e9:52:6e:57: 06:ee:3f:d7:6f:ad:f4:6c:84:d8:d3:ad:8d:5e:ea:3b:54:16: d9:9d:6a:88:e5:4a:7f:93:7a:7f:cd:63:4a:f3:94:84:61:c2: ed:76:9e:c8:fa:71:3e:c3:2e:ec:52:0e:61:b3:06:c1:b7:e6: 89:66:33:75:aa:81:ee:c0:9d:e2:aa:4d:5f:96:2b:ce:72:9a: 3a:27:cf:bc:06:f9:c8:f8:40:a0:90:64:94:50:ca:9d:9e:15: a4:41:92:0a:77:bd:0b:8e:44:78:55:62:29:43:a7:0c:5a:18: 33:a7:2c:dc:f6:5e:1f:5a:81:41:8f:1c:cb:f6:98:a6:38:86: 14:a7:15:e0:43:56:e4:21:6f:90:c5:5f:46:04:81:8a:ac:b7: 03:17:86:0c:68:f3:5d:f0:f8:7c:72:a0:30:24:6c:b9:48:b4: 61:ff:fa:8c:63:61:a4:75:84:c2:d7:64:16:13:25:19:09:eb: 36:91:0b:3a:28:90:bd:29:9b:9f:2c:91:a3:4d:bd:e3:ff:18: 75:4e:a0:14:e0:a3:a2:61:04:e1:8c:e9:31:6a:cd:7f:f2:0d: c1:5c:2d:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeHcYXaOLYSos36XfU41ZHeR14cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNTA4MjExNzU2MDNaFw0yNTA4MjQyMjI4MDNaMDMxMTAvBgNV BAMTKEJBNUNGREMyNUMzNkREMUQ4QTk5ODBEQTg4RkIxODkzM0U5NkRFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6Lmcwc5ceAdwuyMPlCCwxohq+ +c3Fr0uMiao8CnPAj5g05r38aW9rhr4UyHoZGpwlT5rF//WDUtSnzxBKaFxSxDiB fCLw17ZWcj9XUoIV67kMLRUPITK3Ayt4s+SSX2R/Um9M18A8JvPlBLIM7fTG8v2h CDIuAhV2it1IQ2j7MHFeoJDgl63rv/PhlBHt7g9ut+Pm1wGdzxKGDsTfQYkUeN62 PFmAuQ6Oxy3avwj9ufHhyf/1F+TrXx6D+JoLvRDLxGeuUfrl2VnsH7Dw+l1dtmcZ udmdg8Ry2zz1QNMjIyV6geD1VJCT6ygHgdbc9fnFdqL2WeAXyrTz8i+ntw05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulz9wlw23R2KmYDaiPsYkz6W3m0wHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQYbm0yRQgOOQgtJOjIwpLhexWDsvxShISw mQlCKShW6VJuVwbuP9dvrfRshNjTrY1e6jtUFtmdaojlSn+Ten/NY0rzlIRhwu12 nsj6cT7DLuxSDmGzBsG35olmM3Wqge7AneKqTV+WK85ymjonz7wG+cj4QKCQZJRQ yp2eFaRBkgp3vQuORHhVYilDpwxaGDOnLNz2Xh9agUGPHMv2mKY4hhSnFeBDVuQh b5DFX0YEgYqstwMXhgxo813w+HxyoDAkbLlItGH/+oxjYaR1hMLXZBYTJRkJ6zaR CzookL0pm58skaNNveP/GHVOoBTgo6JhBOGM6TFqzX/yDcFcLZg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:25:50 2025 by rpki-client