$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: IeNjaj3zJr2hmMhd3MQ3k5hl5z3wJFGjH8aMFJzXXLE= Subject key identifier: AC:51:B1:D6:1B:6F:90:4A:B6:09:6A:09:7C:C5:83:BB:A2:6B:48:F3 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 5DF76500BE6B93DAEE6675CD5876D3590E5C4B81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: CA Signing time: Tue 01 Jul 2025 12:21:40 +0000 Manifest this update: Tue 01 Jul 2025 12:16:40 +0000 Manifest next update: Fri 04 Jul 2025 15:30:40 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: b90lHyFgnJA+TAKLF0PyIDOf0+2xTKn3V4JwCS6Xwdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f7:65:00:be:6b:93:da:ee:66:75:cd:58:76:d3:59:0e:5c:4b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Jul 1 12:16:40 2025 GMT Not After : Jul 4 15:30:40 2025 GMT Subject: CN=AC51B1D61B6F904AB6096A097CC583BBA26B48F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:7b:cc:31:da:08:53:66:71:de:9f:da:90: f1:73:27:c1:b6:de:08:16:09:c0:82:49:f4:93:ae: 1a:8e:16:80:2b:2c:11:28:8b:09:e4:c2:1e:ba:d9: 94:86:67:56:8a:d4:04:93:ba:1c:b0:00:f0:b5:d0: fc:7a:51:7e:ae:e6:87:37:ba:f2:0f:d8:69:a7:24: 56:3b:e4:69:ee:56:e1:ef:3d:01:63:1e:3e:50:bd: 03:1c:61:9e:d7:f9:a8:db:b0:53:9b:04:35:28:8d: 2a:90:79:da:27:46:40:ed:c8:9e:cd:d6:c3:80:4c: d2:c3:8d:a5:d8:51:e5:99:cf:5e:7b:b3:19:8e:ea: 83:3d:70:41:58:31:2e:40:b4:b5:fc:6c:d2:94:06: cc:8d:5e:ac:ad:7e:42:58:c0:87:e5:ee:9f:be:74: 4f:59:2d:89:c0:6a:0e:a4:38:65:58:31:40:62:62: 2f:5d:d9:03:99:01:5d:51:c4:2c:dd:5d:24:6f:be: d2:e9:a5:43:31:e3:da:21:f6:d9:15:28:54:cb:dd: c0:2c:32:d8:e8:5f:9d:c4:0c:fb:83:14:ed:0c:60: d3:ab:6c:98:af:6a:ad:31:b5:2a:d6:b3:eb:09:79: 87:da:71:98:04:c7:e9:30:b7:c3:49:78:9f:87:02: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:51:B1:D6:1B:6F:90:4A:B6:09:6A:09:7C:C5:83:BB:A2:6B:48:F3 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6e:de:91:37:45:ac:24:e6:78:0a:c0:95:8a:2b:7a:23:67: 8b:ca:41:d7:4b:8c:43:aa:6d:5e:28:39:11:17:4b:d9:78:be: 76:b7:d8:5b:28:89:ac:3f:38:3f:90:89:7f:19:1c:5a:96:7b: 03:7a:2e:47:eb:7d:cc:0e:31:61:4b:69:29:4b:ea:00:fa:ea: 48:f0:c9:d4:cf:ec:6c:7b:53:f8:f8:e1:05:fc:01:84:c0:cf: ff:49:95:e5:9f:2b:07:f7:0f:bf:d2:8f:61:ef:81:30:d7:43: b2:2d:56:19:8f:ae:c1:2b:31:64:57:6c:00:d9:9e:5f:25:36: 82:d9:ef:8e:cf:31:39:f1:09:4f:73:f5:1a:42:54:01:32:e0: 13:a7:75:49:e7:8c:7b:74:ed:80:06:7a:cf:3a:2d:92:30:6e: 46:10:df:82:f7:93:01:d3:55:86:ee:d4:23:57:d5:dd:60:be: c8:e7:d1:c9:9f:47:43:a4:ee:91:29:8a:5f:e0:e5:92:53:df: 4d:71:b2:62:29:31:47:d5:e2:72:0d:19:9b:a2:a1:e5:f4:e1: 28:fc:ad:a2:5b:58:91:6f:7d:b4:9a:dc:f4:f4:bc:e8:1c:51: 41:2a:c2:c7:86:c7:40:35:11:06:25:59:0d:34:da:7e:60:53: 26:38:6b:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfdlAL5rk9ruZnXNWHbTWQ5cS4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA3MDExMjE2NDBaFw0yNTA3MDQxNTMwNDBaMDMxMTAvBgNV BAMTKEFDNTFCMUQ2MUI2RjkwNEFCNjA5NkEwOTdDQzU4M0JCQTI2QjQ4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dHvMMdoIU2Zx3p/akPFzJ8G2 3ggWCcCCSfSTrhqOFoArLBEoiwnkwh662ZSGZ1aK1ASTuhywAPC10Px6UX6u5oc3 uvIP2GmnJFY75GnuVuHvPQFjHj5QvQMcYZ7X+ajbsFObBDUojSqQedonRkDtyJ7N 1sOATNLDjaXYUeWZz157sxmO6oM9cEFYMS5AtLX8bNKUBsyNXqytfkJYwIfl7p++ dE9ZLYnAag6kOGVYMUBiYi9d2QOZAV1RxCzdXSRvvtLppUMx49oh9tkVKFTL3cAs MtjoX53EDPuDFO0MYNOrbJivaq0xtSrWs+sJeYfacZgEx+kwt8NJeJ+HAgpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFGx1htvkEq2CWoJfMWDu6JrSPMwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJu3pE3Rawk5ngKwJWKK3ojZ4vKQddLjEOq bV4oOREXS9l4vna32Fsoiaw/OD+QiX8ZHFqWewN6LkfrfcwOMWFLaSlL6gD66kjw ydTP7Gx7U/j44QX8AYTAz/9JleWfKwf3D7/Sj2HvgTDXQ7ItVhmPrsErMWRXbADZ nl8lNoLZ747PMTnxCU9z9RpCVAEy4BOndUnnjHt07YAGes86LZIwbkYQ34L3kwHT VYbu1CNX1d1gvsjn0cmfR0Ok7pEpil/g5ZJT301xsmIpMUfV4nINGZuioeX04Sj8 raJbWJFvfbSa3PT0vOgcUUEqwseGx0A1EQYlWQ002n5gUyY4a9k= -----END CERTIFICATE-----Generated at Thu Jul 3 00:41:48 2025 by rpki-client