$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: hH1SETLuwf/pczV15NO/7NhkbfbDKXCKgYllZOR1FTY= Subject key identifier: D6:27:1F:36:E9:F2:D2:AA:B8:06:19:39:39:7D:62:25:BB:7B:00:53 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 1D7FD9EC9F8F098B78CD45463B433C291B13CA1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: E1 Signing time: Fri 22 Aug 2025 03:11:45 +0000 Manifest this update: Fri 22 Aug 2025 03:06:45 +0000 Manifest next update: Mon 25 Aug 2025 11:04:45 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: g2kmcedM1Pme0u5wH9U942VWLEJrfriGq3K/9vzG3NM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7f:d9:ec:9f:8f:09:8b:78:cd:45:46:3b:43:3c:29:1b:13:ca:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Aug 22 03:06:45 2025 GMT Not After : Aug 25 11:04:45 2025 GMT Subject: CN=D6271F36E9F2D2AAB8061939397D6225BB7B0053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:9f:81:86:3a:70:11:ad:17:c1:26:f7:42: b7:a2:ab:41:42:5e:50:d3:6c:b6:ee:c4:9e:5e:99: 25:1c:e7:dc:c0:fc:dc:b7:5d:5e:ff:39:86:ce:d7: f3:80:f5:6f:79:aa:dd:18:2d:75:44:82:89:37:dd: 5e:1e:a3:f4:60:cb:ba:03:36:28:be:03:6e:e3:98: 68:93:29:c0:a0:87:80:1e:11:0b:51:98:e6:e9:2e: 27:a1:5e:cc:9c:35:9a:58:b5:3e:98:83:f4:d4:00: 52:84:9e:f5:bb:94:ff:28:7c:8d:f5:8b:11:a8:ab: cd:51:d6:6e:c2:45:83:6c:4a:4e:c9:4b:6c:d5:e5: 75:3f:b1:51:6f:76:6c:de:c0:45:b0:7f:fc:54:5c: 7e:1c:5f:63:bd:68:e4:ba:ff:9d:95:30:56:40:3d: 73:a6:c8:0c:d6:de:7a:a5:28:4a:37:c2:e9:bb:4d: 30:0d:48:4c:06:10:0a:5c:2c:12:6b:26:6b:a8:8d: f2:d2:05:cd:5c:fc:83:62:f8:7e:74:d2:9c:e5:1c: dd:a1:f8:c8:2f:9d:eb:a2:39:27:17:ca:3e:8a:47: a0:bb:6b:b6:fc:10:67:a7:e6:e1:2e:2b:bb:ee:78: b3:f8:51:51:55:85:7b:dc:94:fb:4e:e6:77:d4:3c: 58:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:1F:36:E9:F2:D2:AA:B8:06:19:39:39:7D:62:25:BB:7B:00:53 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:bf:3e:eb:1e:c4:35:80:9e:d8:1b:7a:1a:e5:51:77:a1:b8: 01:d7:22:6e:68:b5:84:70:5c:68:64:8a:67:53:0e:b7:83:1c: fe:72:36:a9:14:c7:26:ec:b6:bf:6e:54:70:7d:6b:da:6a:33: 33:4c:c0:f4:0a:25:0d:fc:67:af:80:7f:97:3d:1f:1a:8d:eb: 75:97:13:9a:cb:a0:38:d3:ae:ed:3e:75:2d:17:8c:c2:73:07: 2c:fa:db:f6:65:18:42:12:76:2b:3e:8a:e4:ec:08:c4:45:f1: 7c:a8:fe:3e:53:4e:99:71:c5:62:ca:51:93:f9:81:73:1a:be: 0d:db:fe:7f:8f:3e:00:a7:6a:fe:67:65:8c:f4:15:89:5f:28: f0:e7:32:86:2a:ce:67:52:ac:46:fe:84:68:04:6d:9f:a1:0e: 45:14:43:a2:e6:42:39:5e:63:b0:70:98:ae:b8:e8:1c:91:ba: bc:bd:48:d9:cd:e1:3a:2c:2d:c9:67:ab:19:98:2e:42:f9:b0: 62:41:9d:fa:ce:00:55:4e:ae:93:c3:41:4b:97:65:0b:61:b9: 74:38:b0:bf:14:b9:0b:ae:6d:00:00:38:90:96:3f:66:e3:26: b2:b6:3b:28:68:10:fe:fe:3b:dd:2f:b3:97:f8:c9:05:88:af: 31:53:1c:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHX/Z7J+PCYt4zUVGO0M8KRsTyhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA4MjIwMzA2NDVaFw0yNTA4MjUxMTA0NDVaMDMxMTAvBgNV BAMTKEQ2MjcxRjM2RTlGMkQyQUFCODA2MTkzOTM5N0Q2MjI1QkI3QjAwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2p+BhjpwEa0XwSb3Qreiq0FC XlDTbLbuxJ5emSUc59zA/Ny3XV7/OYbO1/OA9W95qt0YLXVEgok33V4eo/Rgy7oD Nii+A27jmGiTKcCgh4AeEQtRmObpLiehXsycNZpYtT6Yg/TUAFKEnvW7lP8ofI31 ixGoq81R1m7CRYNsSk7JS2zV5XU/sVFvdmzewEWwf/xUXH4cX2O9aOS6/52VMFZA PXOmyAzW3nqlKEo3wum7TTANSEwGEApcLBJrJmuojfLSBc1c/INi+H500pzlHN2h +MgvneuiOScXyj6KR6C7a7b8EGen5uEuK7vueLP4UVFVhXvclPtO5nfUPFiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1icfNuny0qq4Bhk5OX1iJbt7AFMwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG/PusexDWAntgbehrlUXehuAHXIm5otYRw XGhkimdTDreDHP5yNqkUxybstr9uVHB9a9pqMzNMwPQKJQ38Z6+Af5c9HxqN63WX E5rLoDjTru0+dS0XjMJzByz62/ZlGEISdis+iuTsCMRF8Xyo/j5TTplxxWLKUZP5 gXMavg3b/n+PPgCnav5nZYz0FYlfKPDnMoYqzmdSrEb+hGgEbZ+hDkUUQ6LmQjle Y7BwmK646ByRury9SNnN4TosLclnqxmYLkL5sGJBnfrOAFVOrpPDQUuXZQthuXQ4 sL8UuQuubQAAOJCWP2bjJrK2OyhoEP7+O90vs5f4yQWIrzFTHIs= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:58 2025 by rpki-client