$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: Ghmu9zSZ+YOXPg2x5G9o/zZGeWvkY2oeHlPn2zt2SA8= Subject key identifier: 4D:DF:19:B0:4B:5B:B8:AD:8A:59:5B:28:79:63:E4:53:11:75:EF:A8 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 212667D382C2887CD3CDB117BD874AAA44213AF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 01FB Signing time: Fri 22 Aug 2025 07:01:58 +0000 Manifest this update: Fri 22 Aug 2025 06:56:58 +0000 Manifest next update: Mon 25 Aug 2025 13:05:58 +0000 Files and hashes: 1: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: GBDT3f41kAPvnJtfyhCurrk4CO2A2nzEBv11XGGIEO4=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:26:67:d3:82:c2:88:7c:d3:cd:b1:17:bd:87:4a:aa:44:21:3a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Aug 22 06:56:58 2025 GMT Not After : Aug 25 13:05:58 2025 GMT Subject: CN=4DDF19B04B5BB8AD8A595B287963E4531175EFA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:e2:2a:ac:83:db:30:d7:86:1e:db:f0:c9: 8b:1a:74:04:c4:ab:d3:b5:f2:d8:f6:34:31:e0:71: db:cc:41:76:83:65:c9:8d:96:22:1e:27:3d:df:81: 6f:ea:53:0e:ea:bf:bf:10:dc:b3:de:f9:70:53:4f: 4c:3f:4f:0a:97:1c:a0:35:9c:bb:d1:ff:3e:05:93: c9:f1:4c:41:23:48:9c:92:30:b2:c6:df:06:8c:4c: ac:54:08:0e:0e:27:7c:4b:4a:e6:55:f9:b6:36:b4: 0a:6c:0d:7d:3b:e2:25:2d:95:a2:13:36:da:23:3a: 4a:0b:e3:85:84:bc:79:29:92:8c:e1:08:aa:ed:a4: f8:8f:0f:0e:16:1a:dc:ed:ed:c0:1e:16:24:1d:2d: ac:a7:c1:95:22:be:09:4b:9d:45:29:e7:37:d0:92: 47:72:2f:14:7e:de:c0:e3:5d:bb:99:46:83:01:03: e0:9a:c0:f0:31:ad:42:9f:7b:cd:3a:38:ff:80:cd: 1f:00:6b:5b:a6:c0:be:94:84:a7:ca:bb:fe:77:8a: ea:9c:2e:39:5c:64:08:2a:3c:02:28:97:ad:bc:84: 4a:ac:13:1f:d4:cd:6a:d7:6b:1e:cd:07:d3:e3:ef: c3:45:c5:d1:80:21:b7:41:d2:23:8d:41:ab:29:22: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DF:19:B0:4B:5B:B8:AD:8A:59:5B:28:79:63:E4:53:11:75:EF:A8 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:91:15:04:e8:d1:87:12:bd:ce:63:32:fb:17:e5:d5:cf:68: 7f:da:81:0c:0c:63:6e:4b:9e:b6:6b:62:d0:89:7a:94:f5:1c: 71:7d:24:fd:a6:77:3b:e3:a3:a4:30:4d:91:3f:da:a8:78:4b: d0:aa:e4:9e:01:e9:cc:b3:cb:15:6f:84:a0:d8:35:44:52:e1: 52:c6:5a:42:96:5a:25:51:34:39:89:6d:30:bc:41:68:2a:45: 1b:f4:81:72:b5:07:a2:3a:56:09:96:92:25:27:b3:ff:1d:86: 7e:e0:9f:01:03:6a:6f:16:e2:24:37:4c:62:1e:71:e1:76:f5: 91:e2:26:ad:24:ae:6e:12:a9:cc:9f:e6:fa:4b:22:f9:69:87: 30:1e:68:fa:ce:26:33:13:62:90:24:46:63:2a:6b:99:b0:59: 4f:e0:92:cc:46:62:ba:2a:78:01:c8:6c:4d:67:e1:67:ab:e5: 1c:34:61:c9:14:ba:3f:4d:32:f7:e6:ef:e2:9e:3c:54:b1:72: 3d:ee:22:b1:5b:7f:58:13:ee:d1:45:78:ed:34:80:87:e6:b3: e2:86:4e:a3:5b:9c:a5:c5:58:cb:2d:8f:1d:b9:c4:6e:d7:cd: 5b:c8:4a:6d:5b:04:8b:b9:d4:9c:d8:69:39:77:1e:c6:b5:9d: 8c:96:fb:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISZn04LCiHzTzbEXvYdKqkQhOvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTA4MjIwNjU2NThaFw0yNTA4MjUxMzA1NThaMDMxMTAvBgNV BAMTKDREREYxOUIwNEI1QkI4QUQ4QTU5NUIyODc5NjNFNDUzMTE3NUVGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ8eIqrIPbMNeGHtvwyYsadATE q9O18tj2NDHgcdvMQXaDZcmNliIeJz3fgW/qUw7qv78Q3LPe+XBTT0w/TwqXHKA1 nLvR/z4Fk8nxTEEjSJySMLLG3waMTKxUCA4OJ3xLSuZV+bY2tApsDX074iUtlaIT NtojOkoL44WEvHkpkozhCKrtpPiPDw4WGtzt7cAeFiQdLaynwZUivglLnUUp5zfQ kkdyLxR+3sDjXbuZRoMBA+CawPAxrUKfe806OP+AzR8Aa1umwL6UhKfKu/53iuqc LjlcZAgqPAIol628hEqsEx/UzWrXax7NB9Pj78NFxdGAIbdB0iONQaspIhw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTd8ZsEtbuK2KWVsoeWPkUxF176gwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASRFQTo0YcSvc5jMvsX5dXPaH/agQwMY25L nrZrYtCJepT1HHF9JP2mdzvjo6QwTZE/2qh4S9Cq5J4B6cyzyxVvhKDYNURS4VLG WkKWWiVRNDmJbTC8QWgqRRv0gXK1B6I6VgmWkiUns/8dhn7gnwEDam8W4iQ3TGIe ceF29ZHiJq0krm4Sqcyf5vpLIvlphzAeaPrOJjMTYpAkRmMqa5mwWU/gksxGYroq eAHIbE1n4Wer5Rw0YckUuj9NMvfm7+KePFSxcj3uIrFbf1gT7tFFeO00gIfms+KG TqNbnKXFWMstjx25xG7XzVvISm1bBIu51JzYaTl3Hsa1nYyW+30= -----END CERTIFICATE-----Generated at Sat Aug 23 10:39:39 2025 by rpki-client