$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: 5tb9seWGUZfiF+qmt6Nkp0b5kcHRdVMsUutr2i/SCd4= Subject key identifier: 04:69:57:A2:FD:F7:14:25:40:77:7E:54:79:9D:C2:43:E8:0C:56:41 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 32DC29A7E8BEF3E3BD73D4414828D618EF100C03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 79 Signing time: Sat 23 Aug 2025 02:51:41 +0000 Manifest this update: Sat 23 Aug 2025 02:46:41 +0000 Manifest next update: Tue 26 Aug 2025 12:56:41 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: 3OAHPwo13AeUBrRWgoRCkCEzDDtJsIJ3ZE97zDTN+q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:dc:29:a7:e8:be:f3:e3:bd:73:d4:41:48:28:d6:18:ef:10:0c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Aug 23 02:46:41 2025 GMT Not After : Aug 26 12:56:41 2025 GMT Subject: CN=046957A2FDF7142540777E54799DC243E80C5641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:08:1c:a8:75:68:18:bd:ba:9c:2b:f2:a3: be:90:45:f4:d4:82:92:b7:cd:03:2e:5a:ee:6f:20: bc:8e:30:c1:94:0d:2c:e9:e2:1d:d7:b2:1b:b8:17: 6d:d7:03:be:59:08:30:b4:e5:ed:38:21:0c:e0:8c: 76:07:bf:50:0a:c9:c2:df:d0:1e:a1:c0:3d:f1:49: 60:88:4e:13:af:de:d9:65:43:40:82:b0:84:68:23: b2:cd:31:3f:90:7f:cf:dc:25:74:e2:1c:12:79:92: fc:37:50:5d:60:a2:eb:eb:d1:c7:d8:bd:c2:54:73: 61:e5:c0:ef:cf:b4:03:b9:9c:32:9d:7d:82:ac:83: d2:71:d3:ac:6b:17:91:7e:01:5d:b6:ad:16:24:02: 5d:c6:bc:99:6b:3b:d7:73:e6:dd:6f:2c:c1:10:81: a9:b2:7a:71:f6:8d:c3:07:a6:b1:2a:9f:0f:65:eb: 42:ac:25:72:c9:72:1d:21:28:13:26:7f:7e:5f:8b: 56:f8:e8:28:c7:8b:ae:44:4a:61:34:5d:91:5e:7c: 4d:12:11:eb:c2:29:6b:87:29:12:19:93:39:9f:a3: 76:df:d7:2d:6b:72:dd:0c:21:85:fa:1e:98:93:3b: 57:9a:62:d4:e6:c6:9e:a0:52:f1:e6:fe:84:7b:dd: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:69:57:A2:FD:F7:14:25:40:77:7E:54:79:9D:C2:43:E8:0C:56:41 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:9b:b8:e2:3f:95:6b:43:05:d0:08:90:e5:28:c0:5c:4a:8b: 4d:e2:3d:1b:3c:34:85:7f:2f:9e:6e:98:93:81:b1:5e:1b:45: 00:7f:ab:22:56:7b:0b:33:40:b6:25:80:43:48:9d:f2:1f:64: 84:38:bc:2c:c9:ed:cb:3e:d8:c2:49:ce:a1:73:fa:f3:c6:b4: 15:45:24:2d:18:46:05:be:11:03:1b:89:9e:fe:a8:0f:90:eb: 30:1e:84:9e:d9:0e:8d:ea:42:11:12:c0:f8:ad:c3:76:bf:53: 44:29:8c:19:e3:98:09:6b:4a:4f:ff:16:cf:62:ca:30:e9:74: 84:74:7f:09:75:7c:1c:43:8e:ee:1d:91:28:45:ba:22:58:d0: e0:e0:f3:8e:d6:41:e8:08:1a:92:9c:dd:50:fb:8d:94:e8:37: b6:a5:85:03:25:23:1d:7b:64:35:bb:f2:39:c3:d9:cb:d0:f1: d7:5f:32:81:bf:de:58:bb:43:09:f7:2a:52:2b:68:c9:63:34: 03:37:78:62:58:95:42:5d:f9:ca:3d:b2:2a:c6:45:11:8e:8b: 2f:b7:ca:48:22:5b:30:a1:72:b8:34:7c:72:e0:72:01:2d:43: df:c3:54:23:f0:39:cf:88:03:7a:62:ab:5e:c8:a9:02:53:ec: 64:44:4a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtwpp+i+8+O9c9RBSCjWGO8QDAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTA4MjMwMjQ2NDFaFw0yNTA4MjYxMjU2NDFaMDMxMTAvBgNV BAMTKDA0Njk1N0EyRkRGNzE0MjU0MDc3N0U1NDc5OURDMjQzRTgwQzU2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWggcqHVoGL26nCvyo76QRfTU gpK3zQMuWu5vILyOMMGUDSzp4h3Xshu4F23XA75ZCDC05e04IQzgjHYHv1AKycLf 0B6hwD3xSWCIThOv3tllQ0CCsIRoI7LNMT+Qf8/cJXTiHBJ5kvw3UF1gouvr0cfY vcJUc2HlwO/PtAO5nDKdfYKsg9Jx06xrF5F+AV22rRYkAl3GvJlrO9dz5t1vLMEQ gamyenH2jcMHprEqnw9l60KsJXLJch0hKBMmf35fi1b46CjHi65ESmE0XZFefE0S EevCKWuHKRIZkzmfo3bf1y1rct0MIYX6HpiTO1eaYtTmxp6gUvHm/oR73U7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGlXov33FCVAd35UeZ3CQ+gMVkEwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALibuOI/lWtDBdAIkOUowFxKi03iPRs8NIV/ L55umJOBsV4bRQB/qyJWewszQLYlgENInfIfZIQ4vCzJ7cs+2MJJzqFz+vPGtBVF JC0YRgW+EQMbiZ7+qA+Q6zAehJ7ZDo3qQhESwPitw3a/U0QpjBnjmAlrSk//Fs9i yjDpdIR0fwl1fBxDju4dkShFuiJY0ODg847WQegIGpKc3VD7jZToN7alhQMlIx17 ZDW78jnD2cvQ8ddfMoG/3li7Qwn3KlIraMljNAM3eGJYlUJd+co9sirGRRGOiy+3 ykgiWzChcrg0fHLgcgEtQ9/DVCPwOc+IA3piq17IqQJT7GRESu8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:46 2025 by rpki-client