$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: tRtcNOhApQPvYGOBLhYdfh5UlY5l7/3XRlOe2xl6MYM= Subject key identifier: B8:85:06:70:45:68:D0:FC:78:89:D5:DE:50:55:20:AE:E8:3D:1F:25 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 38C10EABFB44959229456A7B871038752EE9B53D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 60 Signing time: Sat 28 Jun 2025 22:51:43 +0000 Manifest this update: Sat 28 Jun 2025 22:46:43 +0000 Manifest next update: Wed 02 Jul 2025 01:21:43 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: pLCRiiF3PoMbTuzod6P/NVRRzHRN66DA33YW3vaLwHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c1:0e:ab:fb:44:95:92:29:45:6a:7b:87:10:38:75:2e:e9:b5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Jun 28 22:46:43 2025 GMT Not After : Jul 2 01:21:43 2025 GMT Subject: CN=B88506704568D0FC7889D5DE505520AEE83D1F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:50:1e:0d:a9:e8:ef:86:b3:a4:5b:90:87: 58:f9:ba:7f:7e:27:be:a9:82:dc:51:88:cd:27:6f: 33:4e:e3:60:1d:69:c2:5a:da:8b:62:18:f5:12:d7: 31:65:e2:d4:25:18:9a:0c:6d:30:d8:4d:11:27:9f: 7c:6a:6f:5e:c6:4b:5c:ae:0f:20:d4:ec:88:f0:07: ab:b3:e1:5e:fd:4f:88:d1:eb:6c:35:63:5a:10:0b: a4:ae:eb:5d:d9:33:4b:ae:b1:c0:52:82:4e:62:47: 8c:9b:2a:82:f5:ff:46:06:25:fd:85:61:cb:b4:57: 2d:e1:ca:65:20:ff:a6:09:a7:a5:e0:22:cd:6b:c6: 65:56:6c:d4:3d:39:01:bb:6a:8b:80:84:41:98:67: 50:12:14:0f:4a:72:3d:8b:09:a0:e5:9d:0f:b4:40: b7:99:35:1a:7c:b6:8e:f1:fb:12:25:c6:a3:aa:36: bc:12:9a:1e:07:ef:51:c3:91:af:a9:e2:aa:5d:26: 77:d3:c2:a0:de:c3:af:c6:17:ca:87:1f:7b:a5:c8: 80:1d:c3:1c:3f:69:4f:73:a6:8a:71:fc:ee:53:db: dc:fd:08:d5:be:4a:cc:fb:07:0a:b9:5e:fb:a8:e9: 94:85:53:15:dc:fd:03:26:7f:e8:b1:38:32:9e:26: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:06:70:45:68:D0:FC:78:89:D5:DE:50:55:20:AE:E8:3D:1F:25 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:a2:4b:d7:8b:30:db:ff:c5:2f:69:9b:0e:52:e5:67:d7:bb: 21:35:bc:b5:4a:22:cb:13:2a:b9:3c:49:e0:82:c1:10:25:e7: 57:b9:7c:c6:54:65:dd:43:b4:ce:e0:fc:0a:c3:52:47:ac:af: 0b:af:0e:ea:ad:08:03:5c:98:40:41:8b:f7:d6:43:6c:bc:d6: 83:1f:cc:0f:a6:46:be:df:08:46:b4:f6:49:6b:64:c1:1f:57: 64:72:b4:57:d9:79:7b:16:33:63:65:b3:2d:23:4d:d9:d8:e3: 8f:fc:5c:e6:85:40:02:da:a8:d2:22:8b:91:41:1e:a8:bf:8e: 35:e0:17:2c:59:64:9e:b4:fb:7e:a1:66:ef:8a:23:cf:aa:52: 6a:d2:d4:51:11:05:8b:a8:2e:e2:51:bf:f4:bc:0a:b0:77:37: 61:52:ca:37:c7:5c:8d:b5:4b:1d:96:fb:24:c5:03:ca:1f:60: 5c:bf:68:a8:f8:0d:04:c4:5a:0f:df:51:74:6d:3e:d2:e1:4a: a6:cd:45:53:e0:b2:cf:11:53:eb:a5:d4:f9:3a:94:38:ff:d4: 4b:a3:b3:77:c7:ff:ca:43:dd:2f:55:49:14:6c:8e:7f:68:09: 16:d0:27:fa:08:25:94:a0:9f:57:ba:eb:ad:dc:03:a3:c7:ac: b8:10:08:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMEOq/tElZIpRWp7hxA4dS7ptT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTA2MjgyMjQ2NDNaFw0yNTA3MDIwMTIxNDNaMDMxMTAvBgNV BAMTKEI4ODUwNjcwNDU2OEQwRkM3ODg5RDVERTUwNTUyMEFFRTgzRDFGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7FAeDano74azpFuQh1j5un9+ J76pgtxRiM0nbzNO42AdacJa2otiGPUS1zFl4tQlGJoMbTDYTREnn3xqb17GS1yu DyDU7IjwB6uz4V79T4jR62w1Y1oQC6Su613ZM0uuscBSgk5iR4ybKoL1/0YGJf2F Ycu0Vy3hymUg/6YJp6XgIs1rxmVWbNQ9OQG7aouAhEGYZ1ASFA9Kcj2LCaDlnQ+0 QLeZNRp8to7x+xIlxqOqNrwSmh4H71HDka+p4qpdJnfTwqDew6/GF8qHH3ulyIAd wxw/aU9zpopx/O5T29z9CNW+Ssz7Bwq5Xvuo6ZSFUxXc/QMmf+ixODKeJmJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuIUGcEVo0Px4idXeUFUgrug9HyUwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2iS9eLMNv/xS9pmw5S5WfXuyE1vLVKIssT Krk8SeCCwRAl51e5fMZUZd1DtM7g/ArDUkesrwuvDuqtCANcmEBBi/fWQ2y81oMf zA+mRr7fCEa09klrZMEfV2RytFfZeXsWM2Nlsy0jTdnY44/8XOaFQALaqNIii5FB Hqi/jjXgFyxZZJ60+36hZu+KI8+qUmrS1FERBYuoLuJRv/S8CrB3N2FSyjfHXI21 Sx2W+yTFA8ofYFy/aKj4DQTEWg/fUXRtPtLhSqbNRVPgss8RU+ul1Pk6lDj/1Euj s3fH/8pD3S9VSRRsjn9oCRbQJ/oIJZSgn1e6663cA6PHrLgQCH0= -----END CERTIFICATE-----Generated at Mon Jun 30 16:28:59 2025 by rpki-client