$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: GqcRfR2tD9GYcDAC8agFQReEEqgZvRhzzebx8zSZ90k= Subject key identifier: 34:09:0F:F9:13:C5:C6:34:44:19:56:02:28:9F:CA:69:BB:99:38:36 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 7B471C98C6544F01D683D5F42C5360CE4111B6DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 0349 Signing time: Sun 27 Apr 2025 02:31:03 +0000 Manifest this update: Sun 27 Apr 2025 02:26:03 +0000 Manifest next update: Wed 30 Apr 2025 09:26:03 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: zukXzky0RKEVGL2npRY6OnAz3ayAKt6J/bbuPDWnzj8=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: UVa2BFyeyFnWWwBGER708Zkc5wG3hgx7lEbyHJ9YtXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:47:1c:98:c6:54:4f:01:d6:83:d5:f4:2c:53:60:ce:41:11:b6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Apr 27 02:26:03 2025 GMT Not After : Apr 30 09:26:03 2025 GMT Subject: CN=34090FF913C5C63444195602289FCA69BB993836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:7e:ab:64:18:4b:04:b4:26:b2:49:60:c7: 13:cc:8f:e6:a9:1c:e1:34:3d:12:7a:1d:d3:0f:b8: 9b:4d:cf:56:21:14:e5:6a:55:62:ee:a4:27:fc:38: 76:68:86:9a:41:7f:e2:e4:26:6d:8d:d7:ba:e5:7b: 68:35:45:c5:f7:24:bd:ea:b7:64:0a:5a:36:10:52: 82:69:73:ac:6b:36:eb:ad:0e:6b:b2:86:46:74:e5: d5:dd:ea:74:74:b5:69:04:6e:d2:51:44:2d:5c:8e: ab:c9:0f:cd:87:74:04:bf:1b:2e:7c:2e:d7:93:c6: 88:08:e8:67:6a:38:5c:ca:57:99:8f:e5:8c:f9:8d: 4b:7e:91:58:57:fb:5f:1a:ea:2f:21:58:35:00:bc: 81:37:0d:17:12:68:0a:b2:83:3c:67:34:7f:b9:97: 43:0b:aa:14:ae:06:c6:72:88:93:ef:4f:5c:6a:78: 82:9f:91:8a:2b:65:9f:cb:f5:96:8e:fb:b8:82:33: a7:a5:26:a0:f8:c9:26:2e:04:f4:ff:c6:83:44:81: 06:14:0b:34:c3:6e:70:a8:2b:69:3f:ab:cd:d6:25: 44:52:3b:26:bb:83:dc:5a:29:37:43:e0:1a:97:49: 70:6c:5f:5c:3b:2b:24:82:98:95:9f:ac:a1:1e:5c: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:09:0F:F9:13:C5:C6:34:44:19:56:02:28:9F:CA:69:BB:99:38:36 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9a:e1:cc:c3:c3:d0:03:06:ab:9f:8d:67:75:b8:31:0c:7d: 7f:f0:72:38:16:c0:ea:b2:fd:ac:97:b4:71:ab:28:d9:70:dc: 77:24:4c:c5:e8:d8:d6:ec:11:5e:c6:35:b1:76:e4:9f:40:26: 7d:81:d3:9c:2f:f9:d8:50:2a:cd:15:26:3a:31:64:bb:77:b8: d2:e4:98:cc:7b:60:fd:29:66:b8:4b:12:d1:9b:90:28:f0:b9: e7:77:92:14:7e:ec:53:35:3b:57:71:bd:3a:a8:c5:cd:c0:75: 82:36:85:e0:23:49:da:ae:ff:36:e6:7c:1c:0a:81:b7:91:94: 2a:63:1c:6e:04:a4:90:28:63:aa:55:65:62:00:85:ae:e5:28: 5c:98:fa:3d:16:9e:ea:74:8b:cf:d2:f1:a9:54:2a:fe:b9:91: da:82:12:28:85:92:e3:7e:f0:2b:73:db:f9:62:7f:6f:de:55: 9a:ab:06:a7:9c:b5:85:6b:8a:50:a0:3b:58:bb:49:1b:9d:a4: 2b:06:60:9c:69:d4:54:e3:f5:3f:f0:bb:c4:0a:29:23:20:9c: 34:38:21:9b:48:ab:91:02:b7:ea:e2:12:f6:23:66:0e:8a:ae: 93:cf:2f:a0:8f:de:59:0e:db:97:ed:bd:9a:17:93:d6:ff:57: bd:52:84:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0ccmMZUTwHWg9X0LFNgzkERttswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNTA0MjcwMjI2MDNaFw0yNTA0MzAwOTI2MDNaMDMxMTAvBgNV BAMTKDM0MDkwRkY5MTNDNUM2MzQ0NDE5NTYwMjI4OUZDQTY5QkI5OTM4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvX6rZBhLBLQmsklgxxPMj+ap HOE0PRJ6HdMPuJtNz1YhFOVqVWLupCf8OHZohppBf+LkJm2N17rle2g1RcX3JL3q t2QKWjYQUoJpc6xrNuutDmuyhkZ05dXd6nR0tWkEbtJRRC1cjqvJD82HdAS/Gy58 LteTxogI6GdqOFzKV5mP5Yz5jUt+kVhX+18a6i8hWDUAvIE3DRcSaAqygzxnNH+5 l0MLqhSuBsZyiJPvT1xqeIKfkYorZZ/L9ZaO+7iCM6elJqD4ySYuBPT/xoNEgQYU CzTDbnCoK2k/q83WJURSOya7g9xaKTdD4BqXSXBsX1w7KySCmJWfrKEeXJtpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAkP+RPFxjREGVYCKJ/KabuZODYwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKia4czDw9ADBqufjWd1uDEMfX/wcjgWwOqy /ayXtHGrKNlw3HckTMXo2NbsEV7GNbF25J9AJn2B05wv+dhQKs0VJjoxZLt3uNLk mMx7YP0pZrhLEtGbkCjwued3khR+7FM1O1dxvTqoxc3AdYI2heAjSdqu/zbmfBwK gbeRlCpjHG4EpJAoY6pVZWIAha7lKFyY+j0Wnup0i8/S8alUKv65kdqCEiiFkuN+ 8Ctz2/lif2/eVZqrBqectYVrilCgO1i7SRudpCsGYJxp1FTj9T/wu8QKKSMgnDQ4 IZtIq5ECt+riEvYjZg6KrpPPL6CP3lkO25ftvZoXk9b/V71ShBw= -----END CERTIFICATE-----Generated at Sun Apr 27 06:00:35 2025 by rpki-client