$ rpki-client -vvf repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft File: 1D80B161A8871962133619E73EBB98762953ABF1.mft (raw, json) Hash identifier: 5qOW+jibyVTbuYdyzUTRV0vCKa6bG/HzVYdGpsnkZe0= Subject key identifier: 87:75:52:B1:93:2F:EF:36:88:DC:EF:19:CB:D1:51:49:65:BD:A2:E4 Authority key identifier: 1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 Certificate issuer: /CN=1D80B161A8871962133619E73EBB98762953ABF1 Certificate serial: 26B5F883058545A9903741CBF83CEF84648CDC58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft Manifest number: 0171 Signing time: Wed 30 Apr 2025 20:02:06 +0000 Manifest this update: Wed 30 Apr 2025 19:57:06 +0000 Manifest next update: Sat 03 May 2025 20:20:06 +0000 Files and hashes: 1: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: JHaaXWcIh7S1M0eqUwvmLXMc38/THWMZ+gJon7aPrNg=) 2: 1D80B161A8871962133619E73EBB98762953ABF1.crl (hash: W8OV4kvEIIyIj+FsTAYYHzklCB0zyuLyvxmk2ZSKhCE=) 3: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: ovrs8jnUkNf+XIsuUoS9OXOAOBVBgJNl9ABSwFMQZq0=) 4: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 2ij1jqIgyRl9fMj7GA6iQ4RysnWHFWKfEhR4n6OxCCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 20:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b5:f8:83:05:85:45:a9:90:37:41:cb:f8:3c:ef:84:64:8c:dc:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D80B161A8871962133619E73EBB98762953ABF1 Validity Not Before: Apr 30 19:57:06 2025 GMT Not After : May 3 20:20:06 2025 GMT Subject: CN=877552B1932FEF3688DCEF19CBD1514965BDA2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:de:49:0c:ca:a3:db:bb:b6:d0:1b:74:af: 66:00:bd:47:50:ed:fb:f4:14:4b:f9:91:fa:61:ad: cf:f9:01:b2:24:3a:a6:59:37:39:93:36:80:26:73: 5b:c0:3d:db:c4:76:e0:ce:6f:d0:8a:29:88:1e:fc: 4d:61:ec:17:fe:66:c5:52:15:9a:28:7d:61:cb:48: b9:35:f7:65:d2:05:da:d8:1d:88:7a:c5:ca:6e:5e: 94:f6:2f:d1:04:bb:30:22:6e:ab:3e:8a:ab:ec:f4: af:10:db:12:90:1c:7b:95:e2:5f:4c:bc:d5:20:d7: 99:16:f6:7e:7d:69:d7:fb:1a:f0:48:2e:98:4f:d4: 5f:25:98:53:b9:7f:58:ff:cb:1f:74:c5:ff:6d:dd: 9a:d6:67:9b:25:03:54:85:b7:af:ee:5c:8e:af:c8: 01:fb:e3:9a:fe:10:a7:0a:11:11:68:e9:f7:51:d6: 71:44:85:83:30:a6:ca:3e:46:a2:04:42:aa:c2:f5: 1b:be:81:6a:5a:5f:b2:8a:0d:ca:22:aa:ac:28:18: 27:83:e1:66:2d:5b:e5:a5:cc:0d:23:6b:c1:82:b1: b0:e0:c7:8b:da:d1:a7:64:4f:e6:70:ef:a7:9e:3f: 49:3a:f4:fc:88:8a:52:a5:ca:d1:4d:88:e8:13:d1: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:75:52:B1:93:2F:EF:36:88:DC:EF:19:CB:D1:51:49:65:BD:A2:E4 X509v3 Authority Key Identifier: keyid:1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:41:93:8a:3c:5e:6a:9b:94:be:5a:29:0f:aa:1f:3a:e2:70: 2a:93:a8:7d:a9:d3:cd:6b:b5:b0:0d:01:c3:2a:b7:02:99:d3: fe:45:de:d1:85:90:c5:d3:e2:e4:ca:b8:ac:77:15:7c:4e:b6: f4:e3:a0:fa:e2:f8:b3:16:63:14:9b:7a:9c:4c:0a:d9:9a:2c: 0f:ce:f3:0f:36:27:6d:c5:0a:5d:97:ed:f1:ba:03:f5:2b:a8: eb:e0:1c:07:64:94:88:90:19:7e:87:f8:c7:57:04:fa:3c:35: 75:e6:5f:e2:9d:3c:02:47:b7:03:89:4f:1f:9c:82:d9:6b:c6: 5d:1a:95:22:9b:7d:ea:b9:4c:ea:3e:fb:6f:e2:b7:35:be:8e: 83:61:aa:c1:8d:08:a9:f4:63:aa:7e:e7:31:69:d0:2b:bb:bc: dd:79:bf:63:5a:43:60:15:53:4c:b2:a1:0a:e0:0e:43:18:ea: 0e:b4:c7:91:8d:39:0b:7d:72:24:1b:5d:67:a1:4d:9f:d0:7a: 93:51:d3:ae:cb:1f:37:b8:c6:be:f1:18:1b:b4:32:c0:a3:a0: b3:31:d2:7e:8c:78:a1:92:d9:4f:39:d3:06:2b:11:29:45:51: d0:de:5e:5e:a7:b1:5a:66:b1:45:d1:0c:75:f8:3d:fa:0c:9f: 0c:f3:f5:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrX4gwWFRamQN0HL+DzvhGSM3FgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYy OTUzQUJGMTAeFw0yNTA0MzAxOTU3MDZaFw0yNTA1MDMyMDIwMDZaMDMxMTAvBgNV BAMTKDg3NzU1MkIxOTMyRkVGMzY4OERDRUYxOUNCRDE1MTQ5NjVCREEyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwN5JDMqj27u20Bt0r2YAvUdQ 7fv0FEv5kfphrc/5AbIkOqZZNzmTNoAmc1vAPdvEduDOb9CKKYge/E1h7Bf+ZsVS FZoofWHLSLk192XSBdrYHYh6xcpuXpT2L9EEuzAibqs+iqvs9K8Q2xKQHHuV4l9M vNUg15kW9n59adf7GvBILphP1F8lmFO5f1j/yx90xf9t3ZrWZ5slA1SFt6/uXI6v yAH745r+EKcKERFo6fdR1nFEhYMwpso+RqIEQqrC9Ru+gWpaX7KKDcoiqqwoGCeD 4WYtW+WlzA0ja8GCsbDgx4va0adkT+Zw76eeP0k69PyIilKlytFNiOgT0cIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3VSsZMv7zaI3O8Zy9FRSWW9ouQwHwYDVR0j BBgwFoAUHYCxYaiHGWITNhnnPruYdilTq/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTUyMTA5OS0zYmExLTRmOTEtYjViYi03MTJjM2JiYTYzMzcvMC8xRDgwQjE2MUE4 ODcxOTYyMTMzNjE5RTczRUJCOTg3NjI5NTNBQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYyOTUz QUJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1 YmItNzEyYzNiYmE2MzM3LzAvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4 NzYyOTUzQUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5Bk4o8XmqblL5aKQ+qHzricCqTqH2p081r tbANAcMqtwKZ0/5F3tGFkMXT4uTKuKx3FXxOtvTjoPri+LMWYxSbepxMCtmaLA/O 8w82J23FCl2X7fG6A/UrqOvgHAdklIiQGX6H+MdXBPo8NXXmX+KdPAJHtwOJTx+c gtlrxl0alSKbfeq5TOo++2/itzW+joNhqsGNCKn0Y6p+5zFp0Cu7vN15v2NaQ2AV U0yyoQrgDkMY6g60x5GNOQt9ciQbXWehTZ/QepNR067LHze4xr7xGBu0MsCjoLMx 0n6MeKGS2U850wYrESlFUdDeXl6nsVpmsUXRDHX4PfoMnwzz9d0= -----END CERTIFICATE-----Generated at Wed Apr 30 22:39:43 2025 by rpki-client