$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: 4FKnl8zvht4KIwARQ8EbRjGUapSDZ/XtHRVVAAjOL6g= Subject key identifier: 3D:88:80:55:7D:E7:83:EA:E1:8D:F3:4E:9B:5B:05:DE:9C:BA:B9:27 Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 39CB2D191D75579409F9E7B52DE5A3759C355475 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 0200 Signing time: Thu 24 Apr 2025 07:41:38 +0000 Manifest this update: Thu 24 Apr 2025 07:36:38 +0000 Manifest next update: Sun 27 Apr 2025 16:37:38 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) 2: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) 3: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) 4: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: bRhjo0bG9X8r6AWo6q/29lNtgXTEdV5Pd2c0a/2ly3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cb:2d:19:1d:75:57:94:09:f9:e7:b5:2d:e5:a3:75:9c:35:54:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Apr 24 07:36:38 2025 GMT Not After : Apr 27 16:37:38 2025 GMT Subject: CN=3D8880557DE783EAE18DF34E9B5B05DE9CBAB927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:b3:52:83:5b:a5:34:36:a4:ea:db:6e:59: 8f:d6:b9:90:03:b0:21:72:19:12:16:6e:31:0c:ad: 24:40:e8:28:2c:98:21:25:30:b3:fc:4d:75:fc:54: dc:8d:e1:a8:26:64:1c:45:f8:68:31:58:91:9e:cc: 5f:3e:33:1c:52:f0:ee:ab:84:fe:2e:53:c7:e2:7f: 8f:40:32:e0:fd:3e:32:b1:8c:e7:f8:90:7e:56:80: 2a:e8:97:c4:48:59:1f:86:83:fa:1e:49:1f:d6:7d: f8:e2:61:d5:d4:51:73:49:78:1b:3b:0f:fa:b2:19: 48:6f:c3:22:1e:78:8c:1f:12:9b:69:7e:49:03:d8: 10:dc:1e:2e:d9:4f:14:ac:a9:a2:4b:63:15:d5:bf: c5:c5:50:35:4f:a0:a1:c0:f0:0f:30:5b:17:35:b0: 85:ba:37:a2:45:4c:66:8d:d7:17:80:ee:8f:1d:3f: 2e:fc:99:f6:ad:bb:3a:f0:67:42:ab:9a:0e:41:ab: 1e:9b:c0:e1:2a:22:6b:5a:07:63:f2:d2:cb:5c:12: 71:1c:35:75:af:30:df:75:62:dc:a4:74:1c:c7:ea: ef:4e:cd:75:45:4a:fa:a6:5b:30:39:86:28:a3:0f: c5:d7:74:d2:57:df:23:c5:56:0b:bd:6e:d4:75:5f: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:88:80:55:7D:E7:83:EA:E1:8D:F3:4E:9B:5B:05:DE:9C:BA:B9:27 X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5a:03:17:c8:42:4a:ce:df:99:99:23:59:3f:fd:fd:49:e4: 01:e0:6a:6f:38:37:38:22:49:9a:cc:78:7d:cb:0b:86:23:b9: 56:3a:44:1c:31:e1:2c:d8:e5:5d:29:5a:e4:e6:98:5c:61:00: 59:64:62:d0:6c:3b:7a:f4:d8:6e:90:d7:33:93:6c:20:e9:2d: d1:f2:20:13:81:ab:a2:23:88:2b:4f:a7:9e:7a:39:d6:7a:00: 65:69:03:1a:ad:46:cc:c1:27:a5:1c:78:3f:38:12:31:dd:3e: d3:a2:17:8a:83:6e:9d:e5:ed:46:63:6d:ca:59:1c:a8:b0:9e: 63:2e:66:7a:15:c3:d0:31:96:13:25:64:ef:f3:ab:18:e2:86: 90:c4:3a:b4:05:18:d1:84:6d:05:6e:b7:50:05:4e:34:13:49: 8b:60:a2:f2:e6:b9:f6:1c:e7:c5:3c:27:5a:0e:c5:b3:8f:92: d1:75:51:04:da:76:3c:73:82:75:58:bc:2b:18:e6:c7:4d:b3: 32:1f:54:c7:1c:e9:67:48:ad:0f:3c:92:82:e0:b0:f5:9b:99: fe:ae:93:f3:82:9b:f9:2c:e4:c1:b7:37:69:63:d4:85:34:82: f1:f5:02:0c:bd:a9:d6:cf:4d:94:52:9e:70:78:99:d7:28:85: d6:92:9e:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcstGR11V5QJ+ee1LeWjdZw1VHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTA0MjQwNzM2MzhaFw0yNTA0MjcxNjM3MzhaMDMxMTAvBgNV BAMTKDNEODg4MDU1N0RFNzgzRUFFMThERjM0RTlCNUIwNURFOUNCQUI5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX57NSg1ulNDak6ttuWY/WuZAD sCFyGRIWbjEMrSRA6CgsmCElMLP8TXX8VNyN4agmZBxF+GgxWJGezF8+MxxS8O6r hP4uU8fif49AMuD9PjKxjOf4kH5WgCrol8RIWR+Gg/oeSR/WffjiYdXUUXNJeBs7 D/qyGUhvwyIeeIwfEptpfkkD2BDcHi7ZTxSsqaJLYxXVv8XFUDVPoKHA8A8wWxc1 sIW6N6JFTGaN1xeA7o8dPy78mfatuzrwZ0Krmg5Bqx6bwOEqImtaB2Py0stcEnEc NXWvMN91YtykdBzH6u9OzXVFSvqmWzA5hiijD8XXdNJX3yPFVgu9btR1X+6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYiAVX3ng+rhjfNOm1sF3py6uScwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExaAxfIQkrO35mZI1k//f1J5AHgam84Nzgi SZrMeH3LC4YjuVY6RBwx4SzY5V0pWuTmmFxhAFlkYtBsO3r02G6Q1zOTbCDpLdHy IBOBq6IjiCtPp556OdZ6AGVpAxqtRszBJ6UceD84EjHdPtOiF4qDbp3l7UZjbcpZ HKiwnmMuZnoVw9AxlhMlZO/zqxjihpDEOrQFGNGEbQVut1AFTjQTSYtgovLmufYc 58U8J1oOxbOPktF1UQTadjxzgnVYvCsY5sdNszIfVMcc6WdIrQ88koLgsPWbmf6u k/OCm/ks5MG3N2lj1IU0gvH1Agy9qdbPTZRSnnB4mdcohdaSnqs= -----END CERTIFICATE-----Generated at Sat Apr 26 17:43:44 2025 by rpki-client