$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: aAGIN8cGJ0y49EmGhQm0ZjnouROXKY00EAufBx7G8NE= Subject key identifier: A7:D9:23:D5:D1:6C:28:D5:19:4E:49:37:C6:2C:C4:62:02:F4:4F:A3 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 7A05DBC1567C4F9FDA45D47DA1150F41DA52E252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 58 Signing time: Mon 28 Apr 2025 09:52:16 +0000 Manifest this update: Mon 28 Apr 2025 09:47:16 +0000 Manifest next update: Thu 01 May 2025 16:04:16 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: AbV5AiJf6UDgHqrk2K6IJts2cRUBpdVfk2MBqYr6enw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:05:db:c1:56:7c:4f:9f:da:45:d4:7d:a1:15:0f:41:da:52:e2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Apr 28 09:47:16 2025 GMT Not After : May 1 16:04:16 2025 GMT Subject: CN=A7D923D5D16C28D5194E4937C62CC46202F44FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:0f:ff:8f:5a:4c:6a:e9:cb:76:e6:f6:49: 0c:42:45:10:8e:41:52:55:ee:37:33:91:80:02:4b: 69:50:9d:f3:55:a9:df:7d:d1:cb:ee:e1:f9:08:c5: 87:64:c2:10:8d:d9:5b:8b:d9:cc:b1:83:de:68:75: 37:82:70:08:de:44:b1:b6:fa:a0:ae:44:ff:37:22: d1:12:ed:5e:1c:71:36:1e:0b:41:1b:69:43:26:13: bd:93:10:24:17:87:8a:45:82:98:8c:3b:d7:af:53: 9a:05:69:45:ed:d4:5d:98:0a:10:d5:28:ee:d2:5b: 16:00:22:c9:41:f9:e9:29:62:69:75:df:72:85:40: 70:9f:39:25:c1:29:07:00:15:b3:8d:6e:7b:46:4b: 7d:ee:65:85:41:f7:83:50:2f:4d:0d:fe:fe:11:68: fa:0e:35:04:22:13:9b:a2:db:e5:48:36:dd:37:6f: 7a:86:4e:de:9d:b8:8a:aa:7a:81:d3:4f:f3:53:1e: ed:bb:98:6a:7e:90:40:83:5b:47:ac:53:77:3e:08: 1e:09:4a:17:6f:d7:ac:ca:d2:ac:be:29:85:03:a1: 81:b9:6e:c4:a1:2b:97:bb:d8:fd:ab:e4:c0:94:5b: 99:72:a1:15:df:d0:ba:28:fa:15:aa:5b:72:f7:82: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D9:23:D5:D1:6C:28:D5:19:4E:49:37:C6:2C:C4:62:02:F4:4F:A3 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f8:68:cd:d5:45:5f:b5:ae:5d:2d:61:e8:e2:a1:fc:75:f5: e9:20:6f:2d:bf:7d:c1:b3:05:d4:ca:ba:d4:29:f2:88:4c:4a: 08:bc:f3:df:95:66:06:73:96:d3:a8:cd:f9:91:1c:15:db:88: f2:e6:c3:02:7d:73:42:a9:13:62:d0:02:48:e9:91:ac:4c:bf: f1:b1:1f:30:f4:bb:e4:34:4b:2f:64:1b:7d:f8:40:87:ea:73: 3e:c3:e7:d7:01:42:7b:36:3c:18:27:9b:ee:6e:1a:e1:21:e8: 40:9e:40:b3:b3:4e:3d:60:f8:01:1d:24:d3:3c:c1:82:3c:d8: 2e:0e:da:ad:c2:27:ec:e0:09:4b:3f:1b:71:e5:bd:5a:be:b2: 78:e8:29:5c:43:2b:26:6b:6a:57:b3:15:22:4e:3b:2d:7f:07: 8b:0c:f1:8b:59:48:01:2b:c5:56:dd:b2:69:85:a1:6a:44:6f: e4:f5:25:5a:a3:a9:97:57:b4:03:fb:33:db:99:91:a6:59:d7: 19:03:3c:1a:4e:d3:e4:0f:aa:3e:2f:ab:b1:08:12:c1:92:35: f9:28:f9:44:17:ae:f4:d6:6d:05:c3:04:0a:95:35:a8:20:83: b3:ec:48:a2:1a:2b:a0:48:b4:f6:7c:58:95:03:db:b1:80:a7: c2:22:2f:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegXbwVZ8T5/aRdR9oRUPQdpS4lIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA0MjgwOTQ3MTZaFw0yNTA1MDExNjA0MTZaMDMxMTAvBgNV BAMTKEE3RDkyM0Q1RDE2QzI4RDUxOTRFNDkzN0M2MkNDNDYyMDJGNDRGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtig//j1pMaunLdub2SQxCRRCO QVJV7jczkYACS2lQnfNVqd990cvu4fkIxYdkwhCN2VuL2cyxg95odTeCcAjeRLG2 +qCuRP83ItES7V4ccTYeC0EbaUMmE72TECQXh4pFgpiMO9evU5oFaUXt1F2YChDV KO7SWxYAIslB+ekpYml133KFQHCfOSXBKQcAFbONbntGS33uZYVB94NQL00N/v4R aPoONQQiE5ui2+VINt03b3qGTt6duIqqeoHTT/NTHu27mGp+kECDW0esU3c+CB4J Shdv16zK0qy+KYUDoYG5bsShK5e72P2r5MCUW5lyoRXf0Loo+hWqW3L3gtinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9kj1dFsKNUZTkk3xizEYgL0T6MwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGP4aM3VRV+1rl0tYejiofx19ekgby2/fcGz BdTKutQp8ohMSgi889+VZgZzltOozfmRHBXbiPLmwwJ9c0KpE2LQAkjpkaxMv/Gx HzD0u+Q0Sy9kG334QIfqcz7D59cBQns2PBgnm+5uGuEh6ECeQLOzTj1g+AEdJNM8 wYI82C4O2q3CJ+zgCUs/G3HlvVq+snjoKVxDKyZralezFSJOOy1/B4sM8YtZSAEr xVbdsmmFoWpEb+T1JVqjqZdXtAP7M9uZkaZZ1xkDPBpO0+QPqj4vq7EIEsGSNfko +UQXrvTWbQXDBAqVNaggg7PsSKIaK6BItPZ8WJUD27GAp8IiL+M= -----END CERTIFICATE-----Generated at Wed Apr 30 00:57:22 2025 by rpki-client