$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: HkseJF7OBKBLJLZKVgutLWQnpMS+srQU10mKS+pehaA= Subject key identifier: 13:50:12:D2:41:34:5F:20:43:DA:5A:5C:7C:71:AE:0B:7C:DA:1E:E6 Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 319FDF5B9A5BA974BCD7B34ECE233422FE0FA4D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: 4C Signing time: Tue 29 Apr 2025 09:01:10 +0000 Manifest this update: Tue 29 Apr 2025 08:56:10 +0000 Manifest next update: Fri 02 May 2025 09:42:10 +0000 Files and hashes: 1: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: UXO0EVGk79VKVpzVVu+4tgus2AIbsvGynIdxAjYw1NA=) 2: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: 5ohuFzP5V/cJORYz7pvycaMsDspOYVsDxAPUTRQEHz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 09:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9f:df:5b:9a:5b:a9:74:bc:d7:b3:4e:ce:23:34:22:fe:0f:a4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Apr 29 08:56:10 2025 GMT Not After : May 2 09:42:10 2025 GMT Subject: CN=135012D241345F2043DA5A5C7C71AE0B7CDA1EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:4c:1e:88:b3:2b:3b:78:51:15:16:4e:58: fb:a8:20:8f:09:20:cd:58:c0:2b:4a:71:f9:a5:a0: 48:77:d7:64:04:e1:5b:59:24:c6:73:17:44:69:0b: b1:1e:29:d7:a2:46:b2:30:f7:de:75:cb:98:64:b2: 13:06:b1:61:e7:12:2d:e5:2c:c7:3e:39:36:b1:c0: 07:14:05:94:2a:15:f3:cb:56:36:f9:7b:6d:4c:de: 30:87:5e:6b:88:6c:de:00:3b:1f:9d:11:75:62:f3: 46:bc:5f:cb:1c:03:e1:79:8b:91:bf:01:ab:0f:d9: 07:b5:09:2b:c8:5a:04:3f:a6:bf:55:8b:eb:73:12: c4:77:47:dc:7e:60:0d:51:39:d7:01:9c:57:59:1a: 59:b2:2e:ac:27:74:69:14:c9:35:54:b7:f2:ab:79: f3:73:67:14:a8:41:79:5b:7a:3c:39:b1:24:07:f6: 4a:1c:2f:ef:1f:2c:83:d7:56:98:60:d3:67:82:22: f7:64:24:c7:96:3d:d6:23:72:c4:e3:c7:59:79:87: d1:53:d6:10:47:80:24:1f:af:71:bc:62:08:4b:53: 08:07:83:33:7e:d3:c3:29:f1:46:b7:a8:3e:ac:0a: c9:73:88:68:46:22:0b:e2:0a:5d:e1:d7:5f:e3:5f: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:50:12:D2:41:34:5F:20:43:DA:5A:5C:7C:71:AE:0B:7C:DA:1E:E6 X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f6:dc:94:e9:a5:1a:a4:c0:7f:25:95:6a:d3:00:1a:c7:2d: 8d:5b:45:8b:74:f3:b1:20:71:38:57:56:21:93:c1:55:75:cf: 76:8b:79:a9:09:eb:8b:40:5f:f6:aa:97:ea:74:52:fc:2e:9a: 93:45:fe:87:1e:cb:85:cc:18:00:68:5d:68:e6:3a:c4:34:cf: a8:94:84:d1:97:e4:37:30:f4:9d:e7:c4:53:fb:f0:5c:d8:95: 0a:bb:5c:dd:bd:bf:3e:1d:07:d2:31:93:58:59:e6:d1:58:0a: 1a:19:cd:d2:ca:9d:54:cd:c9:8d:f5:5a:3a:8c:8a:d4:ac:f8: d7:dc:b6:d9:49:af:d2:da:e3:a8:36:8b:ba:f2:1b:02:62:6f: 9f:27:b8:0a:dd:61:f5:5e:63:df:25:5d:0f:21:db:7a:e4:70: 13:fc:d9:3e:47:4a:48:f7:c5:05:9f:da:6f:6a:80:c4:59:be: 7d:70:ad:34:0c:0d:de:ad:5f:0b:0f:26:ae:76:b0:e3:2b:aa: 78:51:cc:db:ab:4c:44:d1:f7:3e:49:e6:e8:d2:47:62:13:80: 5a:14:3c:23:c1:28:35:26:e6:ee:63:a9:59:98:3d:bc:b1:88: ff:2c:3d:3c:13:77:0b:dd:4a:43:f4:5a:19:1c:39:3e:5d:66: 2d:d1:00:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZ/fW5pbqXS817NOziM0Iv4PpNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNTA0MjkwODU2MTBaFw0yNTA1MDIwOTQyMTBaMDMxMTAvBgNV BAMTKDEzNTAxMkQyNDEzNDVGMjA0M0RBNUE1QzdDNzFBRTBCN0NEQTFFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVs0weiLMrO3hRFRZOWPuoII8J IM1YwCtKcfmloEh312QE4VtZJMZzF0RpC7EeKdeiRrIw9951y5hkshMGsWHnEi3l LMc+OTaxwAcUBZQqFfPLVjb5e21M3jCHXmuIbN4AOx+dEXVi80a8X8scA+F5i5G/ AasP2Qe1CSvIWgQ/pr9Vi+tzEsR3R9x+YA1ROdcBnFdZGlmyLqwndGkUyTVUt/Kr efNzZxSoQXlbejw5sSQH9kocL+8fLIPXVphg02eCIvdkJMeWPdYjcsTjx1l5h9FT 1hBHgCQfr3G8YghLUwgHgzN+08Mp8Ua3qD6sCslziGhGIgviCl3h11/jX64XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE1AS0kE0XyBD2lpcfHGuC3zaHuYwHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF723JTppRqkwH8llWrTABrHLY1bRYt087Eg cThXViGTwVV1z3aLeakJ64tAX/aql+p0UvwumpNF/ocey4XMGABoXWjmOsQ0z6iU hNGX5Dcw9J3nxFP78FzYlQq7XN29vz4dB9Ixk1hZ5tFYChoZzdLKnVTNyY31WjqM itSs+NfcttlJr9La46g2i7ryGwJib58nuArdYfVeY98lXQ8h23rkcBP82T5HSkj3 xQWf2m9qgMRZvn1wrTQMDd6tXwsPJq52sOMrqnhRzNurTETR9z5J5ujSR2ITgFoU PCPBKDUm5u5jqVmYPbyxiP8sPTwTdwvdSkP0WhkcOT5dZi3RAA8= -----END CERTIFICATE-----Generated at Wed Apr 30 07:36:26 2025 by rpki-client