$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: iIiKxUS2TmeaKv+y+9DsKUK4qHl+QyRE9DaPPtznoC4= Subject key identifier: EE:B2:B1:08:A8:A4:5B:7C:3A:4E:39:71:D7:39:FF:54:B8:67:A3:FE Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 0CCFCAE82DD5639AEED4B98B77A4C84B3F43FFE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: B7 Signing time: Wed 30 Apr 2025 12:30:37 +0000 Manifest this update: Wed 30 Apr 2025 12:25:37 +0000 Manifest next update: Sat 03 May 2025 13:50:37 +0000 Files and hashes: 1: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: xF/JjEmgzvJzI8JDNasdfbDYsR5jUiDGpAlVkt0YEQI=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 2lAjycdxeSaqDarXvJpjbjwFWksBTkypcj159AzhKmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cf:ca:e8:2d:d5:63:9a:ee:d4:b9:8b:77:a4:c8:4b:3f:43:ff:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Apr 30 12:25:37 2025 GMT Not After : May 3 13:50:37 2025 GMT Subject: CN=EEB2B108A8A45B7C3A4E3971D739FF54B867A3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:53:64:5f:a1:80:50:3b:8f:72:ca:50:71: db:cf:c5:41:1d:6c:8c:b9:aa:a5:c7:a6:c9:ca:78: 3e:ab:ba:5a:b4:27:cd:5a:97:93:0b:c0:ba:2f:44: 46:c4:df:37:f9:92:28:d8:81:f3:54:89:9b:e8:88: 9b:be:51:03:fe:35:a0:54:61:c2:6b:84:4e:9c:15: c2:7e:24:55:b5:4f:10:61:50:5c:51:42:c1:10:78: 4e:ea:d6:e8:18:a8:f9:44:3c:ad:b1:ac:5d:3a:60: 75:20:03:d0:3a:39:5a:cb:a2:20:76:20:5e:c5:1f: 91:2b:9c:77:02:b0:23:5c:a1:d5:2a:96:1b:d4:09: 5e:40:6a:da:0a:12:a3:ef:66:71:5d:0a:21:5d:4b: da:5e:26:b7:03:40:77:36:4e:f3:f3:bf:d6:73:ce: ce:4d:c9:cb:e7:1b:c5:d6:9e:89:90:61:d5:71:ce: e1:31:3a:53:8b:01:98:c5:dc:6a:38:a2:77:d3:8f: dd:27:0b:ca:17:af:3e:85:ea:9e:dc:b4:7c:cc:c7: 18:dd:37:38:cc:2e:6f:4b:a9:a6:ce:fd:a3:93:55: 96:0f:4f:a2:47:62:53:05:23:10:e2:5e:cf:f4:ba: d9:5f:42:4b:bf:25:6e:75:9e:fb:11:b4:22:7e:4f: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B2:B1:08:A8:A4:5B:7C:3A:4E:39:71:D7:39:FF:54:B8:67:A3:FE X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c8:a0:87:ff:76:12:06:26:fd:9a:f8:24:e7:ea:01:cb:69: b5:3e:56:da:0b:ab:8c:1b:70:86:93:3c:33:8e:e5:2a:80:10: d7:b1:0a:de:84:e1:a5:75:4f:00:46:69:9c:0e:dd:3e:31:2f: 24:84:3a:79:db:f0:85:a5:1c:35:70:62:92:6b:f7:98:fc:8d: 62:15:83:17:d6:40:c7:fb:42:22:4f:dd:da:f7:1b:de:05:70: d3:78:ed:c7:66:70:35:59:81:8e:3a:9e:4f:9a:17:c6:58:23: d4:53:78:3b:67:5b:cf:2a:55:62:48:ae:ab:73:3d:e1:54:cd: 1e:4a:7f:64:e7:9a:e3:60:8b:f0:2c:82:a4:fd:1c:4f:bc:70: e7:b8:80:46:c8:71:da:37:9c:55:26:69:df:9b:be:20:85:7f: c4:73:c0:22:12:86:f7:dc:30:94:f9:a1:8b:7c:a3:a4:b9:39: 6e:3e:15:81:7e:0f:5d:b5:b4:e4:97:1e:73:01:cf:4a:50:fa: 69:9a:02:3f:22:3b:ea:1d:a0:f2:de:48:42:41:8b:f5:0c:2e: 92:8b:17:6e:53:0d:1a:d1:3a:5e:08:4e:9b:92:b8:da:c6:8c: 66:96:42:24:62:fc:04:04:25:c0:9c:62:57:8a:f9:55:c5:23: 88:d1:88:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDM/K6C3VY5ru1LmLd6TISz9D/+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNTA0MzAxMjI1MzdaFw0yNTA1MDMxMzUwMzdaMDMxMTAvBgNV BAMTKEVFQjJCMTA4QThBNDVCN0MzQTRFMzk3MUQ3MzlGRjU0Qjg2N0EzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJflNkX6GAUDuPcspQcdvPxUEd bIy5qqXHpsnKeD6rulq0J81al5MLwLovREbE3zf5kijYgfNUiZvoiJu+UQP+NaBU YcJrhE6cFcJ+JFW1TxBhUFxRQsEQeE7q1ugYqPlEPK2xrF06YHUgA9A6OVrLoiB2 IF7FH5ErnHcCsCNcodUqlhvUCV5AatoKEqPvZnFdCiFdS9peJrcDQHc2TvPzv9Zz zs5NycvnG8XWnomQYdVxzuExOlOLAZjF3Go4onfTj90nC8oXrz6F6p7ctHzMxxjd NzjMLm9LqabO/aOTVZYPT6JHYlMFIxDiXs/0utlfQku/JW51nvsRtCJ+T+ulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7rKxCKikW3w6Tjlx1zn/VLhno/4wHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrIoIf/dhIGJv2a+CTn6gHLabU+VtoLq4wb cIaTPDOO5SqAENexCt6E4aV1TwBGaZwO3T4xLySEOnnb8IWlHDVwYpJr95j8jWIV gxfWQMf7QiJP3dr3G94FcNN47cdmcDVZgY46nk+aF8ZYI9RTeDtnW88qVWJIrqtz PeFUzR5Kf2TnmuNgi/AsgqT9HE+8cOe4gEbIcdo3nFUmad+bviCFf8RzwCIShvfc MJT5oYt8o6S5OW4+FYF+D121tOSXHnMBz0pQ+mmaAj8iO+odoPLeSEJBi/UMLpKL F25TDRrROl4ITpuSuNrGjGaWQiRi/AQEJcCcYleK+VXFI4jRiOM= -----END CERTIFICATE-----Generated at Fri May 2 12:07:05 2025 by rpki-client