$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: lAOwjTwQs/jYuOPHkYGMwcyBj7FrMgEbFJR8iwGnBKY= Subject key identifier: 43:E4:A9:19:A7:4C:12:B1:57:DE:1E:00:A8:9A:CA:12:5A:F9:0E:BB Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 43317D66D5562F5B7071313E3CF4639F9DDDEF63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 01BE Signing time: Mon 16 Jun 2025 10:30:52 +0000 Manifest this update: Mon 16 Jun 2025 10:25:52 +0000 Manifest next update: Thu 19 Jun 2025 22:26:52 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: 5drLDE3hXRgz1UUxF/qZh+s/keLXYCRvqXQkuLFTAhA=) 2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: iZ0h99YmBRxpauUGpIRu3ndCN2XQziLsVEGdjeAdp2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:31:7d:66:d5:56:2f:5b:70:71:31:3e:3c:f4:63:9f:9d:dd:ef:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Jun 16 10:25:52 2025 GMT Not After : Jun 19 22:26:52 2025 GMT Subject: CN=43E4A919A74C12B157DE1E00A89ACA125AF90EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:bb:51:16:1a:d4:8b:26:4a:39:58:fe:ea: 73:58:d5:89:15:85:8b:a1:79:67:d9:4b:46:96:8a: 50:12:b1:a6:3b:91:62:73:af:57:9b:4c:ca:9b:08: b0:05:dd:41:75:7d:d3:41:98:f4:64:d0:75:ac:31: 32:a9:e0:d0:76:ad:07:9a:5a:41:48:94:9a:d7:22: 6e:a0:05:b3:d2:c6:2b:2a:87:3d:4a:73:ce:9b:83: d2:24:12:2c:8f:c2:48:36:ab:a7:7a:a6:f4:a5:bf: 10:e8:c5:fd:2e:6c:85:d3:07:4d:c5:8f:58:51:73: 3b:32:26:6a:2a:2e:c1:93:1c:b9:f1:24:44:46:0e: d4:cc:a1:ee:b3:4b:29:5a:ad:1e:14:37:2c:0d:0e: 91:b7:21:ef:5d:3e:8b:f0:f1:47:0e:fd:0f:c7:56: 87:04:78:df:bd:37:86:3a:9d:c3:ef:47:48:81:1f: 2a:12:46:b2:0c:0a:b2:60:f2:f3:b5:85:c3:0f:fa: 4f:40:5d:04:af:7c:f8:e8:74:ca:07:fb:9e:8c:d9: e3:30:c1:4e:14:7e:78:24:07:77:42:a8:0b:a0:0d: b7:26:fa:7e:71:06:f9:24:39:71:f7:4a:c4:1a:75: 9c:17:18:9a:79:74:5c:c2:33:82:32:50:51:5e:6c: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E4:A9:19:A7:4C:12:B1:57:DE:1E:00:A8:9A:CA:12:5A:F9:0E:BB X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1e:df:e8:de:88:6d:65:bf:60:b8:e9:d1:89:9c:42:d5:1b: 71:53:62:0c:de:7b:92:18:c0:e4:01:fb:6c:aa:97:a3:b9:58: c2:a2:aa:07:ee:a5:e4:67:13:66:af:d5:f9:a5:76:a7:dc:b6: ef:78:b4:33:bb:1c:7d:5b:42:a0:62:ef:70:b0:68:29:31:07: bf:2d:38:9a:c8:81:47:13:f1:c9:40:b4:02:37:cb:dc:23:3b: d7:b1:99:ea:a5:b0:22:3d:9e:12:d6:f9:5f:b5:10:ff:68:82: f7:a0:6c:47:1a:d5:3c:14:fd:c2:36:82:51:90:95:63:98:76: 14:a0:99:06:7b:02:2a:13:cd:97:49:ff:b8:39:19:ae:dc:43: c5:a0:3f:a6:95:dc:47:cc:de:ac:8e:a7:37:ff:0e:21:46:86: f1:9c:41:36:2e:78:f9:21:56:e0:29:9e:79:2a:62:da:7d:e5: ce:71:29:25:48:12:d8:cc:0f:1d:5c:76:e7:8a:b0:66:80:59: 64:8a:92:9d:8d:39:0e:62:81:ce:8e:9d:d0:a8:3d:27:ce:49: fa:ec:41:06:b2:8e:88:99:67:f4:4a:55:13:5f:4a:b6:14:76: 22:59:46:f0:2f:09:0e:86:c8:3b:11:12:9a:cd:df:0b:dc:25: c3:cc:4e:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzF9ZtVWL1twcTE+PPRjn53d72MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTA2MTYxMDI1NTJaFw0yNTA2MTkyMjI2NTJaMDMxMTAvBgNV BAMTKDQzRTRBOTE5QTc0QzEyQjE1N0RFMUUwMEE4OUFDQTEyNUFGOTBFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MrtRFhrUiyZKOVj+6nNY1YkV hYuheWfZS0aWilASsaY7kWJzr1ebTMqbCLAF3UF1fdNBmPRk0HWsMTKp4NB2rQea WkFIlJrXIm6gBbPSxisqhz1Kc86bg9IkEiyPwkg2q6d6pvSlvxDoxf0ubIXTB03F j1hRczsyJmoqLsGTHLnxJERGDtTMoe6zSylarR4UNywNDpG3Ie9dPovw8UcO/Q/H VocEeN+9N4Y6ncPvR0iBHyoSRrIMCrJg8vO1hcMP+k9AXQSvfPjodMoH+56M2eMw wU4UfngkB3dCqAugDbcm+n5xBvkkOXH3SsQadZwXGJp5dFzCM4IyUFFebBrzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+SpGadMErFX3h4AqJrKElr5DrswHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFke3+jeiG1lv2C46dGJnELVG3FTYgzee5IY wOQB+2yql6O5WMKiqgfupeRnE2av1fmldqfctu94tDO7HH1bQqBi73CwaCkxB78t OJrIgUcT8clAtAI3y9wjO9exmeqlsCI9nhLW+V+1EP9ogvegbEca1TwU/cI2glGQ lWOYdhSgmQZ7AioTzZdJ/7g5Ga7cQ8WgP6aV3EfM3qyOpzf/DiFGhvGcQTYuePkh VuApnnkqYtp95c5xKSVIEtjMDx1cdueKsGaAWWSKkp2NOQ5igc6OndCoPSfOSfrs QQayjoiZZ/RKVRNfSrYUdiJZRvAvCQ6GyDsREprN3wvcJcPMTlk= -----END CERTIFICATE-----Generated at Tue Jun 17 08:09:04 2025 by rpki-client