$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: MB9HZMkgqNKidoD0WmrkCm6G9wOqxWzo6fsklYwnHlY= Subject key identifier: F8:36:DB:00:D0:B3:B1:50:42:10:71:29:6A:56:9C:EA:3E:1A:E6:22 Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 0D6966F9344CFD959F828AF0FA2AF19F36049233 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 0240 Signing time: Mon 16 Jun 2025 09:11:59 +0000 Manifest this update: Mon 16 Jun 2025 09:06:59 +0000 Manifest next update: Thu 19 Jun 2025 13:14:59 +0000 Files and hashes: 1: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: AdXJnxLtiF7/6gPNpXIudmd8X55g39Ok/GUULE+ZF/0=) 2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 30G0irckoWueHdL2XRvtGhNfRlze7pvxH51N/l3bYKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:69:66:f9:34:4c:fd:95:9f:82:8a:f0:fa:2a:f1:9f:36:04:92:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Jun 16 09:06:59 2025 GMT Not After : Jun 19 13:14:59 2025 GMT Subject: CN=F836DB00D0B3B150421071296A569CEA3E1AE622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:d8:f3:cb:ef:b7:d5:36:84:d7:8e:0c:f0: a9:8f:3d:17:ec:df:6d:4a:9c:de:b0:22:e0:1f:cc: 7d:78:fc:96:f2:42:d5:65:cd:99:fa:7b:5e:e2:d5: 24:77:62:19:de:d8:28:45:95:04:a1:be:bd:a0:cc: 30:4f:0d:27:89:27:29:ee:dd:12:36:6d:51:c0:6c: 0a:eb:2c:93:70:a2:b0:f7:07:d6:09:8d:a7:f9:c1: 3c:29:60:c0:3a:29:3d:84:5b:d9:ab:a3:ff:c7:e8: f4:1b:1d:ef:f2:b8:e5:86:5b:16:72:51:53:41:0b: 7a:21:84:da:a3:65:56:00:bd:e0:ee:1e:45:ca:b3: f5:b6:d2:db:49:9e:a2:73:25:0b:c0:91:07:5e:07: c6:07:cd:c7:10:96:4f:96:fc:01:1c:5e:f4:31:7b: cd:18:37:70:2a:4f:48:87:d8:36:fb:d6:e0:1a:4a: 2a:ef:73:0e:da:4b:e3:c0:e5:cd:08:ec:07:e0:28: 1a:5b:9c:4b:3c:6a:1d:97:cd:6f:7c:cf:a9:2e:5b: 10:ae:99:43:7f:a1:9f:66:a8:67:eb:fb:3c:dd:7b: 52:c5:35:b4:a9:28:f7:36:2f:a3:c0:92:45:62:50: 77:8e:58:4e:29:34:e5:62:b0:7c:27:98:1b:f2:83: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:36:DB:00:D0:B3:B1:50:42:10:71:29:6A:56:9C:EA:3E:1A:E6:22 X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b0:68:df:f1:95:24:18:07:ac:f3:3e:f7:f4:c7:d0:bc:c3: 77:21:96:d4:c4:35:cb:6e:00:27:43:00:0f:6a:72:a9:c8:ea: d1:d7:d6:2c:bb:1e:82:4f:8c:03:b6:97:a2:fe:67:e6:4c:b5: 60:16:a9:f9:b5:d5:e5:3c:af:87:58:18:cd:23:2d:5a:09:17: 2a:e1:e8:84:a6:be:6d:1f:7f:63:a3:1a:03:46:70:5b:2d:bb: 7f:75:4c:00:c2:4c:fc:04:b4:99:c5:3e:77:7b:48:cb:69:c8: 0a:24:16:56:c8:0f:00:29:dd:54:80:16:ff:23:0d:80:ff:35: ec:6e:ab:7a:6d:6d:24:21:a5:b6:a5:2d:aa:ac:9b:4c:96:ef: 96:ef:54:fa:a3:4f:c4:e7:ff:e2:d6:a0:6d:c3:16:1c:55:cb: b2:3f:cc:60:eb:48:bc:4d:5b:dd:f6:b1:8a:0f:96:7a:a5:fc: 11:65:cf:3e:1c:9d:d0:d1:3e:53:d8:71:a3:d2:b1:ea:56:6e: 4d:01:8d:ef:74:01:22:e6:2c:b8:46:66:45:f7:f8:8c:93:28: b0:de:ce:aa:16:31:53:99:e7:33:29:13:4b:9b:13:8a:e6:0c: a0:51:17:1b:50:5b:f6:2e:ba:a2:cb:91:f1:6a:8f:f9:af:c1: d0:3f:23:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWlm+TRM/ZWfgorw+irxnzYEkjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTA2MTYwOTA2NTlaFw0yNTA2MTkxMzE0NTlaMDMxMTAvBgNV BAMTKEY4MzZEQjAwRDBCM0IxNTA0MjEwNzEyOTZBNTY5Q0VBM0UxQUU2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zNjzy++31TaE144M8KmPPRfs 321KnN6wIuAfzH14/JbyQtVlzZn6e17i1SR3Yhne2ChFlQShvr2gzDBPDSeJJynu 3RI2bVHAbArrLJNworD3B9YJjaf5wTwpYMA6KT2EW9mro//H6PQbHe/yuOWGWxZy UVNBC3ohhNqjZVYAveDuHkXKs/W20ttJnqJzJQvAkQdeB8YHzccQlk+W/AEcXvQx e80YN3AqT0iH2Db71uAaSirvcw7aS+PA5c0I7AfgKBpbnEs8ah2XzW98z6kuWxCu mUN/oZ9mqGfr+zzde1LFNbSpKPc2L6PAkkViUHeOWE4pNOVisHwnmBvyg6G1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DbbANCzsVBCEHEpalac6j4a5iIwHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGwaN/xlSQYB6zzPvf0x9C8w3chltTENctu ACdDAA9qcqnI6tHX1iy7HoJPjAO2l6L+Z+ZMtWAWqfm11eU8r4dYGM0jLVoJFyrh 6ISmvm0ff2OjGgNGcFstu391TADCTPwEtJnFPnd7SMtpyAokFlbIDwAp3VSAFv8j DYD/Nexuq3ptbSQhpbalLaqsm0yW75bvVPqjT8Tn/+LWoG3DFhxVy7I/zGDrSLxN W932sYoPlnql/BFlzz4cndDRPlPYcaPSsepWbk0Bje90ASLmLLhGZkX3+IyTKLDe zqoWMVOZ5zMpE0ubE4rmDKBRFxtQW/YuuqLLkfFqj/mvwdA/I1g= -----END CERTIFICATE-----Generated at Mon Jun 16 15:41:53 2025 by rpki-client