$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: QSMxR2mJyd+68/Mqdy/OwGL8UXU1HL7CAvCzJuAZhpc= Subject key identifier: B2:26:DD:59:D7:04:9B:4A:B2:23:C4:52:C5:AB:C6:E5:0C:CE:3B:0D Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 03DEF123ECC7D4CA0B23F837558E5B3EE568AF9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 01D7 Signing time: Tue 29 Apr 2025 14:02:23 +0000 Manifest this update: Tue 29 Apr 2025 13:57:23 +0000 Manifest next update: Fri 02 May 2025 20:56:23 +0000 Files and hashes: 1: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: WR6fk2zMlSyzXiwxrLMIJ5jfluWUF9rwptzkPvHMhLo=) 2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) 3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 4: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 20:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:de:f1:23:ec:c7:d4:ca:0b:23:f8:37:55:8e:5b:3e:e5:68:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Apr 29 13:57:23 2025 GMT Not After : May 2 20:56:23 2025 GMT Subject: CN=B226DD59D7049B4AB223C452C5ABC6E50CCE3B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:72:a5:39:cb:fd:35:da:e5:03:06:96:4a: 73:e1:83:9b:56:a5:f6:cc:24:3b:1e:65:92:27:ce: e9:3e:53:c1:6b:ad:bd:97:5e:36:30:85:77:ac:62: 01:01:86:24:5c:3d:ee:1e:04:ed:2a:cc:b6:c8:43: 16:aa:fa:99:4c:ea:24:6d:31:ce:13:2a:4c:98:73: de:26:0f:67:e3:2b:21:3e:af:ff:95:77:2c:73:b3: cf:df:c1:45:2b:6b:fb:47:45:e3:50:29:d1:78:30: 42:b0:4c:42:fd:74:08:46:1e:21:3c:88:0a:65:c6: 5b:e3:50:46:7a:5e:75:c1:f5:3a:c2:7f:ad:27:e5: 48:59:39:c1:2e:c9:1d:44:a0:c2:a6:98:00:42:16: f1:78:0f:4e:14:86:9c:55:46:a2:50:58:96:19:61: 56:04:67:49:58:b3:06:80:ee:39:0c:72:bd:3d:93: 3e:b5:c3:5c:41:7a:47:14:7a:a2:6f:66:d0:84:cb: 83:3f:e2:8c:41:75:92:01:e4:76:fd:44:d3:a8:ea: 02:26:71:d4:68:f1:60:65:3d:ed:69:37:61:b7:69: e8:fb:99:e8:9d:89:b2:c1:5a:64:fd:53:06:4c:5c: 90:d2:77:08:c1:bb:83:0f:d4:6e:b5:12:a7:cc:0c: 8d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:26:DD:59:D7:04:9B:4A:B2:23:C4:52:C5:AB:C6:E5:0C:CE:3B:0D X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:65:cb:cc:ab:00:1b:b9:7f:d9:d1:4e:ab:56:34:53:69:5a: 3a:2e:fc:bd:17:af:88:d8:ae:e5:22:d8:87:c1:02:12:80:f6: b7:77:d5:15:2b:f3:57:22:36:0d:16:3b:1d:65:73:78:a9:82: 29:48:18:8c:a1:a8:fd:fa:d1:61:08:3e:8c:93:16:c1:ac:2b: 46:26:2b:9a:ee:32:fa:54:fa:de:ef:05:86:8d:99:d0:64:98: fb:c8:16:8a:8c:bc:e3:a1:66:20:4d:9a:87:ef:ff:f1:ab:ba: 9e:9d:25:3e:48:7b:73:ff:f5:ef:c5:c2:59:b3:1b:58:b0:36: 32:e4:08:1f:37:a9:43:8f:e0:5e:a5:8f:5a:5f:cd:e2:92:40: 0d:6e:d4:b3:96:15:4d:55:9d:0a:af:59:39:41:6f:7b:44:d3: a5:dc:d6:51:39:89:12:23:64:3f:54:4d:92:43:e1:20:b3:8e: b0:9d:2d:75:89:24:81:86:64:c6:e0:f8:cb:4a:df:3f:53:d6: b6:67:82:b6:91:8f:f8:f0:18:f3:b9:ea:4e:27:f8:cf:b6:95: a1:f2:a4:7b:50:55:8c:c6:53:6f:51:90:88:ec:40:02:06:0a: 07:4b:4e:38:34:71:56:79:ce:1f:3b:31:d9:62:05:49:ae:f0: 0a:bf:df:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA97xI+zH1MoLI/g3VY5bPuVor5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTA0MjkxMzU3MjNaFw0yNTA1MDIyMDU2MjNaMDMxMTAvBgNV BAMTKEIyMjZERDU5RDcwNDlCNEFCMjIzQzQ1MkM1QUJDNkU1MENDRTNCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuf3KlOcv9NdrlAwaWSnPhg5tW pfbMJDseZZInzuk+U8Frrb2XXjYwhXesYgEBhiRcPe4eBO0qzLbIQxaq+plM6iRt Mc4TKkyYc94mD2fjKyE+r/+Vdyxzs8/fwUUra/tHReNQKdF4MEKwTEL9dAhGHiE8 iAplxlvjUEZ6XnXB9TrCf60n5UhZOcEuyR1EoMKmmABCFvF4D04UhpxVRqJQWJYZ YVYEZ0lYswaA7jkMcr09kz61w1xBekcUeqJvZtCEy4M/4oxBdZIB5Hb9RNOo6gIm cdRo8WBlPe1pN2G3aej7meidibLBWmT9UwZMXJDSdwjBu4MP1G61EqfMDI3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsibdWdcEm0qyI8RSxavG5QzOOw0wHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdly8yrABu5f9nRTqtWNFNpWjou/L0Xr4jY ruUi2IfBAhKA9rd31RUr81ciNg0WOx1lc3ipgilIGIyhqP360WEIPoyTFsGsK0Ym K5ruMvpU+t7vBYaNmdBkmPvIFoqMvOOhZiBNmofv//Grup6dJT5Ie3P/9e/Fwlmz G1iwNjLkCB83qUOP4F6lj1pfzeKSQA1u1LOWFU1VnQqvWTlBb3tE06Xc1lE5iRIj ZD9UTZJD4SCzjrCdLXWJJIGGZMbg+MtK3z9T1rZngraRj/jwGPO56k4n+M+2laHy pHtQVYzGU29RkIjsQAIGCgdLTjg0cVZ5zh87MdliBUmu8Aq/3yo= -----END CERTIFICATE-----Generated at Wed Apr 30 06:26:51 2025 by rpki-client