$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft File: 1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json) Hash identifier: pA28/M6BYxEW/sEqjZXPkq6ZLhDWe3KxQRg+y6sRvbM= Subject key identifier: 7C:77:93:BC:6E:1D:3C:56:BE:6B:6E:6C:5A:3A:A5:E5:E2:7C:6E:67 Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C Certificate serial: 10B1A1BFBD012065D0829ECBB7139D9E6C10E52C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft Manifest number: A1 Signing time: Sun 15 Jun 2025 02:42:01 +0000 Manifest this update: Sun 15 Jun 2025 02:37:01 +0000 Manifest next update: Wed 18 Jun 2025 04:33:01 +0000 Files and hashes: 1: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: hfp0R3ELBQf5z/8Cte4K8Vl+BAiPG2EB5Pp1Bo96E+c=) 2: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: MFpVDaTwIi0LqMqu36mulrlwapY0CQa9Qyp9DMkqE7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b1:a1:bf:bd:01:20:65:d0:82:9e:cb:b7:13:9d:9e:6c:10:e5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C Validity Not Before: Jun 15 02:37:01 2025 GMT Not After : Jun 18 04:33:01 2025 GMT Subject: CN=7C7793BC6E1D3C56BE6B6E6C5A3AA5E5E27C6E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:1a:be:6b:1d:5c:35:eb:62:c8:ec:b9:4c: d6:7f:c6:fd:07:93:fb:4a:2f:68:ad:da:09:d9:ac: d2:47:50:7b:26:d6:81:69:17:39:fd:fe:61:02:84: 83:c6:28:b8:e9:05:90:69:9e:ae:06:67:2a:79:12: fe:f0:ae:a5:96:01:31:66:33:14:08:05:62:59:f5: fa:d8:a2:a7:63:2c:47:ef:25:fc:ee:24:0b:1c:82: 0e:3b:f2:a8:03:8c:aa:bf:ab:9a:ad:58:0c:5e:1c: 26:94:31:19:a9:18:d3:d2:13:48:7a:4f:6b:d4:88: 5f:67:ce:06:f7:e0:32:7f:3e:e4:17:d8:50:9d:4b: 9b:ea:49:f5:17:40:ea:b4:f9:d5:7d:5e:8a:3b:d0: d9:2c:0d:57:98:ef:a4:30:72:90:d2:72:74:6f:1e: 9b:6d:23:f3:da:4c:1d:d4:00:a4:10:f6:de:04:c3: 4c:1f:e4:24:37:96:1f:2b:2c:66:26:30:09:72:0a: 44:57:70:99:32:d0:56:82:4a:8c:6c:9a:11:57:54: 08:63:20:c5:d8:8f:52:6b:86:bd:2a:aa:87:9e:7c: 02:93:bc:17:62:4a:8b:ac:3b:59:d3:29:8f:ff:b8: 32:58:43:c8:d5:30:10:f1:78:4d:21:d0:f6:a8:ec: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:93:BC:6E:1D:3C:56:BE:6B:6E:6C:5A:3A:A5:E5:E2:7C:6E:67 X509v3 Authority Key Identifier: keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:26:e3:2d:ff:4a:ce:4c:5c:16:38:5c:2b:12:9e:67:4c:4b: 83:0c:b8:6a:9d:59:8e:d6:93:b8:3c:33:b8:a4:bd:d0:6a:7f: 10:39:16:70:ac:81:c1:31:ea:8c:01:f2:16:2f:e0:64:11:1b: 39:e5:63:76:20:a5:69:8b:01:fd:3e:6e:35:33:d8:15:62:79: c2:8b:3f:d7:3c:59:11:16:09:cf:e1:bc:df:0d:24:09:d7:30: 99:8a:0c:f0:ec:07:0b:c9:63:7f:a4:35:c3:35:32:a8:40:c5: 80:e7:82:22:eb:e2:d3:d6:4d:81:ef:92:1c:36:20:40:7d:6d: b7:f6:7d:29:e7:f7:6c:63:49:19:2d:4a:62:1a:87:d2:6a:67: 8d:18:16:0a:4b:4e:03:88:03:ef:ce:7e:9e:f3:e0:e9:ff:fb: 1d:e8:fc:b6:3c:80:a4:1e:cb:8a:f7:bf:30:bc:17:88:2d:5d: cf:a4:8b:3c:08:22:4d:b8:d2:f4:d3:d5:1c:bc:32:10:8e:51: 80:60:7f:4e:da:a9:89:0e:62:df:c7:14:06:c8:99:fa:44:7e: 04:5c:dd:03:25:93:e5:c2:fd:07:a2:a0:b6:dc:21:c1:a9:30: 63:78:fa:1e:f0:35:f5:eb:46:d4:a2:47:7e:63:97:ed:64:b7: 45:df:7d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELGhv70BIGXQgp7LtxOdnmwQ5SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4 NUUzNzI0QzAeFw0yNTA2MTUwMjM3MDFaFw0yNTA2MTgwNDMzMDFaMDMxMTAvBgNV BAMTKDdDNzc5M0JDNkUxRDNDNTZCRTZCNkU2QzVBM0FBNUU1RTI3QzZFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQBq+ax1cNetiyOy5TNZ/xv0H k/tKL2it2gnZrNJHUHsm1oFpFzn9/mEChIPGKLjpBZBpnq4GZyp5Ev7wrqWWATFm MxQIBWJZ9frYoqdjLEfvJfzuJAscgg478qgDjKq/q5qtWAxeHCaUMRmpGNPSE0h6 T2vUiF9nzgb34DJ/PuQX2FCdS5vqSfUXQOq0+dV9Xoo70NksDVeY76QwcpDScnRv HpttI/PaTB3UAKQQ9t4Ew0wf5CQ3lh8rLGYmMAlyCkRXcJky0FaCSoxsmhFXVAhj IMXYj1Jrhr0qqoeefAKTvBdiSousO1nTKY//uDJYQ8jVMBDxeE0h0Pao7OW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHeTvG4dPFa+a25sWjql5eJ8bmcwHwYDVR0j BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2 OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz NzI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzAvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2 RDc4NUUzNzI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwm4y3/Ss5MXBY4XCsSnmdMS4MMuGqdWY7W k7g8M7ikvdBqfxA5FnCsgcEx6owB8hYv4GQRGznlY3YgpWmLAf0+bjUz2BViecKL P9c8WREWCc/hvN8NJAnXMJmKDPDsBwvJY3+kNcM1MqhAxYDngiLr4tPWTYHvkhw2 IEB9bbf2fSnn92xjSRktSmIah9JqZ40YFgpLTgOIA+/Ofp7z4On/+x3o/LY8gKQe y4r3vzC8F4gtXc+kizwIIk240vTT1Ry8MhCOUYBgf07aqYkOYt/HFAbImfpEfgRc 3QMlk+XC/QeioLbcIcGpMGN4+h7wNfXrRtSiR35jl+1kt0XffaU= -----END CERTIFICATE-----Generated at Mon Jun 16 04:20:19 2025 by rpki-client