$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: S1iqhHJcAXIJaw8tLxUQTIWVoLwahUqewNERcdFRZu0= Subject key identifier: C3:43:E5:00:71:14:05:05:48:29:45:C3:1F:3E:0D:7E:FA:10:86:76 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 1CE20ED54CF59A5B62A5F23ABF290CA909864E91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04A8 Signing time: Sun 15 Jun 2025 02:50:40 +0000 Manifest this update: Sun 15 Jun 2025 02:45:40 +0000 Manifest next update: Wed 18 Jun 2025 03:01:40 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: fgSOFTmHBsm+tHxB6f309xDzUMsP9VUt4jQONOxHUT0=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: KvQlUIt+O8XkzXwyaibxzHplxyBpRPScmdyCJyB/bbo=) 3: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: kc8DwuYdcnwEVFC0Q2tX7KGv9Y9yYOdSXqWWCBt1WPI=) 4: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: eICFPX1ffRHHlODjPDwkCsraQZYn70z4zLEPXC3PC0M=) 5: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 09pTyAPGkDhkuez65QhC+JUUx/+DkLuWQ1gGTLu7lyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e2:0e:d5:4c:f5:9a:5b:62:a5:f2:3a:bf:29:0c:a9:09:86:4e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Jun 15 02:45:40 2025 GMT Not After : Jun 18 03:01:40 2025 GMT Subject: CN=C343E50071140505482945C31F3E0D7EFA108676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:b3:83:84:75:94:65:71:c2:12:b5:71:01: b9:6c:30:f5:b6:d9:b4:6a:12:ca:6c:82:e0:50:4b: 58:5a:9e:30:07:54:5a:b6:1e:87:63:53:a2:08:c0: 69:96:d2:46:f9:11:5d:38:5b:d0:f0:58:d9:9c:28: 74:db:e6:01:a5:68:e0:42:e1:2e:d2:c5:64:ee:e2: bb:e6:bf:bd:80:74:7a:e9:66:16:c3:45:1e:68:36: d0:00:ff:1e:7b:96:f6:50:d1:d4:1b:19:7c:36:43: c3:18:73:0c:c6:43:e8:9e:de:f2:ba:0b:7b:7d:f5: 1f:b8:25:8b:5a:2c:b0:08:6b:c1:ae:ec:7b:34:3d: 5d:aa:d4:b4:e6:61:e5:ef:31:e1:95:b8:44:5e:fd: ad:c5:85:6e:4c:ca:0b:17:e9:9b:8b:5a:ef:27:66: 95:3d:46:27:37:0d:5e:3b:73:79:25:2d:e9:10:09: 36:45:b8:f2:a8:f2:ea:3c:3b:1a:db:0c:49:24:e6: a3:24:f5:ec:a9:4b:f7:67:5b:d4:68:0a:16:24:7d: c0:a9:20:f0:62:29:f1:1a:47:4e:8d:30:ec:ec:8e: 94:ae:4f:29:ed:39:98:5b:51:5a:69:73:0a:60:61: 54:a5:45:f0:08:a3:51:79:25:cf:84:39:45:54:91: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:43:E5:00:71:14:05:05:48:29:45:C3:1F:3E:0D:7E:FA:10:86:76 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9a:d3:da:63:1a:ca:75:aa:dc:f1:4a:16:53:75:f6:b3:f8: 2d:a5:2b:b6:fe:0e:5f:69:21:63:45:f2:0c:51:5b:36:ee:11: ef:ab:a1:54:73:29:f3:76:f0:68:4f:5e:3a:12:4a:cd:a4:fa: 71:5f:8c:c0:5c:fc:81:de:e2:67:13:60:7c:f5:4b:ae:c9:4c: bf:a8:a7:95:a1:e9:03:6b:39:36:fb:e9:04:68:a0:97:7f:d7: 48:55:77:e8:dc:7d:e1:63:77:ad:17:0c:5b:aa:0e:9a:8b:69: ee:d6:44:76:00:b0:62:0c:4d:cb:ea:43:89:0c:6f:1f:85:d1: b0:43:36:fe:d3:15:2d:24:a6:2f:85:68:c7:99:f6:b8:7e:33: c6:71:2a:89:86:29:ef:d8:c7:56:2d:03:d9:21:91:fd:1a:b3: 95:b5:0e:71:71:c4:9f:87:bb:59:a8:15:76:e2:d5:a4:5f:b8: e4:bd:97:c3:2f:94:5e:a0:eb:2d:12:4c:bb:0a:aa:f8:32:aa: dd:a2:54:e6:fe:51:c3:ec:ad:e1:e3:7e:49:b0:05:34:58:5e: 30:ca:1e:d8:5e:8f:da:d2:66:78:8b:4c:39:e5:34:a1:53:0e: 0f:b7:54:6a:2d:d0:18:64:b1:49:1d:6d:4c:43:47:a9:9a:52: 48:da:33:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOIO1Uz1mltipfI6vykMqQmGTpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA2MTUwMjQ1NDBaFw0yNTA2MTgwMzAxNDBaMDMxMTAvBgNV BAMTKEMzNDNFNTAwNzExNDA1MDU0ODI5NDVDMzFGM0UwRDdFRkExMDg2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWU7ODhHWUZXHCErVxAblsMPW2 2bRqEspsguBQS1hanjAHVFq2HodjU6IIwGmW0kb5EV04W9DwWNmcKHTb5gGlaOBC 4S7SxWTu4rvmv72AdHrpZhbDRR5oNtAA/x57lvZQ0dQbGXw2Q8MYcwzGQ+ie3vK6 C3t99R+4JYtaLLAIa8Gu7Hs0PV2q1LTmYeXvMeGVuERe/a3FhW5MygsX6ZuLWu8n ZpU9Ric3DV47c3klLekQCTZFuPKo8uo8OxrbDEkk5qMk9eypS/dnW9RoChYkfcCp IPBiKfEaR06NMOzsjpSuTyntOZhbUVppcwpgYVSlRfAIo1F5Jc+EOUVUkTV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw0PlAHEUBQVIKUXDHz4NfvoQhnYwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKa09pjGsp1qtzxShZTdfaz+C2lK7b+Dl9p IWNF8gxRWzbuEe+roVRzKfN28GhPXjoSSs2k+nFfjMBc/IHe4mcTYHz1S67JTL+o p5Wh6QNrOTb76QRooJd/10hVd+jcfeFjd60XDFuqDpqLae7WRHYAsGIMTcvqQ4kM bx+F0bBDNv7TFS0kpi+FaMeZ9rh+M8ZxKomGKe/Yx1YtA9khkf0as5W1DnFxxJ+H u1moFXbi1aRfuOS9l8MvlF6g6y0STLsKqvgyqt2iVOb+UcPsreHjfkmwBTRYXjDK Hthej9rSZniLTDnlNKFTDg+3VGot0BhksUkdbUxDR6maUkjaM1s= -----END CERTIFICATE-----Generated at Mon Jun 16 15:54:32 2025 by rpki-client