$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: n9whwVAcKImnkzdSPCCEW64ueYhATO2a3VIfoa+qafM= Subject key identifier: D3:C5:23:9E:BB:E4:19:10:DC:83:0D:9F:81:31:56:26:80:2F:47:75 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 6AE392F709F893CAF8415118624B7F3B64AF05F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 0492 Signing time: Sun 27 Apr 2025 02:40:40 +0000 Manifest this update: Sun 27 Apr 2025 02:35:40 +0000 Manifest next update: Wed 30 Apr 2025 12:40:40 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: fgSOFTmHBsm+tHxB6f309xDzUMsP9VUt4jQONOxHUT0=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: KvQlUIt+O8XkzXwyaibxzHplxyBpRPScmdyCJyB/bbo=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 09pTyAPGkDhkuez65QhC+JUUx/+DkLuWQ1gGTLu7lyc=) 4: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: dX9pzyKNe4lThSGyFdoIXtkFh+HZMfnld2ySimhJ/b0=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: eICFPX1ffRHHlODjPDwkCsraQZYn70z4zLEPXC3PC0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 12:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e3:92:f7:09:f8:93:ca:f8:41:51:18:62:4b:7f:3b:64:af:05:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Apr 27 02:35:40 2025 GMT Not After : Apr 30 12:40:40 2025 GMT Subject: CN=D3C5239EBBE41910DC830D9F81315626802F4775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:e1:3b:65:0d:e7:3f:a4:15:9b:12:dc:7c: 01:4f:cc:a1:31:2d:4a:db:75:59:fd:b6:35:b7:6c: b8:71:7f:ae:46:a0:94:08:2e:24:6d:00:24:a9:b0: db:b9:0e:a1:e5:70:ef:39:13:a3:6f:e4:5f:97:2b: 6f:e3:1b:06:6e:36:ed:03:3f:13:ce:6a:5b:2a:88: 4e:73:74:d2:bd:10:85:61:0d:31:24:37:86:73:8d: d6:8f:3a:f5:6c:ca:7d:90:0b:cb:bc:10:a8:5b:7e: 51:33:f8:c6:23:23:fa:7d:69:b0:15:be:1f:bd:df: 53:14:68:c9:52:97:57:b3:79:f4:98:4f:1c:c1:bd: 54:de:f6:42:b7:b5:08:56:e5:52:d9:a9:e0:58:54: 99:4d:5a:83:6e:90:32:3d:7a:a5:c9:b7:75:27:8a: 8e:3c:c2:76:85:54:cd:00:21:a1:99:fc:f3:5c:1c: 9f:8f:73:76:6e:ec:c2:ae:f3:16:e4:7f:e9:ca:7f: 88:6c:10:9a:3f:91:e4:bf:fb:3f:f0:86:dc:65:6d: b4:24:8a:36:ec:e0:a4:38:4d:2a:11:2a:ec:1b:1b: 01:d1:1c:7e:f8:ca:ee:63:70:8d:6c:3e:2a:02:28: 1e:a5:39:46:ee:ba:a3:6e:a1:f6:06:48:3a:3c:e0: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C5:23:9E:BB:E4:19:10:DC:83:0D:9F:81:31:56:26:80:2F:47:75 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:55:1d:30:5b:df:ac:e5:ea:b3:4b:6f:e7:3f:6f:7a:a2:b7: 7a:76:5c:50:bf:c2:d3:76:4c:15:5f:cc:77:14:f4:8a:50:0f: f9:13:d3:e3:27:25:e2:cc:e0:af:0c:f6:41:5d:84:ee:c6:d1: 50:11:46:9c:ef:96:e9:aa:ec:4e:79:28:68:98:a7:3a:fb:e8: 39:79:ea:3a:29:e7:a1:ee:c8:70:ee:fe:fe:46:71:68:aa:2f: 4c:6b:df:8a:3d:e3:5c:04:f4:f6:e6:b6:91:ce:bf:3a:dc:ad: a3:82:42:31:87:7c:0e:b9:13:ca:86:dc:d0:91:cf:49:72:99: f3:e3:f9:7b:db:7a:14:8c:b4:d0:92:50:ff:42:ad:63:d4:67: d5:74:8c:ad:57:f7:e9:f3:5c:07:14:67:4c:59:90:5a:84:d7: d6:d4:1e:2d:50:07:86:8e:f2:3b:b3:0c:93:cf:01:ea:55:d6: df:38:6d:ff:cb:df:25:17:3b:5d:ae:05:21:49:88:ef:4d:df: e5:9a:81:10:c5:fe:50:bb:37:85:bb:b7:7c:8c:6c:b7:2f:30: c0:c8:b5:49:93:a1:a1:94:c6:44:23:e8:c8:00:13:34:78:da: e1:1c:63:0a:4e:b0:61:b2:95:e3:90:f5:e8:42:ac:1c:eb:bf: ac:7d:5f:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauOS9wn4k8r4QVEYYkt/O2SvBfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA0MjcwMjM1NDBaFw0yNTA0MzAxMjQwNDBaMDMxMTAvBgNV BAMTKEQzQzUyMzlFQkJFNDE5MTBEQzgzMEQ5RjgxMzE1NjI2ODAyRjQ3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPm+E7ZQ3nP6QVmxLcfAFPzKEx LUrbdVn9tjW3bLhxf65GoJQILiRtACSpsNu5DqHlcO85E6Nv5F+XK2/jGwZuNu0D PxPOalsqiE5zdNK9EIVhDTEkN4ZzjdaPOvVsyn2QC8u8EKhbflEz+MYjI/p9abAV vh+931MUaMlSl1ezefSYTxzBvVTe9kK3tQhW5VLZqeBYVJlNWoNukDI9eqXJt3Un io48wnaFVM0AIaGZ/PNcHJ+Pc3Zu7MKu8xbkf+nKf4hsEJo/keS/+z/whtxlbbQk ijbs4KQ4TSoRKuwbGwHRHH74yu5jcI1sPioCKB6lOUbuuqNuofYGSDo84K8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08UjnrvkGRDcgw2fgTFWJoAvR3UwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhVHTBb36zl6rNLb+c/b3qit3p2XFC/wtN2 TBVfzHcU9IpQD/kT0+MnJeLM4K8M9kFdhO7G0VARRpzvlumq7E55KGiYpzr76Dl5 6jop56HuyHDu/v5GcWiqL0xr34o941wE9PbmtpHOvzrcraOCQjGHfA65E8qG3NCR z0lymfPj+XvbehSMtNCSUP9CrWPUZ9V0jK1X9+nzXAcUZ0xZkFqE19bUHi1QB4aO 8juzDJPPAepV1t84bf/L3yUXO12uBSFJiO9N3+WagRDF/lC7N4W7t3yMbLcvMMDI tUmToaGUxkQj6MgAEzR42uEcYwpOsGGyleOQ9ehCrBzrv6x9X8Y= -----END CERTIFICATE-----Generated at Tue Apr 29 09:38:22 2025 by rpki-client