$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: 3NkYXO3tYobmP6D73LyOfTGmoBM5gQzBfjIl+l9GnsI= Subject key identifier: D0:D4:97:53:DC:F0:3C:76:1F:D1:9E:52:36:3A:CF:AD:C1:2D:1D:DD Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 7199DA2CB672FAFD0DB023C4A37D46FD66FC6F64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 0451 Signing time: Mon 16 Jun 2025 00:32:15 +0000 Manifest this update: Mon 16 Jun 2025 00:27:15 +0000 Manifest next update: Thu 19 Jun 2025 08:52:15 +0000 Files and hashes: 1: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) 3: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: joBoRU7Y4heFE1aG2rekkuVdANs6C53zCF/rqjO3jdg=) 4: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) 5: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:99:da:2c:b6:72:fa:fd:0d:b0:23:c4:a3:7d:46:fd:66:fc:6f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Jun 16 00:27:15 2025 GMT Not After : Jun 19 08:52:15 2025 GMT Subject: CN=D0D49753DCF03C761FD19E52363ACFADC12D1DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ef:c1:83:b9:40:8c:b2:cd:e9:00:c0:2b:85: 75:ee:f9:dc:9b:0f:b5:57:0b:cc:7f:04:e5:f3:0b: 1b:5b:b5:1e:2b:da:92:88:d3:76:d1:24:96:45:94: c4:14:85:cb:a5:fd:fd:bf:a5:7b:2f:30:6f:66:b7: 3c:a0:83:94:83:3d:76:3d:0a:07:0d:4c:62:3c:e1: 6b:15:ee:1d:89:cb:ad:2a:8d:08:0e:9d:fd:1f:4a: 8d:73:07:a1:d5:46:28:c2:66:ac:37:9a:a7:29:43: 3e:a2:6e:16:ea:3e:3a:ad:d3:eb:47:bc:3d:82:a4: 04:a3:ea:7a:c0:ad:34:55:e2:b8:ae:82:87:ab:5e: eb:db:90:6d:73:ad:4e:36:cb:a1:cb:90:b9:96:6c: 09:76:3a:fe:8f:4a:70:ed:bd:b2:27:d8:cd:6a:8d: f9:20:cf:2f:c5:76:e6:f1:54:84:30:50:22:8b:36: 32:1d:a8:2c:20:a6:1b:e9:17:6a:d0:4d:0e:31:86: b2:c2:12:1e:11:65:b1:1b:9b:79:40:77:2d:4c:f2: b6:52:0e:6e:af:10:fe:56:b4:3a:2f:b0:76:bc:d7: 11:ab:27:b7:6a:40:59:d4:e6:95:2c:fa:0b:4b:1c: 42:51:ed:e7:fe:b1:65:ff:75:42:cb:35:3e:89:02: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D4:97:53:DC:F0:3C:76:1F:D1:9E:52:36:3A:CF:AD:C1:2D:1D:DD X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1d:99:83:9b:22:48:00:9f:ca:82:5f:7f:59:e9:dc:b1:50: a2:23:9b:29:e3:81:59:2c:8a:56:86:84:04:6c:ea:7f:9e:06: 66:be:91:a5:6a:6e:81:0a:41:31:b4:f2:12:df:e9:ea:e0:21: 3e:ac:1a:9c:98:4b:49:f5:41:66:9f:a0:91:8b:f6:ef:5a:2f: 27:55:e4:43:51:65:9e:06:c3:e2:1b:5b:5b:1f:13:a4:30:08: f3:bf:8a:53:24:72:90:1a:d2:42:9c:81:16:19:81:a1:86:25: 16:d8:01:7f:e7:36:e4:56:98:d4:c7:3b:47:8c:64:0e:b3:ea: 91:42:77:9d:1b:ea:32:cc:6c:61:f2:f4:97:be:88:84:ba:b9: 89:13:dd:55:b5:4f:ef:a6:ec:aa:b1:8b:13:15:ec:68:e3:47: dc:82:4f:63:2f:28:9c:42:a4:3f:96:72:07:c8:39:ae:10:48: 03:d2:db:1c:e4:a0:b9:a5:09:96:c7:94:34:45:39:91:41:80: da:d6:d1:19:6b:20:79:e8:be:e1:9c:a9:c1:71:e1:b2:cf:04: 63:8e:63:93:28:c1:b1:af:56:ff:76:46:5e:88:f2:14:d0:d1: bb:26:b5:29:1a:59:7d:b1:71:75:08:a2:bf:1b:1d:ce:8b:09: e1:11:00:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZnaLLZy+v0NsCPEo31G/Wb8b2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA2MTYwMDI3MTVaFw0yNTA2MTkwODUyMTVaMDMxMTAvBgNV BAMTKEQwRDQ5NzUzRENGMDNDNzYxRkQxOUU1MjM2M0FDRkFEQzEyRDFEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw78GDuUCMss3pAMArhXXu+dyb D7VXC8x/BOXzCxtbtR4r2pKI03bRJJZFlMQUhcul/f2/pXsvMG9mtzygg5SDPXY9 CgcNTGI84WsV7h2Jy60qjQgOnf0fSo1zB6HVRijCZqw3mqcpQz6ibhbqPjqt0+tH vD2CpASj6nrArTRV4riugoerXuvbkG1zrU42y6HLkLmWbAl2Ov6PSnDtvbIn2M1q jfkgzy/FdubxVIQwUCKLNjIdqCwgphvpF2rQTQ4xhrLCEh4RZbEbm3lAdy1M8rZS Dm6vEP5WtDovsHa81xGrJ7dqQFnU5pUs+gtLHEJR7ef+sWX/dULLNT6JAiWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0NSXU9zwPHYf0Z5SNjrPrcEtHd0wHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEdmYObIkgAn8qCX39Z6dyxUKIjmynjgVks ilaGhARs6n+eBma+kaVqboEKQTG08hLf6ergIT6sGpyYS0n1QWafoJGL9u9aLydV 5ENRZZ4Gw+IbW1sfE6QwCPO/ilMkcpAa0kKcgRYZgaGGJRbYAX/nNuRWmNTHO0eM ZA6z6pFCd50b6jLMbGHy9Je+iIS6uYkT3VW1T++m7KqxixMV7GjjR9yCT2MvKJxC pD+WcgfIOa4QSAPS2xzkoLmlCZbHlDRFOZFBgNrW0RlrIHnovuGcqcFx4bLPBGOO Y5MowbGvVv92Rl6I8hTQ0bsmtSkaWX2xcXUIor8bHc6LCeERAI8= -----END CERTIFICATE-----Generated at Mon Jun 16 06:20:12 2025 by rpki-client