$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: U0584+r1k5vAMlyLrv+mg0viCpWR06NqgMnu7IgjbW8= Subject key identifier: C2:B4:CB:E4:61:1D:D5:A5:E9:38:E8:99:F1:3F:4C:6F:D3:10:90:AC Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 15C1EE3C0A5987591F9E006C1E4E484A5B125531 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 043A Signing time: Sat 26 Apr 2025 04:32:16 +0000 Manifest this update: Sat 26 Apr 2025 04:27:16 +0000 Manifest next update: Tue 29 Apr 2025 14:04:16 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) 3: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: u43TJeLP08dVdf0KrCKJJ3ytcch3Cw9RuUT+AlOWGuk=) 5: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 14:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c1:ee:3c:0a:59:87:59:1f:9e:00:6c:1e:4e:48:4a:5b:12:55:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Apr 26 04:27:16 2025 GMT Not After : Apr 29 14:04:16 2025 GMT Subject: CN=C2B4CBE4611DD5A5E938E899F13F4C6FD31090AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:e4:a0:32:3d:42:25:6d:03:af:63:6a:81: 51:7e:e1:b8:2e:01:78:19:53:67:75:82:63:b3:03: 20:b0:d0:8f:26:33:cc:1b:4b:31:5e:70:13:d0:a6: 44:4b:14:b5:62:9e:12:dc:65:29:27:e6:a2:32:b3: 51:91:cd:94:90:b7:33:6a:5b:b2:21:c4:45:ef:f4: c8:f7:91:c0:80:78:a3:69:6b:89:3c:f8:6d:f8:ec: a2:78:2d:46:8f:da:be:ce:c6:d4:8d:3e:d5:7b:79: 09:c7:80:42:0a:6a:79:ab:17:ae:ef:cd:d7:56:1c: 09:62:4c:26:9d:be:fe:b4:fb:10:e7:e5:50:ed:59: c0:2a:f5:c1:02:61:c2:a7:88:85:32:94:bc:5e:cb: 9a:b2:ff:51:9c:63:27:62:f0:53:98:05:ba:1f:bf: 75:59:95:2f:52:ea:bc:aa:22:36:02:cb:ce:2a:f9: f7:5b:59:26:e6:8a:e9:c9:21:56:f1:40:88:6e:fd: 27:bf:b8:32:71:bc:7a:34:ff:01:3b:50:32:27:d9: 9a:ae:cf:96:4c:1c:f2:3a:9e:9e:05:1d:28:dc:48: 08:fa:cf:71:f2:20:6f:e8:71:b6:07:d4:07:49:b7: 9c:7f:66:93:10:6a:20:a6:84:74:f2:34:fe:08:58: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:CB:E4:61:1D:D5:A5:E9:38:E8:99:F1:3F:4C:6F:D3:10:90:AC X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:57:22:c9:fe:46:94:c9:09:a4:53:b0:72:4e:40:08:7b:ab: ff:8a:94:4b:af:64:ac:a5:3b:22:e6:f3:0d:21:c7:bd:b9:2d: a7:e8:86:a0:a4:4d:fa:ab:44:de:c0:6c:0b:d8:e0:c5:cd:0e: 51:f7:91:40:0f:e1:83:4c:64:f8:54:d1:d2:51:f3:5f:a3:08: d2:af:e6:30:9a:5e:9a:a2:73:95:d4:0b:9d:2c:14:a6:cb:02: b6:e3:29:fb:e0:f0:c7:eb:7b:c4:f4:1f:1b:24:38:05:1b:40: cb:97:0c:3a:54:77:33:9c:d3:47:f7:9e:64:0c:4b:f0:df:fd: 8d:58:39:21:cf:91:c3:4a:36:9d:98:7e:81:e5:69:8c:2a:5b: f0:c3:25:9a:6f:3e:0a:80:6f:53:59:ba:25:13:22:0d:90:4e: 8c:ab:fd:a8:fc:6b:15:e9:05:95:a5:dc:28:a0:31:95:bf:80: 27:73:29:26:05:41:07:fc:ea:c7:90:51:01:bb:50:a9:6e:e8: 8c:df:5b:2c:46:ea:f3:69:3c:54:26:cc:41:a4:56:87:b2:cb: c8:50:a4:cf:b8:37:90:b5:91:af:cd:aa:a2:f6:6b:42:a5:16: 05:e0:3f:6a:b4:d7:00:97:69:51:1f:9d:ee:c8:08:b2:9a:a3: 51:c9:58:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcHuPApZh1kfngBsHk5ISlsSVTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA0MjYwNDI3MTZaFw0yNTA0MjkxNDA0MTZaMDMxMTAvBgNV BAMTKEMyQjRDQkU0NjExREQ1QTVFOTM4RTg5OUYxM0Y0QzZGRDMxMDkwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LuSgMj1CJW0Dr2NqgVF+4bgu AXgZU2d1gmOzAyCw0I8mM8wbSzFecBPQpkRLFLVinhLcZSkn5qIys1GRzZSQtzNq W7IhxEXv9Mj3kcCAeKNpa4k8+G347KJ4LUaP2r7OxtSNPtV7eQnHgEIKanmrF67v zddWHAliTCadvv60+xDn5VDtWcAq9cECYcKniIUylLxey5qy/1GcYydi8FOYBbof v3VZlS9S6ryqIjYCy84q+fdbWSbmiunJIVbxQIhu/Se/uDJxvHo0/wE7UDIn2Zqu z5ZMHPI6np4FHSjcSAj6z3HyIG/ocbYH1AdJt5x/ZpMQaiCmhHTyNP4IWKkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrTL5GEd1aXpOOiZ8T9Mb9MQkKwwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtXIsn+RpTJCaRTsHJOQAh7q/+KlEuvZKyl OyLm8w0hx725LafohqCkTfqrRN7AbAvY4MXNDlH3kUAP4YNMZPhU0dJR81+jCNKv 5jCaXpqic5XUC50sFKbLArbjKfvg8Mfre8T0HxskOAUbQMuXDDpUdzOc00f3nmQM S/Df/Y1YOSHPkcNKNp2YfoHlaYwqW/DDJZpvPgqAb1NZuiUTIg2QToyr/aj8axXp BZWl3CigMZW/gCdzKSYFQQf86seQUQG7UKlu6IzfWyxG6vNpPFQmzEGkVoeyy8hQ pM+4N5C1ka/NqqL2a0KlFgXgP2q01wCXaVEfne7ICLKao1HJWLY= -----END CERTIFICATE-----Generated at Sun Apr 27 17:26:03 2025 by rpki-client