$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json) Hash identifier: o/kvhbiHwhf/7GeTpj2Chkqb/BKsksqsSZT+TXxzDiM= Subject key identifier: 63:70:04:D0:B2:A5:FC:DE:C5:60:EC:88:1D:B4:01:86:13:E9:6F:6D Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD Certificate serial: 7C613B4C29B7B9A1F72A1EB7592FB48D20CF7834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft Manifest number: 01DC Signing time: Sat 14 Jun 2025 00:51:32 +0000 Manifest this update: Sat 14 Jun 2025 00:46:32 +0000 Manifest next update: Tue 17 Jun 2025 12:08:32 +0000 Files and hashes: 1: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: rX2Os//ohCEd2lY161mFvAOxFJGXawmG1wuskltjVpQ=) 2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:61:3b:4c:29:b7:b9:a1:f7:2a:1e:b7:59:2f:b4:8d:20:cf:78:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Validity Not Before: Jun 14 00:46:32 2025 GMT Not After : Jun 17 12:08:32 2025 GMT Subject: CN=637004D0B2A5FCDEC560EC881DB4018613E96F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:d5:b2:ec:db:8a:11:3a:7a:f8:8d:23:12: 45:f6:a4:14:60:4a:65:eb:2c:5f:a7:e2:a5:71:ab: f2:fb:dc:74:e4:22:5a:86:9b:92:24:9d:50:d7:e8: 9b:ec:f5:29:f8:73:ef:4d:b5:45:ee:06:c5:42:6f: 4b:45:50:0d:cb:a7:7c:9d:e6:99:6d:8f:6b:9d:d6: cc:0b:11:0c:50:86:e3:4b:e1:ab:47:40:23:79:44: bf:cd:30:65:2c:8d:77:a5:3d:89:d5:d7:a4:60:4e: 2d:a7:6e:66:c9:0b:1f:2f:be:8f:e4:46:e8:0a:a8: c7:e6:ca:50:ca:80:8c:e6:9d:23:2b:e0:f5:4c:02: 40:8e:ce:df:6d:46:82:90:44:c1:05:99:60:06:21: 58:73:ff:9b:7e:c3:42:fb:d1:5b:32:bb:7b:df:8d: 2c:88:ed:0e:bb:96:5d:df:66:d5:70:cf:23:e7:f1: 59:7e:4b:77:92:7c:e5:a1:99:fe:5a:73:9b:c5:5c: f7:10:72:46:8e:c6:37:d1:0f:82:51:af:7a:36:be: a7:63:02:b7:91:a6:e1:54:a9:7c:59:b5:85:d6:08: 75:0b:9b:c5:bf:ab:80:fb:64:cc:88:7a:b7:ae:2f: d9:47:b1:3f:5d:7a:4f:e2:17:63:e1:75:0b:1f:df: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:70:04:D0:B2:A5:FC:DE:C5:60:EC:88:1D:B4:01:86:13:E9:6F:6D X509v3 Authority Key Identifier: keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:74:c0:58:b2:d6:78:e8:ac:d6:33:20:54:17:bb:42:30:65: 26:e4:dc:15:ab:1a:4f:b1:29:f4:4e:e4:44:40:66:3c:95:88: 0f:83:81:1a:3b:86:5f:57:b6:81:e0:15:43:c0:99:9e:96:0a: c2:12:cb:fe:be:44:8b:8e:98:72:d8:ca:83:b5:6d:9b:66:2d: bd:5a:5c:cc:5a:a8:1d:51:d8:8f:65:83:b3:22:34:f9:83:3c: d6:1c:f0:09:54:14:bd:d2:47:43:8e:96:33:e5:f3:5e:f4:bc: 55:ce:eb:f6:67:92:20:af:30:e5:52:a4:7a:86:18:42:78:02: 91:da:9f:c6:f8:6b:f8:9b:47:1b:20:f1:3d:51:e4:c3:00:bc: 83:98:b1:33:10:53:85:50:ab:b5:22:10:a8:50:f8:a9:be:fb: 83:0e:d8:5a:88:69:cc:c4:e9:7a:a3:95:b2:30:8e:5c:f5:8d: 4c:9e:30:90:6f:b8:bb:7f:51:02:e7:a9:cd:b6:97:98:ce:b0: 37:b0:4d:d8:3c:c2:3d:3f:8f:98:92:48:a8:fc:40:2d:16:f3: 0f:81:23:1f:de:1c:2f:2d:09:f1:1f:42:37:60:6d:46:91:e5: c6:ab:f5:c9:3a:67:92:58:8f:55:31:74:a1:36:47:c8:30:40: d7:fa:f9:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGE7TCm3uaH3Kh63WS+0jSDPeDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURG NDUxOTFGRDAeFw0yNTA2MTQwMDQ2MzJaFw0yNTA2MTcxMjA4MzJaMDMxMTAvBgNV BAMTKDYzNzAwNEQwQjJBNUZDREVDNTYwRUM4ODFEQjQwMTg2MTNFOTZGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9W9Wy7NuKETp6+I0jEkX2pBRg SmXrLF+n4qVxq/L73HTkIlqGm5IknVDX6Jvs9Sn4c+9NtUXuBsVCb0tFUA3Lp3yd 5pltj2ud1swLEQxQhuNL4atHQCN5RL/NMGUsjXelPYnV16RgTi2nbmbJCx8vvo/k RugKqMfmylDKgIzmnSMr4PVMAkCOzt9tRoKQRMEFmWAGIVhz/5t+w0L70Vsyu3vf jSyI7Q67ll3fZtVwzyPn8Vl+S3eSfOWhmf5ac5vFXPcQckaOxjfRD4JRr3o2vqdj AreRpuFUqXxZtYXWCHULm8W/q4D7ZMyIereuL9lHsT9dek/iF2PhdQsf3/7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY3AE0LKl/N7FYOyIHbQBhhPpb20wHwYDVR0j BBgwFoAUH1a0+t4RYwJwhlR/vLQk7fRRkf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC8xRjU2QjRGQURF MTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5MUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURGNDUx OTFGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0 RURGNDUxOTFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACR0wFiy1njorNYzIFQXu0IwZSbk3BWrGk+x KfRO5ERAZjyViA+DgRo7hl9XtoHgFUPAmZ6WCsISy/6+RIuOmHLYyoO1bZtmLb1a XMxaqB1R2I9lg7MiNPmDPNYc8AlUFL3SR0OOljPl8170vFXO6/ZnkiCvMOVSpHqG GEJ4ApHan8b4a/ibRxsg8T1R5MMAvIOYsTMQU4VQq7UiEKhQ+Km++4MO2FqIaczE 6XqjlbIwjlz1jUyeMJBvuLt/UQLnqc22l5jOsDewTdg8wj0/j5iSSKj8QC0W8w+B Ix/eHC8tCfEfQjdgbUaR5car9ck6Z5JYj1UxdKE2R8gwQNf6+dM= -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:07 2025 by rpki-client