$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft File: 1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json) Hash identifier: gQN7SlPgr+gQVTfy4FiimLvwMK769PqquxT49U7BvcU= Subject key identifier: 57:D0:E2:C1:3A:34:62:38:C8:36:42:99:B4:D7:55:5A:01:B6:97:63 Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D Certificate issuer: /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Certificate serial: 518A49AECB904235F948ACE22670A7CDB8BCA07A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft Manifest number: 04E0 Signing time: Sun 15 Jun 2025 11:11:58 +0000 Manifest this update: Sun 15 Jun 2025 11:06:58 +0000 Manifest next update: Wed 18 Jun 2025 17:16:58 +0000 Files and hashes: 1: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: /ZPepspDuSHX/TZ66wXHnEEDT5aUhg/Je0NDHmD0ekw=) 2: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: q1jYn7Xb50WmP2uCHt9tAsO6LxmkwzEXjSuX+S7nEvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8a:49:ae:cb:90:42:35:f9:48:ac:e2:26:70:a7:cd:b8:bc:a0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Validity Not Before: Jun 15 11:06:58 2025 GMT Not After : Jun 18 17:16:58 2025 GMT Subject: CN=57D0E2C13A346238C8364299B4D7555A01B69763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:5b:24:7c:94:ae:83:0e:e9:0a:5b:2a:10: 8b:d7:11:18:34:e8:c4:f8:f5:50:cd:33:1b:24:32: 00:a2:25:db:43:1e:a4:37:1f:3e:a1:a7:68:c9:2d: 77:62:45:36:89:4c:d0:bd:40:19:4d:cd:66:18:25: 38:37:6b:03:ed:fc:98:ab:be:22:7c:e4:b8:a5:c5: 26:f4:ae:1a:d5:c6:b2:87:2f:8f:6c:83:50:bf:81: a4:9e:f0:1b:a6:ad:9c:74:a4:98:6b:b6:df:ca:c7: 89:0c:85:dd:b5:ef:48:cd:21:fc:5c:53:70:ee:db: e5:6b:c8:89:a4:87:e8:24:1d:7b:ac:44:d4:7b:c5: 78:49:1c:8d:07:ac:5e:b5:56:fd:fb:eb:4c:5f:14: cf:20:b9:77:b7:46:5f:22:f7:16:a6:2c:24:94:b7: 41:db:e6:0d:fb:95:a5:59:f6:fb:87:6b:57:57:48: 0c:de:1c:6d:03:0a:ee:39:4d:2f:6d:65:e6:11:8d: 2d:b1:53:75:27:ae:51:9e:ca:e9:c5:65:28:3a:a9: 15:4b:d8:5b:eb:b5:85:a0:df:eb:2d:0a:ce:6c:88: 4a:11:0d:59:44:98:60:70:2d:b1:ec:9f:4a:fa:c5: 95:b2:e3:09:67:ca:a9:3b:7b:70:c7:08:45:34:be: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D0:E2:C1:3A:34:62:38:C8:36:42:99:B4:D7:55:5A:01:B6:97:63 X509v3 Authority Key Identifier: keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a8:ba:ae:e7:a6:71:35:7b:6e:39:22:4b:20:af:45:3b:d5: 49:3c:72:1d:ce:b0:11:83:4c:09:88:6c:81:af:44:28:4a:f3: 9a:91:70:86:6c:6d:9b:4f:b5:e8:d6:ab:f9:72:c0:7d:9e:d7: 9a:e5:bb:4b:96:51:1f:b5:73:a3:44:16:bd:9d:45:ee:f9:47: d3:80:57:c4:95:d5:04:1d:73:c7:77:e7:e7:1f:34:6a:d1:31: d3:14:e3:fb:3f:10:d8:de:60:b6:3f:5d:0c:51:2f:02:48:f5: e5:a3:36:db:b3:3f:0c:e4:58:6b:42:1a:3d:32:27:40:4a:14: 2c:f9:66:df:31:49:67:9b:88:ef:0c:c7:de:df:8d:86:f7:36: 60:14:60:04:7e:99:71:0d:25:9c:a9:c7:bd:bc:59:aa:c5:28: 1c:1d:83:ad:90:ef:f3:07:b2:cd:3a:1f:64:17:7f:6f:9a:45: 9b:89:61:78:ef:74:fa:7a:b7:7e:6c:b7:f0:41:5e:ed:e3:53: e1:02:a2:4c:3f:cd:f6:f5:7a:84:8f:cb:e3:7c:96:56:3f:fb: 66:9f:eb:58:47:c5:84:9f:86:0c:bc:48:89:e8:47:89:09:d9: d8:1e:3a:25:48:23:a2:11:6e:eb:b3:76:50:83:12:9c:ef:b8: b5:63:76:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYpJrsuQQjX5SKziJnCnzbi8oHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1 MDQyNDQ2RDAeFw0yNTA2MTUxMTA2NThaFw0yNTA2MTgxNzE2NThaMDMxMTAvBgNV BAMTKDU3RDBFMkMxM0EzNDYyMzhDODM2NDI5OUI0RDc1NTVBMDFCNjk3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUFskfJSugw7pClsqEIvXERg0 6MT49VDNMxskMgCiJdtDHqQ3Hz6hp2jJLXdiRTaJTNC9QBlNzWYYJTg3awPt/Jir viJ85LilxSb0rhrVxrKHL49sg1C/gaSe8BumrZx0pJhrtt/Kx4kMhd2170jNIfxc U3Du2+VryImkh+gkHXusRNR7xXhJHI0HrF61Vv3760xfFM8guXe3Rl8i9xamLCSU t0Hb5g37laVZ9vuHa1dXSAzeHG0DCu45TS9tZeYRjS2xU3UnrlGeyunFZSg6qRVL 2FvrtYWg3+stCs5siEoRDVlEmGBwLbHsn0r6xZWy4wlnyqk7e3DHCEU0vrWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV9DiwTo0YjjINkKZtNdVWgG2l2MwHwYDVR0j BBgwFoAUGg/EaVRm8ANP3HvTXZe/k1BCRG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODdhZWU3Zi1kNjViLTQ2ZWMtYTc4MS03Y2JlZjVhYWViODAvMC8xQTBGQzQ2OTU0 NjZGMDAzNEZEQzdCRDM1RDk3QkY5MzUwNDI0NDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1MDQy NDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3YWVlN2YtZDY1Yi00NmVjLWE3 ODEtN2NiZWY1YWFlYjgwLzAvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JG OTM1MDQyNDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+ouq7npnE1e245Iksgr0U71Uk8ch3OsBGD TAmIbIGvRChK85qRcIZsbZtPtejWq/lywH2e15rlu0uWUR+1c6NEFr2dRe75R9OA V8SV1QQdc8d35+cfNGrRMdMU4/s/ENjeYLY/XQxRLwJI9eWjNtuzPwzkWGtCGj0y J0BKFCz5Zt8xSWebiO8Mx97fjYb3NmAUYAR+mXENJZypx728WarFKBwdg62Q7/MH ss06H2QXf2+aRZuJYXjvdPp6t35st/BBXu3jU+ECokw/zfb1eoSPy+N8llY/+2af 61hHxYSfhgy8SInoR4kJ2dgeOiVII6IRbuuzdlCDEpzvuLVjdrU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:22:03 2025 by rpki-client