$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: tQpoag6NixL7vK/WybRpBOn2fJpoZnxOK9DJiVVUQvE= Subject key identifier: DA:B1:CE:C9:C8:BA:FD:28:9F:D1:62:07:C3:6D:A2:67:62:9F:86:43 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 623D8AFC8B89F40B422DCC7F4718E612DF5C3CEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 01C9 Signing time: Thu 01 May 2025 07:41:55 +0000 Manifest this update: Thu 01 May 2025 07:36:55 +0000 Manifest next update: Sun 04 May 2025 17:04:55 +0000 Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) 2: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: cvp3iYjvV1oTZqsYIJ2oVJos8mJ6vavjhDLpy40PTFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 17:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3d:8a:fc:8b:89:f4:0b:42:2d:cc:7f:47:18:e6:12:df:5c:3c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: May 1 07:36:55 2025 GMT Not After : May 4 17:04:55 2025 GMT Subject: CN=DAB1CEC9C8BAFD289FD16207C36DA267629F8643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:2b:bf:8b:5f:d1:e4:90:01:f4:fa:c3:77: fe:8e:2e:ab:d6:d3:91:3b:1b:ee:3f:1e:3a:f9:6a: bb:ed:8f:43:bb:32:57:0c:67:37:43:28:cf:8f:13: 5a:1c:7d:17:f8:c2:3f:f7:8a:87:95:2b:10:f3:46: 8e:31:c5:8d:93:db:ef:f5:61:da:10:5c:60:2b:7c: 52:c8:50:f8:e6:48:25:5d:34:3b:5d:19:1f:12:f3: 64:a2:1e:12:af:ff:59:c0:a7:a9:89:c0:96:08:4d: f5:15:d1:23:b1:bd:85:b5:ed:f0:a2:2f:4c:66:6c: 45:00:37:1f:d1:b2:6a:92:35:3a:49:67:90:36:a3: 25:92:2e:32:34:31:9d:82:05:d3:c4:5d:29:f8:64: d3:9a:82:24:60:42:c4:13:f0:64:2e:0f:14:0b:fb: 81:7f:80:9d:a9:bd:78:62:b7:cc:63:fe:1b:a1:98: 48:a2:8c:f6:69:53:b9:66:c8:10:2f:0a:16:69:09: f9:56:3b:90:6d:b1:b6:61:a1:2d:8f:13:c9:1e:bf: b0:bb:33:fc:92:f8:04:02:89:d6:ab:38:b6:85:4e: d0:66:4f:a7:d6:3d:4b:67:64:a2:0c:96:fa:19:d3: 55:ca:39:7a:9f:fe:2d:42:3a:ea:6c:59:c0:3d:80: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B1:CE:C9:C8:BA:FD:28:9F:D1:62:07:C3:6D:A2:67:62:9F:86:43 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:56:05:c0:ac:c1:af:6b:b3:2d:ff:7d:79:2e:7d:75:a3:b2: 27:0b:db:da:e0:b1:e2:7e:f7:82:1c:3c:a5:4e:7f:b3:96:e5: 30:a8:b5:ca:96:50:c5:3d:18:b5:21:02:28:be:69:9d:3c:bc: 7e:14:0d:93:6b:76:02:ab:47:02:a5:6f:dc:76:07:81:02:3b: 51:19:71:36:72:e7:ae:28:4f:6f:d1:9d:26:d4:14:c4:65:06: a9:31:1e:d4:43:8f:b6:6d:5d:57:bc:ee:4d:53:6f:57:1e:a6: 0d:5a:b1:e3:3b:dd:06:4b:ce:2d:00:25:6c:ec:db:3f:26:79: 46:01:c8:72:2c:2e:b1:1c:63:c0:6d:fb:c8:50:d7:d6:a4:b9: 4d:8a:61:f7:41:bd:c7:64:1d:2f:6a:f8:82:50:a6:d0:45:6e: f5:9a:a7:22:2b:34:b4:7a:f4:33:88:5c:0a:64:9b:79:3f:1a: a6:57:6a:55:20:96:f6:d9:fe:7a:5a:e4:53:bc:42:f0:3d:15: cf:b1:db:4f:5b:8f:7f:2f:b0:5e:f9:a4:5c:d1:4e:f0:b4:7e: 02:6b:44:10:8e:25:f8:d1:8c:74:56:49:31:83:f5:c2:b3:16: bb:4e:3e:57:35:8d:c7:bc:93:ba:13:0f:77:26:3d:ec:7a:c7: 31:e0:81:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYj2K/IuJ9AtCLcx/RxjmEt9cPOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTA1MDEwNzM2NTVaFw0yNTA1MDQxNzA0NTVaMDMxMTAvBgNV BAMTKERBQjFDRUM5QzhCQUZEMjg5RkQxNjIwN0MzNkRBMjY3NjI5Rjg2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeiu/i1/R5JAB9PrDd/6OLqvW 05E7G+4/Hjr5arvtj0O7MlcMZzdDKM+PE1ocfRf4wj/3ioeVKxDzRo4xxY2T2+/1 YdoQXGArfFLIUPjmSCVdNDtdGR8S82SiHhKv/1nAp6mJwJYITfUV0SOxvYW17fCi L0xmbEUANx/RsmqSNTpJZ5A2oyWSLjI0MZ2CBdPEXSn4ZNOagiRgQsQT8GQuDxQL +4F/gJ2pvXhit8xj/huhmEiijPZpU7lmyBAvChZpCflWO5BtsbZhoS2PE8kev7C7 M/yS+AQCidarOLaFTtBmT6fWPUtnZKIMlvoZ01XKOXqf/i1COupsWcA9gCJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rHOyci6/Sif0WIHw22iZ2KfhkMwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZWBcCswa9rsy3/fXkufXWjsicL29rgseJ+ 94IcPKVOf7OW5TCotcqWUMU9GLUhAii+aZ08vH4UDZNrdgKrRwKlb9x2B4ECO1EZ cTZy564oT2/RnSbUFMRlBqkxHtRDj7ZtXVe87k1Tb1cepg1aseM73QZLzi0AJWzs 2z8meUYByHIsLrEcY8Bt+8hQ19akuU2KYfdBvcdkHS9q+IJQptBFbvWapyIrNLR6 9DOIXApkm3k/GqZXalUglvbZ/npa5FO8QvA9Fc+x209bj38vsF75pFzRTvC0fgJr RBCOJfjRjHRWSTGD9cKzFrtOPlc1jce8k7oTD3cmPex6xzHggRE= -----END CERTIFICATE-----Generated at Sat May 3 08:40:22 2025 by rpki-client