$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: 3rl/qLZ7xy1n86g6ByVgiGe7EJqBQUlLz1V3xpUUf/M= Subject key identifier: A6:2D:9F:1C:CA:66:01:CA:1B:8F:FF:9C:E8:C2:05:6E:70:8B:CE:F1 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 1D1EB23C000A9470F7DE4B44ECD0C3E0868FA5A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 01DE Signing time: Tue 17 Jun 2025 13:11:55 +0000 Manifest this update: Tue 17 Jun 2025 13:06:55 +0000 Manifest next update: Sat 21 Jun 2025 00:36:55 +0000 Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) 2: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: A3ENdn3SYldl+hSv/lcMXtEzIHwj/Q5PpicVm+q1Mho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 00:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1e:b2:3c:00:0a:94:70:f7:de:4b:44:ec:d0:c3:e0:86:8f:a5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Jun 17 13:06:55 2025 GMT Not After : Jun 21 00:36:55 2025 GMT Subject: CN=A62D9F1CCA6601CA1B8FFF9CE8C2056E708BCEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:df:f4:20:ed:70:2e:4a:0b:8e:d6:c6:02: 1d:25:67:0d:bb:64:8f:8f:2c:79:13:e4:c2:3b:cd: 9b:f0:b6:0e:61:7a:e4:fc:3f:88:82:8e:27:16:80: 11:7b:f5:5f:08:6d:43:74:0e:e7:ad:53:e6:7a:82: b3:12:6c:5c:df:52:79:e1:89:a6:3f:ee:db:5e:03: 4e:9c:c9:a0:e4:e8:11:22:5f:18:30:b4:b9:d3:08: 7b:9f:8d:a7:82:f8:97:bc:d7:fa:91:cb:98:90:c8: 8c:ec:f0:ce:0e:f4:3f:0b:d3:cf:ac:26:f2:06:d0: 91:41:0e:d2:f9:3b:ec:7b:d2:f5:7e:f3:bf:64:be: 7f:e7:92:ef:99:64:e8:64:2e:ce:b7:09:18:b0:96: 34:a8:4d:6b:7b:70:4b:e8:ca:78:fd:bb:6c:f7:76: 47:1f:98:11:d9:09:75:92:50:02:d2:51:8b:c1:b9: f0:9e:ec:00:6a:1a:7d:61:66:8a:42:b3:91:f1:90: ef:20:f8:1b:0d:21:87:33:b4:87:67:eb:16:e7:57: c1:69:44:8d:5a:d2:8e:8a:9c:1f:c8:a6:73:82:20: fa:fb:cd:4b:b5:66:01:7b:13:cc:36:19:f3:b4:14: 6b:8f:64:51:5c:fd:02:ca:ea:1e:b1:31:d3:55:4e: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2D:9F:1C:CA:66:01:CA:1B:8F:FF:9C:E8:C2:05:6E:70:8B:CE:F1 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a5:1a:c3:92:da:8a:99:9d:aa:0b:c5:bc:a6:96:ea:0b:ae: d5:d7:c4:e2:4c:46:c3:ac:83:75:4f:84:16:7d:eb:83:f3:a0: 3a:81:be:36:4b:bc:1f:94:e1:5b:3a:80:c1:03:12:9e:8d:36: c5:29:96:70:60:61:b2:c0:b8:eb:f8:3b:47:2c:f0:ed:58:3d: 98:9d:cb:2e:c8:17:d4:7c:67:dd:7c:40:d4:b2:27:cd:c6:90: 77:1a:78:65:d5:c2:fb:96:fd:26:77:43:65:38:fc:ed:b1:08: a7:b7:a4:e2:b0:1b:28:92:ad:a5:12:97:63:89:28:b0:09:37: 4d:d3:2c:3f:a0:12:d6:72:d3:6f:57:d7:2a:2b:b7:48:d3:c4: 2e:16:63:b2:e8:a1:e6:f1:36:5c:f8:20:59:d3:82:c1:b9:23: cc:21:4b:3a:df:0d:28:8a:6b:87:9c:2a:47:f9:14:b5:32:43: 78:0c:08:a6:13:26:06:db:fb:3e:a1:26:41:90:0d:80:30:88: 53:26:04:28:c5:b7:5c:1c:7c:f8:41:99:20:05:a7:13:30:ae: c5:85:c0:8f:9c:80:bf:db:36:f4:04:b1:00:56:e9:d8:4a:9c: 7d:12:65:31:38:e9:62:09:06:d7:30:15:5d:03:5b:91:d1:19: 93:c7:a1:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHR6yPAAKlHD33ktE7NDD4IaPpaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTA2MTcxMzA2NTVaFw0yNTA2MjEwMDM2NTVaMDMxMTAvBgNV BAMTKEE2MkQ5RjFDQ0E2NjAxQ0ExQjhGRkY5Q0U4QzIwNTZFNzA4QkNFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JN/0IO1wLkoLjtbGAh0lZw27 ZI+PLHkT5MI7zZvwtg5heuT8P4iCjicWgBF79V8IbUN0DuetU+Z6grMSbFzfUnnh iaY/7tteA06cyaDk6BEiXxgwtLnTCHufjaeC+Je81/qRy5iQyIzs8M4O9D8L08+s JvIG0JFBDtL5O+x70vV+879kvn/nku+ZZOhkLs63CRiwljSoTWt7cEvoynj9u2z3 dkcfmBHZCXWSUALSUYvBufCe7ABqGn1hZopCs5HxkO8g+BsNIYcztIdn6xbnV8Fp RI1a0o6KnB/IpnOCIPr7zUu1ZgF7E8w2GfO0FGuPZFFc/QLK6h6xMdNVTuzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpi2fHMpmAcobj/+c6MIFbnCLzvEwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGlGsOS2oqZnaoLxbymluoLrtXXxOJMRsOs g3VPhBZ964PzoDqBvjZLvB+U4Vs6gMEDEp6NNsUplnBgYbLAuOv4O0cs8O1YPZid yy7IF9R8Z918QNSyJ83GkHcaeGXVwvuW/SZ3Q2U4/O2xCKe3pOKwGyiSraUSl2OJ KLAJN03TLD+gEtZy029X1yort0jTxC4WY7LooebxNlz4IFnTgsG5I8whSzrfDSiK a4ecKkf5FLUyQ3gMCKYTJgbb+z6hJkGQDYAwiFMmBCjFt1wcfPhBmSAFpxMwrsWF wI+cgL/bNvQEsQBW6dhKnH0SZTE46WIJBtcwFV0DW5HRGZPHoXc= -----END CERTIFICATE-----Generated at Thu Jun 19 17:59:11 2025 by rpki-client