$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: 9IBFz6/dnsMZeOqvGSbObA9ZmeSweHhSMhzi2MYOR1A= Subject key identifier: C6:E6:28:5E:98:C4:70:36:24:50:F5:65:FF:7C:A2:11:7F:C8:0F:C0 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 118C8F184DD0EFD997FE8C99CBAC085EC8FA1DD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 034D Signing time: Mon 05 May 2025 21:51:03 +0000 Manifest this update: Mon 05 May 2025 21:46:03 +0000 Manifest next update: Thu 08 May 2025 23:03:03 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: E4DPhIdhtyijAEJNoEMgdKv4VAJwBNCUDp/lNjch5No=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: UVa2BFyeyFnWWwBGER708Zkc5wG3hgx7lEbyHJ9YtXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 23:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8c:8f:18:4d:d0:ef:d9:97:fe:8c:99:cb:ac:08:5e:c8:fa:1d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: May 5 21:46:03 2025 GMT Not After : May 8 23:03:03 2025 GMT Subject: CN=C6E6285E98C470362450F565FF7CA2117FC80FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:13:b6:be:6b:a6:0f:a0:28:b4:85:be:26: 57:ce:c1:08:3f:ce:98:7f:f7:cd:0e:5e:c1:ca:03: e9:17:bf:c2:c1:67:61:a6:5f:74:3c:52:31:73:27: a1:03:31:cb:f1:fd:72:73:05:1f:d3:c8:ce:6b:1b: 85:08:67:49:c9:9d:42:43:2d:87:a4:b2:79:d6:2e: 2a:2b:20:7b:ee:7c:0d:a6:df:c2:92:4c:44:42:8f: b0:ec:54:85:26:67:c4:d6:e6:ba:f5:c5:7d:3d:17: d8:dc:13:0d:ff:c3:bb:ba:75:a0:8a:0b:70:11:23: ea:21:ae:cb:70:87:4d:d6:35:e8:ef:07:a4:a4:83: 0c:7c:4e:94:07:c0:5b:43:98:80:f9:2f:67:e0:73: 8a:ca:ba:75:8f:72:43:91:f2:79:b6:18:94:41:1f: 46:27:c1:3a:10:41:ea:bf:55:79:5f:3b:55:c9:eb: 1c:b6:7c:fd:a0:d6:6a:cf:7b:c3:94:0e:5f:11:7f: b1:60:aa:c6:8a:75:f0:7b:f4:47:66:33:e1:c7:bd: a8:d3:53:fd:d5:c5:c2:6c:31:76:48:4e:ba:2d:24: f9:b5:24:46:29:37:42:ae:0c:63:9c:9a:c6:8d:de: ed:82:43:4d:67:5f:2d:7e:2c:3d:0e:a8:84:a0:13: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E6:28:5E:98:C4:70:36:24:50:F5:65:FF:7C:A2:11:7F:C8:0F:C0 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5f:21:72:07:9e:cd:ad:5c:5e:4d:c9:32:a0:c3:a4:cf:32: 72:ca:61:a4:fc:6d:e8:ca:54:45:2b:8e:d4:6a:7e:73:44:17: d2:c3:8f:5b:7d:55:0b:af:3a:ac:82:16:43:16:89:8b:dd:11: ed:88:a3:34:a8:49:31:1b:d2:28:0c:88:1f:62:e0:87:a5:1d: 9f:d9:e3:77:55:9a:26:e2:7e:55:ab:ef:e6:0a:b4:9d:4e:49: 70:9b:73:6f:1b:0c:ca:77:d8:72:62:24:a2:3a:d6:e8:ea:42: ee:28:b9:dc:4b:36:15:57:6a:59:d9:a1:40:f2:c6:5d:a9:80: 33:8e:0a:ec:55:73:35:23:01:4d:55:a8:7c:5f:07:01:0c:18: 84:13:9a:1d:46:38:83:19:49:4f:37:f6:eb:05:43:97:35:72: cb:b4:0c:aa:c5:3f:78:c1:5c:e9:15:5f:80:28:e6:b7:a5:e4: 45:59:81:82:82:3c:5e:f5:c7:67:55:ac:2f:29:1b:ce:74:c8: c4:aa:c0:c1:3d:11:8d:2c:ae:10:6f:8a:ef:43:d8:4c:e5:57: 4d:96:14:4a:69:e2:62:18:ac:e5:82:8f:2f:d7:bc:75:ae:8c: e5:38:1c:63:c2:65:aa:75:45:8d:fe:9d:f3:53:67:c8:46:e5: 27:76:65:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYyPGE3Q79mX/oyZy6wIXsj6HdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNTA1MDUyMTQ2MDNaFw0yNTA1MDgyMzAzMDNaMDMxMTAvBgNV BAMTKEM2RTYyODVFOThDNDcwMzYyNDUwRjU2NUZGN0NBMjExN0ZDODBGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsBO2vmumD6AotIW+JlfOwQg/ zph/980OXsHKA+kXv8LBZ2GmX3Q8UjFzJ6EDMcvx/XJzBR/TyM5rG4UIZ0nJnUJD LYeksnnWLiorIHvufA2m38KSTERCj7DsVIUmZ8TW5rr1xX09F9jcEw3/w7u6daCK C3ARI+ohrstwh03WNejvB6Skgwx8TpQHwFtDmID5L2fgc4rKunWPckOR8nm2GJRB H0YnwToQQeq/VXlfO1XJ6xy2fP2g1mrPe8OUDl8Rf7FgqsaKdfB79EdmM+HHvajT U/3VxcJsMXZITrotJPm1JEYpN0KuDGOcmsaN3u2CQ01nXy1+LD0OqISgE0AtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuYoXpjEcDYkUPVl/3yiEX/ID8AwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZfIXIHns2tXF5NyTKgw6TPMnLKYaT8bejK VEUrjtRqfnNEF9LDj1t9VQuvOqyCFkMWiYvdEe2IozSoSTEb0igMiB9i4IelHZ/Z 43dVmibiflWr7+YKtJ1OSXCbc28bDMp32HJiJKI61ujqQu4oudxLNhVXalnZoUDy xl2pgDOOCuxVczUjAU1VqHxfBwEMGIQTmh1GOIMZSU839usFQ5c1csu0DKrFP3jB XOkVX4Ao5rel5EVZgYKCPF71x2dVrC8pG850yMSqwME9EY0srhBviu9D2EzlV02W FEpp4mIYrOWCjy/XvHWujOU4HGPCZap1RY3+nfNTZ8hG5Sd2ZZY= -----END CERTIFICATE-----Generated at Wed May 7 19:49:01 2025 by rpki-client