$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: MRveBerOR+Yvj5oi1b7vLELDp5tVlSB47nmiICoEYNI= Subject key identifier: A3:10:04:90:53:93:15:57:86:9D:CE:E3:BE:83:21:A5:25:AC:C0:CD Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 26695F69676E1D8292C855358973AE49AB8E1721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 027B Signing time: Thu 08 May 2025 08:22:19 +0000 Manifest this update: Thu 08 May 2025 08:17:19 +0000 Manifest next update: Sun 11 May 2025 09:16:19 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 0vXpxdXBoxtpu0xcyCU+AYUkP5Qq7RrqqwsILvqbx7A=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: 8olOkwe7wYmxExSmqX50C2FXP+ygjBln13wukHuslcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 09:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:69:5f:69:67:6e:1d:82:92:c8:55:35:89:73:ae:49:ab:8e:17:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: May 8 08:17:19 2025 GMT Not After : May 11 09:16:19 2025 GMT Subject: CN=A310049053931557869DCEE3BE8321A525ACC0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:56:7d:32:e5:c9:ca:d5:8b:d9:52:ae:9b: d7:f9:c6:21:5d:af:d9:7f:7c:da:58:b8:0d:4e:71: bb:ef:47:74:2f:f6:f3:70:3d:f5:ad:79:67:2b:79: 7a:d2:95:08:5f:b4:23:52:7e:c7:30:d0:a7:29:0e: 61:b5:36:e8:e6:bb:f1:fa:32:73:42:72:25:4c:91: 04:55:82:08:f9:b8:c2:70:23:d2:f3:45:81:8a:59: a1:2f:47:d1:5a:ea:b3:57:1b:a2:5e:02:b8:49:a2: b6:2d:07:88:9b:e0:02:1d:65:96:f0:6c:c0:9e:60: 7f:cc:65:08:5b:e0:df:10:c8:7c:75:ff:c6:dc:2d: 14:90:b9:61:00:11:80:6a:b5:8d:13:95:e0:f5:cf: f1:5c:27:22:35:7f:0e:80:5c:30:80:3b:09:0d:a3: b9:3a:56:c8:89:65:c7:fa:f1:ce:8b:e2:9a:d6:88: 51:39:ff:03:cc:98:ba:90:55:2c:53:79:e9:e2:29: 70:af:3a:da:dd:d8:9f:f5:71:9d:6b:d5:0f:47:75: 4e:9a:d3:3b:b5:ee:ad:18:2d:ec:7f:e3:bc:e0:d3: c5:da:2b:a8:ec:97:37:39:7b:90:cf:d3:22:a4:45: c9:df:3d:4d:e9:8a:a4:4c:62:42:e0:f7:94:f4:82: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:04:90:53:93:15:57:86:9D:CE:E3:BE:83:21:A5:25:AC:C0:CD X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:8c:34:3c:f8:4b:14:e1:93:0b:f1:ad:96:93:8a:dc:62:89: 7e:01:bc:14:45:1f:b6:7f:89:c8:0f:cf:14:43:c2:6c:54:9c: 1d:a2:76:1b:e0:4d:d5:c2:7f:df:5d:4c:62:e2:3d:f0:c3:90: af:08:62:94:71:28:fc:d8:dc:e2:aa:0d:2e:0f:09:b6:ff:de: 86:d7:66:43:76:85:d9:6f:9c:ce:39:28:1f:8d:0d:35:e9:f3: 77:ee:7a:20:cb:9a:b8:57:b9:13:83:7d:96:1f:ba:f9:ad:e1: 1e:66:f4:c0:d8:7e:d3:cc:4b:9a:56:c8:ce:df:a0:d2:bd:19: a3:8e:f5:02:fe:32:2e:63:ee:f8:8a:08:6e:81:a0:ad:b8:41: fc:7f:e1:ae:2e:d2:8c:da:95:d5:b1:1d:c6:43:33:fe:45:43: 77:14:60:11:25:f5:95:84:12:71:ca:7f:a8:33:ed:96:5d:bf: e5:85:67:ed:e0:71:de:2f:ad:7f:db:a6:8a:dc:3c:8c:d0:b8: ad:04:0b:62:1d:e0:b9:cc:a8:6e:25:a3:6e:7e:40:7a:eb:89: 22:a3:71:90:d4:bf:88:0a:7c:2a:cf:ee:ac:04:7b:e0:72:e2: 49:53:8e:de:16:62:53:df:98:15:61:06:0e:a0:32:b9:e1:5b: 3b:35:ee:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmlfaWduHYKSyFU1iXOuSauOFyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTA1MDgwODE3MTlaFw0yNTA1MTEwOTE2MTlaMDMxMTAvBgNV BAMTKEEzMTAwNDkwNTM5MzE1NTc4NjlEQ0VFM0JFODMyMUE1MjVBQ0MwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3VZ9MuXJytWL2VKum9f5xiFd r9l/fNpYuA1OcbvvR3Qv9vNwPfWteWcreXrSlQhftCNSfscw0KcpDmG1Nujmu/H6 MnNCciVMkQRVggj5uMJwI9LzRYGKWaEvR9Fa6rNXG6JeArhJorYtB4ib4AIdZZbw bMCeYH/MZQhb4N8QyHx1/8bcLRSQuWEAEYBqtY0TleD1z/FcJyI1fw6AXDCAOwkN o7k6VsiJZcf68c6L4prWiFE5/wPMmLqQVSxTeeniKXCvOtrd2J/1cZ1r1Q9HdU6a 0zu17q0YLex/47zg08XaK6jslzc5e5DP0yKkRcnfPU3piqRMYkLg95T0gijdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoxAEkFOTFVeGnc7jvoMhpSWswM0wHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeMNDz4SxThkwvxrZaTitxiiX4BvBRFH7Z/ icgPzxRDwmxUnB2idhvgTdXCf99dTGLiPfDDkK8IYpRxKPzY3OKqDS4PCbb/3obX ZkN2hdlvnM45KB+NDTXp83fueiDLmrhXuRODfZYfuvmt4R5m9MDYftPMS5pWyM7f oNK9GaOO9QL+Mi5j7viKCG6BoK24Qfx/4a4u0ozaldWxHcZDM/5FQ3cUYBEl9ZWE EnHKf6gz7ZZdv+WFZ+3gcd4vrX/bporcPIzQuK0EC2Id4LnMqG4lo25+QHrriSKj cZDUv4gKfCrP7qwEe+By4klTjt4WYlPfmBVhBg6gMrnhWzs17iE= -----END CERTIFICATE-----Generated at Sat May 10 02:26:03 2025 by rpki-client