$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: uyza72MqwcPPPH+uQT6IoSPWXxYCnz667jxVw6IwBaQ= Subject key identifier: 40:03:3C:87:D2:E7:9F:16:E5:97:39:21:23:A4:1D:CC:A0:F9:C2:F3 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 7C9C3ADDF6FFCCBAEEE58D2D474B2387FCDC5E9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 01F2 Signing time: Wed 07 May 2025 10:51:26 +0000 Manifest this update: Wed 07 May 2025 10:46:26 +0000 Manifest next update: Sat 10 May 2025 14:43:26 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: B7K8FqbbqZVF2TGRL9rnMuHV2CIg5/OA/e5yiXKxUkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 14:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9c:3a:dd:f6:ff:cc:ba:ee:e5:8d:2d:47:4b:23:87:fc:dc:5e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: May 7 10:46:26 2025 GMT Not After : May 10 14:43:26 2025 GMT Subject: CN=40033C87D2E79F16E597392123A41DCCA0F9C2F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:aa:a3:e8:5c:80:ee:b0:23:40:ad:f3:16: 3f:be:1d:71:ff:25:0b:43:03:ad:46:78:22:31:9f: 6c:d3:4d:94:8d:0b:36:ea:ba:2e:4c:83:8e:66:a1: 27:b0:1a:a6:39:e6:28:74:b5:59:51:54:4a:48:e3: bd:3c:6a:4d:62:b8:8d:03:5a:62:d3:76:15:9b:79: 0a:bd:67:30:8d:a1:79:3e:1f:87:06:5c:6d:05:9b: 5e:8a:bc:8b:f8:bf:05:1a:e9:d6:ff:a4:be:17:b2: d8:3f:42:e4:7a:5a:77:72:9b:17:9b:8f:d4:96:68: 97:20:5d:84:43:8b:a9:c7:62:d9:d0:cf:6b:09:cf: 23:49:ce:ba:88:74:06:8b:67:fb:0f:24:3c:2c:dc: e4:ab:79:d0:9b:ad:99:e1:23:45:be:79:0d:6e:d5: 75:b2:ca:00:ec:b3:16:b4:20:9b:0d:b3:f7:fe:32: c4:d0:14:52:5d:65:87:c7:f0:dd:69:a9:a0:28:04: 74:21:0a:69:ff:69:b1:28:4d:54:38:75:bd:e3:39: 04:ae:9d:71:36:84:14:fe:a7:c1:c6:ed:74:bb:b8: db:05:4c:ea:1b:f0:18:fe:ad:c3:03:cf:58:45:3e: a8:ba:5e:df:00:98:9c:8a:88:18:84:b7:a7:30:90: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:03:3C:87:D2:E7:9F:16:E5:97:39:21:23:A4:1D:CC:A0:F9:C2:F3 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:53:08:c5:21:25:82:96:f0:ae:a6:06:56:24:d6:c0:0c:d0: 4d:55:ad:00:46:67:a4:1c:d2:c4:60:88:d2:c2:a8:05:dd:8f: e2:7d:fc:1c:68:cd:de:a0:eb:1c:6e:2a:ad:c6:e0:8f:21:27: 39:1e:a6:cf:b6:37:a9:02:af:e1:07:4a:44:3a:4f:0b:44:e6: 16:30:74:cc:29:11:29:2c:2e:37:11:a9:e6:8a:c0:47:64:35: b7:cd:21:17:18:6d:86:ee:ed:54:cb:71:0f:ab:80:c4:ad:5d: a9:c5:9a:2c:f2:54:51:25:fb:3f:f7:76:f7:d3:f0:9d:1c:1c: 3c:48:df:bb:65:63:a8:c7:d7:36:0f:09:1c:6e:2d:72:68:f9: c9:c1:04:ce:db:ec:b2:45:95:84:06:28:9d:e8:84:f3:48:1d: c0:c1:35:4e:cf:e1:ef:0f:86:b6:e5:9b:e7:7b:2b:77:99:70: b5:48:93:25:85:2b:11:6a:d8:38:2f:7d:58:c3:d0:f3:0b:a9: bf:d3:b6:55:ef:66:08:c3:b2:d6:25:d8:52:fa:8a:ae:90:de: 4e:dd:1e:b2:1a:01:d7:12:0b:37:ef:6c:e2:4f:e1:4f:ad:b7: 97:b4:bf:38:44:ba:d4:39:eb:72:07:a0:93:cf:af:ec:e4:7b: c3:23:1f:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJw63fb/zLru5Y0tR0sjh/zcXp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA1MDcxMDQ2MjZaFw0yNTA1MTAxNDQzMjZaMDMxMTAvBgNV BAMTKDQwMDMzQzg3RDJFNzlGMTZFNTk3MzkyMTIzQTQxRENDQTBGOUMyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNI6qj6FyA7rAjQK3zFj++HXH/ JQtDA61GeCIxn2zTTZSNCzbqui5Mg45moSewGqY55ih0tVlRVEpI4708ak1iuI0D WmLTdhWbeQq9ZzCNoXk+H4cGXG0Fm16KvIv4vwUa6db/pL4Xstg/QuR6Wndymxeb j9SWaJcgXYRDi6nHYtnQz2sJzyNJzrqIdAaLZ/sPJDws3OSredCbrZnhI0W+eQ1u 1XWyygDssxa0IJsNs/f+MsTQFFJdZYfH8N1pqaAoBHQhCmn/abEoTVQ4db3jOQSu nXE2hBT+p8HG7XS7uNsFTOob8Bj+rcMDz1hFPqi6Xt8AmJyKiBiEt6cwkAoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAM8h9LnnxbllzkhI6QdzKD5wvMwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZTCMUhJYKW8K6mBlYk1sAM0E1VrQBGZ6Qc 0sRgiNLCqAXdj+J9/Bxozd6g6xxuKq3G4I8hJzkeps+2N6kCr+EHSkQ6TwtE5hYw dMwpESksLjcRqeaKwEdkNbfNIRcYbYbu7VTLcQ+rgMStXanFmizyVFEl+z/3dvfT 8J0cHDxI37tlY6jH1zYPCRxuLXJo+cnBBM7b7LJFlYQGKJ3ohPNIHcDBNU7P4e8P hrblm+d7K3eZcLVIkyWFKxFq2DgvfVjD0PMLqb/TtlXvZgjDstYl2FL6iq6Q3k7d HrIaAdcSCzfvbOJP4U+tt5e0vzhEutQ563IHoJPPr+zke8MjH60= -----END CERTIFICATE-----Generated at Thu May 8 22:35:48 2025 by rpki-client