$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: oy1ufb1LyLlJ5rfVeZfsmMIfniNrVou09uXf+RB6diY= Subject key identifier: 31:42:84:B9:48:D5:28:F3:01:74:B2:83:DE:CD:1B:57:4A:CD:E7:05 Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 020F0EAF4E41AF66FAFC9DAA2C0FC83008F8DC0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 021D Signing time: Sun 29 Jun 2025 08:21:40 +0000 Manifest this update: Sun 29 Jun 2025 08:16:40 +0000 Manifest next update: Wed 02 Jul 2025 11:29:40 +0000 Files and hashes: 1: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) 2: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: SCVEu0YpSpGr0+2u1uASttLpbOnGfDm4rWSQr2XDcr8=) 3: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) 4: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 11:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0f:0e:af:4e:41:af:66:fa:fc:9d:aa:2c:0f:c8:30:08:f8:dc:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Jun 29 08:16:40 2025 GMT Not After : Jul 2 11:29:40 2025 GMT Subject: CN=314284B948D528F30174B283DECD1B574ACDE705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f7:18:0f:c0:41:e6:5d:6e:dc:3e:44:a6:60: 9c:a7:59:fb:00:95:e9:24:75:3f:2c:38:13:c1:4c: ce:c8:07:3c:95:db:6a:a7:55:f0:b7:42:40:d4:fe: eb:30:19:da:99:95:95:2d:6e:5a:7a:2c:16:64:49: e8:98:63:cb:b3:09:bf:f5:30:1e:85:84:eb:e0:6a: 47:0c:6c:cc:6e:28:0b:71:0e:ee:f9:f6:cd:a2:82: c8:45:e3:8b:51:63:a2:91:e7:64:2f:75:24:67:54: d8:fa:fb:58:82:dd:31:6d:09:22:3d:9d:a3:a6:a1: 2b:4f:fc:b3:cf:fd:2f:7b:ea:66:ac:fc:83:44:8b: 82:e8:81:ea:6d:99:90:ea:70:82:d7:59:bb:61:f4: 7f:4d:a8:41:d5:ee:44:bf:ba:71:ec:03:43:83:fd: ba:f9:0c:54:bd:c0:4c:eb:85:97:f6:f8:b8:35:67: 3d:33:ce:8d:03:d9:dd:8b:14:bc:18:57:b4:a0:c0: 0f:4b:90:1e:4d:32:17:51:1a:f9:51:cd:9c:56:b5: bf:75:ea:32:90:c1:39:e0:cc:83:b5:28:17:9b:9a: 65:0b:49:16:ac:37:8a:fd:6c:56:ba:72:40:bd:b2: c7:81:6d:3e:69:30:9f:51:d7:a5:e2:a4:db:ef:61: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:42:84:B9:48:D5:28:F3:01:74:B2:83:DE:CD:1B:57:4A:CD:E7:05 X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:eb:de:93:c5:f9:4a:49:97:5e:19:05:e4:ca:9f:2e:01:01: f0:45:ee:89:62:6c:77:27:91:3b:68:b5:47:54:55:25:24:6e: 9f:91:f7:58:10:48:5e:1a:8d:6c:46:8b:fd:19:7e:93:78:d4: db:42:bd:54:66:fc:73:58:8a:5a:10:f5:e2:23:88:ae:fc:0f: 0c:5f:68:9c:30:b6:8a:9a:6a:08:41:ea:4e:23:31:11:13:d6: c4:d0:2b:a6:47:85:7d:3a:52:0f:a9:5d:1c:bb:fb:1c:ec:5b: e2:55:6d:41:cf:b6:60:9d:5b:03:32:a8:07:f8:b8:b0:20:ad: 4f:07:e8:59:bd:54:17:5a:2c:3d:f5:3a:cf:a3:11:58:d6:09: 3a:f1:4a:c3:2a:7b:7f:98:6c:ab:e6:34:68:09:09:7a:60:fd: f2:26:fa:7b:24:48:69:49:33:db:9a:7a:30:f6:3d:2d:af:2e: f2:8f:6f:74:82:19:19:d0:7f:34:58:84:49:c0:ed:48:6e:79: b0:d8:f3:a8:1d:1a:89:1e:f8:d2:25:2a:a4:fa:d8:78:72:5d: 8a:6d:9b:d6:18:f4:9d:99:ea:f4:6e:85:78:eb:5f:f8:b1:53: f4:07:af:3d:18:ea:56:25:7d:4a:33:93:c7:c3:ab:91:c0:22: 39:a5:21:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAg8Or05Br2b6/J2qLA/IMAj43AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTA2MjkwODE2NDBaFw0yNTA3MDIxMTI5NDBaMDMxMTAvBgNV BAMTKDMxNDI4NEI5NDhENTI4RjMwMTc0QjI4M0RFQ0QxQjU3NEFDREU3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9xgPwEHmXW7cPkSmYJynWfsA lekkdT8sOBPBTM7IBzyV22qnVfC3QkDU/uswGdqZlZUtblp6LBZkSeiYY8uzCb/1 MB6FhOvgakcMbMxuKAtxDu759s2igshF44tRY6KR52QvdSRnVNj6+1iC3TFtCSI9 naOmoStP/LPP/S976mas/INEi4LogeptmZDqcILXWbth9H9NqEHV7kS/unHsA0OD /br5DFS9wEzrhZf2+Lg1Zz0zzo0D2d2LFLwYV7SgwA9LkB5NMhdRGvlRzZxWtb91 6jKQwTngzIO1KBebmmULSRasN4r9bFa6ckC9sseBbT5pMJ9R16XipNvvYcRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUKEuUjVKPMBdLKD3s0bV0rN5wUwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXr3pPF+UpJl14ZBeTKny4BAfBF7olibHcn kTtotUdUVSUkbp+R91gQSF4ajWxGi/0ZfpN41NtCvVRm/HNYiloQ9eIjiK78Dwxf aJwwtoqaaghB6k4jMRET1sTQK6ZHhX06Ug+pXRy7+xzsW+JVbUHPtmCdWwMyqAf4 uLAgrU8H6Fm9VBdaLD31Os+jEVjWCTrxSsMqe3+YbKvmNGgJCXpg/fIm+nskSGlJ M9uaejD2PS2vLvKPb3SCGRnQfzRYhEnA7UhuebDY86gdGoke+NIlKqT62HhyXYpt m9YY9J2Z6vRuhXjrX/ixU/QHrz0Y6lYlfUozk8fDq5HAIjmlIWM= -----END CERTIFICATE-----Generated at Mon Jun 30 10:27:03 2025 by rpki-client