$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: xIRv0qcR6vE1PfQW+SqBAaZPnvyj2kSrggHPf8TUQMQ= Subject key identifier: 90:42:A6:F2:EB:B2:7F:E2:4F:27:3C:3C:71:18:6E:2C:33:AB:15:2B Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 4BFE9ABE8A56ED3D2F9795BE1ED99AC821C4216E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: 67 Signing time: Mon 30 Jun 2025 08:01:10 +0000 Manifest this update: Mon 30 Jun 2025 07:56:10 +0000 Manifest next update: Thu 03 Jul 2025 11:25:10 +0000 Files and hashes: 1: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: Ce48PZe/PNp2SiwefnaEawWNAb0kk5hxU9dHLfkkg4I=) 2: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: UXO0EVGk79VKVpzVVu+4tgus2AIbsvGynIdxAjYw1NA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fe:9a:be:8a:56:ed:3d:2f:97:95:be:1e:d9:9a:c8:21:c4:21:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Jun 30 07:56:10 2025 GMT Not After : Jul 3 11:25:10 2025 GMT Subject: CN=9042A6F2EBB27FE24F273C3C71186E2C33AB152B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:23:f6:3a:82:31:e6:dd:b5:c1:f1:6b:8f: 04:95:b9:72:f2:69:b2:fc:ba:f2:c5:e7:70:e6:f8: e1:20:45:d0:09:ef:43:91:6f:82:37:d3:f8:b4:9e: a7:52:23:cc:08:eb:94:f7:35:4d:92:a7:1d:6b:38: af:75:04:b2:f1:c5:a4:f4:6a:cb:45:36:8e:a0:db: 90:89:06:20:09:e2:8a:65:e2:d4:57:89:68:2a:5b: 43:9e:9e:46:ca:41:10:f8:ef:ec:da:6d:cd:f1:cd: 4f:36:58:42:05:50:ad:93:ac:17:7e:08:f2:bf:2c: df:bb:4b:26:ba:ae:2d:60:e5:8f:5b:fc:99:a9:cd: ff:1d:65:f6:4a:1a:19:0f:f7:46:ed:52:72:35:a1: a6:4e:63:ae:cd:db:f0:3b:d3:fe:61:60:f8:2d:16: 2c:fb:1a:50:9d:f7:b8:9f:1f:3d:5a:56:7d:89:9c: f1:44:92:ef:da:c8:73:df:b1:b4:fd:4d:79:8b:54: 2c:16:11:60:e8:7d:5d:39:72:58:46:51:78:fb:fc: 21:c7:8c:51:14:70:33:d8:75:1a:68:76:ce:ab:e0: 2c:75:25:af:6e:b7:6c:a3:b5:9a:3b:77:46:c2:53: 71:22:b3:8a:74:14:94:31:60:b1:d4:34:6e:7a:2a: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:A6:F2:EB:B2:7F:E2:4F:27:3C:3C:71:18:6E:2C:33:AB:15:2B X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1c:f8:a0:41:12:10:47:3a:b5:3a:c4:11:0f:61:68:62:a6: aa:6a:ed:56:7f:5c:f2:f3:e5:99:58:7c:aa:16:76:a1:6a:18: a7:b3:dc:3d:5c:ef:f8:4c:ac:3d:22:a2:52:0a:1e:99:c4:85: 4c:07:27:8d:e6:9f:4c:80:7f:5e:d5:8f:b3:1f:cf:65:72:07: b4:32:02:77:d8:4a:8e:98:65:12:b6:bf:1f:e7:0e:2e:fa:cf: 7f:78:24:74:77:f0:75:28:93:00:3a:e9:ab:c5:37:c3:34:30: 64:f3:6e:30:b6:31:85:c7:11:57:d6:dd:f4:11:d9:05:c7:f0: f6:e9:02:fa:11:0c:69:98:39:e9:64:10:f9:51:57:ec:4c:84: d7:73:2f:2e:ef:a4:41:0d:d8:39:c3:91:51:33:04:7e:9d:f1: 63:80:d2:80:10:41:09:a7:48:e9:43:f7:05:9a:79:2c:73:61: e9:a5:64:cb:39:d9:dc:e0:07:11:79:d2:a1:9a:c1:3b:92:81: a1:f1:e6:88:63:6d:d8:7d:b3:77:2c:a4:d6:61:90:48:e9:3e: 64:b4:11:14:f4:f4:49:48:41:ec:04:7d:b2:a7:58:56:49:b7: cc:22:83:5a:ca:ce:c8:9e:31:75:9f:cf:dc:0a:9b:16:7d:eb: 6b:b6:82:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/6avopW7T0vl5W+HtmayCHEIW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNTA2MzAwNzU2MTBaFw0yNTA3MDMxMTI1MTBaMDMxMTAvBgNV BAMTKDkwNDJBNkYyRUJCMjdGRTI0RjI3M0MzQzcxMTg2RTJDMzNBQjE1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TCP2OoIx5t21wfFrjwSVuXLy abL8uvLF53Dm+OEgRdAJ70ORb4I30/i0nqdSI8wI65T3NU2Spx1rOK91BLLxxaT0 astFNo6g25CJBiAJ4opl4tRXiWgqW0OenkbKQRD47+zabc3xzU82WEIFUK2TrBd+ CPK/LN+7Sya6ri1g5Y9b/Jmpzf8dZfZKGhkP90btUnI1oaZOY67N2/A70/5hYPgt Fiz7GlCd97ifHz1aVn2JnPFEku/ayHPfsbT9TXmLVCwWEWDofV05clhGUXj7/CHH jFEUcDPYdRpods6r4Cx1Ja9ut2yjtZo7d0bCU3Eis4p0FJQxYLHUNG56Ks7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEKm8uuyf+JPJzw8cRhuLDOrFSswHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkc+KBBEhBHOrU6xBEPYWhipqpq7VZ/XPLz 5ZlYfKoWdqFqGKez3D1c7/hMrD0iolIKHpnEhUwHJ43mn0yAf17Vj7Mfz2VyB7Qy AnfYSo6YZRK2vx/nDi76z394JHR38HUokwA66avFN8M0MGTzbjC2MYXHEVfW3fQR 2QXH8PbpAvoRDGmYOelkEPlRV+xMhNdzLy7vpEEN2DnDkVEzBH6d8WOA0oAQQQmn SOlD9wWaeSxzYemlZMs52dzgBxF50qGawTuSgaHx5ohjbdh9s3cspNZhkEjpPmS0 ERT09ElIQewEfbKnWFZJt8wig1rKzsieMXWfz9wKmxZ962u2gkA= -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:12 2025 by rpki-client