$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: q1bWBIzdWf3YEzhrOfU7oXt3E/lmp/T1N9mns8t32VQ= Subject key identifier: 2E:F3:C6:80:03:1A:E8:24:8D:E3:57:C6:55:91:E9:87:16:FD:24:D5 Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 30CAB399B7F12E9503AAA35E3CAD7709C8C9F75C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: BB Signing time: Fri 09 May 2025 06:50:38 +0000 Manifest this update: Fri 09 May 2025 06:45:38 +0000 Manifest next update: Mon 12 May 2025 18:07:38 +0000 Files and hashes: 1: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 2lAjycdxeSaqDarXvJpjbjwFWksBTkypcj159AzhKmk=) 2: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: L86WnKqh8XNpDUxH1pKtk3LNWz2DK6vcZcummYv0RGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 18:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ca:b3:99:b7:f1:2e:95:03:aa:a3:5e:3c:ad:77:09:c8:c9:f7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: May 9 06:45:38 2025 GMT Not After : May 12 18:07:38 2025 GMT Subject: CN=2EF3C680031AE8248DE357C65591E98716FD24D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:e2:23:c1:c9:53:46:43:e8:f3:90:92:d5: 4b:14:90:7e:d9:8f:1d:20:b7:6d:52:93:a5:6e:0f: 31:da:80:b2:8e:fb:90:fd:ed:9c:38:a9:7a:c1:bf: e1:15:67:2c:2b:1e:cf:b7:82:4a:b3:a6:bd:ea:d5: 61:99:97:15:b3:19:7c:03:7d:12:08:94:2b:0f:1f: 74:db:90:3c:ac:3f:cc:2e:d3:22:17:3a:7f:d4:31: d6:39:6d:60:0b:e1:0d:0d:14:7b:16:16:e4:ce:67: 39:a4:36:39:b0:71:49:7a:7d:6c:36:56:27:6a:ee: fa:72:4c:de:25:35:8a:38:3b:1c:86:3a:8d:e6:d1: 7e:67:f7:5e:98:d5:e2:93:fc:7f:00:a5:56:17:1f: 61:cb:29:09:2b:1f:5d:d5:87:01:ee:7d:bd:d6:19: d7:b3:5b:51:de:53:19:eb:33:c9:90:ce:b9:b7:b2: 33:63:0c:96:91:c5:e7:39:60:f8:60:cb:f7:5b:a6: 20:b4:8f:4d:06:1d:57:16:de:87:c2:7b:90:c2:14: 74:c2:0f:38:6f:52:d1:07:49:84:21:6a:5c:70:60: 63:fb:1e:d0:53:04:3d:c3:09:b1:26:40:c5:08:63: a1:9c:61:c6:ef:a0:b6:ea:c0:22:77:9e:11:2d:3c: e4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F3:C6:80:03:1A:E8:24:8D:E3:57:C6:55:91:E9:87:16:FD:24:D5 X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:af:73:e4:91:fa:cc:f4:3a:43:0d:49:3a:50:13:8a:d7:3b: 3f:63:48:5b:1e:b6:d7:1a:e7:bf:56:67:c0:ca:a6:a3:af:d3: 87:29:67:1e:0b:b3:49:bb:8b:7a:09:34:d8:da:76:b7:2a:d2: c3:1f:76:6e:4a:58:92:fa:22:1f:4f:f3:d0:33:f7:15:30:40: 28:96:0c:58:91:59:69:b9:6a:61:6b:45:c6:89:b1:7a:80:71: 02:2b:83:64:3b:f8:4a:9f:07:82:6d:ab:da:bc:4b:97:87:97: cc:f3:a9:1d:d6:29:d3:f3:51:bb:5f:59:7a:3d:6c:4f:08:d3: f7:ea:c5:37:2a:2e:cf:fc:e6:29:de:62:6f:33:83:c2:d1:0f: 3f:c0:d9:17:61:a7:02:8a:46:85:f3:65:39:b1:a9:c6:ea:21: 40:81:1f:d2:22:3f:15:e1:2a:c2:12:62:ab:e2:bb:7f:d0:68: f6:62:3f:5c:6d:ba:0a:3f:68:63:53:d5:e9:3f:d9:5b:43:01: cd:11:eb:4c:db:45:70:27:e3:e1:90:7f:4c:68:90:3a:83:0b: a7:d4:59:31:be:f1:9b:21:64:7c:60:94:fa:c0:d8:bb:ca:15: 71:ca:8d:f8:8a:0c:51:eb:41:66:9a:d9:73:b5:5e:1a:78:44: e8:74:2d:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMqzmbfxLpUDqqNePK13CcjJ91wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNTA1MDkwNjQ1MzhaFw0yNTA1MTIxODA3MzhaMDMxMTAvBgNV BAMTKDJFRjNDNjgwMDMxQUU4MjQ4REUzNTdDNjU1OTFFOTg3MTZGRDI0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClM+IjwclTRkPo85CS1UsUkH7Z jx0gt21Sk6VuDzHagLKO+5D97Zw4qXrBv+EVZywrHs+3gkqzpr3q1WGZlxWzGXwD fRIIlCsPH3TbkDysP8wu0yIXOn/UMdY5bWAL4Q0NFHsWFuTOZzmkNjmwcUl6fWw2 Vidq7vpyTN4lNYo4OxyGOo3m0X5n916Y1eKT/H8ApVYXH2HLKQkrH13VhwHufb3W GdezW1HeUxnrM8mQzrm3sjNjDJaRxec5YPhgy/dbpiC0j00GHVcW3ofCe5DCFHTC DzhvUtEHSYQhalxwYGP7HtBTBD3DCbEmQMUIY6GcYcbvoLbqwCJ3nhEtPOTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvPGgAMa6CSN41fGVZHphxb9JNUwHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKvc+SR+sz0OkMNSTpQE4rXOz9jSFsettca 579WZ8DKpqOv04cpZx4Ls0m7i3oJNNjadrcq0sMfdm5KWJL6Ih9P89Az9xUwQCiW DFiRWWm5amFrRcaJsXqAcQIrg2Q7+EqfB4Jtq9q8S5eHl8zzqR3WKdPzUbtfWXo9 bE8I0/fqxTcqLs/85ineYm8zg8LRDz/A2RdhpwKKRoXzZTmxqcbqIUCBH9IiPxXh KsISYqviu3/QaPZiP1xtugo/aGNT1ek/2VtDAc0R60zbRXAn4+GQf0xokDqDC6fU WTG+8ZshZHxglPrA2LvKFXHKjfiKDFHrQWaa2XO1Xhp4ROh0Leo= -----END CERTIFICATE-----Generated at Sat May 10 10:27:57 2025 by rpki-client