$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: ZAAH+QrkZqTM3FBjLu4CmwLeX+GQh/Ez2lvs86kJCNw= Subject key identifier: 1B:57:05:23:04:3D:E3:BA:81:22:E6:8C:18:28:E0:22:01:C5:4F:DD Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 4C43442A19BE4C920784C14C3688ECE81CCDBCEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: 48 Signing time: Sat 10 May 2025 12:52:00 +0000 Manifest this update: Sat 10 May 2025 12:47:00 +0000 Manifest next update: Tue 13 May 2025 20:15:00 +0000 Files and hashes: 1: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: jJa3J+j3pthkOfYSAkMI/cA5QlWZWFsLsxr1FYhx5fQ=) 2: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: bni1MEXt2pu3EGFhrLDGw6PMS2Wp/uUSxRtLnqeKGlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:43:44:2a:19:be:4c:92:07:84:c1:4c:36:88:ec:e8:1c:cd:bc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: May 10 12:47:00 2025 GMT Not After : May 13 20:15:00 2025 GMT Subject: CN=1B570523043DE3BA8122E68C1828E02201C54FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:05:57:e4:f7:77:87:3a:e3:37:ac:bd:28: bc:e8:ad:b6:1a:d0:36:7f:49:61:db:02:ca:c7:58: 59:52:2e:ce:e5:6d:a8:0a:5c:44:ea:23:fe:dc:23: 3e:bc:10:1b:fd:65:4e:b9:a5:68:b6:fc:83:9f:33: 3c:37:c1:7e:1a:05:45:42:2b:d9:eb:70:3f:7b:c4: 39:2f:8a:50:8b:77:42:c9:bd:9e:d1:6e:26:9d:9f: d9:69:44:e8:8a:a3:a4:ce:a3:5a:2f:99:5f:c4:2c: 5f:39:97:f5:c5:79:33:95:ac:8b:26:45:75:92:a5: b5:b6:48:34:8c:9c:9b:2d:2f:b6:a0:6b:a9:63:b5: f7:66:fe:21:24:8f:e1:ac:dd:5f:3a:e7:17:f0:00: 17:89:4c:e7:df:2f:1d:6c:fd:a7:e1:a1:0f:20:35: c3:73:83:07:a6:2c:77:8c:bf:43:67:45:af:d7:9e: 82:f6:1e:ca:9e:d3:1b:9b:06:f4:53:62:cb:37:ca: 31:d5:d6:d2:bb:83:41:65:e0:b9:67:22:3c:c5:cc: 06:d4:2a:13:34:e2:a8:b6:f6:73:4d:4b:a9:10:8d: 3c:50:35:de:66:e1:64:8b:f1:c6:82:cc:e8:34:e7: b0:78:c2:af:0d:18:0e:68:9e:fb:53:9c:38:12:fe: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:05:23:04:3D:E3:BA:81:22:E6:8C:18:28:E0:22:01:C5:4F:DD X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dd:fc:9e:f5:37:05:e8:7c:19:77:bb:e1:05:94:fe:c5:05: 52:9e:f2:36:e5:49:64:40:56:40:44:85:7e:6c:3b:21:fc:3b: c3:6e:88:a5:99:ab:a5:25:be:4b:aa:8f:2e:2f:5b:de:0b:ba: 07:43:be:3a:87:27:3a:aa:44:0c:72:b5:35:e5:01:13:c8:33: cd:17:b7:9f:b6:ce:a3:c9:14:41:40:b9:b3:60:a0:e1:5c:03: 69:a7:27:c4:30:af:20:17:99:01:dd:2f:68:43:1b:df:67:d6: fc:e7:21:68:6d:3c:f5:06:6b:64:89:e6:80:2d:c6:a8:09:97: 1c:92:da:03:44:35:f7:43:14:36:35:4a:9e:36:95:2c:4b:cd: dd:84:97:5a:1d:96:21:2d:87:19:4d:41:bc:bb:dc:bc:65:bf: 93:86:1b:33:19:6d:9e:3c:d7:1f:00:fd:c3:22:e7:90:ff:d6: 39:26:6c:10:d4:0f:f8:85:fd:31:6a:69:cf:0a:d8:bb:33:5d: c7:9e:30:3d:db:8a:a9:21:6c:7e:2f:a2:f3:5c:da:e9:9a:80: a9:e4:4b:72:e2:85:49:bb:ed:86:c7:d6:ff:7c:c6:46:3b:7d: 86:a7:6f:cb:fa:64:01:31:7b:e6:d4:f2:e2:e3:c3:94:80:04: 28:44:d1:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTENEKhm+TJIHhMFMNojs6BzNvOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNTA1MTAxMjQ3MDBaFw0yNTA1MTMyMDE1MDBaMDMxMTAvBgNV BAMTKDFCNTcwNTIzMDQzREUzQkE4MTIyRTY4QzE4MjhFMDIyMDFDNTRGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEwVX5Pd3hzrjN6y9KLzorbYa 0DZ/SWHbAsrHWFlSLs7lbagKXETqI/7cIz68EBv9ZU65pWi2/IOfMzw3wX4aBUVC K9nrcD97xDkvilCLd0LJvZ7Rbiadn9lpROiKo6TOo1ovmV/ELF85l/XFeTOVrIsm RXWSpbW2SDSMnJstL7aga6ljtfdm/iEkj+Gs3V865xfwABeJTOffLx1s/afhoQ8g NcNzgwemLHeMv0NnRa/XnoL2Hsqe0xubBvRTYss3yjHV1tK7g0Fl4LlnIjzFzAbU KhM04qi29nNNS6kQjTxQNd5m4WSL8caCzOg057B4wq8NGA5onvtTnDgS/gpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG1cFIwQ947qBIuaMGCjgIgHFT90wHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzd/J71NwXofBl3u+EFlP7FBVKe8jblSWRA VkBEhX5sOyH8O8NuiKWZq6Ulvkuqjy4vW94LugdDvjqHJzqqRAxytTXlARPIM80X t5+2zqPJFEFAubNgoOFcA2mnJ8QwryAXmQHdL2hDG99n1vznIWhtPPUGa2SJ5oAt xqgJlxyS2gNENfdDFDY1Sp42lSxLzd2El1odliEthxlNQby73Lxlv5OGGzMZbZ48 1x8A/cMi55D/1jkmbBDUD/iF/TFqac8K2LszXceeMD3biqkhbH4vovNc2umagKnk S3LihUm77YbH1v98xkY7fYanb8v6ZAExe+bU8uLjw5SABChE0ew= -----END CERTIFICATE-----Generated at Sun May 11 22:06:55 2025 by rpki-client