$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: 72M1eU/xy2yaOm1VmkIPDeJN1QFhSfR8KKlNvWNVFjU= Subject key identifier: 99:0E:99:28:4B:01:E5:49:2C:A4:C5:A6:03:AB:97:78:3D:7F:79:3B Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 4333BEDD663AB7EA2DB3F22E974323418D4843E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 0245 Signing time: Sat 28 Jun 2025 02:22:00 +0000 Manifest this update: Sat 28 Jun 2025 02:17:00 +0000 Manifest next update: Tue 01 Jul 2025 11:44:00 +0000 Files and hashes: 1: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: ptHfgcV8wLmbLRBANNeWHhgDyTCsLDPqIQZeG9TrSOs=) 2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 30G0irckoWueHdL2XRvtGhNfRlze7pvxH51N/l3bYKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:33:be:dd:66:3a:b7:ea:2d:b3:f2:2e:97:43:23:41:8d:48:43:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Jun 28 02:17:00 2025 GMT Not After : Jul 1 11:44:00 2025 GMT Subject: CN=990E99284B01E5492CA4C5A603AB97783D7F793B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:4b:71:a9:7e:95:1e:8e:e6:db:0d:36:ec: 98:9c:1b:2f:98:64:68:df:e1:dc:97:fe:02:5c:76: c4:ee:3f:a3:de:35:bc:14:29:e3:62:00:48:30:22: ba:5d:5c:dc:c7:2e:2c:b2:3b:2a:9f:62:1a:56:f4: 61:7c:38:07:f7:9c:46:ca:d3:e0:76:1a:8e:6c:6f: da:f7:be:a4:e5:69:5f:f0:91:36:fb:23:34:b7:07: 94:53:fa:d5:94:9a:9c:77:b4:c2:a9:41:91:2b:da: cb:b5:5e:04:fa:cb:58:be:52:92:30:63:6e:bc:3a: 48:89:88:95:cf:7b:9a:e2:1a:d9:8b:ff:14:e9:81: b7:33:b8:af:fa:97:03:e5:3f:d2:7a:b7:78:e7:98: 0c:9e:3e:d3:ed:b4:da:2d:e8:97:40:d2:ef:79:69: 44:48:c4:04:25:dc:3d:b2:d6:cb:c3:32:93:ab:cf: 6f:d3:ae:be:f8:85:51:dc:2d:00:8a:91:87:c3:a1: 1c:b5:45:73:2d:d2:4c:8c:2c:e0:61:47:02:b2:60: 75:e3:52:7e:b2:5b:7b:08:5d:58:c8:c4:ac:49:fb: 56:77:47:77:93:af:f4:2a:b2:76:87:a1:c3:c9:14: d6:82:e6:1e:7c:7d:d0:ae:11:7b:ca:0f:d3:70:00: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0E:99:28:4B:01:E5:49:2C:A4:C5:A6:03:AB:97:78:3D:7F:79:3B X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:61:6c:77:5f:bc:d0:62:df:23:13:90:47:b6:ba:bd:d3:d2: b2:b3:11:5c:1a:ab:86:01:f9:e0:99:6f:18:1c:1d:61:13:f4: 38:79:3c:8d:88:32:27:2e:8b:56:ad:9a:c5:1c:43:f9:fb:db: 89:d6:71:91:e6:48:2f:12:3a:ba:37:42:c4:ef:9f:19:5b:26: c5:87:3c:9e:98:4a:31:51:1e:af:2d:6e:62:ae:a8:f8:9f:89: fb:eb:50:a3:30:ce:1f:61:e7:fe:ce:ba:b8:89:83:15:b5:7a: 14:d3:f0:10:1b:99:a4:2c:41:98:c7:5b:63:47:b4:07:12:f9: 2f:50:5c:75:df:2b:1b:19:8d:23:4e:6c:74:99:9b:04:26:56: b5:dc:7d:0d:a1:64:34:09:ac:cf:ac:97:25:41:c4:b8:0a:59: 80:ca:ad:d9:22:2d:73:1b:c0:32:ac:c2:77:cd:3f:91:ce:5e: 0c:d7:2d:11:81:8f:e6:f6:b1:ed:2b:88:2a:08:cd:47:28:3b: 14:e3:2b:0e:33:fa:69:52:3a:b2:4b:00:23:a3:25:aa:76:ca: 4e:30:13:c8:bc:64:1b:5e:d4:73:a8:55:03:97:a7:6a:53:80: ca:30:bc:8b:12:5e:82:11:df:7a:47:bc:61:13:e8:6a:7d:ba: 2a:c1:8a:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzO+3WY6t+ots/Iul0MjQY1IQ+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTA2MjgwMjE3MDBaFw0yNTA3MDExMTQ0MDBaMDMxMTAvBgNV BAMTKDk5MEU5OTI4NEIwMUU1NDkyQ0E0QzVBNjAzQUI5Nzc4M0Q3Rjc5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3UtxqX6VHo7m2w027JicGy+Y ZGjf4dyX/gJcdsTuP6PeNbwUKeNiAEgwIrpdXNzHLiyyOyqfYhpW9GF8OAf3nEbK 0+B2Go5sb9r3vqTlaV/wkTb7IzS3B5RT+tWUmpx3tMKpQZEr2su1XgT6y1i+UpIw Y268OkiJiJXPe5riGtmL/xTpgbczuK/6lwPlP9J6t3jnmAyePtPttNot6JdA0u95 aURIxAQl3D2y1svDMpOrz2/Trr74hVHcLQCKkYfDoRy1RXMt0kyMLOBhRwKyYHXj Un6yW3sIXVjIxKxJ+1Z3R3eTr/QqsnaHocPJFNaC5h58fdCuEXvKD9NwABNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQ6ZKEsB5UkspMWmA6uXeD1/eTswHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxhbHdfvNBi3yMTkEe2ur3T0rKzEVwaq4YB +eCZbxgcHWET9Dh5PI2IMicui1atmsUcQ/n724nWcZHmSC8SOro3QsTvnxlbJsWH PJ6YSjFRHq8tbmKuqPififvrUKMwzh9h5/7OuriJgxW1ehTT8BAbmaQsQZjHW2NH tAcS+S9QXHXfKxsZjSNObHSZmwQmVrXcfQ2hZDQJrM+slyVBxLgKWYDKrdkiLXMb wDKswnfNP5HOXgzXLRGBj+b2se0riCoIzUcoOxTjKw4z+mlSOrJLACOjJap2yk4w E8i8ZBte1HOoVQOXp2pTgMowvIsSXoIR33pHvGET6Gp9uirBilk= -----END CERTIFICATE-----Generated at Sun Jun 29 22:08:57 2025 by rpki-client