$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: rThCuaZJxmfbaac3t41jE31y3vD4pHIMnLJqPunt8fs= Subject key identifier: D0:AF:1A:13:1D:30:28:74:11:8C:B1:31:5A:5E:92:5E:05:0A:AE:42 Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 760B34F674B02161269995B37B37F21D6EE95E0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 022D Signing time: Sun 04 May 2025 04:42:00 +0000 Manifest this update: Sun 04 May 2025 04:37:00 +0000 Manifest next update: Wed 07 May 2025 11:27:00 +0000 Files and hashes: 1: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 30G0irckoWueHdL2XRvtGhNfRlze7pvxH51N/l3bYKk=) 2: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: Ias7WES8Dq7NA/Ipvs8imNUMpo7CDIl+Pi+sdyTl5zY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 11:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0b:34:f6:74:b0:21:61:26:99:95:b3:7b:37:f2:1d:6e:e9:5e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: May 4 04:37:00 2025 GMT Not After : May 7 11:27:00 2025 GMT Subject: CN=D0AF1A131D302874118CB1315A5E925E050AAE42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:aa:6a:18:d7:a0:6f:42:b6:bc:92:ed:2c: 71:13:52:45:36:f0:d4:77:4e:a3:ac:6c:27:c0:95: 19:a7:75:b4:3d:bf:f4:65:9d:5e:23:61:8e:a0:a4: d7:91:ee:a7:68:b6:9a:17:08:e8:65:24:18:74:72: e7:a6:58:be:df:0c:70:a5:10:c9:5d:24:c5:b4:3c: ba:8d:0b:52:38:16:42:36:39:e5:20:86:8f:35:a5: 9d:72:ed:16:09:88:9d:ed:06:88:b0:32:2f:f8:fd: 1d:72:e5:b7:85:11:b2:91:dd:d5:ae:fc:3c:fd:99: 01:7a:28:27:67:af:5c:30:c7:90:7d:8a:9c:5c:77: 0f:1f:74:bd:18:0e:1b:02:b2:c5:a4:86:cf:f1:00: 7a:cc:ec:1a:e1:9e:4c:01:08:d8:51:20:05:30:c0: 14:b5:d7:3b:2b:7b:dc:78:05:98:05:16:a7:cb:94: 05:07:10:99:ba:bb:6f:5c:34:63:e0:15:93:a1:25: 46:20:b3:27:86:af:46:43:16:9b:b1:8c:85:54:4c: 3e:a9:cc:7c:0b:18:f9:04:1c:0b:99:7e:ad:92:e6: c8:2f:d2:01:81:6a:71:40:2c:38:80:4c:6a:8c:ab: bd:35:58:2f:da:dc:a7:5e:84:83:c0:e9:8d:33:4b: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AF:1A:13:1D:30:28:74:11:8C:B1:31:5A:5E:92:5E:05:0A:AE:42 X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e4:63:71:69:1b:4e:9b:5c:3b:8d:45:f3:d9:9b:6b:5d:a4: 4a:70:05:dc:d3:6d:b6:fb:38:17:ee:15:a6:6f:9d:d7:90:aa: 2e:26:ef:4e:f5:6f:33:4c:0d:c8:69:07:55:1c:fb:ed:4c:fa: 6f:aa:f4:c9:09:47:fc:b7:46:66:08:fb:f0:ec:cc:af:f8:87: da:16:49:51:96:d8:b3:5d:9d:e2:f3:19:35:9d:ab:75:96:46: 86:ce:df:00:49:f2:a2:20:2d:d3:24:e2:d2:75:c0:73:2b:20: 25:04:a0:33:6a:2a:41:8e:57:de:43:9a:47:9d:36:9c:65:a0: 9d:da:47:eb:6d:4b:c8:d2:19:65:67:97:e5:41:6f:ff:e2:0c: af:28:8f:e5:e7:29:b4:b7:46:62:ca:ae:e3:1d:3f:7e:fa:ed: 6b:f8:96:99:11:01:2d:30:16:aa:b3:44:2d:40:dc:3d:b8:50: 3d:6a:90:e1:b9:c8:91:15:c1:e2:45:5a:11:d3:9a:7b:13:ca: c5:8c:87:d3:96:e0:eb:c2:d7:fe:e4:c1:08:ad:86:e2:c0:b1: 24:f4:01:1f:ac:2d:71:c8:8b:3e:11:e9:f6:48:31:dd:f0:35: 20:49:9f:ff:89:9a:3a:ad:ef:26:f4:89:bd:12:3c:b1:45:4b: de:28:07:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgs09nSwIWEmmZWzezfyHW7pXg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTA1MDQwNDM3MDBaFw0yNTA1MDcxMTI3MDBaMDMxMTAvBgNV BAMTKEQwQUYxQTEzMUQzMDI4NzQxMThDQjEzMTVBNUU5MjVFMDUwQUFFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYapqGNegb0K2vJLtLHETUkU2 8NR3TqOsbCfAlRmndbQ9v/RlnV4jYY6gpNeR7qdotpoXCOhlJBh0cuemWL7fDHCl EMldJMW0PLqNC1I4FkI2OeUgho81pZ1y7RYJiJ3tBoiwMi/4/R1y5beFEbKR3dWu /Dz9mQF6KCdnr1wwx5B9ipxcdw8fdL0YDhsCssWkhs/xAHrM7BrhnkwBCNhRIAUw wBS11zsre9x4BZgFFqfLlAUHEJm6u29cNGPgFZOhJUYgsyeGr0ZDFpuxjIVUTD6p zHwLGPkEHAuZfq2S5sgv0gGBanFALDiATGqMq701WC/a3KdehIPA6Y0zSzXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0K8aEx0wKHQRjLExWl6SXgUKrkIwHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/kY3FpG06bXDuNRfPZm2tdpEpwBdzTbbb7 OBfuFaZvndeQqi4m7071bzNMDchpB1Uc++1M+m+q9MkJR/y3RmYI+/DszK/4h9oW SVGW2LNdneLzGTWdq3WWRobO3wBJ8qIgLdMk4tJ1wHMrICUEoDNqKkGOV95Dmked NpxloJ3aR+ttS8jSGWVnl+VBb//iDK8oj+XnKbS3RmLKruMdP3767Wv4lpkRAS0w FqqzRC1A3D24UD1qkOG5yJEVweJFWhHTmnsTysWMh9OW4OvC1/7kwQithuLAsST0 AR+sLXHIiz4R6fZIMd3wNSBJn/+Jmjqt7yb0ib0SPLFFS94oB1g= -----END CERTIFICATE-----Generated at Tue May 6 05:22:31 2025 by rpki-client