$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: Jwn6c4vPiO/y4EA3NW8UYRlSTBMWx58BN+1C7VEsQYw= Subject key identifier: 8B:9C:2A:4B:F7:2C:5B:BE:6E:F1:69:E1:15:9F:A5:CE:B6:3A:6D:33 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 7FF2A686EC1031624DA48489750205006CB53878 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: EC Signing time: Mon 30 Jun 2025 08:31:34 +0000 Manifest this update: Mon 30 Jun 2025 08:26:33 +0000 Manifest next update: Thu 03 Jul 2025 15:15:33 +0000 Files and hashes: 1: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=) 2: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=) 3: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: Rybe9+pz2X494lCkP4J9hN/LYvdCdRRBL027xP5LIRk=) 4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 15:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f2:a6:86:ec:10:31:62:4d:a4:84:89:75:02:05:00:6c:b5:38:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Jun 30 08:26:33 2025 GMT Not After : Jul 3 15:15:33 2025 GMT Subject: CN=8B9C2A4BF72C5BBE6EF169E1159FA5CEB63A6D33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:1a:b7:12:d2:ef:d5:6b:e0:d2:e0:fc:d1: 52:96:ef:5e:27:7b:8a:e2:08:43:f3:57:62:92:ac: ae:ca:61:27:51:23:ae:f6:6c:67:ed:cb:b9:20:fc: bf:68:f2:05:cf:44:0d:6a:be:d9:4f:ae:67:94:54: be:68:7f:36:1e:b9:27:4f:a0:0f:17:63:75:42:52: e8:2f:f6:94:f8:0a:d5:73:a5:60:2f:b4:ad:00:cf: fe:0a:07:c2:49:7e:9c:d8:e9:dc:03:2e:f4:ac:30: 7d:c5:93:10:6b:d4:c9:e6:fa:bc:d0:d7:3b:b4:ef: b5:3d:61:1d:5e:f9:c0:30:dc:91:93:ab:39:b6:3e: ad:11:5f:c0:ea:42:ad:3a:4f:14:62:c6:9f:7f:9f: ae:61:5b:69:fb:2f:d0:b9:c8:e2:ba:c2:a1:df:ae: 8a:f0:e2:f3:53:a8:7b:5c:4c:ef:1a:85:cf:89:c4: 3c:33:04:8f:23:56:9a:71:25:55:06:ab:97:1e:f5: c4:27:f6:0a:3c:c8:aa:52:fc:72:83:98:eb:ee:18: 78:16:e8:76:32:7c:e6:c2:2c:e0:d7:e4:ad:c3:81: 03:a0:35:17:40:d0:ed:1c:8f:46:fb:05:29:94:a5: 92:9d:03:1c:0f:08:08:fc:a6:d9:e5:ed:bc:1c:ec: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9C:2A:4B:F7:2C:5B:BE:6E:F1:69:E1:15:9F:A5:CE:B6:3A:6D:33 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c2:f7:38:cf:d3:d4:9a:1c:a3:71:10:f1:8d:f9:dd:7e:3b: 35:12:4d:e8:32:cb:ab:e6:ec:f4:d4:10:f2:83:dd:e0:d3:36: d7:3d:d5:4b:90:ba:db:89:7a:a1:7a:0a:ca:10:f0:38:86:1d: 10:64:34:f6:40:f6:aa:af:d8:cd:b5:8c:26:dd:0e:a5:a4:c4: 0d:30:55:d2:4d:cf:47:37:d3:30:1f:81:6d:79:00:f7:34:a8: ba:ba:5b:47:4e:52:f6:8a:a1:de:bb:6c:b3:25:26:ca:15:86: 3c:0c:fa:9a:0d:8e:69:ff:2b:ab:9e:6a:47:48:3f:df:3f:2a: ea:bd:23:21:9a:e2:a5:41:ea:e4:cf:98:f7:c5:25:41:82:a8: cd:7b:50:26:34:81:e1:a1:08:4a:ce:27:90:a2:14:3c:36:f1: 86:4c:c6:07:a0:58:95:d3:f6:a6:2b:f7:b6:4c:1e:4d:8e:b3: 03:8f:e5:ff:a3:e7:c6:ad:a0:8b:cd:ab:71:e8:1a:c8:84:33: f8:7a:1c:56:d2:d3:32:03:03:08:d8:b7:d9:df:c0:07:38:b8: e9:ce:b7:7b:cf:a4:1e:a9:32:f1:ca:d4:f2:aa:78:6b:95:b0: fa:a5:68:d4:7f:c3:ac:57:82:97:6b:d0:d6:e6:07:4e:ac:bc: 5e:e7:5f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/KmhuwQMWJNpISJdQIFAGy1OHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNTA2MzAwODI2MzNaFw0yNTA3MDMxNTE1MzNaMDMxMTAvBgNV BAMTKDhCOUMyQTRCRjcyQzVCQkU2RUYxNjlFMTE1OUZBNUNFQjYzQTZEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqBq3EtLv1Wvg0uD80VKW714n e4riCEPzV2KSrK7KYSdRI672bGfty7kg/L9o8gXPRA1qvtlPrmeUVL5ofzYeuSdP oA8XY3VCUugv9pT4CtVzpWAvtK0Az/4KB8JJfpzY6dwDLvSsMH3FkxBr1Mnm+rzQ 1zu077U9YR1e+cAw3JGTqzm2Pq0RX8DqQq06TxRixp9/n65hW2n7L9C5yOK6wqHf rorw4vNTqHtcTO8ahc+JxDwzBI8jVppxJVUGq5ce9cQn9go8yKpS/HKDmOvuGHgW 6HYyfObCLODX5K3DgQOgNRdA0O0cj0b7BSmUpZKdAxwPCAj8ptnl7bwc7JXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5wqS/csW75u8WnhFZ+lzrY6bTMwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzC9zjP09SaHKNxEPGN+d1+OzUSTegyy6vm 7PTUEPKD3eDTNtc91UuQutuJeqF6CsoQ8DiGHRBkNPZA9qqv2M21jCbdDqWkxA0w VdJNz0c30zAfgW15APc0qLq6W0dOUvaKod67bLMlJsoVhjwM+poNjmn/K6ueakdI P98/Kuq9IyGa4qVB6uTPmPfFJUGCqM17UCY0geGhCErOJ5CiFDw28YZMxgegWJXT 9qYr97ZMHk2OswOP5f+j58atoIvNq3HoGsiEM/h6HFbS0zIDAwjYt9nfwAc4uOnO t3vPpB6pMvHK1PKqeGuVsPqlaNR/w6xXgpdr0NbmB06svF7nXzA= -----END CERTIFICATE-----Generated at Tue Jul 1 03:04:27 2025 by rpki-client