$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: ETzJCZdsham+YLZjTpPj59SjkwUCqLaRl1dyX3K9LLs= Subject key identifier: 1D:E0:89:77:32:EB:D0:C9:F3:0A:AE:6C:F3:90:3E:B6:2C:E8:C2:AF Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 7C55CA4A004891F4028B9058D6E434E94E4093DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 01D2 Signing time: Fri 09 May 2025 12:21:08 +0000 Manifest this update: Fri 09 May 2025 12:16:08 +0000 Manifest next update: Mon 12 May 2025 20:49:08 +0000 Files and hashes: 1: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: eQA1Mn08vlcLDFeKHfN81r46sf2N+fLo1G1RkNgW1cs=) 2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:55:ca:4a:00:48:91:f4:02:8b:90:58:d6:e4:34:e9:4e:40:93:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: May 9 12:16:08 2025 GMT Not After : May 12 20:49:08 2025 GMT Subject: CN=1DE0897732EBD0C9F30AAE6CF3903EB62CE8C2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6f:c0:bb:3c:eb:6e:b1:3c:ad:f7:fd:96:bc: 08:a1:98:d2:b4:08:04:e4:f0:9d:f6:39:1d:ca:f4: ac:7c:d1:51:65:1c:6e:a0:77:d7:93:4e:93:95:16: f0:af:cd:b7:3a:78:cf:a7:28:25:54:3c:64:2b:76: b0:cc:1c:41:c9:fd:ca:de:a0:fd:4a:72:f9:07:18: 1a:e4:06:ec:d5:a1:13:98:96:ab:b0:45:20:dc:fb: 9c:ef:3d:73:8c:72:20:f8:88:f6:a7:ef:02:d5:4b: 8c:6f:2d:6e:86:1e:30:cf:e8:88:ea:7c:bf:d4:04: cf:0a:c7:fe:a1:35:cc:88:41:56:95:32:4f:5d:c0: 3f:6b:fa:b1:0b:36:e0:22:83:51:09:a2:a3:76:39: 3b:a2:4e:16:a6:75:49:65:f5:86:f4:f6:08:78:58: b3:44:e4:75:b9:0c:12:66:4e:4c:08:9d:cc:19:6a: 8d:a8:98:8e:0e:66:10:e8:0d:a4:2e:7b:38:66:88: 2d:c4:7f:b6:a0:37:67:37:6b:d6:e6:60:39:68:f1: 0d:91:29:de:7e:73:16:d5:91:20:0d:d1:7e:48:02: 60:9a:0c:b0:d1:cf:c9:eb:f1:12:d0:d0:2b:4f:55: 92:ed:2f:e9:36:03:9f:f0:37:c6:a6:91:ee:ab:95: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E0:89:77:32:EB:D0:C9:F3:0A:AE:6C:F3:90:3E:B6:2C:E8:C2:AF X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:88:c0:ca:ac:fa:70:86:4e:73:c1:d2:ca:b4:2d:a6:f5:52: 31:9b:75:62:80:1d:be:db:83:37:8f:f7:01:f6:4c:c8:3f:fd: 1d:7c:bc:dc:6c:c7:73:78:3e:98:8a:6a:9a:b7:05:3e:be:fb: b6:57:e8:f1:e0:ed:24:98:6f:55:1e:35:99:42:e5:0f:64:11: 55:15:3c:f3:34:ce:4f:e7:33:2e:90:72:4d:82:2a:af:c5:19: 61:88:4e:40:90:00:c0:5b:25:b3:a9:b8:20:13:4a:20:b0:42: 87:0b:1e:a6:d1:e5:95:fc:9e:b2:91:37:f6:50:29:63:b8:0c: 74:a8:e3:f1:ae:2f:72:62:f8:37:ec:85:a0:83:13:d0:5b:cb: 57:22:81:23:4f:a0:97:14:7a:31:5d:5b:c9:05:61:5d:a4:77: 7b:7a:5f:fd:bf:ea:91:17:5a:79:7f:f5:69:e4:ff:d9:b2:80: f4:2b:cd:df:d6:f7:f9:e3:72:07:be:0e:1b:4c:e9:1e:f8:1e: 58:7b:ca:47:7b:7c:69:c1:df:f1:18:39:aa:c9:f1:41:32:14: a6:bd:36:18:98:2e:94:29:5c:3b:f3:60:d9:86:22:4a:58:f6: 80:1e:c1:ef:0a:59:f0:e9:81:d3:e5:47:c0:74:d3:0d:e1:13: 2c:81:99:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFXKSgBIkfQCi5BY1uQ06U5Ak9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTA1MDkxMjE2MDhaFw0yNTA1MTIyMDQ5MDhaMDMxMTAvBgNV BAMTKDFERTA4OTc3MzJFQkQwQzlGMzBBQUU2Q0YzOTAzRUI2MkNFOEMyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgb8C7POtusTyt9/2WvAihmNK0 CATk8J32OR3K9Kx80VFlHG6gd9eTTpOVFvCvzbc6eM+nKCVUPGQrdrDMHEHJ/cre oP1KcvkHGBrkBuzVoROYlquwRSDc+5zvPXOMciD4iPan7wLVS4xvLW6GHjDP6Ijq fL/UBM8Kx/6hNcyIQVaVMk9dwD9r+rELNuAig1EJoqN2OTuiThamdUll9Yb09gh4 WLNE5HW5DBJmTkwIncwZao2omI4OZhDoDaQuezhmiC3Ef7agN2c3a9bmYDlo8Q2R Kd5+cxbVkSAN0X5IAmCaDLDRz8nr8RLQ0CtPVZLtL+k2A5/wN8amke6rlQp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHeCJdzLr0MnzCq5s85A+tizowq8wHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmIwMqs+nCGTnPB0sq0Lab1UjGbdWKAHb7b gzeP9wH2TMg//R18vNxsx3N4PpiKapq3BT6++7ZX6PHg7SSYb1UeNZlC5Q9kEVUV PPM0zk/nMy6Qck2CKq/FGWGITkCQAMBbJbOpuCATSiCwQocLHqbR5ZX8nrKRN/ZQ KWO4DHSo4/GuL3Ji+DfshaCDE9Bby1cigSNPoJcUejFdW8kFYV2kd3t6X/2/6pEX Wnl/9Wnk/9mygPQrzd/W9/njcge+DhtM6R74Hlh7ykd7fGnB3/EYOarJ8UEyFKa9 NhiYLpQpXDvzYNmGIkpY9oAewe8KWfDpgdPlR8B00w3hEyyBmTM= -----END CERTIFICATE-----Generated at Sun May 11 08:47:36 2025 by rpki-client