$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: QGqtP6deVbCDVsm/s3vME8+WyY0G7SuhaIs6c8JT/6w= Subject key identifier: C1:C8:77:E1:D4:06:1C:C5:DE:49:54:6A:56:F9:6D:C0:5E:62:71:63 Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 18349D5B12FAAD7E248359E7E82C0521C2E5389C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 01DA Signing time: Tue 06 May 2025 12:20:37 +0000 Manifest this update: Tue 06 May 2025 12:15:37 +0000 Manifest next update: Fri 09 May 2025 17:40:37 +0000 Files and hashes: 1: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 2: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: lWolVztNaG2zwnsce/kwO2hIV6UA+tFNk6UMkwPlMKM=) 3: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) 4: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:34:9d:5b:12:fa:ad:7e:24:83:59:e7:e8:2c:05:21:c2:e5:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: May 6 12:15:37 2025 GMT Not After : May 9 17:40:37 2025 GMT Subject: CN=C1C877E1D4061CC5DE49546A56F96DC05E627163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:40:11:50:f4:5d:a3:9f:e1:da:79:aa:08: c3:f3:d0:87:8e:0e:07:13:e5:25:4b:4a:0b:92:98: 18:af:3f:30:a2:02:6a:6d:ae:6a:4f:3f:0a:db:76: 89:17:38:33:bc:20:49:b4:6a:55:22:89:2c:5a:17: 92:92:15:17:5a:05:6c:82:80:bb:94:51:5e:e4:aa: 3f:97:11:27:13:a4:86:ce:f7:a6:4b:2c:7d:9b:5d: e9:d5:2f:4b:e9:97:4d:f0:b9:7c:ad:b4:c3:d7:41: 3f:d2:db:23:94:bd:f4:4c:d6:86:49:5a:c4:21:e2: 9c:47:4c:30:dd:64:9a:6c:f5:0a:5f:57:36:2f:6a: 5e:c1:16:bf:1e:0d:a2:05:d3:49:54:aa:ab:92:cb: a3:4a:ab:92:5d:46:0a:9e:f3:2b:96:89:ed:cb:f2: e4:b8:21:47:e5:54:89:57:a9:6a:fe:fa:3a:8e:0d: d1:ed:4e:66:ea:21:54:9a:9b:52:28:5e:8b:81:08: b3:bd:e0:fd:aa:69:fb:62:8f:9c:10:78:9c:e4:7c: 84:87:ac:15:1d:2c:9d:d9:e0:ee:b3:65:63:d0:5d: 37:43:8d:8f:b6:3b:2f:9a:1c:0d:7a:b6:6a:62:05: 51:28:81:ec:f8:67:23:6a:b8:62:d1:48:73:34:eb: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:77:E1:D4:06:1C:C5:DE:49:54:6A:56:F9:6D:C0:5E:62:71:63 X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f9:e4:84:c3:20:d3:cb:cf:7a:06:89:ec:e9:50:eb:5f:8d: 8c:bc:06:6e:f3:21:45:f8:2c:8c:0f:a3:f5:cf:51:a7:fb:52: ef:52:1f:82:af:8a:f4:01:6d:b7:db:8a:59:92:42:d6:b3:59: d5:50:58:e0:63:ce:e3:47:a1:1a:2f:fd:3d:e3:a0:a4:fa:8e: a5:4d:7d:c8:d8:4f:fd:9c:d0:51:3a:43:c8:2a:12:5d:cf:13: 0d:7a:77:c6:44:f1:fb:b0:6b:05:53:e8:5e:0d:56:c9:3a:89: b7:be:61:4b:57:50:f5:20:0f:ef:26:bb:05:38:1d:cb:cb:e6: a3:be:e7:02:d2:56:91:12:8f:ed:2b:c3:b1:f0:f5:67:e8:31: 59:75:9e:ec:b8:0d:d2:df:95:0b:20:cd:44:63:6d:f8:0c:46: 57:27:37:29:b6:b2:8c:04:84:ac:15:6e:44:a0:86:c8:3f:94: e3:d7:e8:a9:4c:58:be:fb:d0:92:51:5b:54:5d:d2:78:27:cb: 3a:07:45:23:4e:dc:40:9a:1a:70:20:a4:ef:3d:ab:64:80:2f: 3d:d9:79:a4:bd:96:bf:ad:9f:25:f5:fd:ff:25:37:2f:96:9a: 75:ab:e7:a7:d7:a9:53:a5:aa:72:38:63:9a:2a:1a:c9:6f:09: 87:4e:f1:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDSdWxL6rX4kg1nn6CwFIcLlOJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTA1MDYxMjE1MzdaFw0yNTA1MDkxNzQwMzdaMDMxMTAvBgNV BAMTKEMxQzg3N0UxRDQwNjFDQzVERTQ5NTQ2QTU2Rjk2REMwNUU2MjcxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31UARUPRdo5/h2nmqCMPz0IeO DgcT5SVLSguSmBivPzCiAmptrmpPPwrbdokXODO8IEm0alUiiSxaF5KSFRdaBWyC gLuUUV7kqj+XEScTpIbO96ZLLH2bXenVL0vpl03wuXyttMPXQT/S2yOUvfRM1oZJ WsQh4pxHTDDdZJps9QpfVzYval7BFr8eDaIF00lUqquSy6NKq5JdRgqe8yuWie3L 8uS4IUflVIlXqWr++jqODdHtTmbqIVSam1IoXouBCLO94P2qaftij5wQeJzkfISH rBUdLJ3Z4O6zZWPQXTdDjY+2Oy+aHA16tmpiBVEogez4ZyNquGLRSHM066kTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwch34dQGHMXeSVRqVvltwF5icWMwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALn55ITDINPLz3oGiezpUOtfjYy8Bm7zIUX4 LIwPo/XPUaf7Uu9SH4KvivQBbbfbilmSQtazWdVQWOBjzuNHoRov/T3joKT6jqVN fcjYT/2c0FE6Q8gqEl3PEw16d8ZE8fuwawVT6F4NVsk6ibe+YUtXUPUgD+8muwU4 HcvL5qO+5wLSVpESj+0rw7Hw9WfoMVl1nuy4DdLflQsgzURjbfgMRlcnNym2sowE hKwVbkSghsg/lOPX6KlMWL770JJRW1Rd0ngnyzoHRSNO3ECaGnAgpO89q2SALz3Z eaS9lr+tnyX1/f8lNy+WmnWr56fXqVOlqnI4Y5oqGslvCYdO8Tw= -----END CERTIFICATE-----Generated at Wed May 7 21:34:50 2025 by rpki-client