$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: t1NMkq40fvxjCzVLhdqP4q/EkALdSYlccEVCsZ6AmqQ= Subject key identifier: 6A:0B:1F:30:E1:DA:3C:44:B8:07:1A:AC:95:0C:B8:C2:18:66:03:8B Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 4B25C5F019C99EE421EDDAF18569169F207B29DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 0496 Signing time: Tue 06 May 2025 03:00:39 +0000 Manifest this update: Tue 06 May 2025 02:55:39 +0000 Manifest next update: Fri 09 May 2025 14:25:39 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: fgSOFTmHBsm+tHxB6f309xDzUMsP9VUt4jQONOxHUT0=) 2: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: Yli/hxhQkXGrex6c+IO2PpxT+2qqyhErLTPinkmb0FY=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 09pTyAPGkDhkuez65QhC+JUUx/+DkLuWQ1gGTLu7lyc=) 4: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: KvQlUIt+O8XkzXwyaibxzHplxyBpRPScmdyCJyB/bbo=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: eICFPX1ffRHHlODjPDwkCsraQZYn70z4zLEPXC3PC0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 14:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:25:c5:f0:19:c9:9e:e4:21:ed:da:f1:85:69:16:9f:20:7b:29:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: May 6 02:55:39 2025 GMT Not After : May 9 14:25:39 2025 GMT Subject: CN=6A0B1F30E1DA3C44B8071AAC950CB8C21866038B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:08:9c:e9:fb:bb:3b:93:cd:f6:9d:8d:e3: 29:45:18:67:e4:2c:d3:d5:82:b4:71:a9:8e:2d:10: a9:ac:d8:ae:f4:e9:0e:da:aa:6c:a1:75:f6:ce:b2: 84:9b:27:e7:5d:fc:52:cb:a0:52:1e:39:80:a0:38: a7:c0:dd:2c:46:c4:14:4d:2a:ca:47:4f:5d:80:6e: 65:8c:e0:4e:7d:3f:b0:fc:a8:f7:78:14:d2:a3:58: 98:13:62:30:e8:19:4b:ef:64:29:93:2b:f5:26:ec: 81:6a:e7:bc:88:2f:6a:42:58:1b:aa:d2:ce:41:14: fe:3c:a2:a7:68:12:c2:ca:f1:1f:06:ad:f5:37:d4: 0e:ad:e3:16:68:8f:c6:e5:9d:d0:00:96:da:26:2e: 6c:3f:92:dd:84:9a:96:97:a3:57:47:14:2b:a7:ac: 8b:3c:7a:ed:8b:8e:5f:40:04:0a:2a:19:e9:d8:4b: c8:d0:00:a9:70:2f:fa:d1:48:c3:64:8a:64:e7:01: f2:4b:2c:c4:f0:b8:72:55:e1:18:ce:15:51:c3:2c: 4d:e0:b0:0b:60:59:ee:98:85:0c:d6:91:fa:01:56: fd:0c:85:13:16:64:63:37:aa:58:a0:84:ae:f4:3b: 85:b6:54:6c:b0:88:eb:9c:68:0d:81:9e:e0:e9:c0: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0B:1F:30:E1:DA:3C:44:B8:07:1A:AC:95:0C:B8:C2:18:66:03:8B X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c2:b0:45:f1:ff:4f:d3:8b:ec:93:b9:a5:40:19:64:e0:70: af:30:70:22:02:ae:cc:8e:8c:24:ac:47:06:ef:42:83:7b:ee: a3:c8:c1:69:4f:96:e7:a6:da:27:34:b3:95:98:d3:a6:e8:42: d1:ce:95:0c:19:20:c4:e4:d0:a1:62:56:9d:87:0d:a8:28:0d: 4b:6c:e0:ef:44:fb:6a:03:69:6a:41:6a:ec:59:57:d6:51:f1: be:47:e8:99:7e:ea:54:94:58:53:bf:0a:52:c9:c7:58:74:71: 73:8e:d9:5c:90:be:a1:07:fa:76:75:12:99:54:17:96:64:1d: a6:7d:33:b0:ba:7c:0b:7e:96:b7:b7:39:e1:ef:f2:74:48:2b: 48:7a:db:ef:8c:f6:2a:f9:98:ca:23:a8:27:ea:54:ce:3b:ad: 0d:89:73:3d:64:6f:16:5c:a3:91:61:01:a4:d4:16:45:93:e3: 6a:8b:c5:77:a7:8e:9e:86:6b:41:8a:27:d8:60:77:a5:f4:c5: f1:7f:96:3f:97:6c:ac:8b:86:e5:a7:57:78:25:84:86:fb:cd: 1a:5d:89:2f:1a:b9:75:e5:e0:65:1d:90:6c:71:12:37:7e:da: c0:3a:2c:d1:31:61:96:31:17:3c:cd:92:44:ed:e8:ad:0a:e4: 45:5a:c7:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyXF8BnJnuQh7drxhWkWnyB7Kd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA1MDYwMjU1MzlaFw0yNTA1MDkxNDI1MzlaMDMxMTAvBgNV BAMTKDZBMEIxRjMwRTFEQTNDNDRCODA3MUFBQzk1MENCOEMyMTg2NjAzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUAic6fu7O5PN9p2N4ylFGGfk LNPVgrRxqY4tEKms2K706Q7aqmyhdfbOsoSbJ+dd/FLLoFIeOYCgOKfA3SxGxBRN KspHT12AbmWM4E59P7D8qPd4FNKjWJgTYjDoGUvvZCmTK/Um7IFq57yIL2pCWBuq 0s5BFP48oqdoEsLK8R8GrfU31A6t4xZoj8blndAAltomLmw/kt2EmpaXo1dHFCun rIs8eu2Ljl9ABAoqGenYS8jQAKlwL/rRSMNkimTnAfJLLMTwuHJV4RjOFVHDLE3g sAtgWe6YhQzWkfoBVv0MhRMWZGM3qlighK70O4W2VGywiOucaA2BnuDpwL+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUagsfMOHaPES4BxqslQy4whhmA4swHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/CsEXx/0/Ti+yTuaVAGWTgcK8wcCICrsyO jCSsRwbvQoN77qPIwWlPluem2ic0s5WY06boQtHOlQwZIMTk0KFiVp2HDagoDUts 4O9E+2oDaWpBauxZV9ZR8b5H6Jl+6lSUWFO/ClLJx1h0cXOO2VyQvqEH+nZ1EplU F5ZkHaZ9M7C6fAt+lre3OeHv8nRIK0h62++M9ir5mMojqCfqVM47rQ2Jcz1kbxZc o5FhAaTUFkWT42qLxXenjp6Ga0GKJ9hgd6X0xfF/lj+XbKyLhuWnV3glhIb7zRpd iS8auXXl4GUdkGxxEjd+2sA6LNExYZYxFzzNkkTt6K0K5EVaxzI= -----END CERTIFICATE-----Generated at Thu May 8 10:04:50 2025 by rpki-client