$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: he+wAEtG7RjyfjFs13aD5pzM54JFk4qmVrexTuiPD/w= Subject key identifier: A2:4A:C7:5C:11:15:80:A4:47:94:DA:07:DB:4B:EA:94:19:69:BD:BD Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 2534BCA38D37C77AD561D91AE5D05AE62C1CEF73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: F3 Signing time: Thu 08 May 2025 15:20:04 +0000 Manifest this update: Thu 08 May 2025 15:15:04 +0000 Manifest next update: Sun 11 May 2025 22:11:04 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: 9o9jyq6r3LCH2k7NoTp0m4z+Wp/BSp3kIR9ifr35sTM=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: ZcuLefK+yAknTSgNc0AblKwaXXvM+7Ik+wo2Htxgbns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:34:bc:a3:8d:37:c7:7a:d5:61:d9:1a:e5:d0:5a:e6:2c:1c:ef:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: May 8 15:15:04 2025 GMT Not After : May 11 22:11:04 2025 GMT Subject: CN=A24AC75C111580A44794DA07DB4BEA941969BDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b3:8e:65:7b:7f:fa:5a:1e:cd:8b:59:38:7b: 04:b9:6a:ad:f6:0e:a2:32:3a:9c:bc:b4:03:a4:9d: 86:78:91:48:50:c2:cf:1f:c1:10:42:11:da:42:96: 64:93:f6:81:ab:cf:aa:50:3e:eb:a8:eb:97:eb:e1: fb:f3:9e:13:c1:20:6e:bd:ef:fc:64:5f:ac:a5:40: b3:8e:fa:c0:81:35:24:a7:e2:e4:64:32:18:24:86: 16:bc:62:f6:2a:a1:96:94:d9:b4:50:97:74:21:17: 31:77:85:b0:91:1c:f9:81:c7:21:7c:94:7b:eb:11: 82:63:e9:20:51:92:bf:99:58:ef:c4:4d:35:ea:86: f6:37:bc:59:9b:45:16:e0:71:c0:78:1e:19:ee:35: a4:55:73:70:a6:4a:84:e8:aa:9e:28:76:8c:09:8d: d4:c7:31:14:bc:c3:8d:db:73:2b:86:1a:8c:58:93: 78:89:ff:d6:b4:83:9e:ad:18:a2:c3:77:89:a5:4d: 4b:64:bc:4a:65:e5:4d:03:6d:aa:7d:7a:c7:00:8d: bf:db:4a:21:8b:53:a0:25:d8:44:e8:dd:45:76:e8: 50:9e:36:80:86:4e:77:04:9f:33:5f:14:c8:c6:44: 5c:e4:c4:64:c2:24:00:1e:4e:a4:1b:1d:4f:cb:2c: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:C7:5C:11:15:80:A4:47:94:DA:07:DB:4B:EA:94:19:69:BD:BD X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:5a:61:43:e4:90:37:43:0d:9c:79:63:f5:dd:90:02:6a: fe:65:e4:e5:65:05:fd:7a:6b:79:b3:b8:7a:5c:69:5f:70:25: fd:dd:4f:b1:2b:ea:b1:a7:c1:df:79:e6:85:ad:dd:1f:64:be: 24:6a:83:2f:b9:bf:09:f6:f3:db:12:09:57:d8:45:5a:6e:51: e4:83:95:f5:3c:3a:dd:ac:c9:5a:9d:fe:b4:57:40:59:c0:64: 1d:71:96:dd:5c:3e:94:c6:88:b1:0e:6f:77:b7:1b:71:f6:06: 5f:eb:9b:13:70:34:16:3d:8a:1f:6e:58:32:5d:d8:7d:64:94: 23:92:67:62:e6:f0:c4:11:06:79:83:3b:ab:11:26:24:5f:c2: d2:48:d9:24:44:78:fd:6f:46:79:14:6d:c6:76:fb:7e:cd:cc: a4:ac:ec:30:94:7d:9c:68:b2:86:aa:dd:81:e6:da:af:e0:30: e7:bf:5a:78:f0:01:2d:dc:28:ab:27:21:51:c8:e6:62:85:5c: 54:d9:c9:70:95:8a:00:ff:6a:b8:ee:de:6e:f5:6d:c0:c8:1f: 14:f2:e1:ca:a7:e1:c2:c1:16:7e:b5:0f:c6:bf:5f:bb:ce:07: 1a:35:5e:67:b2:b7:4b:86:62:05:b9:92:3c:aa:85:5b:69:24: ac:dd:7a:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTS8o403x3rVYdka5dBa5iwc73MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTA1MDgxNTE1MDRaFw0yNTA1MTEyMjExMDRaMDMxMTAvBgNV BAMTKEEyNEFDNzVDMTExNTgwQTQ0Nzk0REEwN0RCNEJFQTk0MTk2OUJEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2s45le3/6Wh7Ni1k4ewS5aq32 DqIyOpy8tAOknYZ4kUhQws8fwRBCEdpClmST9oGrz6pQPuuo65fr4fvznhPBIG69 7/xkX6ylQLOO+sCBNSSn4uRkMhgkhha8YvYqoZaU2bRQl3QhFzF3hbCRHPmBxyF8 lHvrEYJj6SBRkr+ZWO/ETTXqhvY3vFmbRRbgccB4HhnuNaRVc3CmSoToqp4odowJ jdTHMRS8w43bcyuGGoxYk3iJ/9a0g56tGKLDd4mlTUtkvEpl5U0Dbap9escAjb/b SiGLU6Al2ETo3UV26FCeNoCGTncEnzNfFMjGRFzkxGTCJAAeTqQbHU/LLNCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokrHXBEVgKRHlNoH20vqlBlpvb0wHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAHWmFD5JA3Qw2ceWP13ZACav5l5OVlBf16 a3mzuHpcaV9wJf3dT7Er6rGnwd955oWt3R9kviRqgy+5vwn289sSCVfYRVpuUeSD lfU8Ot2syVqd/rRXQFnAZB1xlt1cPpTGiLEOb3e3G3H2Bl/rmxNwNBY9ih9uWDJd 2H1klCOSZ2Lm8MQRBnmDO6sRJiRfwtJI2SREeP1vRnkUbcZ2+37NzKSs7DCUfZxo soaq3YHm2q/gMOe/WnjwAS3cKKsnIVHI5mKFXFTZyXCVigD/arju3m71bcDIHxTy 4cqn4cLBFn61D8a/X7vOBxo1Xmeyt0uGYgW5kjyqhVtpJKzders= -----END CERTIFICATE-----Generated at Fri May 9 08:34:38 2025 by rpki-client