$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: bhj/A/JNnHfRh9DQlXE+zCsjaADaQCmrRn8LviTIKnU= Subject key identifier: A5:38:41:CE:AD:5F:66:95:78:71:F4:F6:12:A8:18:14:E8:E8:86:E7 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 23BA7FF95E4116697EE406094A9F5E4E13A1B775 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 0442 Signing time: Tue 13 May 2025 21:32:14 +0000 Manifest this update: Tue 13 May 2025 21:27:14 +0000 Manifest next update: Sat 17 May 2025 00:56:14 +0000 Files and hashes: 1: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) 2: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: cSIvhOCWf5Jd2/Gonl+BzItvru1mC8cl2snO2Wp5hM4=) 3: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) 4: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) 5: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 00:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ba:7f:f9:5e:41:16:69:7e:e4:06:09:4a:9f:5e:4e:13:a1:b7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: May 13 21:27:14 2025 GMT Not After : May 17 00:56:14 2025 GMT Subject: CN=A53841CEAD5F66957871F4F612A81814E8E886E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:30:56:5f:b3:ef:4f:66:99:68:85:e0:e0: ce:65:66:ce:b7:94:49:6d:69:85:c6:d6:fe:a7:99: 55:96:d8:a1:c1:55:fb:3a:f6:fb:b9:f5:7c:44:f2: 1c:4d:8a:0b:3c:bb:45:be:17:d3:fc:71:df:22:2b: 9c:e8:1c:79:d6:5e:2b:ba:1a:64:2c:69:3d:d3:22: 08:24:00:04:30:70:a1:14:5b:59:21:47:23:c8:de: 08:fe:d6:ab:50:9a:56:41:b9:7e:d0:7e:87:a7:63: 9c:05:2d:7d:1f:97:b2:ee:25:a5:fa:90:bf:59:4b: fc:20:47:8a:1f:dd:34:9a:43:c6:2f:fe:f4:e1:3e: d4:34:f1:7e:72:e4:fe:ac:13:49:34:a9:63:c1:35: 10:9f:b0:61:3f:4c:c4:a7:59:7b:76:85:fb:c2:de: 75:f3:db:30:63:b2:2a:83:09:17:2b:a3:da:c3:30: f6:27:88:26:43:af:53:92:15:64:e9:00:0e:54:62: 8c:b7:d5:33:1f:5c:d6:30:d1:c2:7b:17:5a:3d:6a: b2:3e:2c:1a:08:06:70:47:37:2a:05:47:e4:6a:f5: 83:65:6e:78:9c:6c:cb:98:aa:90:3e:6b:6b:a6:1a: db:4c:17:a1:27:47:45:ee:e0:b6:e7:2a:f1:d9:c7: b5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:38:41:CE:AD:5F:66:95:78:71:F4:F6:12:A8:18:14:E8:E8:86:E7 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:11:00:50:f6:b1:58:ce:73:3f:75:99:02:e1:ab:ea:55:5b: c0:9c:d1:05:1c:b6:39:d0:58:2f:4f:95:e5:c1:09:a9:81:36: 46:1e:e5:3b:d0:d1:af:5d:cb:f7:d0:1e:d1:09:b4:94:6a:8f: 9c:91:97:72:b7:4d:59:a3:60:40:24:b2:c5:f8:f8:3c:55:f9: b5:c2:95:78:f0:49:d5:8e:ca:45:24:54:ab:2d:64:44:ea:0f: 9b:3b:7b:a2:19:1c:f6:45:53:de:71:c4:0c:5b:5c:0d:1c:ad: 96:80:a7:f1:91:fe:75:a0:11:30:a7:3c:52:c1:9a:ae:dc:e9: 9e:f9:07:a0:94:42:b0:d9:4d:1c:90:cb:ae:3d:5f:5c:27:54: ca:32:12:44:ec:45:99:7b:fe:1c:8f:94:6c:b7:79:e7:c0:4c: df:85:ba:2e:e3:66:96:ab:3a:ec:95:7d:ae:ba:f0:92:3e:37: 92:86:9f:1f:9f:7a:eb:76:d9:92:2a:71:de:2f:04:db:6c:1c: 5e:c1:03:37:01:25:cd:43:01:ee:cf:c4:4e:6d:3c:be:c4:56: 62:fc:d5:31:72:5a:78:42:6d:6d:a4:01:52:33:ea:95:e7:6a: 5f:22:a0:49:7c:95:f3:88:59:d9:5f:53:47:b0:6e:86:5a:c4: 03:a8:ba:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7p/+V5BFml+5AYJSp9eThOht3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA1MTMyMTI3MTRaFw0yNTA1MTcwMDU2MTRaMDMxMTAvBgNV BAMTKEE1Mzg0MUNFQUQ1RjY2OTU3ODcxRjRGNjEyQTgxODE0RThFODg2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sTBWX7PvT2aZaIXg4M5lZs63 lEltaYXG1v6nmVWW2KHBVfs69vu59XxE8hxNigs8u0W+F9P8cd8iK5zoHHnWXiu6 GmQsaT3TIggkAAQwcKEUW1khRyPI3gj+1qtQmlZBuX7QfoenY5wFLX0fl7LuJaX6 kL9ZS/wgR4of3TSaQ8Yv/vThPtQ08X5y5P6sE0k0qWPBNRCfsGE/TMSnWXt2hfvC 3nXz2zBjsiqDCRcro9rDMPYniCZDr1OSFWTpAA5UYoy31TMfXNYw0cJ7F1o9arI+ LBoIBnBHNyoFR+Rq9YNlbnicbMuYqpA+a2umGttMF6EnR0Xu4LbnKvHZx7V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpThBzq1fZpV4cfT2EqgYFOjohucwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALERAFD2sVjOcz91mQLhq+pVW8Cc0QUctjnQ WC9PleXBCamBNkYe5TvQ0a9dy/fQHtEJtJRqj5yRl3K3TVmjYEAkssX4+DxV+bXC lXjwSdWOykUkVKstZETqD5s7e6IZHPZFU95xxAxbXA0crZaAp/GR/nWgETCnPFLB mq7c6Z75B6CUQrDZTRyQy649X1wnVMoyEkTsRZl7/hyPlGy3eefATN+Fui7jZpar OuyVfa668JI+N5KGnx+feut22ZIqcd4vBNtsHF7BAzcBJc1DAe7PxE5tPL7EVmL8 1TFyWnhCbW2kAVIz6pXnal8ioEl8lfOIWdlfU0ewboZaxAOouj8= -----END CERTIFICATE-----Generated at Wed May 14 12:12:11 2025 by rpki-client