$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: xAZZXrZNphg0MFBEgfCBBIRtNmgZDi4raz1AnSCT8XA= Subject key identifier: EA:60:A5:75:7C:F3:4A:E5:CE:46:95:51:23:88:79:6D:5E:84:8F:10 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 490A3959ECEA6F06E06937D312EF60C6150D9900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 0457 Signing time: Sun 29 Jun 2025 20:42:24 +0000 Manifest this update: Sun 29 Jun 2025 20:37:24 +0000 Manifest next update: Thu 03 Jul 2025 00:21:24 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) 3: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: Jxuc/e/Pr1hy4amu18HJeapr3kYqP1YTypWGYhXkluU=) 4: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0a:39:59:ec:ea:6f:06:e0:69:37:d3:12:ef:60:c6:15:0d:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Jun 29 20:37:24 2025 GMT Not After : Jul 3 00:21:24 2025 GMT Subject: CN=EA60A5757CF34AE5CE4695512388796D5E848F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:30:8b:da:3f:f9:07:1d:16:00:28:34:3e: 3c:6f:2b:c7:2c:fb:32:7f:d8:8e:e6:e6:34:99:f9: 2e:6d:42:ee:55:50:cb:9f:20:33:49:9e:cc:ba:7c: 65:1a:a7:d4:2b:b2:11:8e:17:05:42:59:3f:c9:9a: 19:c7:81:a5:94:85:eb:2b:71:db:df:20:a7:76:26: 6d:c4:f2:7f:63:c0:c9:16:19:60:d1:b5:e9:01:f1: 3b:8d:6b:07:fc:56:5d:84:66:92:fa:ad:80:cd:63: 9a:b0:e1:22:5b:75:64:d7:82:37:be:f0:4b:2a:54: 21:39:7a:52:e0:a0:38:8b:bd:86:53:5a:8a:3c:b1: 32:e5:89:62:ed:15:cb:ea:0b:62:0e:4b:7e:96:15: 3d:62:81:3c:f5:f4:29:1b:df:0b:88:3d:8a:49:84: f9:b4:60:8b:e8:3d:bd:c7:b8:24:3d:8d:55:c7:20: e5:ac:6b:70:7b:3b:60:61:4b:f4:e1:43:f3:c8:70: b4:61:f2:25:73:22:4c:81:67:3c:16:92:ea:9f:83: e6:74:b1:39:2e:b5:31:c3:f9:80:10:7a:f1:aa:e5: 30:79:29:e5:94:00:0e:4e:91:3b:e7:47:68:8c:cc: ca:25:7c:6c:2c:fb:70:a7:40:a6:94:6f:25:3a:a4: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:60:A5:75:7C:F3:4A:E5:CE:46:95:51:23:88:79:6D:5E:84:8F:10 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e2:9d:48:d2:d0:37:9c:59:59:24:c7:90:82:30:47:00:a0: 76:9d:e6:2f:7d:3f:30:36:83:bd:89:8a:6c:bf:44:c4:74:18: 2e:4e:d3:d5:d5:f5:26:58:f1:f5:1b:ee:86:c3:3f:bf:f0:1c: 6e:c5:e1:48:97:07:8a:0f:72:88:6b:bf:e9:f7:92:12:3b:41: fa:1a:c9:ec:37:22:c1:87:75:11:2c:d1:10:6b:eb:31:29:46: a9:45:96:33:06:09:1a:dc:98:04:df:aa:3c:33:1f:cb:d0:3a: a5:e5:d9:37:37:1e:5a:bd:fa:49:32:d0:d2:0f:bd:39:79:d0: b8:72:18:69:3e:e0:7a:ad:31:51:ab:79:df:78:46:14:4c:a2: c9:b3:c3:ca:ea:d4:53:a1:83:16:a1:2b:b1:2e:0e:b1:45:33: aa:a2:05:e0:39:b0:e0:bc:40:3e:4b:02:9e:de:99:cd:80:d5: a2:6d:94:b8:b5:b0:c0:e9:6f:93:d9:f6:42:50:65:94:cb:7a: 69:54:1c:24:d2:ec:cb:1d:67:ae:a7:cd:ec:ef:f9:95:3f:1b: c8:3d:bc:4e:e6:a5:0c:49:12:d7:81:09:4a:ff:09:c1:7d:a3: f1:86:98:30:0c:f8:fe:a9:bb:92:47:7a:8d:ae:83:cc:ee:d1: b7:df:6b:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQo5WezqbwbgaTfTEu9gxhUNmQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA2MjkyMDM3MjRaFw0yNTA3MDMwMDIxMjRaMDMxMTAvBgNV BAMTKEVBNjBBNTc1N0NGMzRBRTVDRTQ2OTU1MTIzODg3OTZENUU4NDhGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOjCL2j/5Bx0WACg0PjxvK8cs +zJ/2I7m5jSZ+S5tQu5VUMufIDNJnsy6fGUap9QrshGOFwVCWT/JmhnHgaWUhesr cdvfIKd2Jm3E8n9jwMkWGWDRtekB8TuNawf8Vl2EZpL6rYDNY5qw4SJbdWTXgje+ 8EsqVCE5elLgoDiLvYZTWoo8sTLliWLtFcvqC2IOS36WFT1igTz19Ckb3wuIPYpJ hPm0YIvoPb3HuCQ9jVXHIOWsa3B7O2BhS/ThQ/PIcLRh8iVzIkyBZzwWkuqfg+Z0 sTkutTHD+YAQevGq5TB5KeWUAA5OkTvnR2iMzMolfGws+3CnQKaUbyU6pAe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6mCldXzzSuXORpVRI4h5bV6EjxAwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7inUjS0DecWVkkx5CCMEcAoHad5i99PzA2 g72Jimy/RMR0GC5O09XV9SZY8fUb7obDP7/wHG7F4UiXB4oPcohrv+n3khI7Qfoa yew3IsGHdREs0RBr6zEpRqlFljMGCRrcmATfqjwzH8vQOqXl2Tc3Hlq9+kky0NIP vTl50LhyGGk+4HqtMVGred94RhRMosmzw8rq1FOhgxahK7EuDrFFM6qiBeA5sOC8 QD5LAp7emc2A1aJtlLi1sMDpb5PZ9kJQZZTLemlUHCTS7MsdZ66nzezv+ZU/G8g9 vE7mpQxJEteBCUr/CcF9o/GGmDAM+P6pu5JHeo2ug8zu0bffa9o= -----END CERTIFICATE-----Generated at Sun Jun 29 23:16:49 2025 by rpki-client