$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: +QxK49Mp2zYhD5yzjyCQb8+8TKP18BWzSpOGkPF5/us= Subject key identifier: 3F:79:48:07:39:40:A6:CB:4E:0B:DD:B7:B5:F0:A9:A3:6B:F5:23:4F Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 7FBA9D1D2BB2F844B4BF54C7686CFF350B08F13F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 01F4 Signing time: Fri 09 May 2025 02:51:39 +0000 Manifest this update: Fri 09 May 2025 02:46:39 +0000 Manifest next update: Mon 12 May 2025 14:43:39 +0000 Files and hashes: 1: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: SG0EOCclZvXoyTD6gQ0rTzoRjDiStJWPTihf09VGWm4=) 2: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 3: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 4: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 5: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 6: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ba:9d:1d:2b:b2:f8:44:b4:bf:54:c7:68:6c:ff:35:0b:08:f1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: May 9 02:46:39 2025 GMT Not After : May 12 14:43:39 2025 GMT Subject: CN=3F7948073940A6CB4E0BDDB7B5F0A9A36BF5234F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:c3:cc:9e:aa:cb:df:c3:b1:38:60:e8:9d: 52:49:f7:18:93:d4:08:91:fd:af:e8:43:21:e4:e8: 81:f0:30:ad:2c:10:34:d1:50:b0:4e:d6:32:03:81: 5f:52:08:63:15:3a:e2:85:48:b8:b8:33:c0:b2:0b: b2:34:1a:a3:8b:c3:df:c5:78:84:06:87:ab:58:1f: 7c:b9:96:d1:3e:50:ee:4f:0a:32:af:62:4d:85:51: 91:6d:69:7c:19:d5:c2:96:0b:8b:fa:b3:e9:25:f3: ec:4f:e4:f1:19:6c:7d:85:dd:59:92:ae:08:24:87: 24:50:b7:19:f3:1b:20:32:51:8e:a7:4b:af:6f:f0: 2b:34:9a:5c:5e:48:99:a0:62:61:b7:b4:58:34:3f: 19:b5:73:fb:e5:a9:4f:2f:b7:87:12:0f:41:54:ce: 49:a2:68:59:7a:9c:bf:1f:c9:63:ea:56:01:7a:06: 2f:55:4f:b8:61:d3:cb:8f:36:46:f1:83:4c:64:ff: bc:ef:97:19:26:73:85:57:d7:86:6f:44:03:b4:a6: 3d:5d:66:1f:bb:31:ba:7c:5d:c0:eb:73:02:5f:da: 35:78:03:a1:c4:b9:02:37:f2:dd:80:26:77:d7:13: e2:d2:1e:7c:21:45:bb:53:6f:91:03:55:31:00:b1: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:79:48:07:39:40:A6:CB:4E:0B:DD:B7:B5:F0:A9:A3:6B:F5:23:4F X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:f5:b4:93:19:a2:21:89:17:68:41:14:66:79:9c:c5:8f:98: 58:ea:cd:17:8e:2e:8b:38:8a:bb:a3:85:09:e6:05:19:73:c5: 16:ae:df:e5:37:5f:95:53:1a:1c:0f:3c:8b:ff:f8:1a:d7:a9: 73:5e:bb:7f:66:27:1e:52:02:b2:87:12:d0:f5:5f:75:f9:50: 0d:56:0f:43:cf:af:28:19:ca:64:10:20:f4:96:e2:bc:f3:7a: 50:91:fe:2d:33:64:a4:9f:fd:08:11:70:6b:a2:30:9b:6b:5a: 18:33:ee:de:d9:35:e8:a6:8c:ef:8b:f4:35:a2:c3:9c:d1:bc: 11:37:85:b1:36:18:3e:ae:af:82:63:ca:40:13:6b:7d:cf:be: 1f:66:29:f2:7a:02:e6:9d:1e:b7:5c:6c:81:e8:44:98:25:28: 0a:82:91:48:8a:8c:38:05:7d:cf:e5:3e:2a:57:ac:77:e9:93: 05:6f:2a:7b:59:ec:23:e9:79:5f:c3:62:0a:54:53:79:0a:28: ec:98:7d:fd:2b:b3:16:74:74:06:57:11:6d:34:bf:2d:fd:78: 25:c5:c3:b8:7e:02:34:aa:b6:fb:c9:ca:15:9e:f6:29:41:de: e5:8e:c2:25:a6:73:8f:f6:6c:41:52:41:77:cf:b7:a9:a5:ba: 1c:dd:eb:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7qdHSuy+ES0v1THaGz/NQsI8T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTA1MDkwMjQ2MzlaFw0yNTA1MTIxNDQzMzlaMDMxMTAvBgNV BAMTKDNGNzk0ODA3Mzk0MEE2Q0I0RTBCRERCN0I1RjBBOUEzNkJGNTIzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gMPMnqrL38OxOGDonVJJ9xiT 1AiR/a/oQyHk6IHwMK0sEDTRULBO1jIDgV9SCGMVOuKFSLi4M8CyC7I0GqOLw9/F eIQGh6tYH3y5ltE+UO5PCjKvYk2FUZFtaXwZ1cKWC4v6s+kl8+xP5PEZbH2F3VmS rggkhyRQtxnzGyAyUY6nS69v8Cs0mlxeSJmgYmG3tFg0Pxm1c/vlqU8vt4cSD0FU zkmiaFl6nL8fyWPqVgF6Bi9VT7hh08uPNkbxg0xk/7zvlxkmc4VX14ZvRAO0pj1d Zh+7Mbp8XcDrcwJf2jV4A6HEuQI38t2AJnfXE+LSHnwhRbtTb5EDVTEAsfjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3lIBzlApstOC923tfCpo2v1I08wHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMT1tJMZoiGJF2hBFGZ5nMWPmFjqzReOLos4 irujhQnmBRlzxRau3+U3X5VTGhwPPIv/+BrXqXNeu39mJx5SArKHEtD1X3X5UA1W D0PPrygZymQQIPSW4rzzelCR/i0zZKSf/QgRcGuiMJtrWhgz7t7ZNeimjO+L9DWi w5zRvBE3hbE2GD6ur4JjykATa33Pvh9mKfJ6AuadHrdcbIHoRJglKAqCkUiKjDgF fc/lPipXrHfpkwVvKntZ7CPpeV/DYgpUU3kKKOyYff0rsxZ0dAZXEW00vy39eCXF w7h+AjSqtvvJyhWe9ilB3uWOwiWmc4/2bEFSQXfPt6mluhzd68Q= -----END CERTIFICATE-----Generated at Sat May 10 08:15:37 2025 by rpki-client