$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: t5sB/EHRSYSAp8D3tBa96upL4qU62qYQGQCxS70+GmE= Subject key identifier: 3F:55:4D:E6:5F:D7:E4:9B:E1:BC:DF:6D:3D:10:61:55:71:4A:19:75 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 7A3BF5B952284860921BF8FD92206E940798AA2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 0183 Signing time: Thu 08 May 2025 19:31:37 +0000 Manifest this update: Thu 08 May 2025 19:26:37 +0000 Manifest next update: Mon 12 May 2025 06:56:37 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: w/fcT6WG4RwIw45yKXOCsHyZiReUumFSA1iuGD7m4vE=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3b:f5:b9:52:28:48:60:92:1b:f8:fd:92:20:6e:94:07:98:aa:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: May 8 19:26:37 2025 GMT Not After : May 12 06:56:37 2025 GMT Subject: CN=3F554DE65FD7E49BE1BCDF6D3D106155714A1975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b1:1b:1d:fa:e1:cc:bd:cb:60:f7:46:03:47: 89:76:39:d8:13:4a:b3:ac:c8:6c:ee:fb:d1:7e:ff: b4:d3:6f:a4:e8:1f:8c:ac:01:c0:63:89:7a:b0:42: f4:b8:d2:0a:47:a1:62:a7:42:8f:36:3d:11:ed:a7: e8:d4:5e:d0:37:1c:4e:96:51:b6:5b:ed:e9:a5:fb: 17:50:da:8f:59:6a:ac:26:cb:62:cc:d3:d3:d2:b5: 97:07:54:5d:7e:94:c5:7a:ce:b9:b1:68:0f:e5:d2: bb:01:6f:fd:73:bf:89:09:a2:44:ed:f0:8f:03:a1: 5c:1c:3e:38:a9:8f:24:c2:c6:55:56:7e:e0:5e:67: 56:2f:32:ce:43:82:9f:11:fa:c9:07:81:a9:8e:6c: d6:99:c6:8b:dc:67:85:1f:fe:f9:92:9f:e1:4a:7a: ac:52:49:19:4d:4d:4e:0c:0f:5b:55:2c:e1:8b:c5: ee:1d:1d:21:52:ff:1e:54:f1:e2:31:9f:28:77:fa: ab:c6:43:bf:55:99:0c:12:1c:8f:67:bb:1b:e0:08: 53:57:3f:b2:8f:7a:dd:6d:ed:c8:98:f6:4f:05:62: d9:2f:dc:14:43:1a:3b:5a:36:b6:d4:4b:ef:c6:c7: b6:5a:62:33:ec:76:23:5a:fe:13:06:da:80:f9:1c: 30:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:4D:E6:5F:D7:E4:9B:E1:BC:DF:6D:3D:10:61:55:71:4A:19:75 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:89:10:9a:18:05:5b:72:31:80:b5:bf:29:48:bd:47:07:26: db:e3:a8:37:8a:ac:5b:c8:40:c2:39:24:15:04:f3:b0:b9:95: ee:26:f0:ef:b0:de:1f:04:b1:e1:cd:b4:24:c2:e7:9c:35:f7: 40:c9:03:48:e3:e5:15:af:9c:39:6b:c0:df:33:c6:33:42:a0: 26:f8:3f:e3:f2:4e:9c:ce:41:fe:c5:b4:50:53:c0:ed:89:ec: 1d:0e:cb:31:44:55:82:10:52:b1:35:16:45:95:32:5f:5f:52: f6:ec:6e:38:2d:01:f1:76:72:95:4d:fa:a3:04:d5:30:73:9f: dd:df:82:cc:83:4d:aa:c5:57:b5:4c:6d:e7:44:85:71:ba:9d: 6d:b3:96:2d:c3:c7:b5:8d:37:b4:1b:eb:3c:c3:fa:98:76:5a: 62:85:98:14:ee:97:2c:08:10:a6:0b:77:ac:d3:93:40:c8:c7: 9b:90:6c:63:d4:da:65:1f:0f:ea:68:46:bf:fe:3d:19:bc:cb: 94:1c:b5:e4:c2:4b:3c:2a:34:d2:16:43:76:9f:16:57:ab:a9: 67:07:30:14:2b:a4:3a:99:f3:6b:b7:20:a6:19:2b:52:ac:a6: da:82:cf:3b:e7:d5:4b:94:b5:e2:21:a5:3c:3a:29:fc:35:b1: e4:e9:40:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejv1uVIoSGCSG/j9kiBulAeYqiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTA1MDgxOTI2MzdaFw0yNTA1MTIwNjU2MzdaMDMxMTAvBgNV BAMTKDNGNTU0REU2NUZEN0U0OUJFMUJDREY2RDNEMTA2MTU1NzE0QTE5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdsRsd+uHMvctg90YDR4l2OdgT SrOsyGzu+9F+/7TTb6ToH4ysAcBjiXqwQvS40gpHoWKnQo82PRHtp+jUXtA3HE6W UbZb7eml+xdQ2o9Zaqwmy2LM09PStZcHVF1+lMV6zrmxaA/l0rsBb/1zv4kJokTt 8I8DoVwcPjipjyTCxlVWfuBeZ1YvMs5Dgp8R+skHgamObNaZxovcZ4Uf/vmSn+FK eqxSSRlNTU4MD1tVLOGLxe4dHSFS/x5U8eIxnyh3+qvGQ79VmQwSHI9nuxvgCFNX P7KPet1t7ciY9k8FYtkv3BRDGjtaNrbUS+/Gx7ZaYjPsdiNa/hMG2oD5HDBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1VN5l/X5JvhvN9tPRBhVXFKGXUwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+JEJoYBVtyMYC1vylIvUcHJtvjqDeKrFvI QMI5JBUE87C5le4m8O+w3h8EseHNtCTC55w190DJA0jj5RWvnDlrwN8zxjNCoCb4 P+PyTpzOQf7FtFBTwO2J7B0OyzFEVYIQUrE1FkWVMl9fUvbsbjgtAfF2cpVN+qME 1TBzn93fgsyDTarFV7VMbedEhXG6nW2zli3Dx7WNN7Qb6zzD+ph2WmKFmBTulywI EKYLd6zTk0DIx5uQbGPU2mUfD+poRr/+PRm8y5QcteTCSzwqNNIWQ3afFlerqWcH MBQrpDqZ82u3IKYZK1KsptqCzzvn1UuUteIhpTw6Kfw1seTpQBE= -----END CERTIFICATE-----Generated at Sat May 10 16:51:45 2025 by rpki-client