$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: 0bU0Wm29/iJA4I6Td8pxsmKoBAajen9GVzSaTeQIZLE= Subject key identifier: 28:FE:27:1D:95:BC:60:EC:DD:47:9F:31:BF:73:83:42:A9:56:B6:2B Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 33AB9C88E9A2A23AF9A66B45D731E2CF44EB8188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 04B6 Signing time: Sat 28 Jun 2025 10:11:45 +0000 Manifest this update: Sat 28 Jun 2025 10:06:45 +0000 Manifest next update: Tue 01 Jul 2025 15:31:45 +0000 Files and hashes: 1: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: WX4RIQvWma0Z7UNE+2AVY7GOXhw7FEV4DT0PR5H1hFM=) 2: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: UaGmn4kTfe+1TDn5eCuN9O53yKjU57F4Hz3jxRXHWWY=) 3: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: uhbTS40xOE2iorcFCGhU6uKqyXCDewHO7yiFkBSc5gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ab:9c:88:e9:a2:a2:3a:f9:a6:6b:45:d7:31:e2:cf:44:eb:81:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Jun 28 10:06:45 2025 GMT Not After : Jul 1 15:31:45 2025 GMT Subject: CN=28FE271D95BC60ECDD479F31BF738342A956B62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:2e:59:2f:b0:47:a5:3b:c7:98:9e:06:20: 0a:34:03:2d:53:8b:f0:ab:28:38:dc:72:34:2d:62: 4d:f2:4c:d1:d2:60:8e:f7:15:8a:e9:7f:4f:2c:77: f2:a2:e2:3e:c4:7c:e5:4d:16:b9:ea:79:89:43:fd: 86:69:c9:31:6e:9c:48:ea:9b:f6:8a:eb:d7:d8:9c: e2:73:f0:e7:82:41:3f:79:33:b9:ad:7f:b5:52:2b: ee:c3:49:94:82:45:fc:c9:0c:04:fe:29:8f:24:0f: 8b:50:49:79:dc:ed:39:9a:19:41:fd:74:85:77:9d: 48:2f:32:ce:1a:4c:37:b2:2e:8b:77:fd:90:b9:7d: b0:85:99:e5:47:1c:25:31:19:2e:fe:ae:4c:e4:06: b7:f0:82:e9:64:ad:dc:82:2d:65:a5:cf:15:08:92: 9a:4e:a9:90:e4:55:5e:6c:fe:c6:1b:19:b9:94:57: d7:cf:b9:58:ba:26:5c:09:80:9d:e6:f7:43:f9:db: 7d:0b:90:1d:fe:32:d9:3e:45:88:e2:f2:f2:f6:0f: ca:74:2c:93:79:e7:aa:c8:8f:de:aa:8a:0e:93:e3: 56:83:2d:b1:ae:5f:13:73:92:de:3e:a1:40:08:66: 9b:38:76:a8:9a:e7:3a:8b:51:29:25:39:2b:d3:e6: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:27:1D:95:BC:60:EC:DD:47:9F:31:BF:73:83:42:A9:56:B6:2B X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d6:08:32:ad:42:3d:b5:d5:5e:b7:5a:07:49:65:87:6e:76: ae:92:62:73:d7:f6:c7:3b:4a:3a:2a:11:f6:d3:27:7f:b9:2b: 9f:05:83:d0:2e:6c:33:7f:89:76:9e:93:4b:3e:58:dd:7b:3a: 2d:d2:44:fa:d7:d7:fa:de:9b:dd:48:cd:6c:b0:a9:a1:86:ab: 56:dc:ba:2e:24:cc:48:41:0b:f6:a3:49:98:b5:61:36:12:23: c8:1e:02:7a:f2:e5:f7:c4:16:ce:43:fb:44:71:51:fc:00:f2: fd:9d:3d:b1:fe:27:aa:f1:8d:96:9a:ae:5c:0c:12:b3:fa:62: b5:c1:0a:89:46:7c:8e:b8:74:80:84:19:6e:ff:5f:fb:58:00: da:de:a7:fa:26:18:55:fb:38:20:e9:7d:75:b0:b0:ff:79:5f: 50:e9:2f:d9:2e:1c:25:72:2e:96:40:98:4b:bb:a4:f0:a9:ce: 78:44:52:b4:f7:c5:74:b0:21:f6:8c:2e:3a:9d:14:10:74:59: 14:2c:e4:13:a9:cd:89:48:0a:fd:e9:99:f9:bd:4c:cd:92:fc: 1f:ba:12:4a:9c:65:24:9f:c8:d9:31:21:29:05:ea:00:6a:5f: eb:1b:cc:81:a6:33:07:72:71:76:e0:47:06:ac:04:1c:9d:18: a3:d2:fe:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6uciOmiojr5pmtF1zHiz0TrgYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTA2MjgxMDA2NDVaFw0yNTA3MDExNTMxNDVaMDMxMTAvBgNV BAMTKDI4RkUyNzFEOTVCQzYwRUNERDQ3OUYzMUJGNzM4MzQyQTk1NkI2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8di5ZL7BHpTvHmJ4GIAo0Ay1T i/CrKDjccjQtYk3yTNHSYI73FYrpf08sd/Ki4j7EfOVNFrnqeYlD/YZpyTFunEjq m/aK69fYnOJz8OeCQT95M7mtf7VSK+7DSZSCRfzJDAT+KY8kD4tQSXnc7TmaGUH9 dIV3nUgvMs4aTDeyLot3/ZC5fbCFmeVHHCUxGS7+rkzkBrfwgulkrdyCLWWlzxUI kppOqZDkVV5s/sYbGbmUV9fPuVi6JlwJgJ3m90P5230LkB3+Mtk+RYji8vL2D8p0 LJN556rIj96qig6T41aDLbGuXxNzkt4+oUAIZps4dqia5zqLUSklOSvT5p3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKP4nHZW8YOzdR58xv3ODQqlWtiswHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvWCDKtQj211V63WgdJZYdudq6SYnPX9sc7 SjoqEfbTJ3+5K58Fg9AubDN/iXaek0s+WN17Oi3SRPrX1/rem91IzWywqaGGq1bc ui4kzEhBC/ajSZi1YTYSI8geAnry5ffEFs5D+0RxUfwA8v2dPbH+J6rxjZaarlwM ErP6YrXBColGfI64dICEGW7/X/tYANrep/omGFX7OCDpfXWwsP95X1DpL9kuHCVy LpZAmEu7pPCpznhEUrT3xXSwIfaMLjqdFBB0WRQs5BOpzYlICv3pmfm9TM2S/B+6 EkqcZSSfyNkxISkF6gBqX+sbzIGmMwdycXbgRwasBBydGKPS/k4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:55:30 2025 by rpki-client