$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: r1UJAzcma4OpZEubpYDkBchQG2MKFLnmF0XWZjAjmrs= Subject key identifier: C9:20:4C:1F:1F:8A:86:A2:C9:52:F7:76:37:19:E4:C6:40:BE:F9:4B Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 4243DA4739F9C87B7B1F931AA3C0662AD962A28F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 04D3 Signing time: Thu 08 May 2025 17:40:02 +0000 Manifest this update: Thu 08 May 2025 17:35:02 +0000 Manifest next update: Sun 11 May 2025 20:27:02 +0000 Files and hashes: 1: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: 3PS0oz/pScPQzie5Mti3z4hmWgtkSmXElwu/lAFPvxo=) 2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 4: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 5: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: eg9HpvxeMmxA3W9mMVVhjmhOHqn9oYHCDyqPJuP33rM=) 6: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uDKGCmtuAh53SMb+C/Ryy+REf5CV1In4kTPm6c1f6Xc=) 7: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:43:da:47:39:f9:c8:7b:7b:1f:93:1a:a3:c0:66:2a:d9:62:a2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: May 8 17:35:02 2025 GMT Not After : May 11 20:27:02 2025 GMT Subject: CN=C9204C1F1F8A86A2C952F7763719E4C640BEF94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:a5:5f:56:75:bc:7b:51:53:d5:d5:67:05: 18:0f:66:c4:2f:34:29:f0:b1:6a:72:87:32:25:56: 6f:a6:07:1e:aa:a9:2b:0f:22:0f:5c:48:16:c8:7e: 5a:df:b3:55:9e:2f:0f:3e:1f:5d:d6:7d:42:6e:e5: 7d:0b:3c:0e:d5:46:c7:24:c2:db:cf:f5:53:fd:41: 7e:b9:02:6e:ba:0e:cd:05:c1:c3:eb:20:df:e5:4d: a4:f3:9a:dc:25:05:6a:f9:b2:de:4c:85:fb:77:fb: 5c:b9:b2:f0:39:6c:60:50:f5:f7:90:a6:67:a4:67: 9e:68:12:27:25:a8:07:e2:a1:11:eb:8e:51:5c:23: 97:9c:d3:4c:8e:cc:b4:86:68:01:d9:bd:ec:1a:ec: e9:99:50:0a:de:0e:6b:e8:ce:03:3d:7c:b5:a1:b3: 8a:f2:f4:be:12:0e:f4:03:b0:4e:ee:40:39:86:3c: e1:2c:a8:1a:2e:26:53:6d:d7:d7:d6:b9:37:98:9d: 17:a0:4c:f5:54:c1:2e:33:e3:fe:92:50:c3:02:d1: 80:6b:45:79:c1:38:b7:7e:1f:b7:85:56:92:7d:9f: ad:6f:3b:66:c1:10:ec:9f:f8:cb:6d:d7:21:db:3d: 21:e0:62:59:3f:2f:a7:80:89:88:99:3c:45:06:62: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:4C:1F:1F:8A:86:A2:C9:52:F7:76:37:19:E4:C6:40:BE:F9:4B X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:86:5d:29:eb:32:c6:ed:fb:bf:6d:47:52:cb:78:d8:db:df: 1c:2d:ed:37:19:99:8d:0c:9c:c7:05:11:aa:99:2f:95:db:c4: ec:b9:da:1e:37:66:c7:bd:13:35:16:b7:e5:d8:0a:84:74:af: ae:c1:62:4f:96:ef:be:18:e0:52:9f:35:52:b4:58:d6:bf:1f: b0:5d:1e:86:b0:5f:6c:d5:5e:a2:1a:47:0a:65:f9:a0:c6:b1: 50:c8:e8:84:9b:6c:89:15:69:92:3f:77:11:ac:a2:07:d4:89: cd:fe:96:44:a0:1f:da:b8:c4:77:67:02:f4:c7:7c:70:2d:11: ea:5b:95:fd:08:cd:1c:4f:c1:04:4e:51:1d:91:f9:ce:96:07: b2:25:ca:ee:52:fe:df:c6:42:9d:2f:18:72:a9:79:26:30:34: 99:c3:53:b0:d3:15:a6:ec:c2:64:db:c6:9b:a7:16:0c:f5:c7: 46:4c:66:3d:72:f7:ab:36:99:df:25:21:ed:49:70:67:d5:19: b4:48:33:2a:f5:b3:c2:f2:73:e3:b1:56:1f:d6:5d:99:2f:c4: 7e:6c:7c:08:5a:9c:5d:46:aa:06:ff:84:91:a1:11:ef:01:31: d2:1a:c4:d9:3a:0d:72:cd:ba:9d:75:61:60:e7:d4:e8:1d:b9: 1c:f3:83:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkPaRzn5yHt7H5Mao8BmKtlioo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTA1MDgxNzM1MDJaFw0yNTA1MTEyMDI3MDJaMDMxMTAvBgNV BAMTKEM5MjA0QzFGMUY4QTg2QTJDOTUyRjc3NjM3MTlFNEM2NDBCRUY5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLp6VfVnW8e1FT1dVnBRgPZsQv NCnwsWpyhzIlVm+mBx6qqSsPIg9cSBbIflrfs1WeLw8+H13WfUJu5X0LPA7VRsck wtvP9VP9QX65Am66Ds0FwcPrIN/lTaTzmtwlBWr5st5Mhft3+1y5svA5bGBQ9feQ pmekZ55oEiclqAfioRHrjlFcI5ec00yOzLSGaAHZvewa7OmZUAreDmvozgM9fLWh s4ry9L4SDvQDsE7uQDmGPOEsqBouJlNt19fWuTeYnRegTPVUwS4z4/6SUMMC0YBr RXnBOLd+H7eFVpJ9n61vO2bBEOyf+Mtt1yHbPSHgYlk/L6eAiYiZPEUGYvHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySBMHx+KhqLJUvd2NxnkxkC++UswHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKGXSnrMsbt+79tR1LLeNjb3xwt7TcZmY0M nMcFEaqZL5XbxOy52h43Zse9EzUWt+XYCoR0r67BYk+W774Y4FKfNVK0WNa/H7Bd HoawX2zVXqIaRwpl+aDGsVDI6ISbbIkVaZI/dxGsogfUic3+lkSgH9q4xHdnAvTH fHAtEepblf0IzRxPwQROUR2R+c6WB7Ilyu5S/t/GQp0vGHKpeSYwNJnDU7DTFabs wmTbxpunFgz1x0ZMZj1y96s2md8lIe1JcGfVGbRIMyr1s8Lyc+OxVh/WXZkvxH5s fAhanF1Gqgb/hJGhEe8BMdIaxNk6DXLNup11YWDn1OgduRzzgww= -----END CERTIFICATE-----Generated at Sat May 10 08:22:57 2025 by rpki-client