$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: hVWkIpO/AW/mRjhPBTrcuepPSNLPha80h4yCfyGMIgE= Subject key identifier: CA:18:7C:87:62:8D:98:A4:4A:E1:5B:02:05:48:89:44:4E:40:13:55 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 5597A63C3E4E6B46967F54BB7148EE8E7E8B436D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 01CE Signing time: Mon 12 May 2025 18:41:53 +0000 Manifest this update: Mon 12 May 2025 18:36:53 +0000 Manifest next update: Thu 15 May 2025 20:50:53 +0000 Files and hashes: 1: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: qCPnKzZoibBJhod7ldGqqG2m2tpMTsP9CgxOnamtmbw=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 20:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:97:a6:3c:3e:4e:6b:46:96:7f:54:bb:71:48:ee:8e:7e:8b:43:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: May 12 18:36:53 2025 GMT Not After : May 15 20:50:53 2025 GMT Subject: CN=CA187C87628D98A44AE15B02054889444E401355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:0d:97:62:8c:9b:d6:18:3d:fc:9c:0f:05: 11:bd:b2:ea:fe:74:bc:2f:f6:3a:16:38:b3:9c:0b: 38:c9:af:2f:d1:a5:21:05:7b:7e:1b:1d:20:a5:22: 96:bd:88:28:2b:5b:2a:6d:19:21:7f:6e:8c:98:c4: 7b:1f:a1:db:86:35:f7:f9:ed:ea:09:bd:49:1d:4d: 1e:53:4b:3e:17:d0:34:0f:bb:4e:90:c2:57:8d:e9: f5:37:d4:95:1e:94:f2:e5:47:9a:7a:8f:8c:d3:a5: 16:aa:ee:01:0f:48:5a:cd:1d:65:bc:e3:fa:c9:f3: d4:94:43:35:97:1a:bb:b1:9e:d8:5e:a2:6e:f5:be: ec:b4:87:67:f6:30:24:79:85:a9:94:0c:91:b8:81: 90:37:b9:3f:f1:f5:de:5f:ad:c8:11:bf:34:c0:33: bd:2c:d4:74:e8:5d:34:f4:b5:40:98:ad:c4:78:78: 2e:47:f2:95:20:25:e8:05:bf:6b:ad:6d:61:0a:e3: 51:45:2e:cc:79:e2:93:f7:6a:cb:a9:9e:f8:5c:3d: 06:97:34:58:ba:b1:6d:41:a0:9e:98:70:2d:16:ec: ff:86:e9:e4:47:8b:f1:56:4b:20:da:d8:1d:fd:a0: fc:38:dd:3d:21:5b:39:00:2a:c9:75:88:92:39:ef: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:18:7C:87:62:8D:98:A4:4A:E1:5B:02:05:48:89:44:4E:40:13:55 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d7:f8:a3:b0:e1:35:3e:79:19:b5:f7:db:96:23:fa:db:db: 90:24:e0:ad:55:df:b5:15:39:53:5b:da:99:65:c4:b3:7c:4c: 30:ef:19:02:73:7a:43:af:00:79:3a:e2:8e:15:f6:7c:60:cd: e6:22:5f:a7:4b:a3:17:35:26:f7:c1:e0:ab:b1:8f:87:20:cd: 74:29:fd:b4:a9:7f:51:9b:4c:35:c7:39:64:37:82:40:de:90: 4e:29:f8:97:80:fd:f5:65:98:d3:e1:09:c8:be:01:e7:2d:84: b8:27:0e:7c:e4:0c:61:f1:4c:5f:a8:8d:b2:5b:32:ce:44:e2: 5a:24:f5:66:83:05:dc:79:5a:1f:04:39:4e:4f:1e:d7:9f:b0: ae:4a:f8:69:1a:ef:5f:a2:55:c4:b8:9a:42:9b:10:bf:98:a1: ab:eb:d3:96:76:a3:af:79:92:71:88:2e:b9:3d:25:84:35:c2: 9d:6b:c8:31:b3:61:57:7d:76:01:c0:38:bc:a3:1d:ac:de:d7: 8c:13:c6:ff:74:81:72:8c:cd:84:b3:c5:b5:44:ae:ba:58:41: 7e:b0:10:ac:38:a2:c3:5b:46:35:d6:9b:40:c9:42:72:8c:f6: 43:35:ff:04:5e:21:5a:83:35:70:98:3f:ba:1b:24:35:24:f8: dd:bf:56:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZemPD5Oa0aWf1S7cUjujn6LQ20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTA1MTIxODM2NTNaFw0yNTA1MTUyMDUwNTNaMDMxMTAvBgNV BAMTKENBMTg3Qzg3NjI4RDk4QTQ0QUUxNUIwMjA1NDg4OTQ0NEU0MDEzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXQ2XYoyb1hg9/JwPBRG9sur+ dLwv9joWOLOcCzjJry/RpSEFe34bHSClIpa9iCgrWyptGSF/boyYxHsfoduGNff5 7eoJvUkdTR5TSz4X0DQPu06QwleN6fU31JUelPLlR5p6j4zTpRaq7gEPSFrNHWW8 4/rJ89SUQzWXGruxntheom71vuy0h2f2MCR5hamUDJG4gZA3uT/x9d5frcgRvzTA M70s1HToXTT0tUCYrcR4eC5H8pUgJegFv2utbWEK41FFLsx54pP3asupnvhcPQaX NFi6sW1BoJ6YcC0W7P+G6eRHi/FWSyDa2B39oPw43T0hWzkAKsl1iJI576Z9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyhh8h2KNmKRK4VsCBUiJRE5AE1UwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLX+KOw4TU+eRm199uWI/rb25Ak4K1V37UV OVNb2pllxLN8TDDvGQJzekOvAHk64o4V9nxgzeYiX6dLoxc1JvfB4Kuxj4cgzXQp /bSpf1GbTDXHOWQ3gkDekE4p+JeA/fVlmNPhCci+AecthLgnDnzkDGHxTF+ojbJb Ms5E4lok9WaDBdx5Wh8EOU5PHtefsK5K+Gka71+iVcS4mkKbEL+Yoavr05Z2o695 knGILrk9JYQ1wp1ryDGzYVd9dgHAOLyjHaze14wTxv90gXKMzYSzxbVErrpYQX6w EKw4osNbRjXWm0DJQnKM9kM1/wReIVqDNXCYP7obJDUk+N2/VnU= -----END CERTIFICATE-----Generated at Tue May 13 11:38:31 2025 by rpki-client