$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: 1NW5t++IA86KaDltbifeet+SRziaVsEGhpAi88sEEXc= Subject key identifier: 72:C9:DC:9F:0E:82:DE:8D:36:29:93:E0:6D:3F:17:0D:83:A9:21:FD Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 64F48EF707746A58F58A74B998255C579A34D68F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 01E4 Signing time: Tue 01 Jul 2025 02:31:55 +0000 Manifest this update: Tue 01 Jul 2025 02:26:55 +0000 Manifest next update: Fri 04 Jul 2025 13:59:55 +0000 Files and hashes: 1: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: DQkHRD9X6ZVS+1IVSGe7aSQ4PBXOyPkid4yUH9g7MB0=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f4:8e:f7:07:74:6a:58:f5:8a:74:b9:98:25:5c:57:9a:34:d6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Jul 1 02:26:55 2025 GMT Not After : Jul 4 13:59:55 2025 GMT Subject: CN=72C9DC9F0E82DE8D362993E06D3F170D83A921FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cd:b0:37:33:81:78:b9:b6:96:fb:b6:c4:f0: ce:c3:15:e8:38:c5:d5:11:0a:1a:cd:be:f9:99:42: 3f:79:75:25:32:d6:e4:f7:c5:6c:4e:b4:bd:59:9e: d8:e3:2e:af:c0:8d:c9:e4:13:78:3a:e7:4b:63:91: 9e:b6:d5:e8:8a:e0:65:33:83:ab:35:8c:4c:9d:a0: e1:d8:ca:5a:35:d1:1d:17:0d:c5:8c:1a:ea:d4:b0: d3:ba:0c:61:3a:70:67:ec:94:81:d5:9d:5e:60:0a: 88:80:c4:91:e1:6f:fc:e8:cd:8f:a9:cd:1d:07:a9: c5:54:df:58:16:1d:d7:e9:8e:1e:5e:39:2b:53:8f: ab:e1:56:dc:56:9b:ba:d8:f8:29:29:b3:22:4b:be: 78:0f:d6:22:02:b1:0e:e7:eb:90:67:5b:be:b4:09: 7a:4b:ee:24:55:06:b4:2c:c8:d7:49:3c:7e:b0:2b: f2:0d:7d:eb:96:51:c6:a5:4f:ee:f5:22:cf:b9:e9: c2:ef:77:aa:1d:b7:25:ae:d0:c2:93:f8:cd:61:1b: 89:98:e7:b8:f4:ef:62:27:93:43:f5:de:b8:49:9e: 2c:5d:3b:c8:26:ab:fe:df:17:f2:1a:a7:bb:12:61: 93:82:d8:c6:5a:a0:6b:ac:53:33:af:33:df:ab:39: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C9:DC:9F:0E:82:DE:8D:36:29:93:E0:6D:3F:17:0D:83:A9:21:FD X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e2:91:6b:50:90:cf:2d:9e:da:67:94:bf:13:c9:b3:26:54: 69:56:e6:b1:dd:1e:29:95:70:1d:56:0c:6b:da:c5:1b:a0:53: f0:ae:76:3d:1f:89:1e:d5:34:af:41:02:0e:29:20:ab:a5:d7: ed:2e:83:90:69:97:75:2b:3b:b6:a3:d9:2a:ca:0b:50:59:f6: 25:b5:fc:d8:a2:99:a4:f8:4c:7d:d5:ed:c1:ee:67:0c:bf:60: 4c:04:ef:f0:0d:a4:51:87:52:d8:f3:7b:5e:37:fe:7f:87:cd: 44:97:77:f5:bd:22:98:ad:22:d7:68:03:20:33:0f:18:2b:92: be:53:ac:18:63:1e:7b:ea:af:e3:55:80:6e:8b:48:43:71:d9: 1d:0b:ff:df:8a:f2:77:8d:1b:ec:09:d9:9d:40:cb:8f:0b:42: 60:98:3b:8f:cd:38:21:78:1e:8c:c0:df:7f:85:d7:1c:c1:33: 10:ae:28:aa:e1:1c:6b:3f:7f:cd:d8:7d:0b:de:6f:e6:08:bc: 04:07:d5:2a:55:63:1c:21:b2:bb:58:be:5b:d5:b9:00:38:0f: 1d:4c:8b:28:91:1b:43:4d:39:ad:98:0e:0a:43:f5:f3:b5:42: db:20:6d:79:0d:5a:ba:9f:22:5c:ca:66:e1:2c:f1:e8:be:b5: b5:7d:f4:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPSO9wd0alj1inS5mCVcV5o01o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTA3MDEwMjI2NTVaFw0yNTA3MDQxMzU5NTVaMDMxMTAvBgNV BAMTKDcyQzlEQzlGMEU4MkRFOEQzNjI5OTNFMDZEM0YxNzBEODNBOTIxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdzbA3M4F4ubaW+7bE8M7DFeg4 xdURChrNvvmZQj95dSUy1uT3xWxOtL1ZntjjLq/AjcnkE3g650tjkZ621eiK4GUz g6s1jEydoOHYylo10R0XDcWMGurUsNO6DGE6cGfslIHVnV5gCoiAxJHhb/zozY+p zR0HqcVU31gWHdfpjh5eOStTj6vhVtxWm7rY+CkpsyJLvngP1iICsQ7n65BnW760 CXpL7iRVBrQsyNdJPH6wK/INfeuWUcalT+71Is+56cLvd6odtyWu0MKT+M1hG4mY 57j072Ink0P13rhJnixdO8gmq/7fF/Iap7sSYZOC2MZaoGusUzOvM9+rOSIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsncnw6C3o02KZPgbT8XDYOpIf0wHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzikWtQkM8tntpnlL8TybMmVGlW5rHdHimV cB1WDGvaxRugU/Cudj0fiR7VNK9BAg4pIKul1+0ug5Bpl3UrO7aj2SrKC1BZ9iW1 /NiimaT4TH3V7cHuZwy/YEwE7/ANpFGHUtjze143/n+HzUSXd/W9IpitItdoAyAz Dxgrkr5TrBhjHnvqr+NVgG6LSENx2R0L/9+K8neNG+wJ2Z1Ay48LQmCYO4/NOCF4 HozA33+F1xzBMxCuKKrhHGs/f83YfQveb+YIvAQH1SpVYxwhsrtYvlvVuQA4Dx1M iyiRG0NNOa2YDgpD9fO1QtsgbXkNWrqfIlzKZuEs8ei+tbV99IM= -----END CERTIFICATE-----Generated at Thu Jul 3 10:20:40 2025 by rpki-client