$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: /rMRKzH7xnWkFZDURti6UKho/I/C+inVnShL3EglQNU= Subject key identifier: C3:79:04:0B:7C:55:B8:BE:A2:57:8F:E0:EE:E1:82:DD:4B:66:2E:8E Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 442BB9E320EF54D8D60B2F992D9101A29800D81F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04B9 Signing time: Sat 19 Jul 2025 05:20:39 +0000 Manifest this update: Sat 19 Jul 2025 05:15:39 +0000 Manifest next update: Tue 22 Jul 2025 15:28:39 +0000 Files and hashes: 1: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: LPWMak8th8VNt/0J6heucLl4qmwpKyJ9CL5h2wIVNR4=) 2: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) 3: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) 4: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 5: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2b:b9:e3:20:ef:54:d8:d6:0b:2f:99:2d:91:01:a2:98:00:d8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Jul 19 05:15:39 2025 GMT Not After : Jul 22 15:28:39 2025 GMT Subject: CN=C379040B7C55B8BEA2578FE0EEE182DD4B662E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:29:20:d5:05:76:d2:7a:f3:18:56:86:82: d8:d8:c1:d7:89:18:d0:c4:80:26:a1:bf:42:2c:a5: f0:79:04:15:6a:7d:80:bc:ee:16:a7:ac:6a:aa:60: e8:79:16:67:e5:95:d8:59:c6:25:99:63:df:be:5f: 02:95:d0:b4:cb:59:57:af:9f:e6:7d:5b:8c:73:44: e8:64:a2:fe:21:5d:b9:4f:89:cf:bf:2d:cb:29:aa: ac:18:9f:2f:f4:2c:73:f0:23:69:c6:ab:98:b8:e2: 9f:0d:f7:84:c5:d7:54:b0:1e:af:e2:91:96:b2:fb: d5:e6:d5:b0:39:20:0b:50:fc:44:d3:54:9b:23:6f: e4:77:bc:02:9f:78:9a:4f:c3:c4:96:13:34:0f:be: f8:35:14:cc:ff:2e:f7:ec:99:95:c7:42:ec:3e:cb: c7:e4:e1:e8:87:45:5b:ba:af:e5:52:8e:80:4b:51: 0e:b2:fe:b1:29:89:ba:2c:9c:79:71:ae:fa:ba:fa: c3:be:d3:26:d5:d2:95:98:a6:ee:8a:8c:44:33:72: 06:cc:1b:fd:28:c5:72:bb:38:f2:89:46:3c:75:89: 67:06:17:04:2b:6f:0d:29:2d:c5:24:98:98:a5:a2: c1:64:29:0b:aa:d2:b0:d9:5f:fb:f7:7a:c8:ea:c1: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:79:04:0B:7C:55:B8:BE:A2:57:8F:E0:EE:E1:82:DD:4B:66:2E:8E X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b8:bf:65:61:86:ec:ef:85:1b:bd:de:80:2a:ce:3b:f4:cf: c4:2d:3e:98:51:f2:0a:4f:41:dd:61:f0:90:38:13:26:48:ab: ac:cf:c9:2f:b3:36:a0:50:4e:b9:7b:07:f7:55:dd:a5:55:dc: 2a:a9:eb:f0:a2:5a:0d:5c:29:b1:ae:ac:eb:f0:86:7f:2c:de: 53:61:26:57:69:52:52:4f:9c:ca:85:01:7c:fe:c2:98:1d:5c: 6f:17:95:0d:66:c3:2a:b3:49:97:3b:2b:e6:87:a1:10:05:a9: 81:22:2a:d7:42:b8:f2:53:21:cf:b9:10:77:ec:96:81:99:72: cf:f3:58:3a:fd:e0:ac:51:2c:da:0c:c6:90:04:c8:fd:ca:59: 95:93:a5:3e:ba:32:6c:f4:04:5d:3d:0f:4c:4d:a6:97:8c:d1: df:6c:2c:f1:8b:19:ed:7f:e6:db:61:a3:17:78:52:2e:35:90: 7f:e2:15:71:a8:86:76:dc:04:c0:09:9d:b2:b2:67:23:cc:91: 6a:72:14:06:12:b9:58:d2:ac:92:e2:ba:12:e0:fc:9f:23:e5: 6d:51:95:96:c0:1a:30:88:66:6c:53:7e:3d:52:ee:f1:b2:dc: cd:bd:7a:2f:27:df:62:dc:83:2c:1d:a8:61:5c:17:f5:c3:be: 94:40:b7:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCu54yDvVNjWCy+ZLZEBopgA2B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA3MTkwNTE1MzlaFw0yNTA3MjIxNTI4MzlaMDMxMTAvBgNV BAMTKEMzNzkwNDBCN0M1NUI4QkVBMjU3OEZFMEVFRTE4MkRENEI2NjJFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkikg1QV20nrzGFaGgtjYwdeJ GNDEgCahv0IspfB5BBVqfYC87hanrGqqYOh5FmflldhZxiWZY9++XwKV0LTLWVev n+Z9W4xzROhkov4hXblPic+/LcspqqwYny/0LHPwI2nGq5i44p8N94TF11SwHq/i kZay+9Xm1bA5IAtQ/ETTVJsjb+R3vAKfeJpPw8SWEzQPvvg1FMz/LvfsmZXHQuw+ y8fk4eiHRVu6r+VSjoBLUQ6y/rEpibosnHlxrvq6+sO+0ybV0pWYpu6KjEQzcgbM G/0oxXK7OPKJRjx1iWcGFwQrbw0pLcUkmJilosFkKQuq0rDZX/v3esjqwTbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw3kEC3xVuL6iV4/g7uGC3UtmLo4wHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe4v2VhhuzvhRu93oAqzjv0z8QtPphR8gpP Qd1h8JA4EyZIq6zPyS+zNqBQTrl7B/dV3aVV3Cqp6/CiWg1cKbGurOvwhn8s3lNh JldpUlJPnMqFAXz+wpgdXG8XlQ1mwyqzSZc7K+aHoRAFqYEiKtdCuPJTIc+5EHfs loGZcs/zWDr94KxRLNoMxpAEyP3KWZWTpT66Mmz0BF09D0xNppeM0d9sLPGLGe1/ 5tthoxd4Ui41kH/iFXGohnbcBMAJnbKyZyPMkWpyFAYSuVjSrJLiuhLg/J8j5W1R lZbAGjCIZmxTfj1S7vGy3M29ei8n32LcgywdqGFcF/XDvpRAt8c= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:37 2025 by rpki-client