$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: aFmNG4nkHSMRpWaTyq6wVf+8t2T3vVx3PJPpJnWmL14= Subject key identifier: 9E:05:6F:F8:62:47:9B:7C:6B:BB:02:DE:EF:4A:1B:55:BB:9F:70:B1 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 10BD8F615B84CDB0F8167F99FD32D0ADE7218D66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 035A Signing time: Wed 04 Jun 2025 11:41:06 +0000 Manifest this update: Wed 04 Jun 2025 11:36:06 +0000 Manifest next update: Sat 07 Jun 2025 19:40:06 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: HbUA6PihMgL1nYcpjsUsb8JEyIvfWnVeM6OAdfhyjYc=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: UVa2BFyeyFnWWwBGER708Zkc5wG3hgx7lEbyHJ9YtXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bd:8f:61:5b:84:cd:b0:f8:16:7f:99:fd:32:d0:ad:e7:21:8d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Jun 4 11:36:06 2025 GMT Not After : Jun 7 19:40:06 2025 GMT Subject: CN=9E056FF862479B7C6BBB02DEEF4A1B55BB9F70B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:1a:a5:99:46:b3:c2:70:20:45:45:88:00: 80:06:c2:57:b6:15:8d:82:6d:eb:36:08:99:7d:44: 15:e5:47:14:f2:34:0c:93:32:45:3b:5a:ed:77:23: 1c:55:14:68:ba:43:be:f5:3e:6f:75:ba:21:5b:c0: 67:b1:ac:4e:b4:1c:e7:1e:2e:d6:c9:73:99:b7:e3: b9:e9:7f:eb:94:b5:72:5b:8c:3b:6c:55:89:1e:e3: b0:df:dd:ff:bd:6c:22:ec:e8:02:90:ae:86:9e:94: 0a:04:a9:b9:ed:c7:ef:fe:21:5e:b2:03:c3:41:26: ed:72:d8:ab:e6:e3:19:35:05:92:56:dd:a1:77:28: 4c:1b:55:bb:f5:24:07:75:35:35:ac:6b:2c:7d:85: bd:f5:95:89:ea:27:91:b1:19:36:bd:27:1a:1a:42: ff:75:b4:c4:8e:62:3b:44:96:af:98:1b:07:b9:6c: d1:d0:c8:6a:35:5f:ae:d4:a1:aa:43:58:31:63:98: bd:0c:ee:fa:7b:6e:af:67:06:13:26:6e:e9:58:52: 20:1f:dd:b9:ee:5f:14:07:c9:46:c1:94:e1:2a:21: 43:fa:48:a2:95:9d:0d:2d:43:dd:71:13:e9:d3:a6: cf:b5:20:e0:5c:96:09:20:d5:a4:af:13:e0:1b:ba: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:05:6F:F8:62:47:9B:7C:6B:BB:02:DE:EF:4A:1B:55:BB:9F:70:B1 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dc:74:e1:93:48:a8:75:01:20:2c:93:f7:43:40:95:49:ed: c8:c2:21:71:2c:d7:0a:8c:e7:af:cc:4a:b8:7e:c3:6a:5d:a8: d8:68:1c:69:98:67:3e:0d:2a:bf:8b:3a:86:82:45:5b:b1:6b: d7:a3:31:9f:fa:3f:79:03:40:05:3d:a3:aa:9b:39:a7:60:1b: 25:45:15:c0:2a:31:2c:0f:f2:c4:43:2d:1f:f8:b7:b4:80:d1: 4f:45:16:cc:19:ab:1b:12:fb:11:0e:55:6b:3e:70:bd:bc:ca: 9e:d9:ed:38:9d:a6:36:57:99:0c:d6:71:97:6f:1f:39:34:ee: 4b:5c:ec:50:df:ba:65:b2:c3:b0:7f:3e:57:5d:7f:c4:86:3b: 2f:10:7b:45:43:f6:0a:8f:a5:72:da:a4:ea:9f:d0:42:63:7e: d2:47:4a:43:c7:5b:3b:66:5f:f4:ae:bc:69:e2:0c:4a:de:95: 83:31:d0:4c:f9:da:cd:20:77:e5:9b:05:4c:03:e3:0e:31:88: e9:c3:77:9f:88:c2:e5:f5:48:43:a8:33:5a:32:da:11:bf:42: 88:d8:a8:7c:49:85:ce:99:90:26:d4:5f:8b:43:a4:e5:c4:57: 7b:14:7f:d9:93:58:18:e9:11:78:d0:76:61:99:c3:e5:e3:94: f5:8a:94:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEL2PYVuEzbD4Fn+Z/TLQrechjWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNTA2MDQxMTM2MDZaFw0yNTA2MDcxOTQwMDZaMDMxMTAvBgNV BAMTKDlFMDU2RkY4NjI0NzlCN0M2QkJCMDJERUVGNEExQjU1QkI5RjcwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2xqlmUazwnAgRUWIAIAGwle2 FY2Cbes2CJl9RBXlRxTyNAyTMkU7Wu13IxxVFGi6Q771Pm91uiFbwGexrE60HOce LtbJc5m347npf+uUtXJbjDtsVYke47Df3f+9bCLs6AKQroaelAoEqbntx+/+IV6y A8NBJu1y2Kvm4xk1BZJW3aF3KEwbVbv1JAd1NTWsayx9hb31lYnqJ5GxGTa9Jxoa Qv91tMSOYjtElq+YGwe5bNHQyGo1X67UoapDWDFjmL0M7vp7bq9nBhMmbulYUiAf 3bnuXxQHyUbBlOEqIUP6SKKVnQ0tQ91xE+nTps+1IOBclgkg1aSvE+Abukg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngVv+GJHm3xruwLe70obVbufcLEwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvcdOGTSKh1ASAsk/dDQJVJ7cjCIXEs1wqM 56/MSrh+w2pdqNhoHGmYZz4NKr+LOoaCRVuxa9ejMZ/6P3kDQAU9o6qbOadgGyVF FcAqMSwP8sRDLR/4t7SA0U9FFswZqxsS+xEOVWs+cL28yp7Z7TidpjZXmQzWcZdv Hzk07ktc7FDfumWyw7B/Plddf8SGOy8Qe0VD9gqPpXLapOqf0EJjftJHSkPHWztm X/SuvGniDErelYMx0Ez52s0gd+WbBUwD4w4xiOnDd5+IwuX1SEOoM1oy2hG/QojY qHxJhc6ZkCbUX4tDpOXEV3sUf9mTWBjpEXjQdmGZw+XjlPWKlKE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:45 2025 by rpki-client