$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: 13ebvEANcqLaWcFtrYb1rn+jQiXABMzbBe9pCtu8P4c= Subject key identifier: 5F:F5:67:B8:32:A9:72:7D:3B:EF:9A:51:20:77:AF:E6:6C:52:1C:DC Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 322E94AF98001767318A8C5120F06BCCE17E3120 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 0286 Signing time: Mon 02 Jun 2025 02:46:09 +0000 Manifest this update: Mon 02 Jun 2025 02:41:09 +0000 Manifest next update: Thu 05 Jun 2025 13:36:09 +0000 Files and hashes: 1: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: DcbwIwrxmcBqnylGs6MDvl9SBeUUlv+AKCb/gQffOvk=) 2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 0vXpxdXBoxtpu0xcyCU+AYUkP5Qq7RrqqwsILvqbx7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2e:94:af:98:00:17:67:31:8a:8c:51:20:f0:6b:cc:e1:7e:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Jun 2 02:41:09 2025 GMT Not After : Jun 5 13:36:09 2025 GMT Subject: CN=5FF567B832A9727D3BEF9A512077AFE66C521CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:1b:ec:73:a5:b2:35:3c:ee:57:88:ff:15: 6a:da:4a:91:de:66:4d:2b:46:24:18:4c:73:c5:bd: 9e:0b:58:0f:0c:3c:dd:5c:5a:42:47:a6:ee:e1:1c: 18:69:bc:12:fc:2c:0d:af:ff:c1:0d:76:40:81:bf: 14:93:a3:8c:dd:d9:c8:d1:c1:be:8d:a0:00:97:ea: fb:40:94:36:f2:e7:28:8a:db:16:9e:34:2c:1b:4a: 8d:6b:20:ae:9a:dd:0c:d4:0c:84:8c:87:cc:75:95: c1:d4:7e:32:83:93:ec:82:12:2e:c5:7e:f5:aa:e9: 69:59:79:43:ce:9e:07:46:1f:73:c3:82:05:78:59: 36:b4:58:04:b6:2b:2e:43:87:38:cd:cd:3b:c7:5f: fe:82:5e:ff:ce:09:6a:da:89:de:09:32:b8:69:86: fe:f8:ea:87:3d:45:d2:f1:73:87:fa:1a:6e:23:08: 02:65:ba:30:b2:4a:60:95:50:e3:bc:fa:bb:d0:e3: ac:cc:64:77:22:37:2a:39:1b:c2:9a:4a:f7:ac:b9: 81:4d:8a:d0:6b:03:e4:20:d7:60:87:51:9a:a7:d1: 5e:c0:df:0a:80:f0:4d:20:49:fa:02:a5:a1:e4:d3: 9e:33:7b:c8:aa:c3:35:0f:d0:fb:87:d1:09:17:aa: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:67:B8:32:A9:72:7D:3B:EF:9A:51:20:77:AF:E6:6C:52:1C:DC X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a8:d2:78:18:bd:2c:ac:65:a3:c2:a9:18:22:66:6c:c9:d7: d5:08:2f:a3:73:48:79:f0:46:bf:15:99:0d:1b:20:d9:58:28: 7e:b5:7f:79:9d:ec:4e:26:c5:e3:9f:ab:67:19:89:1b:79:03: e7:2f:03:99:63:39:54:8d:9c:ed:d4:65:c9:aa:e1:dd:73:00: 97:5e:3a:1b:30:57:c4:7c:7e:67:64:50:1b:80:74:b3:4e:af: f6:c6:80:42:2f:20:ea:8c:70:f1:18:37:a0:3d:39:28:d7:77: 7c:70:2c:49:fb:09:bb:82:ac:28:78:7a:5e:a6:63:58:24:a5: ff:dc:dd:f0:4d:79:81:c5:f6:6f:af:28:bd:9c:85:c0:f9:a3: ce:41:d5:45:69:06:b7:ea:1b:a8:e9:29:f9:b4:78:5a:17:6d: 0f:fc:8f:6c:3f:44:94:4c:26:d6:cc:be:23:2c:ee:eb:d2:ab: 44:d6:b3:77:72:6d:e8:6f:c2:80:cb:fd:82:51:1f:fd:3a:ec: 21:7e:16:20:2e:9e:89:2a:ba:9f:1a:e3:1c:f3:79:66:ef:27: ed:bf:63:de:b1:3c:dd:d1:91:91:f0:da:0b:4e:9e:03:0f:2d: 92:c8:81:c7:d6:a7:41:48:c5:a6:cf:0a:77:5d:6e:a0:27:b0: fc:61:4d:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMi6Ur5gAF2cxioxRIPBrzOF+MSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTA2MDIwMjQxMDlaFw0yNTA2MDUxMzM2MDlaMDMxMTAvBgNV BAMTKDVGRjU2N0I4MzJBOTcyN0QzQkVGOUE1MTIwNzdBRkU2NkM1MjFDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXgxvsc6WyNTzuV4j/FWraSpHe Zk0rRiQYTHPFvZ4LWA8MPN1cWkJHpu7hHBhpvBL8LA2v/8ENdkCBvxSTo4zd2cjR wb6NoACX6vtAlDby5yiK2xaeNCwbSo1rIK6a3QzUDISMh8x1lcHUfjKDk+yCEi7F fvWq6WlZeUPOngdGH3PDggV4WTa0WAS2Ky5DhzjNzTvHX/6CXv/OCWraid4JMrhp hv746oc9RdLxc4f6Gm4jCAJlujCySmCVUOO8+rvQ46zMZHciNyo5G8KaSvesuYFN itBrA+Qg12CHUZqn0V7A3wqA8E0gSfoCpaHk054ze8iqwzUP0PuH0QkXqrXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/VnuDKpcn0775pRIHev5mxSHNwwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOo0ngYvSysZaPCqRgiZmzJ19UIL6NzSHnw Rr8VmQ0bINlYKH61f3md7E4mxeOfq2cZiRt5A+cvA5ljOVSNnO3UZcmq4d1zAJde OhswV8R8fmdkUBuAdLNOr/bGgEIvIOqMcPEYN6A9OSjXd3xwLEn7CbuCrCh4el6m Y1gkpf/c3fBNeYHF9m+vKL2chcD5o85B1UVpBrfqG6jpKfm0eFoXbQ/8j2w/RJRM JtbMviMs7uvSq0TWs3dybehvwoDL/YJRH/067CF+FiAunokqup8a4xzzeWbvJ+2/ Y96xPN3RkZHw2gtOngMPLZLIgcfWp0FIxabPCnddbqAnsPxhTXg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:00 2025 by rpki-client