$ rpki-client -vvf repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft File: 1D80B161A8871962133619E73EBB98762953ABF1.mft (raw, json) Hash identifier: i6Yko2HE4yOYwp4EQaAn5BFyjzqdKzIXBk4LUyXnyOY= Subject key identifier: 49:67:8B:6E:F2:AC:2E:7E:43:2E:68:FB:6B:E0:47:03:D9:B5:55:F1 Authority key identifier: 1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 Certificate issuer: /CN=1D80B161A8871962133619E73EBB98762953ABF1 Certificate serial: 27C67D619897E10AB242AF7950A1F73129A8B911 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft Manifest number: 0166 Signing time: Sun 06 Apr 2025 06:32:04 +0000 Manifest this update: Sun 06 Apr 2025 06:27:04 +0000 Manifest next update: Wed 09 Apr 2025 14:44:04 +0000 Files and hashes: 1: 1D80B161A8871962133619E73EBB98762953ABF1.crl (hash: v9BBXKW5GnaIrM4fKpcclxWWPvU+Rwus6BNT8Oer1yk=) 2: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 2ij1jqIgyRl9fMj7GA6iQ4RysnWHFWKfEhR4n6OxCCo=) 3: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: JHaaXWcIh7S1M0eqUwvmLXMc38/THWMZ+gJon7aPrNg=) 4: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: ovrs8jnUkNf+XIsuUoS9OXOAOBVBgJNl9ABSwFMQZq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c6:7d:61:98:97:e1:0a:b2:42:af:79:50:a1:f7:31:29:a8:b9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D80B161A8871962133619E73EBB98762953ABF1 Validity Not Before: Apr 6 06:27:04 2025 GMT Not After : Apr 9 14:44:04 2025 GMT Subject: CN=49678B6EF2AC2E7E432E68FB6BE04703D9B555F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:46:54:14:e4:7e:62:63:77:05:df:0c:34: 52:90:93:98:36:27:ba:20:81:56:c0:1c:7b:12:bf: 9c:0a:10:e1:ca:4d:53:d5:d6:b7:3a:ff:4c:41:04: fa:f6:9b:4b:1c:4c:c3:fa:34:c4:57:78:d6:e5:5f: 3a:49:d6:e5:e3:17:a5:f6:7c:5c:dc:77:66:67:20: 1b:1b:3b:d8:4c:64:77:f8:ac:7f:08:0c:84:b2:dc: 39:1c:1c:2e:62:c1:c6:c5:85:b1:1a:aa:9b:6a:6d: 28:86:87:1c:6c:2f:7a:b4:50:45:a7:6b:29:23:fe: 64:45:30:1c:70:67:0f:7a:e4:72:f1:ca:45:ff:6e: df:4c:a8:a0:7c:6c:68:6e:9d:80:2a:ed:cd:b2:6b: 66:27:8e:4d:c8:82:c5:33:84:7c:08:15:ac:5e:e3: 40:ea:91:d6:2a:e5:2f:ed:41:de:45:6e:be:a9:c8: 9b:b0:40:87:49:e1:3e:f9:11:6c:62:21:24:2b:38: 34:29:ab:98:77:bb:cc:ae:f0:fe:2d:c9:11:95:87: b4:1b:8d:c5:cc:27:19:11:b9:d2:39:7d:5b:30:ea: 0f:3d:3a:3c:de:65:29:83:bc:63:4a:90:2a:44:a3: 75:7b:5d:6c:77:43:7f:59:a0:d5:52:99:64:68:d8: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:67:8B:6E:F2:AC:2E:7E:43:2E:68:FB:6B:E0:47:03:D9:B5:55:F1 X509v3 Authority Key Identifier: keyid:1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a0:8b:71:1d:72:aa:9d:af:45:32:1f:f8:56:3a:ec:04:da: 7c:27:ff:77:79:bc:8e:24:e1:11:5a:2e:f9:6e:43:23:af:ed: 1d:18:a1:f2:98:36:28:df:2f:40:25:6d:6f:2f:d1:e6:a1:17: 7a:25:c0:1b:cc:10:fe:22:31:6e:40:9e:39:43:96:4f:2d:be: af:d2:27:58:aa:54:b2:74:77:33:9f:ba:80:30:92:d6:21:27: 3d:00:0b:c4:bc:d1:b0:49:fc:ac:8b:e1:ab:08:5d:fc:6e:68: f6:1e:6f:23:77:c1:ed:47:87:96:41:88:89:f9:36:a1:ee:9e: 42:51:43:c4:60:7b:b8:19:29:6b:ae:42:4f:ea:9b:4f:69:9a: b7:3d:7d:9f:51:50:87:b0:b9:65:96:ac:1d:61:22:3b:d7:80: f2:64:fd:a5:62:84:e6:30:70:c6:ca:f7:18:3c:15:6f:47:3a: c6:b7:88:e4:00:c0:38:f1:3d:4a:9f:5f:89:74:e0:04:5c:72: 39:c5:db:7b:b0:1d:11:7c:a9:c0:a0:73:07:1d:ab:77:57:9a: 0c:38:5b:44:4e:35:f6:f7:03:a4:36:98:57:cc:70:45:86:e1: 53:24:f1:47:00:53:41:c4:ae:22:01:35:07:95:7b:d5:7b:a3: 1d:d1:ef:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8Z9YZiX4QqyQq95UKH3MSmouREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYy OTUzQUJGMTAeFw0yNTA0MDYwNjI3MDRaFw0yNTA0MDkxNDQ0MDRaMDMxMTAvBgNV BAMTKDQ5Njc4QjZFRjJBQzJFN0U0MzJFNjhGQjZCRTA0NzAzRDlCNTU1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JUZUFOR+YmN3Bd8MNFKQk5g2 J7oggVbAHHsSv5wKEOHKTVPV1rc6/0xBBPr2m0scTMP6NMRXeNblXzpJ1uXjF6X2 fFzcd2ZnIBsbO9hMZHf4rH8IDISy3DkcHC5iwcbFhbEaqptqbSiGhxxsL3q0UEWn aykj/mRFMBxwZw965HLxykX/bt9MqKB8bGhunYAq7c2ya2Ynjk3IgsUzhHwIFaxe 40DqkdYq5S/tQd5Fbr6pyJuwQIdJ4T75EWxiISQrODQpq5h3u8yu8P4tyRGVh7Qb jcXMJxkRudI5fVsw6g89OjzeZSmDvGNKkCpEo3V7XWx3Q39ZoNVSmWRo2FA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWeLbvKsLn5DLmj7a+BHA9m1VfEwHwYDVR0j BBgwFoAUHYCxYaiHGWITNhnnPruYdilTq/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTUyMTA5OS0zYmExLTRmOTEtYjViYi03MTJjM2JiYTYzMzcvMC8xRDgwQjE2MUE4 ODcxOTYyMTMzNjE5RTczRUJCOTg3NjI5NTNBQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYyOTUz QUJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1 YmItNzEyYzNiYmE2MzM3LzAvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4 NzYyOTUzQUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmgi3Edcqqdr0UyH/hWOuwE2nwn/3d5vI4k 4RFaLvluQyOv7R0YofKYNijfL0AlbW8v0eahF3olwBvMEP4iMW5AnjlDlk8tvq/S J1iqVLJ0dzOfuoAwktYhJz0AC8S80bBJ/KyL4asIXfxuaPYebyN3we1Hh5ZBiIn5 NqHunkJRQ8Rge7gZKWuuQk/qm09pmrc9fZ9RUIewuWWWrB1hIjvXgPJk/aVihOYw cMbK9xg8FW9HOsa3iOQAwDjxPUqfX4l04ARccjnF23uwHRF8qcCgcwcdq3dXmgw4 W0RONfb3A6Q2mFfMcEWG4VMk8UcAU0HEriIBNQeVe9V7ox3R72s= -----END CERTIFICATE-----Generated at Sun Apr 6 12:49:57 2025 by rpki-client