$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: m/qtPbh2XM1dwarmFnnmbnbDNyYcmgB3+H7nGO6iSns= Subject key identifier: C2:B4:F7:E6:B0:F8:BA:87:19:F7:88:23:4E:68:69:9B:4A:C2:5B:FB Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 57D5C4AD06D9E629E817CB455E99EC7A04D6F4D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 01F7 Signing time: Fri 04 Apr 2025 02:51:41 +0000 Manifest this update: Fri 04 Apr 2025 02:46:41 +0000 Manifest next update: Mon 07 Apr 2025 04:42:41 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) 2: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: hSgNKOERGm0Yyjz6/CPgeLIKY6ZHpip3PlyU7IiqRDU=) 3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) 4: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d5:c4:ad:06:d9:e6:29:e8:17:cb:45:5e:99:ec:7a:04:d6:f4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Apr 4 02:46:41 2025 GMT Not After : Apr 7 04:42:41 2025 GMT Subject: CN=C2B4F7E6B0F8BA8719F788234E68699B4AC25BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:b8:31:e4:45:7f:66:f3:b7:f7:30:02:9f: db:53:1e:91:03:61:07:d6:08:46:bd:2b:c1:8e:4d: f1:ba:48:b8:30:77:3f:a0:ae:75:ec:b3:14:3a:60: db:2e:6f:c2:e2:73:48:b6:cb:69:2c:40:1d:97:b7: ed:1d:e9:c1:60:a1:d0:88:78:4d:fd:81:92:91:5c: 45:cf:e8:30:f6:94:62:1b:76:81:95:76:e4:5f:d7: 2d:da:d2:9e:a7:ee:f2:db:1b:33:dd:fd:a2:85:23: c2:61:ae:6c:1b:ed:8e:01:07:ed:59:93:db:77:a7: 8f:92:a4:86:64:ee:84:c7:3d:29:55:e9:74:12:93: 1e:b7:86:d5:25:6b:70:20:42:38:17:99:6c:bf:34: 80:1a:21:b7:9e:69:99:96:28:9d:01:7a:bf:f4:d3: 2a:4e:96:3f:da:44:66:be:de:9b:61:90:55:09:5b: a4:16:1d:62:03:4a:41:46:3b:e6:a7:44:9f:87:ff: 90:da:11:9f:8c:07:57:5b:28:ea:86:d3:e2:e7:43: 8f:45:3a:d0:d3:74:69:fb:4e:66:34:f0:5c:13:5a: 2b:2a:6c:54:6a:04:c8:53:18:2f:52:de:0c:0e:da: 00:05:8b:b4:e1:de:01:92:47:a3:7e:c7:f9:e4:79: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:F7:E6:B0:F8:BA:87:19:F7:88:23:4E:68:69:9B:4A:C2:5B:FB X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fb:4f:06:b3:80:ae:6e:27:ba:83:d2:46:4b:84:22:28:3f: 78:ee:07:89:85:a8:89:5f:96:f5:2b:b8:5b:89:4b:93:a0:a3: e4:2e:95:1d:6c:6c:26:17:38:45:10:01:83:b2:da:54:2e:ab: cc:b6:f5:e7:a5:d0:85:8e:3a:60:00:46:77:b2:dc:0f:45:22: 04:45:60:6c:02:6c:14:3f:40:56:4d:e9:be:81:29:5a:b4:6b: 92:9a:5a:ae:24:c9:5d:44:42:0e:67:02:98:c2:27:76:13:9a: 2f:b9:78:7a:15:c6:e1:76:77:6e:c9:57:ab:79:2e:f7:46:cf: 8c:8f:04:0d:09:6a:d5:d1:04:f8:68:10:36:9b:4d:86:cf:47: fa:b5:98:e8:00:65:3d:ac:7b:bc:1f:a2:85:4f:63:89:6c:9e: ae:c8:22:4e:a1:f9:5f:e6:a2:f7:ad:9e:c4:1f:95:ad:93:e4: d9:6f:b8:eb:9b:ac:3f:80:16:37:5d:88:f3:6e:42:fa:18:06: 17:3d:26:73:29:ee:46:69:4d:ca:b1:e3:e6:9c:47:ec:cc:e9: 3c:a5:1e:08:af:13:99:c6:9c:b1:ff:c7:33:85:43:55:d6:be: 2c:bd:f7:75:d7:1e:ff:1a:0e:c0:18:8a:d6:8f:1a:96:cb:27: 93:cb:45:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9XErQbZ5inoF8tFXpnsegTW9NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTA0MDQwMjQ2NDFaFw0yNTA0MDcwNDQyNDFaMDMxMTAvBgNV BAMTKEMyQjRGN0U2QjBGOEJBODcxOUY3ODgyMzRFNjg2OTlCNEFDMjVCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzT7gx5EV/ZvO39zACn9tTHpED YQfWCEa9K8GOTfG6SLgwdz+grnXssxQ6YNsub8Lic0i2y2ksQB2Xt+0d6cFgodCI eE39gZKRXEXP6DD2lGIbdoGVduRf1y3a0p6n7vLbGzPd/aKFI8Jhrmwb7Y4BB+1Z k9t3p4+SpIZk7oTHPSlV6XQSkx63htUla3AgQjgXmWy/NIAaIbeeaZmWKJ0Ber/0 0ypOlj/aRGa+3pthkFUJW6QWHWIDSkFGO+anRJ+H/5DaEZ+MB1dbKOqG0+LnQ49F OtDTdGn7TmY08FwTWisqbFRqBMhTGC9S3gwO2gAFi7Th3gGSR6N+x/nkefJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrT35rD4uocZ94gjTmhpm0rCW/swHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKv7TwazgK5uJ7qD0kZLhCIoP3juB4mFqIlf lvUruFuJS5Ogo+QulR1sbCYXOEUQAYOy2lQuq8y29eel0IWOOmAARney3A9FIgRF YGwCbBQ/QFZN6b6BKVq0a5KaWq4kyV1EQg5nApjCJ3YTmi+5eHoVxuF2d27JV6t5 LvdGz4yPBA0JatXRBPhoEDabTYbPR/q1mOgAZT2se7wfooVPY4lsnq7IIk6h+V/m ovetnsQfla2T5NlvuOubrD+AFjddiPNuQvoYBhc9JnMp7kZpTcqx4+acR+zM6Tyl HgivE5nGnLH/xzOFQ1XWviy993XXHv8aDsAYitaPGpbLJ5PLRYc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:07 2025 by rpki-client