$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: IXQx7ezqRREmcwWI4u6hZNdLo0l9Za/Tz4RJf8bN5gg= Subject key identifier: 8B:C7:37:56:9A:BE:53:C5:80:28:28:36:9D:51:57:5C:03:8F:F5:AD Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 1230AD4B2E3DD2743BAE349B05FDD6D198D6F4CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 0213 Signing time: Fri 06 Jun 2025 21:11:39 +0000 Manifest this update: Fri 06 Jun 2025 21:06:39 +0000 Manifest next update: Tue 10 Jun 2025 08:01:39 +0000 Files and hashes: 1: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=) 2: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=) 3: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 8I9rXDDRUWejigyO8CZB5dUjCvhbsidyHshDtPJAH+s=) 4: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:30:ad:4b:2e:3d:d2:74:3b:ae:34:9b:05:fd:d6:d1:98:d6:f4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Jun 6 21:06:39 2025 GMT Not After : Jun 10 08:01:39 2025 GMT Subject: CN=8BC737569ABE53C5802828369D51575C038FF5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0d:b5:25:d5:5c:55:9f:11:2c:88:0a:ec:1c: ef:c4:0a:24:41:1c:ca:3a:00:1b:cb:73:49:d3:27: 25:a3:f2:89:1b:d1:3f:78:80:3c:90:60:4b:78:52: 30:8c:8a:b3:ed:8e:44:05:fe:fc:11:cb:8f:c9:a5: 13:89:64:02:83:3e:b3:99:d0:59:f8:b2:0c:5b:11: f9:9a:d5:79:83:7c:98:bf:77:e3:c6:3b:ff:eb:e3: b6:e0:2f:7b:53:f7:21:97:97:b6:31:b6:9b:15:98: d8:65:86:8f:6a:c0:d5:b9:b8:26:09:de:2a:32:d8: 9e:55:40:e1:64:1b:bd:83:db:63:32:d6:22:ac:f9: 34:27:21:6d:6f:e4:a0:bd:4e:dc:f2:4e:37:db:54: 0c:5d:fb:bc:93:2b:d5:70:60:df:f6:86:c2:59:41: cc:9a:25:48:cc:6a:d0:a6:7e:e1:52:2c:f4:9a:ec: 91:82:f9:e0:62:5b:c4:63:8d:d6:7d:91:b5:cb:7d: f8:69:ef:5e:d8:89:df:a2:3b:bd:80:be:06:d3:9d: d7:a0:24:b5:af:59:d8:82:cd:9e:b1:6d:f7:42:06: af:30:e0:e2:73:a5:17:08:02:98:5c:01:d2:33:fb: 34:e4:75:2b:84:26:d5:39:3b:0d:d0:5b:3b:a7:06: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C7:37:56:9A:BE:53:C5:80:28:28:36:9D:51:57:5C:03:8F:F5:AD X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:49:74:2c:40:f3:49:0f:57:1f:96:b4:82:96:4f:87:0c:a6: b8:51:bc:66:3d:19:55:54:e1:61:cb:8a:1a:54:0d:b8:ae:6d: d7:d9:4a:5c:e5:aa:48:f8:7d:25:d1:e1:34:f3:f2:ee:68:0e: f9:2e:c1:8b:a8:4b:1e:45:a2:29:0a:13:a7:d6:cd:bc:34:de: 50:65:ca:99:d5:95:e7:03:b0:b3:d3:b3:31:55:bf:89:84:5b: 1c:a0:a9:00:42:e3:13:f1:66:c9:4a:6f:c4:f2:52:65:c4:07: 98:b8:7a:cc:ce:fe:78:cb:07:8a:a2:eb:e1:13:db:61:3f:51: e8:c4:54:c1:35:2e:b6:16:9f:ee:2e:9d:a1:7d:44:33:75:eb: e6:af:5b:bf:21:f4:a6:a2:27:53:c0:ea:44:9e:29:21:94:89: d4:eb:a6:e6:a2:ce:7d:c3:1e:44:58:2a:8e:6f:31:7f:94:5e: 5b:57:bc:58:04:1f:4f:bf:79:4e:cf:9d:5e:d1:2b:17:25:a5: bd:7e:01:b5:d6:43:95:fa:ac:b1:88:ba:e3:74:c5:ee:36:38: 4c:ff:ee:e7:c5:4c:73:29:9f:18:aa:78:ff:e1:7f:f6:83:9c: 44:5a:0c:28:89:5a:2a:65:ef:d2:3b:a1:8a:08:6b:ee:41:47: 58:09:31:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjCtSy490nQ7rjSbBf3W0ZjW9MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTA2MDYyMTA2MzlaFw0yNTA2MTAwODAxMzlaMDMxMTAvBgNV BAMTKDhCQzczNzU2OUFCRTUzQzU4MDI4MjgzNjlENTE1NzVDMDM4RkY1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVDbUl1VxVnxEsiArsHO/ECiRB HMo6ABvLc0nTJyWj8okb0T94gDyQYEt4UjCMirPtjkQF/vwRy4/JpROJZAKDPrOZ 0Fn4sgxbEfma1XmDfJi/d+PGO//r47bgL3tT9yGXl7YxtpsVmNhlho9qwNW5uCYJ 3ioy2J5VQOFkG72D22My1iKs+TQnIW1v5KC9TtzyTjfbVAxd+7yTK9VwYN/2hsJZ QcyaJUjMatCmfuFSLPSa7JGC+eBiW8RjjdZ9kbXLffhp717Yid+iO72AvgbTndeg JLWvWdiCzZ6xbfdCBq8w4OJzpRcIAphcAdIz+zTkdSuEJtU5Ow3QWzunBrpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8c3Vpq+U8WAKCg2nVFXXAOP9a0wHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpJdCxA80kPVx+WtIKWT4cMprhRvGY9GVVU 4WHLihpUDbiubdfZSlzlqkj4fSXR4TTz8u5oDvkuwYuoSx5FoikKE6fWzbw03lBl ypnVlecDsLPTszFVv4mEWxygqQBC4xPxZslKb8TyUmXEB5i4eszO/njLB4qi6+ET 22E/UejEVME1LrYWn+4unaF9RDN16+avW78h9KaiJ1PA6kSeKSGUidTrpuaizn3D HkRYKo5vMX+UXltXvFgEH0+/eU7PnV7RKxclpb1+AbXWQ5X6rLGIuuN0xe42OEz/ 7ufFTHMpnxiqeP/hf/aDnERaDCiJWipl79I7oYoIa+5BR1gJMa8= -----END CERTIFICATE-----Generated at Sat Jun 7 04:11:54 2025 by rpki-client