$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft File: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft (raw, json) Hash identifier: JeaU9qSB02qHxJC2byJJTJ9vanhM/Ud8ulXYFd6ST9s= Subject key identifier: BF:66:82:4A:90:13:50:93:3F:8F:BB:85:4C:5D:D6:42:BD:A6:2D:02 Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE Certificate issuer: /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Certificate serial: 4FF382798117EA09728E306A94FCB97CE1DEDA15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft Manifest number: 04C0 Signing time: Sun 06 Apr 2025 21:22:05 +0000 Manifest this update: Sun 06 Apr 2025 21:17:05 +0000 Manifest next update: Wed 09 Apr 2025 22:19:05 +0000 Files and hashes: 1: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: GM58lZHj+C3AlRkzYVt3K8x88I0KDDlAS8VjQ4kWQUk=) 2: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl (hash: BjYQG+LwN6Eebv36YzwDRddx6uKteKeTrmRhMaRt5bc=) 3: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: 8iJA5f9zJCXVI43z+Y+nJt+bHsJmtS/Oo/bWRww6q+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f3:82:79:81:17:ea:09:72:8e:30:6a:94:fc:b9:7c:e1:de:da:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Validity Not Before: Apr 6 21:17:05 2025 GMT Not After : Apr 9 22:19:05 2025 GMT Subject: CN=BF66824A901350933F8FBB854C5DD642BDA62D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:3c:b6:06:7c:33:56:39:4e:8f:ec:e6:02: a9:e7:09:11:cb:7e:7e:d7:80:e6:1c:ae:ef:30:87: db:de:47:dc:74:8e:aa:f2:fd:53:74:ac:d9:ae:9c: 80:16:6e:84:dd:b1:8a:48:1c:dd:2a:e7:b4:49:59: 57:3e:a3:2b:64:0a:2b:4b:e4:9a:9d:18:20:5f:d3: 84:89:9b:57:85:04:1e:0a:c4:19:54:6d:39:c7:ec: 72:c2:7a:10:7b:cc:37:34:03:53:a9:b2:15:06:3a: 80:33:ca:35:b2:e5:38:ed:5c:fb:11:2f:57:d3:88: f0:1d:b8:d5:4d:15:ef:ee:ab:4f:2d:36:18:f3:64: 7f:c3:65:84:94:36:f1:00:c2:e0:8e:1a:30:34:a1: 91:c5:51:7f:36:e2:ac:f7:05:1a:c9:bd:f4:09:64: 0e:cc:81:44:72:1c:31:bd:a1:fe:43:da:7f:2b:19: 81:43:1d:7c:5e:4d:74:82:91:65:ee:76:51:e0:3a: 0c:73:45:b2:68:1c:00:56:b0:7e:09:7c:e0:ef:a3: 2d:f1:1b:b0:b2:5f:36:ea:04:c9:91:ee:1f:c5:a5: 14:96:43:44:02:98:dc:3c:13:b2:0b:93:51:69:a1: 9d:90:48:1b:97:a9:a0:e0:63:e0:72:30:a4:95:cf: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:82:4A:90:13:50:93:3F:8F:BB:85:4C:5D:D6:42:BD:A6:2D:02 X509v3 Authority Key Identifier: keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:60:b0:1a:41:d9:ad:76:8f:9c:19:a0:4d:fc:f2:15:8d:87: a6:cc:de:77:8b:87:78:6e:6e:9e:11:86:d4:9b:a1:23:82:dc: f2:90:76:b9:83:e2:de:5d:67:bc:f2:2d:15:37:13:9c:4c:cc: 2d:04:8d:29:0e:30:32:d0:58:16:6d:2d:a6:94:96:23:ef:6e: 7d:09:73:f2:95:fe:d8:d4:4b:33:7d:d5:c5:dd:4a:fe:56:9f: 41:55:7b:c0:8a:e7:d7:35:16:14:c2:22:2b:b0:c1:a7:15:84: 9e:3e:c0:31:0c:0b:d1:73:49:24:5d:56:33:52:50:52:e2:57: ee:cd:d3:8d:27:48:22:b7:ca:9b:ae:de:8f:75:53:be:f5:cb: 15:1d:89:40:44:53:26:a3:50:8e:50:bb:10:fc:68:49:59:0a: 54:ed:e8:c8:8d:c6:af:bf:28:29:0c:ce:24:2d:79:33:e0:b1: e4:fa:88:26:fa:8c:9d:59:b7:4e:5c:cf:49:33:fb:f3:05:82: 87:b7:86:fd:ce:47:f5:0e:5a:a9:e4:bd:c7:17:7d:88:90:02: 9a:6d:9b:88:3e:5d:4b:eb:53:5e:b1:9b:bb:e7:55:96:b4:b5: 28:6b:72:f6:45:4e:e8:0a:8a:ff:61:55:a2:5a:b7:f9:db:dc: 2d:38:c1:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/OCeYEX6glyjjBqlPy5fOHe2hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRG NDRDNzJBRTAeFw0yNTA0MDYyMTE3MDVaFw0yNTA0MDkyMjE5MDVaMDMxMTAvBgNV BAMTKEJGNjY4MjRBOTAxMzUwOTMzRjhGQkI4NTRDNURENjQyQkRBNjJEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Izy2BnwzVjlOj+zmAqnnCRHL fn7XgOYcru8wh9veR9x0jqry/VN0rNmunIAWboTdsYpIHN0q57RJWVc+oytkCitL 5JqdGCBf04SJm1eFBB4KxBlUbTnH7HLCehB7zDc0A1OpshUGOoAzyjWy5TjtXPsR L1fTiPAduNVNFe/uq08tNhjzZH/DZYSUNvEAwuCOGjA0oZHFUX824qz3BRrJvfQJ ZA7MgURyHDG9of5D2n8rGYFDHXxeTXSCkWXudlHgOgxzRbJoHABWsH4JfODvoy3x G7CyXzbqBMmR7h/FpRSWQ0QCmNw8E7ILk1FpoZ2QSBuXqaDgY+ByMKSVz+PVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv2aCSpATUJM/j7uFTF3WQr2mLQIwHwYDVR0j BBgwFoAUHgdHZWzMXUu724W43nNabfRMcq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmVhZDJmNS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC8xRTA3NDc2NTZD Q0M1RDRCQkJEQjg1QjhERTczNUE2REY0NEM3MkFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRGNDRD NzJBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZlYWQyZjUtOGI2NS00ODI5LTg4 NGItZDdjMDZkZDBmODNhLzAvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVB NkRGNDRDNzJBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExgsBpB2a12j5wZoE388hWNh6bM3neLh3hu bp4RhtSboSOC3PKQdrmD4t5dZ7zyLRU3E5xMzC0EjSkOMDLQWBZtLaaUliPvbn0J c/KV/tjUSzN91cXdSv5Wn0FVe8CK59c1FhTCIiuwwacVhJ4+wDEMC9FzSSRdVjNS UFLiV+7N040nSCK3ypuu3o91U771yxUdiUBEUyajUI5QuxD8aElZClTt6MiNxq+/ KCkMziQteTPgseT6iCb6jJ1Zt05cz0kz+/MFgoe3hv3OR/UOWqnkvccXfYiQAppt m4g+XUvrU16xm7vnVZa0tShrcvZFTugKiv9hVaJat/nb3C04wTI= -----END CERTIFICATE-----Generated at Tue Apr 8 17:09:30 2025 by rpki-client