$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft File: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft (raw, json) Hash identifier: Rfwrj/5d/pbNHQ2pkVU2U+0f5Hs8fFIojWVKsOSjIaU= Subject key identifier: E8:87:00:CE:5A:44:FE:13:A2:54:C5:F8:F1:9E:0B:2C:CC:83:3B:08 Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE Certificate issuer: /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Certificate serial: 3EAC9EDD9C061E683726B597AEBAE0004A94A044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft Manifest number: 04D9 Signing time: Mon 02 Jun 2025 01:02:33 +0000 Manifest this update: Mon 02 Jun 2025 00:57:33 +0000 Manifest next update: Thu 05 Jun 2025 09:13:33 +0000 Files and hashes: 1: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: sqlbIIr/3B92d510dnWRSBB/lQtkjQSBObhW88AnQqI=) 2: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl (hash: DTmAop79EFM5/Lhqbxque828EbKvw492tBeGQl0+c/I=) 3: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: ivixgTI+bD3oZFKOSl+IC3pWvOMcPxvLBq04R8ayQa4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ac:9e:dd:9c:06:1e:68:37:26:b5:97:ae:ba:e0:00:4a:94:a0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Validity Not Before: Jun 2 00:57:33 2025 GMT Not After : Jun 5 09:13:33 2025 GMT Subject: CN=E88700CE5A44FE13A254C5F8F19E0B2CCC833B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:46:ac:b1:98:5d:34:ed:28:6d:f7:4f:1c: 68:f2:93:34:8c:ef:d4:c9:ff:8a:e3:74:c3:e4:07: 60:65:85:1f:22:a6:d8:6b:3f:9c:ec:e9:6a:85:36: b1:64:08:ee:eb:6a:c8:91:be:dd:ee:57:29:e1:61: f5:14:c3:2e:57:9e:b9:a4:4d:23:6f:a6:8f:68:13: f6:36:11:34:73:03:8b:cc:46:a1:78:8c:b4:c0:10: a0:5d:96:da:c1:2e:45:01:d0:29:d1:83:08:9b:93: 37:eb:12:90:89:f2:ae:74:9d:71:82:15:16:23:a4: 8f:3b:10:45:83:28:4d:d1:d3:55:34:ff:bb:b4:a0: 7d:71:57:3e:6d:f2:c4:be:92:29:5e:9a:15:04:02: c4:e8:98:40:e7:eb:a8:2e:0c:cc:b0:c0:6f:9a:76: 83:06:2c:9b:97:41:64:91:ea:ad:3c:56:8b:55:cc: 48:c5:9c:d2:05:2d:3f:1c:98:20:69:f9:2c:a5:6d: ae:c8:e0:24:f1:67:89:6b:31:93:7d:84:1d:6e:e7: 04:87:08:a5:37:9d:1f:b0:10:67:ab:b3:cd:35:3c: 54:d3:70:ac:24:a1:e9:bf:a9:2c:e4:58:d3:a2:58: 76:bd:b3:21:9e:64:e1:89:a0:45:28:46:f7:ad:d1: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:87:00:CE:5A:44:FE:13:A2:54:C5:F8:F1:9E:0B:2C:CC:83:3B:08 X509v3 Authority Key Identifier: keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ba:a0:a5:13:07:de:46:57:69:27:fb:d2:fc:cf:97:57:cd: b3:73:d4:d0:65:1c:b6:22:16:8d:66:84:f2:89:6b:b4:13:15: 34:0f:7f:a9:1c:e6:99:83:a7:c9:a2:8a:56:ce:50:df:56:66: 32:fb:92:ea:c0:98:b9:0c:cd:1c:87:a3:c5:b2:40:ed:6c:19: be:ef:db:7e:ed:57:e1:4b:56:71:8c:25:b4:07:d3:bc:09:dd: bf:b6:c9:76:d9:c9:ae:0f:97:1d:8d:cf:ff:5c:11:d2:11:5a: 9c:08:a9:3e:e9:26:a3:48:9c:ad:10:fd:7d:9d:b6:1b:d9:54: 1e:37:c0:83:5f:28:fc:30:bb:2a:08:6e:c9:4c:76:d9:88:17: 98:45:c4:45:a5:1d:f5:92:94:c6:c3:c9:5d:0e:da:62:61:69: d5:33:a5:82:2d:90:7b:d7:5d:c0:6c:d4:b4:ee:53:6b:6f:de: 54:5b:72:7c:f1:57:e7:d1:49:1b:76:64:2a:15:54:53:b7:af: b7:b4:7d:8e:35:ba:81:ee:43:58:b6:0b:a7:15:d5:91:bf:ee: 00:1c:f0:f3:ca:7f:d2:5f:5a:c7:ef:7f:01:05:f0:d8:e2:8d: da:f6:ea:0f:06:c3:01:e7:73:56:04:1b:88:05:f0:88:91:7f: c3:4e:d1:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqye3ZwGHmg3JrWXrrrgAEqUoEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRG NDRDNzJBRTAeFw0yNTA2MDIwMDU3MzNaFw0yNTA2MDUwOTEzMzNaMDMxMTAvBgNV BAMTKEU4ODcwMENFNUE0NEZFMTNBMjU0QzVGOEYxOUUwQjJDQ0M4MzNCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYUassZhdNO0obfdPHGjykzSM 79TJ/4rjdMPkB2BlhR8ipthrP5zs6WqFNrFkCO7rasiRvt3uVynhYfUUwy5Xnrmk TSNvpo9oE/Y2ETRzA4vMRqF4jLTAEKBdltrBLkUB0CnRgwibkzfrEpCJ8q50nXGC FRYjpI87EEWDKE3R01U0/7u0oH1xVz5t8sS+kilemhUEAsTomEDn66guDMywwG+a doMGLJuXQWSR6q08VotVzEjFnNIFLT8cmCBp+Sylba7I4CTxZ4lrMZN9hB1u5wSH CKU3nR+wEGers801PFTTcKwkoem/qSzkWNOiWHa9syGeZOGJoEUoRvet0T/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6IcAzlpE/hOiVMX48Z4LLMyDOwgwHwYDVR0j BBgwFoAUHgdHZWzMXUu724W43nNabfRMcq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmVhZDJmNS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC8xRTA3NDc2NTZD Q0M1RDRCQkJEQjg1QjhERTczNUE2REY0NEM3MkFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRGNDRD NzJBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZlYWQyZjUtOGI2NS00ODI5LTg4 NGItZDdjMDZkZDBmODNhLzAvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVB NkRGNDRDNzJBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADS6oKUTB95GV2kn+9L8z5dXzbNz1NBlHLYi Fo1mhPKJa7QTFTQPf6kc5pmDp8miilbOUN9WZjL7kurAmLkMzRyHo8WyQO1sGb7v 237tV+FLVnGMJbQH07wJ3b+2yXbZya4Plx2Nz/9cEdIRWpwIqT7pJqNInK0Q/X2d thvZVB43wINfKPwwuyoIbslMdtmIF5hFxEWlHfWSlMbDyV0O2mJhadUzpYItkHvX XcBs1LTuU2tv3lRbcnzxV+fRSRt2ZCoVVFO3r7e0fY41uoHuQ1i2C6cV1ZG/7gAc 8PPKf9JfWsfvfwEF8Njijdr26g8GwwHnc1YEG4gF8IiRf8NO0UM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:54 2025 by rpki-client