$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: u3jXPj0GqoOMtQGVnOouT7SJWo8dgY2umt+KzN9vr8A= Subject key identifier: A1:AC:1F:F6:AB:46:D8:B2:92:F5:42:7D:C2:50:AD:27:EB:00:CD:A1 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 5A3D9AB75F608852233CDF138092576C9F34952F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: A8 Signing time: Sun 01 Jun 2025 15:10:04 +0000 Manifest this update: Sun 01 Jun 2025 15:05:04 +0000 Manifest next update: Wed 04 Jun 2025 23:31:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: avtok/a7ZJGcmQWyy1itaKwY7ltE6IpjQv4uqZHLEHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 23:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:9a:b7:5f:60:88:52:23:3c:df:13:80:92:57:6c:9f:34:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Jun 1 15:05:04 2025 GMT Not After : Jun 4 23:31:04 2025 GMT Subject: CN=A1AC1FF6AB46D8B292F5427DC250AD27EB00CDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:17:bc:53:4c:f8:50:84:4c:c2:0f:d3:a6: 9e:89:21:a7:11:95:1e:50:b3:f4:e8:b2:50:9a:02: 80:fc:f3:40:23:79:5c:df:0c:68:e3:b3:df:8f:70: 47:5f:a4:90:c3:5b:6c:c2:6f:4c:0d:c3:3a:f3:cb: ca:b2:75:7a:f6:c7:13:21:c7:f0:da:79:31:fe:67: 93:77:5e:a4:46:8a:03:66:8b:0a:0a:52:34:ce:05: 5a:ac:26:e3:6c:0d:1f:9c:19:d7:ba:6f:ab:26:9c: 61:e7:9e:17:e6:9b:d6:68:07:4b:ad:c8:6f:0b:c8: 45:7a:4e:d7:27:92:65:98:49:aa:fc:1d:5f:7d:3a: 1f:63:a2:b5:5c:b5:58:4b:df:83:30:34:5a:30:1f: 93:38:18:4a:4a:49:43:85:f9:38:1d:61:ca:5b:11: 87:ba:33:a5:97:a8:90:e7:a2:ec:60:b9:72:90:39: 82:e4:76:36:eb:46:ca:65:2f:9e:e6:9d:e1:83:42: a1:41:6b:68:5e:f8:aa:c5:1e:67:0f:98:7d:b0:61: 8a:67:a0:fa:11:d6:74:ac:6a:bf:4d:6d:cc:52:3c: 9e:aa:60:49:29:e1:db:88:90:84:e9:35:51:dc:2f: 7c:11:c0:bd:dd:41:10:5e:20:f6:25:b2:a4:6f:4d: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AC:1F:F6:AB:46:D8:B2:92:F5:42:7D:C2:50:AD:27:EB:00:CD:A1 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6e:78:8c:ac:14:88:bc:1f:6a:ad:d9:88:76:16:f5:02:04: 4f:e7:64:58:ef:db:f1:87:2d:ad:5d:46:4e:81:c0:67:14:c9: 21:30:cf:49:77:f0:30:00:34:5a:14:86:08:a3:32:ce:9e:eb: 78:15:e7:50:01:0c:d7:87:1c:5e:45:93:09:76:6a:78:f1:ab: 40:14:1c:83:b0:be:5c:02:48:5e:e7:d5:19:fa:c4:72:c8:60: 8d:6c:7e:36:e7:39:84:d4:de:e2:19:93:e2:10:2f:d4:d5:23: 8b:99:e9:55:26:66:16:b3:ee:cb:77:ff:b2:0a:d3:be:b7:4a: 43:14:63:35:e4:9f:59:ba:e0:c3:05:2b:76:b8:f4:aa:6e:55: 22:8f:ad:9c:22:be:5b:b9:d6:de:6e:fb:63:97:96:6e:f4:2c: 0a:97:91:d9:6e:03:cc:7a:6b:2e:b1:10:24:1c:3c:f2:c7:d3: d6:cf:2f:44:c4:1f:91:fc:85:dd:8c:2a:c1:46:d8:44:32:13: 46:8d:19:d6:f0:7a:a1:cb:7d:0c:a5:97:0b:09:6c:1f:f0:f6: 48:75:6b:5f:31:91:30:f0:11:e9:34:db:85:83:5a:4a:60:05: 83:3a:97:f4:88:5c:d9:9c:e4:c6:26:49:8e:c4:d4:08:4c:72: d0:ca:2e:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWj2at19giFIjPN8TgJJXbJ80lS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTA2MDExNTA1MDRaFw0yNTA2MDQyMzMxMDRaMDMxMTAvBgNV BAMTKEExQUMxRkY2QUI0NkQ4QjI5MkY1NDI3REMyNTBBRDI3RUIwMENEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sxe8U0z4UIRMwg/Tpp6JIacR lR5Qs/ToslCaAoD880AjeVzfDGjjs9+PcEdfpJDDW2zCb0wNwzrzy8qydXr2xxMh x/DaeTH+Z5N3XqRGigNmiwoKUjTOBVqsJuNsDR+cGde6b6smnGHnnhfmm9ZoB0ut yG8LyEV6TtcnkmWYSar8HV99Oh9jorVctVhL34MwNFowH5M4GEpKSUOF+TgdYcpb EYe6M6WXqJDnouxguXKQOYLkdjbrRsplL57mneGDQqFBa2he+KrFHmcPmH2wYYpn oPoR1nSsar9NbcxSPJ6qYEkp4duIkITpNVHcL3wRwL3dQRBeIPYlsqRvTX4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoawf9qtG2LKS9UJ9wlCtJ+sAzaEwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlueIysFIi8H2qt2Yh2FvUCBE/nZFjv2/GH La1dRk6BwGcUySEwz0l38DAANFoUhgijMs6e63gV51ABDNeHHF5Fkwl2anjxq0AU HIOwvlwCSF7n1Rn6xHLIYI1sfjbnOYTU3uIZk+IQL9TVI4uZ6VUmZhaz7st3/7IK 0763SkMUYzXkn1m64MMFK3a49KpuVSKPrZwivlu51t5u+2OXlm70LAqXkdluA8x6 ay6xECQcPPLH09bPL0TEH5H8hd2MKsFG2EQyE0aNGdbweqHLfQyllwsJbB/w9kh1 a18xkTDwEek024WDWkpgBYM6l/SIXNmc5MYmSY7E1AhMctDKLhQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:46 2025 by rpki-client