$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: QSDike865qlDtdbiXf4CkoaRAAf5x72F7LxZB+Nsl6Q= Subject key identifier: D4:A7:D4:3A:17:47:7D:BC:29:DE:C3:BB:7E:1B:AD:42:23:11:98:C3 Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 4D2419436B2F0EF3AFA9BCCECFEF47C050456E42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: 41 Signing time: Fri 04 Apr 2025 19:01:15 +0000 Manifest this update: Fri 04 Apr 2025 18:56:15 +0000 Manifest next update: Mon 07 Apr 2025 23:56:15 +0000 Files and hashes: 1: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: UXO0EVGk79VKVpzVVu+4tgus2AIbsvGynIdxAjYw1NA=) 2: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: zChW3vaNuBan+9AgGUCku4whfZlmDr/bu7j1zcPSfns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:24:19:43:6b:2f:0e:f3:af:a9:bc:ce:cf:ef:47:c0:50:45:6e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Apr 4 18:56:15 2025 GMT Not After : Apr 7 23:56:15 2025 GMT Subject: CN=D4A7D43A17477DBC29DEC3BB7E1BAD42231198C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:23:5a:01:3d:4a:15:29:30:60:6f:b5:0f: fc:9e:22:da:5d:53:38:12:9f:b1:5a:a6:e8:c1:74: ea:43:7f:5c:1f:71:15:d4:1f:fe:5d:4a:f9:2b:d9: 4b:9a:cf:cd:ea:03:91:62:a8:df:77:ce:c0:2a:f1: cb:56:5a:f7:67:80:fe:a9:14:75:92:f6:2e:e9:8f: 13:9d:fc:e2:72:8d:58:cc:c3:d4:0f:ab:0f:c2:6c: 11:ad:69:5f:61:16:15:c6:a0:76:5b:e2:87:2a:2c: 82:ab:00:d4:45:63:b5:a3:55:97:75:47:94:38:24: 83:6a:65:c9:37:43:58:50:29:b4:ef:18:09:95:5d: 63:51:f7:10:14:30:bf:a7:88:76:1c:d7:f1:f2:5b: 25:79:dc:83:73:53:f0:84:3b:ce:c2:75:4e:f2:2b: ad:bb:27:99:d5:55:14:33:2b:10:bd:3d:32:65:25: ec:e5:97:0f:13:3a:5f:ee:fa:c8:ec:e1:e0:80:05: 45:e6:50:5c:86:d5:c2:ed:41:55:04:3a:78:f5:c9: 9d:03:08:6d:e7:4d:08:fc:0c:ef:04:96:a5:6b:0b: e5:6a:17:36:02:ff:a7:02:6d:2a:df:ac:a3:be:1b: 05:f3:f7:cd:b0:58:1a:e7:26:54:c9:d5:c9:c5:96: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:D4:3A:17:47:7D:BC:29:DE:C3:BB:7E:1B:AD:42:23:11:98:C3 X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fc:0d:7e:aa:f0:91:af:b9:b8:82:b1:6b:52:24:1c:6e:1e: 2c:90:28:b9:36:9b:53:0f:2e:71:e6:9c:4d:b2:8a:4d:b3:3b: 4f:7a:3c:a1:40:a9:7b:15:a6:0a:98:8b:62:0a:0b:f9:ee:e9: 83:5f:ea:1f:7b:ab:3a:5d:2c:b3:31:95:3b:a9:94:42:d6:e4: 8e:f4:6e:29:5f:2e:e1:58:57:a2:48:53:69:04:e7:68:7e:e9: 20:04:ff:5c:66:f4:8e:98:0b:f5:49:cb:59:4f:71:81:47:a6: fe:f4:21:dd:4c:57:e4:e9:26:eb:8f:a1:33:bc:91:5a:ac:10: c7:ed:fd:f3:33:87:32:c7:19:66:b5:b9:89:36:59:ad:14:ad: 5b:df:68:a9:76:78:02:f1:7c:9e:80:6f:ce:6e:5e:b2:21:64: 66:94:5a:00:62:23:60:11:56:6b:a7:e0:14:e0:9d:ec:83:8c: 1a:88:18:b3:0b:a3:b2:5e:83:4d:3b:f9:50:81:fe:6d:1a:83: f9:c1:59:03:9e:da:4a:eb:26:ae:4b:5d:e7:39:89:72:52:60: f6:03:c0:7e:90:f1:0b:22:02:96:d3:d4:87:4c:e4:c3:f0:17: 06:da:24:cf:8d:d4:a6:cd:50:83:5f:06:54:e3:a4:4a:3c:08: a4:45:f2:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSQZQ2svDvOvqbzOz+9HwFBFbkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNTA0MDQxODU2MTVaFw0yNTA0MDcyMzU2MTVaMDMxMTAvBgNV BAMTKEQ0QTdENDNBMTc0NzdEQkMyOURFQzNCQjdFMUJBRDQyMjMxMTk4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQVSNaAT1KFSkwYG+1D/yeItpd UzgSn7FapujBdOpDf1wfcRXUH/5dSvkr2Uuaz83qA5FiqN93zsAq8ctWWvdngP6p FHWS9i7pjxOd/OJyjVjMw9QPqw/CbBGtaV9hFhXGoHZb4ocqLIKrANRFY7WjVZd1 R5Q4JINqZck3Q1hQKbTvGAmVXWNR9xAUML+niHYc1/HyWyV53INzU/CEO87CdU7y K627J5nVVRQzKxC9PTJlJezllw8TOl/u+sjs4eCABUXmUFyG1cLtQVUEOnj1yZ0D CG3nTQj8DO8ElqVrC+VqFzYC/6cCbSrfrKO+GwXz982wWBrnJlTJ1cnFlt2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1KfUOhdHfbwp3sO7fhutQiMRmMMwHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz8DX6q8JGvubiCsWtSJBxuHiyQKLk2m1MP LnHmnE2yik2zO096PKFAqXsVpgqYi2IKC/nu6YNf6h97qzpdLLMxlTuplELW5I70 bilfLuFYV6JIU2kE52h+6SAE/1xm9I6YC/VJy1lPcYFHpv70Id1MV+TpJuuPoTO8 kVqsEMft/fMzhzLHGWa1uYk2Wa0UrVvfaKl2eALxfJ6Ab85uXrIhZGaUWgBiI2AR Vmun4BTgneyDjBqIGLMLo7Jeg007+VCB/m0ag/nBWQOe2krrJq5LXec5iXJSYPYD wH6Q8QsiApbT1IdM5MPwFwbaJM+N1KbNUINfBlTjpEo8CKRF8tw= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:51 2025 by rpki-client