$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: yHx/OwoLjKTFFtRDpeqtd0GlSe2LzqaqJ6IIX9asNPk= Subject key identifier: 24:03:6B:91:F3:58:61:5F:28:26:49:7B:03:A7:85:66:99:24:02:B1 Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 15ADE61FCE33EFB481EB7CA4A2DA4979E5221382 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: 39 Signing time: Mon 07 Apr 2025 14:11:59 +0000 Manifest this update: Mon 07 Apr 2025 14:06:59 +0000 Manifest next update: Thu 10 Apr 2025 14:19:59 +0000 Files and hashes: 1: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: 20GODq7G8ROfA6YXsnBwyUjd5vhhdhWY3/LR0dv6VAY=) 2: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: bni1MEXt2pu3EGFhrLDGw6PMS2Wp/uUSxRtLnqeKGlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ad:e6:1f:ce:33:ef:b4:81:eb:7c:a4:a2:da:49:79:e5:22:13:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: Apr 7 14:06:59 2025 GMT Not After : Apr 10 14:19:59 2025 GMT Subject: CN=24036B91F358615F2826497B03A78566992402B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:b5:be:a4:11:55:e5:54:45:4a:a3:22:00: 9d:dc:0f:ab:a6:9e:40:f9:c6:57:e3:a5:d6:f3:43: 7c:97:94:39:57:93:4d:93:16:33:3b:b4:a9:6b:ba: f7:d7:7a:66:09:d6:be:3a:31:98:d3:ed:54:69:44: 99:cb:46:89:82:8a:70:96:33:64:b1:e5:d3:b4:6f: 9a:1b:52:0a:2b:19:d8:31:b3:31:a8:3e:ad:6f:4a: 90:af:19:46:98:75:c1:13:ea:79:a5:e9:12:f5:b2: d5:b9:e3:f9:d4:ee:e6:33:88:3d:32:89:17:a8:5b: 2a:33:84:13:cb:b8:96:82:c7:c2:33:fc:c8:0a:f4: 8d:cf:a4:b0:68:45:b6:2c:5b:e3:18:d6:d2:31:b9: ed:0c:05:5a:71:0e:44:d7:81:0c:23:2b:4f:0d:94: 47:ad:b3:4c:1d:1e:bc:78:45:d8:91:c8:be:49:c9: b3:ba:03:58:92:f3:2f:93:47:44:5b:33:22:89:3a: 53:4d:3d:cb:f5:39:a5:05:5c:4e:2f:b5:ff:34:ed: b1:b5:58:46:c2:8e:15:6f:f8:11:dc:1e:63:07:18: 01:eb:07:f9:24:7d:1c:ab:ae:e5:c3:10:9d:5f:f6: 95:98:0f:31:1c:89:87:9b:69:66:76:a3:09:57:7f: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:03:6B:91:F3:58:61:5F:28:26:49:7B:03:A7:85:66:99:24:02:B1 X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1e:c3:b7:04:16:8d:85:ef:98:ee:e3:f8:dd:c9:f4:59:37: 14:7a:e1:c5:f3:8c:d8:36:f0:96:7f:4c:e6:56:a4:db:3f:89: e3:ff:30:b5:bb:09:02:4c:80:15:03:c2:1b:80:3b:ef:ef:d6: 17:e3:d1:2a:c6:26:f6:77:9b:a1:8b:9f:ce:e6:40:84:56:52: ff:03:b3:bd:35:c7:20:f3:fa:1b:27:f6:4b:9b:e9:93:0a:cb: 3d:0f:87:c0:b1:82:33:53:83:e5:23:fd:78:25:8b:55:83:69: 37:79:e5:2e:b7:57:d7:b1:20:d5:ee:b7:ec:64:a2:07:49:ce: 40:2b:83:aa:ac:60:78:0d:77:d0:c0:6b:54:4e:f9:a8:e4:87: f4:21:76:89:d1:3e:31:ba:42:65:69:9c:4a:ce:67:1c:2b:e5: da:f0:62:a0:06:08:13:f4:01:de:c5:3c:34:9a:7f:59:02:98: 2a:72:3d:48:f0:a1:e8:6c:9e:65:03:49:7a:58:3b:57:65:03: 74:b6:56:24:d9:83:c3:1a:e7:46:1e:76:a2:ed:d2:95:88:cf: d3:78:22:b2:39:24:70:6b:5b:53:ad:50:82:8b:fb:68:89:53: 10:b9:ef:d7:5a:a0:26:8a:3a:f3:99:21:b8:15:83:ad:7a:a8: b5:c0:0d:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFa3mH84z77SB63ykotpJeeUiE4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNTA0MDcxNDA2NTlaFw0yNTA0MTAxNDE5NTlaMDMxMTAvBgNV BAMTKDI0MDM2QjkxRjM1ODYxNUYyODI2NDk3QjAzQTc4NTY2OTkyNDAyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfg7W+pBFV5VRFSqMiAJ3cD6um nkD5xlfjpdbzQ3yXlDlXk02TFjM7tKlruvfXemYJ1r46MZjT7VRpRJnLRomCinCW M2Sx5dO0b5obUgorGdgxszGoPq1vSpCvGUaYdcET6nml6RL1stW54/nU7uYziD0y iReoWyozhBPLuJaCx8Iz/MgK9I3PpLBoRbYsW+MY1tIxue0MBVpxDkTXgQwjK08N lEets0wdHrx4RdiRyL5JybO6A1iS8y+TR0RbMyKJOlNNPcv1OaUFXE4vtf807bG1 WEbCjhVv+BHcHmMHGAHrB/kkfRyrruXDEJ1f9pWYDzEciYebaWZ2owlXfwyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJANrkfNYYV8oJkl7A6eFZpkkArEwHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkew7cEFo2F75ju4/jdyfRZNxR64cXzjNg2 8JZ/TOZWpNs/ieP/MLW7CQJMgBUDwhuAO+/v1hfj0SrGJvZ3m6GLn87mQIRWUv8D s701xyDz+hsn9kub6ZMKyz0Ph8CxgjNTg+Uj/Xgli1WDaTd55S63V9exINXut+xk ogdJzkArg6qsYHgNd9DAa1RO+ajkh/QhdonRPjG6QmVpnErOZxwr5drwYqAGCBP0 Ad7FPDSaf1kCmCpyPUjwoehsnmUDSXpYO1dlA3S2ViTZg8Ma50YedqLt0pWIz9N4 IrI5JHBrW1OtUIKL+2iJUxC579daoCaKOvOZIbgVg616qLXADTA= -----END CERTIFICATE-----Generated at Mon Apr 7 22:30:32 2025 by rpki-client