$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: Ie6EpdiWGeSxLS9QcdGbtHyF+L97M/vGKQQlGJvlyYc= Subject key identifier: 9F:36:8F:81:4C:39:47:2E:FD:1F:5B:D1:D6:4C:8D:4A:7D:41:FF:DA Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 183C9408CFB25FE063C0425342808C80E14CD6F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: 53 Signing time: Wed 04 Jun 2025 09:31:59 +0000 Manifest this update: Wed 04 Jun 2025 09:26:59 +0000 Manifest next update: Sat 07 Jun 2025 17:17:59 +0000 Files and hashes: 1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: bni1MEXt2pu3EGFhrLDGw6PMS2Wp/uUSxRtLnqeKGlY=) 2: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: mlNUQJ7fIhhvu4VlXO/3/Avsz+ee47rezxSWBBLCRDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3c:94:08:cf:b2:5f:e0:63:c0:42:53:42:80:8c:80:e1:4c:d6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: Jun 4 09:26:59 2025 GMT Not After : Jun 7 17:17:59 2025 GMT Subject: CN=9F368F814C39472EFD1F5BD1D64C8D4A7D41FFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:be:dc:54:6f:c2:3a:61:2b:c9:68:5c:83: 6e:ea:85:2b:82:db:c0:08:6e:8c:25:6d:59:b6:a2: b7:e1:30:78:dc:6a:59:ba:b5:82:74:00:11:e1:47: 70:ec:7b:07:2c:bb:63:a6:60:3f:f7:68:b1:18:5f: 78:90:c1:02:c8:21:d7:ec:0d:4c:db:24:b2:3d:88: 9b:13:fc:f4:bc:ba:4f:5d:f7:1d:28:6b:c6:41:82: d7:73:a4:b8:6c:01:a8:c4:33:e1:46:5c:37:94:e9: 0b:30:ab:c8:bc:c7:a1:7d:41:e6:f9:1b:2c:a8:84: 35:97:81:69:9b:a3:42:0d:5b:4f:86:9f:89:b3:40: ab:6e:31:73:37:95:ff:39:f9:24:ac:9e:21:72:8b: d7:c6:a6:f8:62:67:2d:eb:ef:4e:b8:f8:2f:ef:58: 3b:05:0b:7f:87:5a:99:44:86:34:45:a7:c3:78:82: 5b:34:0a:08:d1:5c:fa:d8:9b:c3:f9:1a:a9:b1:de: 85:d7:ff:ce:45:60:fd:ae:fe:11:eb:5b:7d:ac:8d: be:68:4a:ac:81:c5:d4:cb:35:ff:05:d9:38:61:5d: 16:63:24:ce:69:ab:f3:a5:cb:b6:27:78:2a:86:a2: 2f:50:98:21:d7:c3:08:b5:6d:05:64:9b:9a:92:0c: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:36:8F:81:4C:39:47:2E:FD:1F:5B:D1:D6:4C:8D:4A:7D:41:FF:DA X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e8:a4:da:2b:be:b0:94:28:79:1a:fd:d2:c0:55:98:6c:55: b0:ee:ab:a4:a9:56:2c:de:2b:45:16:51:5b:5c:95:4c:0f:7e: 0c:7a:44:d0:4d:69:b1:7a:20:72:32:1f:ca:fc:5b:4a:92:31: 6f:91:db:4f:09:d7:a4:80:a4:d3:3c:65:52:18:c9:0b:97:7c: c4:07:1b:d0:19:0e:77:a2:eb:48:26:df:4c:f0:29:5a:4e:b1: 02:41:2a:f1:21:20:a1:af:6e:c5:f7:89:eb:bb:85:6a:0c:eb: 3d:13:8d:c5:1c:e1:ed:10:63:4d:d6:4b:ac:3b:b5:42:88:37: a8:78:d4:3e:45:78:72:93:ac:e9:10:8c:99:93:95:88:7a:72: 9e:97:75:4b:4a:c0:d7:68:27:74:66:df:8d:03:7d:0e:2f:ca: 2f:34:5b:28:f5:e9:d0:48:a3:d5:03:35:17:5b:9e:60:e6:37: 84:4a:bc:42:8e:0f:b5:58:a6:68:47:f3:45:35:91:c6:0f:1d: c2:e0:a5:4f:0a:44:a1:8c:02:99:00:ad:1a:7d:13:4e:c8:06: c6:8f:3a:2e:f7:3b:f9:db:76:f3:46:a3:20:af:49:39:b8:54: 34:db:57:bf:56:37:c3:e9:02:f9:b7:71:49:10:64:e1:6f:d4: 42:2a:7a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDyUCM+yX+BjwEJTQoCMgOFM1vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNTA2MDQwOTI2NTlaFw0yNTA2MDcxNzE3NTlaMDMxMTAvBgNV BAMTKDlGMzY4RjgxNEMzOTQ3MkVGRDFGNUJEMUQ2NEM4RDRBN0Q0MUZGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrH77cVG/COmEryWhcg27qhSuC 28AIbowlbVm2orfhMHjcalm6tYJ0ABHhR3Dsewcsu2OmYD/3aLEYX3iQwQLIIdfs DUzbJLI9iJsT/PS8uk9d9x0oa8ZBgtdzpLhsAajEM+FGXDeU6Qswq8i8x6F9Qeb5 GyyohDWXgWmbo0INW0+Gn4mzQKtuMXM3lf85+SSsniFyi9fGpvhiZy3r7064+C/v WDsFC3+HWplEhjRFp8N4gls0CgjRXPrYm8P5Gqmx3oXX/85FYP2u/hHrW32sjb5o SqyBxdTLNf8F2ThhXRZjJM5pq/Oly7YneCqGoi9QmCHXwwi1bQVkm5qSDFmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnzaPgUw5Ry79H1vR1kyNSn1B/9owHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/opNorvrCUKHka/dLAVZhsVbDuq6SpVize K0UWUVtclUwPfgx6RNBNabF6IHIyH8r8W0qSMW+R208J16SApNM8ZVIYyQuXfMQH G9AZDnei60gm30zwKVpOsQJBKvEhIKGvbsX3ieu7hWoM6z0TjcUc4e0QY03WS6w7 tUKIN6h41D5FeHKTrOkQjJmTlYh6cp6XdUtKwNdoJ3Rm340DfQ4vyi80Wyj16dBI o9UDNRdbnmDmN4RKvEKOD7VYpmhH80U1kcYPHcLgpU8KRKGMApkArRp9E07IBsaP Oi73O/nbdvNGoyCvSTm4VDTbV79WN8PpAvm3cUkQZOFv1EIqevk= -----END CERTIFICATE-----Generated at Fri Jun 6 05:30:54 2025 by rpki-client