$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: c+1DboVctpdN/PW3wERoIin+TxJUllLgUTzwVmWAcGk= Subject key identifier: E1:09:2A:14:0A:C1:35:35:0C:54:26:CE:99:9A:6A:64:5C:86:BA:B9 Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 42588FE9B12CABE4697209149A55456900FFECF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 01FD Signing time: Sat 05 Apr 2025 17:22:19 +0000 Manifest this update: Sat 05 Apr 2025 17:17:19 +0000 Manifest next update: Wed 09 Apr 2025 02:14:19 +0000 Files and hashes: 1: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=) 2: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: yFLtXZhv4icStZGluIXSTKiVb7PeS6C1hGZnyhQ1yqo=) 3: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=) 4: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: LnUb+Qt8P+0qhIKlFGFXSlRSOHeVF/D4nGcXuBEXsME=) 5: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: as7KtFlD4iKysyXSKxxgu8y4XOhRCjKWFwK+lMzj6oQ=) 6: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:58:8f:e9:b1:2c:ab:e4:69:72:09:14:9a:55:45:69:00:ff:ec:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Apr 5 17:17:19 2025 GMT Not After : Apr 9 02:14:19 2025 GMT Subject: CN=E1092A140AC135350C5426CE999A6A645C86BAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:19:a5:ce:e8:02:62:a8:be:ce:2a:1a:c4:de: 8a:89:7d:85:4c:8f:90:cd:b7:0b:05:15:d0:7a:cb: af:c2:e7:d4:63:c7:a5:0a:96:ab:e9:ce:a0:49:59: cd:6e:10:e0:68:ee:81:1d:e5:40:5c:08:cc:1f:87: 8c:b8:d0:99:36:1c:20:1c:bb:d9:86:a9:56:f9:39: 0a:6d:71:41:54:36:a9:c9:3b:33:74:79:c1:16:53: c0:56:60:ec:9f:0f:86:9c:86:18:91:70:ac:71:97: 95:d7:6a:f8:c5:08:8f:2b:f2:17:e5:d6:22:40:e1: ab:4c:6a:03:2f:9d:11:68:fe:db:64:64:48:b9:5e: 36:50:b3:71:1f:d5:53:54:2e:a6:ff:ef:e4:82:53: 31:a9:a8:61:d8:3e:c8:92:43:bf:10:c0:0b:c0:34: 43:bd:0b:2b:26:40:55:ea:78:93:dd:9c:68:68:c3: 8f:32:3d:03:34:3c:9a:54:54:a0:7f:47:02:7d:c6: 33:fc:6f:3a:c5:91:ce:21:15:2c:3c:06:88:c6:32: 60:12:c7:18:68:dd:ea:4f:3d:1e:b6:b4:86:3e:8d: 7e:50:5f:fd:b7:ff:fe:60:6a:3d:71:59:a7:e4:4e: b1:7e:bd:3f:66:f8:de:48:30:e8:c3:24:10:be:09: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:09:2A:14:0A:C1:35:35:0C:54:26:CE:99:9A:6A:64:5C:86:BA:B9 X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:41:ce:a0:19:af:03:16:36:bf:db:70:1c:ff:95:47:cd:74: 8a:9e:70:56:c5:69:03:84:21:0e:54:39:d1:56:82:0a:ed:3d: 4a:3b:aa:8f:34:48:a1:ec:32:06:11:e7:bc:af:6c:c1:58:0e: 58:ba:6d:ab:a2:91:bb:c0:10:f5:57:86:0e:46:5e:16:33:87: bd:ac:b2:f9:99:82:e7:58:b5:25:da:2a:9f:17:23:13:c4:05: 14:67:f5:6b:0e:65:ae:c5:51:68:c7:af:a5:db:59:b2:8d:56: 15:c4:43:74:b8:60:f2:1c:10:f6:e8:a3:11:26:24:a4:60:c0: e3:e6:73:df:79:7b:a6:11:54:8b:3e:f2:69:cc:7d:31:cb:63: 90:59:b9:85:af:24:fc:73:39:98:cf:e5:77:69:e7:db:f0:37: 81:a5:ec:34:59:18:13:d0:1b:b0:fa:77:5b:e2:b1:56:74:39: b7:7c:46:fc:39:13:38:88:d0:46:9d:5f:56:42:41:99:93:7b: f1:91:9f:4d:bb:28:66:cf:31:51:20:fd:d2:08:84:3c:c3:1c: 70:3c:23:4b:bc:64:2a:a3:67:ff:0b:48:49:de:e8:00:e0:de: 79:6f:8d:a2:c2:8a:02:a6:75:44:1b:cc:fc:c7:7f:94:a8:2c: 7c:3d:50:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQliP6bEsq+RpcgkUmlVFaQD/7PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTA0MDUxNzE3MTlaFw0yNTA0MDkwMjE0MTlaMDMxMTAvBgNV BAMTKEUxMDkyQTE0MEFDMTM1MzUwQzU0MjZDRTk5OUE2QTY0NUM4NkJBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqGaXO6AJiqL7OKhrE3oqJfYVM j5DNtwsFFdB6y6/C59Rjx6UKlqvpzqBJWc1uEOBo7oEd5UBcCMwfh4y40Jk2HCAc u9mGqVb5OQptcUFUNqnJOzN0ecEWU8BWYOyfD4achhiRcKxxl5XXavjFCI8r8hfl 1iJA4atMagMvnRFo/ttkZEi5XjZQs3Ef1VNULqb/7+SCUzGpqGHYPsiSQ78QwAvA NEO9CysmQFXqeJPdnGhow48yPQM0PJpUVKB/RwJ9xjP8bzrFkc4hFSw8BojGMmAS xxho3epPPR62tIY+jX5QX/23//5gaj1xWafkTrF+vT9m+N5IMOjDJBC+CWkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4QkqFArBNTUMVCbOmZpqZFyGurkwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO1BzqAZrwMWNr/bcBz/lUfNdIqecFbFaQOE IQ5UOdFWggrtPUo7qo80SKHsMgYR57yvbMFYDli6bauikbvAEPVXhg5GXhYzh72s svmZgudYtSXaKp8XIxPEBRRn9WsOZa7FUWjHr6XbWbKNVhXEQ3S4YPIcEPbooxEm JKRgwOPmc995e6YRVIs+8mnMfTHLY5BZuYWvJPxzOZjP5Xdp59vwN4Gl7DRZGBPQ G7D6d1visVZ0Obd8Rvw5EziI0EadX1ZCQZmTe/GRn027KGbPMVEg/dIIhDzDHHA8 I0u8ZCqjZ/8LSEne6ADg3nlvjaLCigKmdUQbzPzHf5SoLHw9UHc= -----END CERTIFICATE-----Generated at Sun Apr 6 02:19:05 2025 by rpki-client