$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: a9Rkk56XS677UV7e9GdhfJo6WRnzns1eIFo+RwqHwSg= Subject key identifier: 2E:4B:A7:2F:DE:53:AE:FB:F4:EC:50:95:99:D7:A8:32:47:BB:4C:CE Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 66998580F0564B0CB953B2B7E190A943618FE36B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: E2 Signing time: Sun 08 Jun 2025 01:01:34 +0000 Manifest this update: Sun 08 Jun 2025 00:56:34 +0000 Manifest next update: Wed 11 Jun 2025 10:11:34 +0000 Files and hashes: 1: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=) 2: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: dhFiFrssvayFObD+JS3oijEK2yAWRDZdcwyUw8eZYAk=) 3: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=) 4: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:99:85:80:f0:56:4b:0c:b9:53:b2:b7:e1:90:a9:43:61:8f:e3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Jun 8 00:56:34 2025 GMT Not After : Jun 11 10:11:34 2025 GMT Subject: CN=2E4BA72FDE53AEFBF4EC509599D7A83247BB4CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:da:fb:55:a5:40:25:bb:29:8b:b2:db:89:5f: fe:09:77:0e:8f:7e:b5:c8:7b:ea:6d:52:87:88:d0: a2:ba:d3:85:c8:b3:fb:41:96:ab:2a:cd:82:2b:7f: 75:52:fc:87:5d:ae:6d:8d:32:a9:86:29:6e:c7:f5: bf:d8:29:d8:5c:f5:34:fd:c2:ac:81:8b:76:3a:f1: 50:2b:6f:bc:61:fc:ad:2c:55:30:34:f7:5f:7b:ef: 18:c0:ec:4a:f4:b9:3a:04:19:0c:05:75:b0:29:df: 63:04:1e:17:b2:3f:16:3d:76:2b:e3:ef:eb:71:6d: f0:ef:3a:29:17:09:05:8c:aa:ee:80:d0:ad:e9:8b: 62:a7:f1:0d:42:14:b4:14:b1:d7:d9:e9:f0:1b:d0: 1d:33:a6:fc:a0:b0:35:cc:89:2d:aa:e5:63:5f:2d: a6:54:f6:13:51:f6:9e:86:7d:7f:b3:71:52:3e:32: 19:25:9e:bc:c0:67:d8:43:a1:45:de:84:9f:ca:b0: 98:19:82:14:5c:be:ef:27:3a:09:47:ca:65:7b:88: bb:64:e4:e9:c3:83:b3:fd:b8:01:c7:b4:cd:9f:cf: 4a:2b:2d:96:52:3d:0f:a3:ee:7c:1c:85:17:09:9d: f2:94:0e:55:91:3a:d8:c0:78:4a:34:3f:59:3b:c0: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:A7:2F:DE:53:AE:FB:F4:EC:50:95:99:D7:A8:32:47:BB:4C:CE X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a4:35:99:9f:3d:12:04:f8:76:58:90:14:24:d2:48:d6:4a: 91:2c:a1:59:61:18:0a:dd:02:f0:c2:a5:11:63:90:57:03:bb: 7d:68:0d:62:7f:c3:54:8c:de:9e:70:2c:44:f8:1a:b5:83:ec: 3a:54:d0:57:7a:96:cf:2a:d8:00:6a:db:b1:d6:5a:0e:ae:56: 10:22:b2:5e:18:10:aa:3a:89:11:33:50:ae:eb:74:08:62:de: a5:e8:b8:9a:d2:7c:4d:19:8d:0e:b3:17:56:66:59:82:5d:f0: 1b:23:38:f9:ce:96:b1:70:e5:73:20:a6:1f:ea:4b:0a:17:b9: 4e:33:f4:6a:ad:7b:4e:9a:b6:5e:d8:a3:49:d8:cf:bc:b7:b3: 5e:f1:2a:9b:fa:59:45:54:42:56:ff:f8:86:23:70:d0:d9:61: f5:bf:28:cc:e5:25:7a:d8:94:63:73:cb:f0:08:00:c6:f8:a7: bb:ff:5f:db:c4:77:bc:d9:94:12:3b:07:6e:1b:38:08:e2:63: f5:8a:9e:e5:f2:ea:2c:9f:e0:6f:eb:41:49:f3:24:28:ec:51: cd:54:26:6b:da:a3:ce:14:68:2b:77:a1:85:c7:c5:e4:ad:91: 93:80:5a:fb:85:1d:8d:dd:a3:dc:32:74:10:59:f2:01:bf:ff: ca:24:16:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpmFgPBWSwy5U7K34ZCpQ2GP42swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNTA2MDgwMDU2MzRaFw0yNTA2MTExMDExMzRaMDMxMTAvBgNV BAMTKDJFNEJBNzJGREU1M0FFRkJGNEVDNTA5NTk5RDdBODMyNDdCQjRDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2vtVpUAluymLstuJX/4Jdw6P frXIe+ptUoeI0KK604XIs/tBlqsqzYIrf3VS/Iddrm2NMqmGKW7H9b/YKdhc9TT9 wqyBi3Y68VArb7xh/K0sVTA091977xjA7Er0uToEGQwFdbAp32MEHheyPxY9divj 7+txbfDvOikXCQWMqu6A0K3pi2Kn8Q1CFLQUsdfZ6fAb0B0zpvygsDXMiS2q5WNf LaZU9hNR9p6GfX+zcVI+MhklnrzAZ9hDoUXehJ/KsJgZghRcvu8nOglHymV7iLtk 5OnDg7P9uAHHtM2fz0orLZZSPQ+j7nwchRcJnfKUDlWROtjAeEo0P1k7wGNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkunL95Trvv07FCVmdeoMke7TM4wHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKkNZmfPRIE+HZYkBQk0kjWSpEsoVlhGArd AvDCpRFjkFcDu31oDWJ/w1SM3p5wLET4GrWD7DpU0Fd6ls8q2ABq27HWWg6uVhAi sl4YEKo6iREzUK7rdAhi3qXouJrSfE0ZjQ6zF1ZmWYJd8BsjOPnOlrFw5XMgph/q SwoXuU4z9Gqte06atl7Yo0nYz7y3s17xKpv6WUVUQlb/+IYjcNDZYfW/KMzlJXrY lGNzy/AIAMb4p7v/X9vEd7zZlBI7B24bOAjiY/WKnuXy6iyf4G/rQUnzJCjsUc1U Jmvao84UaCt3oYXHxeStkZOAWvuFHY3do9wydBBZ8gG//8okFto= -----END CERTIFICATE-----Generated at Mon Jun 9 00:13:50 2025 by rpki-client