$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json) Hash identifier: /YXF/QrTO5tihuxNHoARj9Sz7XAu9VFWAIpkrQR391Y= Subject key identifier: C7:57:D4:4C:3B:AB:9F:C7:EE:0A:E5:40:2D:93:BE:E4:0D:FB:09:D2 Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 42B238EF16B9DE60CCC4042AFD6C5FE34D957512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft Manifest number: 04DF Signing time: Sun 01 Jun 2025 21:30:54 +0000 Manifest this update: Sun 01 Jun 2025 21:25:54 +0000 Manifest next update: Thu 05 Jun 2025 03:32:54 +0000 Files and hashes: 1: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: PNVsPBdgz848epkRUa1jTqdxj4GUBdlQrr9jbeExEKo=) 2: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b2:38:ef:16:b9:de:60:cc:c4:04:2a:fd:6c:5f:e3:4d:95:75:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Jun 1 21:25:54 2025 GMT Not After : Jun 5 03:32:54 2025 GMT Subject: CN=C757D44C3BAB9FC7EE0AE5402D93BEE40DFB09D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:03:69:ff:4e:64:72:f9:8c:a6:45:bc:d1: 9b:de:d7:3f:41:89:a0:c5:c9:23:71:d3:fa:65:61: 78:84:f7:b1:ea:3b:32:f0:84:6d:6d:47:f1:4a:f3: ed:4c:74:98:f7:0b:97:78:56:99:10:36:64:2c:a6: f3:81:c7:d3:0b:ed:22:7b:c8:cd:a4:21:2c:e9:f1: 6f:a1:6e:46:2d:55:48:f8:db:7b:d0:3d:73:fe:6f: 07:39:47:2a:1b:8f:fc:54:fd:2d:56:89:24:8f:26: 85:f6:64:f4:ad:15:09:39:da:63:6f:3a:3f:d6:a8: a8:1a:29:c4:b9:98:e6:ea:ea:b5:3e:41:f2:66:a9: 18:d8:10:26:93:33:55:a7:eb:75:31:35:ca:f7:49: bb:84:46:03:75:03:79:b0:f8:f3:f6:07:b0:06:03: 1b:fc:d7:20:78:e3:06:4f:e1:1e:9a:79:e6:61:09: 43:56:cf:06:c3:e8:21:21:10:20:c6:7b:8a:14:33: c4:d8:42:3b:68:06:79:a6:56:e8:26:2d:b9:bd:94: 3a:b5:3f:31:01:17:36:fb:78:50:90:a1:1d:64:79: 90:22:ae:9c:ab:24:9c:af:83:0a:41:a0:88:1a:59: 97:f1:14:b8:80:cd:f5:0a:78:bd:81:d0:9d:74:3b: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:57:D4:4C:3B:AB:9F:C7:EE:0A:E5:40:2D:93:BE:E4:0D:FB:09:D2 X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3f:4d:72:67:0f:c9:0f:2f:0d:b6:f7:85:be:ca:71:0d:e8: b9:fb:6b:24:0f:00:b6:07:6c:45:ce:aa:57:94:7b:cc:c0:2d: d3:fa:97:ef:7e:73:13:dc:b4:99:56:41:e5:d3:10:2b:32:a4: 12:66:93:6e:f8:65:c5:ba:ea:3f:28:f9:ec:d9:49:11:b9:bf: f9:a9:33:2f:ea:b9:df:57:85:0e:dd:2a:e2:3d:bd:70:56:15: 88:87:5c:08:d2:26:53:8f:5e:4e:7f:a6:15:66:42:bd:4c:52: 81:f6:4b:cc:26:a6:8f:e9:0e:ec:42:11:59:6a:56:85:f4:f0: 92:c6:ad:3e:9a:93:0b:9b:ee:e9:57:ea:46:1f:29:2e:4f:41: 7f:a7:72:b9:9e:75:c7:f2:75:fb:e0:df:73:a5:1e:76:96:33: 1f:66:d8:39:7a:4c:ae:52:ad:88:26:eb:9c:c4:30:c0:f9:6a: a6:f0:66:8c:87:fe:37:5d:c1:84:67:88:3e:77:de:1a:46:a8: fc:2e:d1:41:8b:45:f4:36:db:fc:d9:18:a1:96:2d:b0:37:66: 94:38:81:fc:a2:93:68:28:4a:a6:3e:86:1d:00:cc:2f:93:7d: 60:7a:86:43:3b:53:f2:05:c4:ef:8d:71:5e:0d:01:24:10:b4: 83:92:45:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrI47xa53mDMxAQq/Wxf402VdRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNTA2MDEyMTI1NTRaFw0yNTA2MDUwMzMyNTRaMDMxMTAvBgNV BAMTKEM3NTdENDRDM0JBQjlGQzdFRTBBRTU0MDJEOTNCRUU0MERGQjA5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KANp/05kcvmMpkW80Zve1z9B iaDFySNx0/plYXiE97HqOzLwhG1tR/FK8+1MdJj3C5d4VpkQNmQspvOBx9ML7SJ7 yM2kISzp8W+hbkYtVUj423vQPXP+bwc5Ryobj/xU/S1WiSSPJoX2ZPStFQk52mNv Oj/WqKgaKcS5mObq6rU+QfJmqRjYECaTM1Wn63UxNcr3SbuERgN1A3mw+PP2B7AG Axv81yB44wZP4R6aeeZhCUNWzwbD6CEhECDGe4oUM8TYQjtoBnmmVugmLbm9lDq1 PzEBFzb7eFCQoR1keZAirpyrJJyvgwpBoIgaWZfxFLiAzfUKeL2B0J10O9X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx1fUTDurn8fuCuVALZO+5A37CdIwHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg/TXJnD8kPLw2294W+ynEN6Ln7ayQPALYH bEXOqleUe8zALdP6l+9+cxPctJlWQeXTECsypBJmk274ZcW66j8o+ezZSRG5v/mp My/qud9XhQ7dKuI9vXBWFYiHXAjSJlOPXk5/phVmQr1MUoH2S8wmpo/pDuxCEVlq VoX08JLGrT6akwub7ulX6kYfKS5PQX+ncrmedcfydfvg33OlHnaWMx9m2Dl6TK5S rYgm65zEMMD5aqbwZoyH/jddwYRniD533hpGqPwu0UGLRfQ22/zZGKGWLbA3ZpQ4 gfyik2goSqY+hh0AzC+TfWB6hkM7U/IFxO+NcV4NASQQtIOSRds= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:07 2025 by rpki-client