$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: Snt7yzMcB332LhCZOfM+GLVH9dwDRsvnB21XVxSDjHs= Subject key identifier: A1:A2:30:AB:08:4E:F5:77:EB:DD:4A:82:2B:58:81:71:38:37:76:0B Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 52727C279353D5D1BE3E8317DFCAF089D9DAAE10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 01CB Signing time: Fri 04 Apr 2025 14:20:36 +0000 Manifest this update: Fri 04 Apr 2025 14:15:36 +0000 Manifest next update: Mon 07 Apr 2025 17:03:36 +0000 Files and hashes: 1: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: vZ+6niMdV+dUYnofXQpH/AKII9AzCOM9QtbvbNiD8Wk=) 2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: MH4tMh/bjSiTVwxtUrrU8CNsu1hsXrl0cABIA1tFw48=) 3: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: rE87VTERyabC3Y/tQcstuXcDKDFiKHJZ8PBfcs6F9Q8=) 4: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:72:7c:27:93:53:d5:d1:be:3e:83:17:df:ca:f0:89:d9:da:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Apr 4 14:15:36 2025 GMT Not After : Apr 7 17:03:36 2025 GMT Subject: CN=A1A230AB084EF577EBDD4A822B5881713837760B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:cd:ca:9b:9d:40:f9:8c:8d:ba:cf:98:8b: 2b:55:d6:2d:2b:17:78:ba:f9:57:0f:16:b5:2d:b4: d2:27:74:c2:24:65:69:fc:48:ed:32:ce:d4:94:96: 50:a1:77:ef:74:a7:85:e8:3f:df:c2:36:05:8c:0a: 8e:9a:45:93:8b:54:1a:e8:7b:4a:80:62:85:75:07: ea:eb:35:c2:c5:da:82:04:fc:dc:9d:cf:cd:ba:89: 31:70:f6:28:fc:4c:2e:d2:e9:af:cf:3a:f8:0d:50: a3:43:80:22:2a:04:d3:01:13:f9:c5:d2:e8:17:f8: 97:6f:72:1a:70:84:93:6e:40:1e:42:71:f0:9e:47: 45:fe:80:42:d8:13:42:ab:21:f8:7e:7a:bc:88:f9: e6:51:cd:da:c2:5f:46:af:a7:d3:cc:8c:4e:ed:59: 55:b6:07:1b:c5:53:58:fc:29:eb:a9:f5:e4:a5:10: 9d:b8:c5:3f:b2:5b:f6:57:ab:7f:5a:6a:f1:06:4f: 6e:0a:6c:5f:af:ca:08:97:dc:93:da:72:11:0a:c1: 20:9a:b0:e1:a8:2c:4d:df:42:b0:8f:42:7b:47:6f: fc:81:fa:16:d2:df:1a:e5:97:3f:82:5b:96:a0:2b: 97:74:91:e5:2d:19:31:9e:12:91:57:c8:56:c8:59: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A2:30:AB:08:4E:F5:77:EB:DD:4A:82:2B:58:81:71:38:37:76:0B X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:73:a4:92:a2:63:c6:18:2f:cc:7c:ce:ad:2f:0b:22:40:cf: 94:5e:2f:fd:f1:02:5a:06:34:6c:8d:82:c1:73:47:fd:80:00: cc:e2:76:31:ee:d5:a8:76:7d:92:c3:eb:7c:82:46:cd:8e:51: 04:bb:b1:69:ef:dc:3e:62:5e:68:c5:a4:be:43:5a:d0:c0:7a: a6:9f:33:1a:40:c5:ba:04:f2:9a:bb:43:27:00:ce:00:53:4c: 9e:59:76:b2:70:c9:a9:9a:c4:ea:0a:ba:c1:31:55:fa:06:7b: 10:68:99:bb:5c:bb:43:c8:b6:b3:a6:86:15:20:e2:e1:25:41: fb:1d:c3:ab:6e:e9:f1:06:ff:b3:34:86:fd:67:73:f2:d7:17: 4c:85:94:53:c2:98:85:74:cb:11:f6:d7:9d:8d:6b:e2:f9:35: 8b:9e:1e:e7:5d:37:2a:5f:46:ec:c4:ee:d7:e4:70:1b:93:f6: 24:83:a5:53:33:3b:46:76:c5:13:d6:30:31:41:31:91:63:94: 2b:0f:73:5e:7c:50:fd:d0:3e:f6:6d:63:04:70:c0:22:61:84: 9d:a6:61:34:b8:30:38:f2:84:79:ae:da:85:7a:d8:53:b6:fb: ae:44:57:c4:51:ff:66:c2:db:6c:92:a8:54:9e:92:a7:b9:27: a9:cd:c2:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnJ8J5NT1dG+PoMX38rwidnarhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTA0MDQxNDE1MzZaFw0yNTA0MDcxNzAzMzZaMDMxMTAvBgNV BAMTKEExQTIzMEFCMDg0RUY1NzdFQkRENEE4MjJCNTg4MTcxMzgzNzc2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBc3Km51A+YyNus+YiytV1i0r F3i6+VcPFrUttNIndMIkZWn8SO0yztSUllChd+90p4XoP9/CNgWMCo6aRZOLVBro e0qAYoV1B+rrNcLF2oIE/Nydz826iTFw9ij8TC7S6a/POvgNUKNDgCIqBNMBE/nF 0ugX+JdvchpwhJNuQB5CcfCeR0X+gELYE0KrIfh+eryI+eZRzdrCX0avp9PMjE7t WVW2BxvFU1j8Keup9eSlEJ24xT+yW/ZXq39aavEGT24KbF+vygiX3JPachEKwSCa sOGoLE3fQrCPQntHb/yB+hbS3xrllz+CW5agK5d0keUtGTGeEpFXyFbIWZ0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoaIwqwhO9Xfr3UqCK1iBcTg3dgswHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtzpJKiY8YYL8x8zq0vCyJAz5ReL/3xAloG NGyNgsFzR/2AAMzidjHu1ah2fZLD63yCRs2OUQS7sWnv3D5iXmjFpL5DWtDAeqaf MxpAxboE8pq7QycAzgBTTJ5ZdrJwyamaxOoKusExVfoGexBombtcu0PItrOmhhUg 4uElQfsdw6tu6fEG/7M0hv1nc/LXF0yFlFPCmIV0yxH2152Na+L5NYueHuddNypf RuzE7tfkcBuT9iSDpVMzO0Z2xRPWMDFBMZFjlCsPc158UP3QPvZtYwRwwCJhhJ2m YTS4MDjyhHmu2oV62FO2+65EV8RR/2bC22ySqFSekqe5J6nNwnA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:50 2025 by rpki-client