$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: vWv6lovZJfuDvWHsTZpFZeMzzgteXK/xZV1JeelvI5A= Subject key identifier: 93:39:7A:52:56:27:7D:05:22:65:B1:89:24:A8:9B:80:1B:10:AB:E0 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 4E4085D0BC92A7BF230A8422E512B0B104461EE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04A2 Signing time: Mon 02 Jun 2025 07:30:38 +0000 Manifest this update: Mon 02 Jun 2025 07:25:38 +0000 Manifest next update: Thu 05 Jun 2025 08:59:38 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: fgSOFTmHBsm+tHxB6f309xDzUMsP9VUt4jQONOxHUT0=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: KvQlUIt+O8XkzXwyaibxzHplxyBpRPScmdyCJyB/bbo=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 09pTyAPGkDhkuez65QhC+JUUx/+DkLuWQ1gGTLu7lyc=) 4: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: eICFPX1ffRHHlODjPDwkCsraQZYn70z4zLEPXC3PC0M=) 5: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: 8ob3qDVrB/AyOlGi3jB/cnpW6JTFTjXp93Pesg9h8z8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:40:85:d0:bc:92:a7:bf:23:0a:84:22:e5:12:b0:b1:04:46:1e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Jun 2 07:25:38 2025 GMT Not After : Jun 5 08:59:38 2025 GMT Subject: CN=93397A5256277D052265B18924A89B801B10ABE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:0d:ec:f9:c3:5e:f4:3c:59:f9:17:69:2d: 3f:01:66:d6:36:0b:f6:62:9d:f2:67:27:36:70:db: ae:c4:66:2d:d1:9d:fa:67:d1:8b:5a:dc:4f:84:b4: 0a:6b:91:12:93:35:32:51:b1:80:84:6c:72:92:63: 9f:66:60:0f:70:71:29:b2:40:41:86:48:c9:9d:a1: 8c:5e:cb:db:2b:e7:c5:7b:03:ae:eb:65:b2:65:c8: 3c:3b:e4:f9:92:62:7f:08:59:63:17:24:0d:70:62: 24:4f:dd:95:2f:81:5d:c7:fe:8b:3b:3b:74:8e:14: 4a:96:71:bd:d1:29:0c:24:83:7a:9e:97:39:45:c6: 59:d7:1c:b3:53:23:6f:40:8a:4d:1d:04:ab:35:cc: a0:8d:ef:25:76:36:ab:4f:c1:ef:e2:e8:11:5c:48: e9:af:e1:eb:71:50:72:14:48:5f:22:fb:be:29:6c: e4:3e:91:5d:7a:3a:96:a2:b4:76:e6:ba:4e:96:9b: 02:6e:dd:a0:ff:6b:f4:95:a7:66:4c:f1:be:20:b8: 67:5c:04:fd:c3:8d:d4:1b:bf:bb:4d:cd:35:a7:e7: 03:cf:ea:b4:10:19:13:de:47:8d:6d:ee:84:f8:40: 07:d0:29:6f:cb:6d:8a:ff:13:65:f6:03:08:35:20: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:39:7A:52:56:27:7D:05:22:65:B1:89:24:A8:9B:80:1B:10:AB:E0 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:72:ba:1b:9d:8a:b8:68:93:33:17:b6:c1:7f:05:5e:41:35: fa:8c:d2:52:61:3b:0e:2c:e4:32:93:c5:58:41:76:11:cc:e0: eb:07:ec:e6:be:47:3a:db:90:f1:4b:3c:98:40:4d:fe:95:c3: d2:1c:56:26:c6:88:6a:5f:da:e9:a7:c0:89:59:34:bd:f6:c9: 9d:14:b2:5c:5a:01:d2:06:d0:7b:2b:00:7d:fa:5b:c5:d0:1f: 80:aa:aa:c6:33:30:cf:d7:94:30:98:47:cf:6e:d2:60:81:cb: a9:78:8a:6f:6b:c2:55:a5:7a:44:fc:96:48:8d:e7:52:84:cd: df:03:59:44:b4:f1:2d:02:88:b0:bf:44:46:2a:93:cb:d6:b8: 71:51:1b:3e:bc:d5:b9:e4:13:77:13:ec:46:44:e7:15:45:b1: 35:ca:ff:9a:a0:76:91:f9:e5:f7:9e:1a:e1:be:24:cb:ed:75: fe:40:ad:5d:6b:f7:34:0b:6f:34:07:5f:bd:3c:12:71:03:45: 67:86:cb:4d:0d:ca:79:44:c7:64:ef:16:d7:16:c1:f0:5c:22: c9:da:65:96:78:79:0d:69:e2:2c:14:ca:31:b3:4f:dd:bd:94: 24:b9:75:38:b9:23:d0:bd:98:5e:8a:fc:2c:54:33:e4:14:fd: 52:2d:51:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkCF0LySp78jCoQi5RKwsQRGHugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA2MDIwNzI1MzhaFw0yNTA2MDUwODU5MzhaMDMxMTAvBgNV BAMTKDkzMzk3QTUyNTYyNzdEMDUyMjY1QjE4OTI0QTg5QjgwMUIxMEFCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJQ3s+cNe9DxZ+RdpLT8BZtY2 C/ZinfJnJzZw267EZi3Rnfpn0Yta3E+EtAprkRKTNTJRsYCEbHKSY59mYA9wcSmy QEGGSMmdoYxey9sr58V7A67rZbJlyDw75PmSYn8IWWMXJA1wYiRP3ZUvgV3H/os7 O3SOFEqWcb3RKQwkg3qelzlFxlnXHLNTI29Aik0dBKs1zKCN7yV2NqtPwe/i6BFc SOmv4etxUHIUSF8i+74pbOQ+kV16OpaitHbmuk6WmwJu3aD/a/SVp2ZM8b4guGdc BP3DjdQbv7tNzTWn5wPP6rQQGRPeR41t7oT4QAfQKW/LbYr/E2X2Awg1IEgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkzl6UlYnfQUiZbGJJKibgBsQq+AwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNyuhudirhokzMXtsF/BV5BNfqM0lJhOw4s 5DKTxVhBdhHM4OsH7Oa+RzrbkPFLPJhATf6Vw9IcVibGiGpf2umnwIlZNL32yZ0U slxaAdIG0HsrAH36W8XQH4CqqsYzMM/XlDCYR89u0mCBy6l4im9rwlWlekT8lkiN 51KEzd8DWUS08S0CiLC/REYqk8vWuHFRGz681bnkE3cT7EZE5xVFsTXK/5qgdpH5 5feeGuG+JMvtdf5ArV1r9zQLbzQHX708EnEDRWeGy00NynlEx2TvFtcWwfBcIsna ZZZ4eQ1p4iwUyjGzT929lCS5dTi5I9C9mF6K/CxUM+QU/VItUSk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:37 2025 by rpki-client