$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: kOYcq73xcgfqP34WzmkHksE2Z+1hZqk6b4twVYe2ohY= Subject key identifier: B3:76:F1:DC:CC:15:6C:F3:C3:82:61:92:1B:B5:8D:A7:8A:EC:3A:C5 Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 2F707945D2C665011DDF7BB1EFC492667EE077B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: EA Signing time: Sat 19 Apr 2025 09:30:03 +0000 Manifest this update: Sat 19 Apr 2025 09:25:03 +0000 Manifest next update: Tue 22 Apr 2025 16:20:03 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: /is4ydf2XC844XAW86jTHD4X9z+8ehGX7FIe0IBBMVI=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: ZcuLefK+yAknTSgNc0AblKwaXXvM+7Ik+wo2Htxgbns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:70:79:45:d2:c6:65:01:1d:df:7b:b1:ef:c4:92:66:7e:e0:77:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Apr 19 09:25:03 2025 GMT Not After : Apr 22 16:20:03 2025 GMT Subject: CN=B376F1DCCC156CF3C38261921BB58DA78AEC3AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:2e:94:a1:d7:06:84:c1:cd:3b:62:aa:c5: 59:f2:ec:cc:3b:a6:2d:9c:9f:92:c2:28:44:ca:cc: 2a:43:36:f6:e2:d2:a5:b5:1d:78:61:a3:40:ce:d0: b9:a9:bd:70:08:de:b2:97:0d:b9:6e:0a:20:52:89: 97:3f:03:94:63:15:f5:cf:9e:a4:d6:19:6b:93:6d: b3:be:33:f9:ee:68:a2:e4:ef:15:68:91:79:71:01: ff:60:53:24:6d:08:32:a6:0e:19:aa:c7:3e:d0:83: da:9a:02:31:43:35:4c:0e:c6:b6:8e:dd:f7:93:24: eb:50:b3:d7:12:1b:40:46:3e:3d:f4:97:68:e1:cd: d8:87:df:36:e1:93:f5:52:b7:69:7b:dc:e2:2e:58: 34:3e:c8:dc:1d:cd:b0:48:f0:a2:c9:17:1c:07:73: 53:11:9d:15:58:14:09:70:4a:30:a1:a9:d8:73:63: 3e:5a:df:ce:96:20:f5:e3:ef:08:b6:07:46:9a:39: d3:4c:02:11:95:fa:9c:e3:e9:79:2f:46:07:a5:ed: 09:7c:fb:2b:ec:6d:76:95:28:6f:07:e9:ab:9d:3b: a9:c5:97:d4:79:4c:2c:14:76:15:2d:3e:9e:7d:c6: 15:67:48:c6:f3:a1:6a:6c:bb:c4:84:69:08:34:ab: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:76:F1:DC:CC:15:6C:F3:C3:82:61:92:1B:B5:8D:A7:8A:EC:3A:C5 X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0a:2b:18:38:05:38:d6:e2:9f:8e:7f:0d:42:10:e5:38:f3: 7f:cc:48:0f:fc:41:ed:55:f8:a8:c7:eb:e8:62:c9:b9:70:1e: 00:14:42:2f:67:8a:89:00:9b:b0:b7:b5:5e:8a:a2:b7:11:e2: 99:2b:ec:63:c7:f2:ff:72:b6:b3:c5:a5:69:a0:37:7a:c7:35: 3e:9d:20:c2:85:4f:87:05:bb:44:df:d9:c1:7a:b5:ee:96:f1: e3:fa:4f:a0:2c:81:9c:6f:64:58:6d:98:5e:07:77:ee:a5:62: 6d:b3:c0:ad:df:9b:b7:06:13:6d:e5:f8:b1:49:b4:36:29:b9: e3:86:94:14:3d:1f:7e:8b:c4:d0:4d:b9:c1:29:04:69:4c:ba: 4a:ab:d5:4e:44:6e:94:e2:b1:59:ac:58:97:51:30:f3:ea:27: 3c:29:be:cf:88:21:00:7e:c2:b4:60:d6:7f:da:ba:06:16:14: 2a:c6:a2:e8:db:1d:45:bd:ef:56:20:fc:af:4b:c3:88:6e:37: 77:99:82:40:be:f0:b1:df:77:21:db:1b:97:0a:24:9f:b4:51: e2:c2:00:f9:d9:e9:89:df:d4:44:12:5d:a8:6c:f6:ce:23:a2: eb:88:f1:b8:43:ba:50:59:94:0b:54:0a:23:1b:6b:dd:26:59: c5:1a:eb:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3B5RdLGZQEd33ux78SSZn7gd7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTA0MTkwOTI1MDNaFw0yNTA0MjIxNjIwMDNaMDMxMTAvBgNV BAMTKEIzNzZGMURDQ0MxNTZDRjNDMzgyNjE5MjFCQjU4REE3OEFFQzNBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0iy6UodcGhMHNO2KqxVny7Mw7 pi2cn5LCKETKzCpDNvbi0qW1HXhho0DO0LmpvXAI3rKXDbluCiBSiZc/A5RjFfXP nqTWGWuTbbO+M/nuaKLk7xVokXlxAf9gUyRtCDKmDhmqxz7Qg9qaAjFDNUwOxraO 3feTJOtQs9cSG0BGPj30l2jhzdiH3zbhk/VSt2l73OIuWDQ+yNwdzbBI8KLJFxwH c1MRnRVYFAlwSjChqdhzYz5a386WIPXj7wi2B0aaOdNMAhGV+pzj6XkvRgel7Ql8 +yvsbXaVKG8H6audO6nFl9R5TCwUdhUtPp59xhVnSMbzoWpsu8SEaQg0q2EjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs3bx3MwVbPPDgmGSG7WNp4rsOsUwHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEKKxg4BTjW4p+Ofw1CEOU483/MSA/8Qe1V +KjH6+hiyblwHgAUQi9niokAm7C3tV6KorcR4pkr7GPH8v9ytrPFpWmgN3rHNT6d IMKFT4cFu0Tf2cF6te6W8eP6T6AsgZxvZFhtmF4Hd+6lYm2zwK3fm7cGE23l+LFJ tDYpueOGlBQ9H36LxNBNucEpBGlMukqr1U5EbpTisVmsWJdRMPPqJzwpvs+IIQB+ wrRg1n/augYWFCrGoujbHUW971Yg/K9Lw4huN3eZgkC+8LHfdyHbG5cKJJ+0UeLC APnZ6Ynf1EQSXahs9s4jouuI8bhDulBZlAtUCiMba90mWcUa6wo= -----END CERTIFICATE-----Generated at Sat Apr 19 16:03:16 2025 by rpki-client