$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: nrWCOOM0WOuCTZXrJlSD/ZFl4beG6JYdlgPfl57/1+o= Subject key identifier: DC:20:A6:04:53:83:06:4E:FC:BE:3C:1A:72:CB:4C:DA:93:D0:88:48 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 49CEE4736A3207AFB4ABA137DF5DA652FA2BB8F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 044D Signing time: Sat 07 Jun 2025 12:42:14 +0000 Manifest this update: Sat 07 Jun 2025 12:37:14 +0000 Manifest next update: Tue 10 Jun 2025 12:53:14 +0000 Files and hashes: 1: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) 2: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: PhijslulMR2B7zNNUdeZ1bM4yEsULICFxGyj4MdEKqo=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 12:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ce:e4:73:6a:32:07:af:b4:ab:a1:37:df:5d:a6:52:fa:2b:b8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Jun 7 12:37:14 2025 GMT Not After : Jun 10 12:53:14 2025 GMT Subject: CN=DC20A6045383064EFCBE3C1A72CB4CDA93D08848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:5c:45:76:dc:73:77:1f:9f:49:b1:64:aa: 2a:de:c7:53:60:4c:5b:48:1e:a1:cc:ca:c0:1a:f7: 90:f4:df:49:73:5f:4f:1d:08:90:b8:cd:1e:ce:88: 70:f5:7d:5f:d8:3a:44:d7:7d:f1:35:fa:21:cd:f1: 53:08:c4:22:e5:ea:28:6b:90:64:35:4c:e3:12:86: 6c:aa:0e:c9:57:6f:ab:e2:66:6b:04:d9:b7:03:15: 71:9b:bb:9f:ee:cf:1d:d3:9b:a0:30:97:a0:69:bd: 60:8b:36:8e:cb:27:4e:de:29:56:00:1e:34:6b:b4: 0d:c9:0f:5b:bb:c5:4c:d9:9b:3c:ba:95:4e:86:2b: 73:35:24:1b:00:96:e5:70:f8:fc:55:9d:b8:23:5c: d0:f2:19:07:32:60:5b:02:83:7b:83:81:ff:1b:f1: 02:ca:49:1c:cc:05:31:ba:86:fa:8b:bb:ee:36:87: 51:c2:c9:07:70:cf:5f:f5:6b:db:26:9e:1f:8d:85: 53:d3:c7:46:d4:d0:76:8a:ae:fa:da:4c:c3:5d:fd: 53:7f:9c:3a:f9:c6:76:9e:0d:96:c6:f5:58:a6:9e: d4:39:ba:7b:a9:a1:dd:9a:0f:29:2e:eb:99:55:8b: 71:7d:39:25:19:86:b0:d1:27:bb:f7:de:22:cb:49: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:20:A6:04:53:83:06:4E:FC:BE:3C:1A:72:CB:4C:DA:93:D0:88:48 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9e:08:e0:56:14:b6:98:e2:d2:7f:b5:19:75:22:ef:80:25: 70:c3:75:2a:67:1c:4e:e6:ab:6a:d9:17:38:4d:6e:e4:4e:e2: 93:e9:ac:c2:b0:c8:cb:ac:bf:96:c3:96:57:7d:f0:fb:e4:c6: 4c:9d:dd:f5:d2:10:38:ad:c1:81:b8:de:e7:b6:ff:d2:ef:a3: 66:c0:d3:65:13:a7:bc:10:95:cd:90:eb:ff:2b:af:c7:e6:45: dc:c8:d0:24:f3:11:77:ab:c2:a4:81:83:cc:20:31:e5:78:e3: 3b:13:e5:38:bb:33:9d:5f:f7:a8:30:0d:ce:4b:cb:e0:e3:53: d3:ce:18:06:c3:0c:04:11:2c:5c:0a:3a:c1:e5:cb:a3:6e:32: 98:63:54:60:3e:ac:85:8b:66:39:33:6e:23:79:e6:d3:a3:e0: 64:2b:2d:3d:b6:1f:eb:ef:fd:1e:c0:6f:e3:74:67:42:ae:d9: 6b:a8:de:30:ff:bb:f4:7f:3e:0a:48:2d:be:14:8e:8f:86:f5: 5e:76:9a:88:cb:39:e9:c0:dd:23:71:f0:ea:5b:4a:67:05:b3: 79:82:b1:02:15:66:99:8a:1d:85:af:73:dc:61:ed:f2:33:45: 26:37:10:89:d5:45:af:aa:06:cc:b4:ed:c2:d0:a7:89:26:b5: b5:96:c5:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSc7kc2oyB6+0q6E3312mUvoruPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA2MDcxMjM3MTRaFw0yNTA2MTAxMjUzMTRaMDMxMTAvBgNV BAMTKERDMjBBNjA0NTM4MzA2NEVGQ0JFM0MxQTcyQ0I0Q0RBOTNEMDg4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZelxFdtxzdx+fSbFkqirex1Ng TFtIHqHMysAa95D030lzX08dCJC4zR7OiHD1fV/YOkTXffE1+iHN8VMIxCLl6ihr kGQ1TOMShmyqDslXb6viZmsE2bcDFXGbu5/uzx3Tm6Awl6BpvWCLNo7LJ07eKVYA HjRrtA3JD1u7xUzZmzy6lU6GK3M1JBsAluVw+PxVnbgjXNDyGQcyYFsCg3uDgf8b 8QLKSRzMBTG6hvqLu+42h1HCyQdwz1/1a9smnh+NhVPTx0bU0HaKrvraTMNd/VN/ nDr5xnaeDZbG9VimntQ5unupod2aDyku65lVi3F9OSUZhrDRJ7v33iLLSZAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3CCmBFODBk78vjwacstM2pPQiEgwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyeCOBWFLaY4tJ/tRl1Iu+AJXDDdSpnHE7m q2rZFzhNbuRO4pPprMKwyMusv5bDlld98Pvkxkyd3fXSEDitwYG43ue2/9Lvo2bA 02UTp7wQlc2Q6/8rr8fmRdzI0CTzEXerwqSBg8wgMeV44zsT5Ti7M51f96gwDc5L y+DjU9POGAbDDAQRLFwKOsHly6NuMphjVGA+rIWLZjkzbiN55tOj4GQrLT22H+vv /R7Ab+N0Z0Ku2Wuo3jD/u/R/PgpILb4Ujo+G9V52mojLOenA3SNx8OpbSmcFs3mC sQIVZpmKHYWvc9xh7fIzRSY3EInVRa+qBsy07cLQp4kmtbWWxew= -----END CERTIFICATE-----Generated at Sun Jun 8 03:51:43 2025 by rpki-client