$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json) Hash identifier: xzfXasOjxFvDNE6ffESAy4Thdr1aiFQUeNt9HIwafTg= Subject key identifier: 37:E3:C5:3E:67:4C:E3:7A:68:B3:F4:C4:18:A7:33:6E:FC:83:A6:08 Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD Certificate serial: 3B1A97598D6713DB5D85B66B90B76FBCBF54A79E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft Manifest number: 01C2 Signing time: Thu 17 Apr 2025 03:02:18 +0000 Manifest this update: Thu 17 Apr 2025 02:57:18 +0000 Manifest next update: Sun 20 Apr 2025 13:31:18 +0000 Files and hashes: 1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=) 2: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: K64lUcWG+Yu1MRE4ZrI0Y+a9bGISPwiXwl2psKdjozE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 13:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1a:97:59:8d:67:13:db:5d:85:b6:6b:90:b7:6f:bc:bf:54:a7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Validity Not Before: Apr 17 02:57:18 2025 GMT Not After : Apr 20 13:31:18 2025 GMT Subject: CN=37E3C53E674CE37A68B3F4C418A7336EFC83A608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:41:fe:15:27:e6:24:87:f6:00:f5:90:5d: 4c:a2:35:0c:62:df:55:2c:d8:aa:a7:77:ae:cf:ef: 1e:71:4d:21:a5:10:cb:f7:c9:df:29:b8:bc:54:97: b1:63:32:c2:ff:9a:d2:4c:b8:56:05:dd:e8:76:05: da:25:2d:72:7a:29:6e:e0:d5:ed:06:17:5e:04:2c: 35:04:b7:65:17:97:59:b2:7f:64:43:79:ad:4f:bc: f9:61:58:2d:90:28:1f:01:57:58:fc:19:ba:28:7a: d5:c1:88:4f:35:ff:27:7c:e9:c6:a6:35:8a:d5:cd: 96:d7:1d:15:d8:35:6d:ca:e8:01:05:30:16:72:e6: 2d:f1:8e:5a:77:c8:4e:a2:a9:e9:b2:f7:ff:cf:c9: d4:3a:75:a8:a9:dc:f2:3a:5a:08:c0:69:1a:2f:33: 72:5c:63:49:95:d2:2c:b3:e3:d1:79:c7:76:f0:43: d7:18:f8:33:77:93:8e:4a:bf:d1:b6:68:92:91:3a: 92:3a:03:de:00:e5:45:65:a9:a6:44:64:22:dc:09: f5:1f:f7:ee:af:60:fd:f0:27:03:51:8f:4b:aa:d6: 02:13:62:49:63:ee:53:38:6c:f3:89:16:e7:85:1e: 49:bc:fd:82:e5:bc:7c:e6:45:96:6f:57:fa:af:1e: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E3:C5:3E:67:4C:E3:7A:68:B3:F4:C4:18:A7:33:6E:FC:83:A6:08 X509v3 Authority Key Identifier: keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:7e:6f:b3:b4:06:28:09:3b:6c:21:65:47:0a:2b:3e:f6:9f: 42:16:3a:f2:51:26:1d:89:db:94:4d:55:7a:2a:a7:4f:43:3f: b4:aa:b9:04:ba:77:68:b8:6d:04:80:b3:f4:06:0d:8f:3f:d5: 5f:7f:a9:a4:44:43:08:f9:82:b3:1a:0a:d4:d9:3f:79:55:7d: f1:42:b6:c7:e4:d2:31:0a:b3:15:48:bb:33:28:76:b7:f0:ae: 60:62:83:f1:a2:96:34:43:c6:1b:c4:14:c1:af:3e:b0:3b:0b: 01:65:d1:29:ef:8c:ba:4d:9f:56:ea:d0:42:f2:33:60:50:73: 97:db:3f:bb:e3:3f:14:34:3e:45:3c:23:37:21:5d:bf:5b:a6: bb:46:2f:f9:82:ca:1a:d3:5c:12:34:3e:6b:0b:69:23:ca:61: 37:c2:20:fc:f2:88:14:95:8a:55:a6:85:bc:49:d0:23:6a:0b: b1:fe:c7:14:de:c7:c0:5c:ce:e6:8f:b8:7c:21:87:a6:10:dd: c4:76:12:26:c5:f8:40:c6:06:cf:dd:d2:8b:c9:fe:67:00:60: cb:53:46:84:ea:80:7f:43:b2:e6:f3:be:58:d4:31:a1:85:a7: bd:70:df:42:fc:26:f4:0d:3c:0e:0c:c3:ff:7b:ed:5e:43:ba: 45:11:94:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxqXWY1nE9tdhbZrkLdvvL9Up54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURG NDUxOTFGRDAeFw0yNTA0MTcwMjU3MThaFw0yNTA0MjAxMzMxMThaMDMxMTAvBgNV BAMTKDM3RTNDNTNFNjc0Q0UzN0E2OEIzRjRDNDE4QTczMzZFRkM4M0E2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdEH+FSfmJIf2APWQXUyiNQxi 31Us2Kqnd67P7x5xTSGlEMv3yd8puLxUl7FjMsL/mtJMuFYF3eh2BdolLXJ6KW7g 1e0GF14ELDUEt2UXl1myf2RDea1PvPlhWC2QKB8BV1j8GbooetXBiE81/yd86cam NYrVzZbXHRXYNW3K6AEFMBZy5i3xjlp3yE6iqemy9//PydQ6daip3PI6WgjAaRov M3JcY0mV0iyz49F5x3bwQ9cY+DN3k45Kv9G2aJKROpI6A94A5UVlqaZEZCLcCfUf 9+6vYP3wJwNRj0uq1gITYklj7lM4bPOJFueFHkm8/YLlvHzmRZZvV/qvHsEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN+PFPmdM43pos/TEGKczbvyDpggwHwYDVR0j BBgwFoAUH1a0+t4RYwJwhlR/vLQk7fRRkf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC8xRjU2QjRGQURF MTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5MUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURGNDUx OTFGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0 RURGNDUxOTFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN5+b7O0BigJO2whZUcKKz72n0IWOvJRJh2J 25RNVXoqp09DP7SquQS6d2i4bQSAs/QGDY8/1V9/qaREQwj5grMaCtTZP3lVffFC tsfk0jEKsxVIuzModrfwrmBig/GiljRDxhvEFMGvPrA7CwFl0SnvjLpNn1bq0ELy M2BQc5fbP7vjPxQ0PkU8IzchXb9bprtGL/mCyhrTXBI0PmsLaSPKYTfCIPzyiBSV ilWmhbxJ0CNqC7H+xxTex8BczuaPuHwhh6YQ3cR2EibF+EDGBs/d0ovJ/mcAYMtT RoTqgH9DsubzvljUMaGFp71w30L8JvQNPA4Mw/977V5DukURlKc= -----END CERTIFICATE-----Generated at Thu Apr 17 08:53:44 2025 by rpki-client