$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: iLZVBbTV28foooYCmE8zLXpy7Us6M6kvI2e0004IFgU= Subject key identifier: E9:C4:B3:29:0F:B4:D1:03:82:97:C7:7A:6F:29:34:7D:37:D1:C4:2F Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 4E9FAA9ADE2CE91F4B61C1C47C315DEF31ED2988 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 01FF Signing time: Tue 03 Jun 2025 13:53:56 +0000 Manifest this update: Tue 03 Jun 2025 13:48:56 +0000 Manifest next update: Fri 06 Jun 2025 20:11:56 +0000 Files and hashes: 1: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 2: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 3: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: 07sGVEpjwbChz2r8ukQb29rrCB/HNQQDTR/6Mwpx+Hg=) 4: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 5: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 6: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9f:aa:9a:de:2c:e9:1f:4b:61:c1:c4:7c:31:5d:ef:31:ed:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Jun 3 13:48:56 2025 GMT Not After : Jun 6 20:11:56 2025 GMT Subject: CN=E9C4B3290FB4D1038297C77A6F29347D37D1C42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:1e:f1:ce:05:f1:57:02:d9:75:d0:4a:a9: c6:bd:14:39:70:4f:4e:5d:5f:c3:d3:97:47:b6:72: 05:c3:c4:33:59:b7:53:1b:56:13:09:50:55:7a:ab: e4:5e:fa:ed:25:0f:f3:5f:89:e4:97:f7:82:d2:6f: cb:14:f5:87:a7:75:fa:2c:0d:d6:44:28:e1:ac:0a: 4c:5b:c4:51:8e:f3:8e:a3:f8:bd:6f:21:52:7e:69: 96:57:e1:c4:92:82:2e:26:71:88:08:79:29:cf:d8: 5f:5d:ae:6a:c7:34:3e:a1:d9:53:dc:1a:8d:90:43: ed:53:80:2d:09:03:52:01:ac:c5:c9:13:46:f3:f6: c8:e0:a6:7d:ff:a8:f9:00:15:5c:cd:ee:26:f0:10: 55:86:4b:cb:ac:7c:97:9a:36:d4:c2:81:6b:82:57: a7:4b:98:e8:11:16:c0:ce:2c:5e:44:73:e7:44:08: bd:ab:7b:d0:46:11:f3:03:db:8d:b4:e5:63:fa:af: 6f:48:31:85:6a:ad:62:c3:9b:51:80:cf:5e:0c:9c: 6d:1d:d1:b4:6c:d6:10:e5:dc:91:59:c9:00:13:5e: 79:a8:68:17:69:d1:53:18:69:23:6b:54:92:db:3d: 02:39:30:01:24:fe:fa:e7:14:5a:99:68:7c:4b:68: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C4:B3:29:0F:B4:D1:03:82:97:C7:7A:6F:29:34:7D:37:D1:C4:2F X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cc:e0:f1:0c:5e:db:a9:2b:ac:45:e5:87:fe:89:2a:21:e5: 9c:9d:c1:25:66:78:a3:5e:a5:f3:9d:2e:33:e3:eb:bb:45:6c: 38:86:80:4f:94:6c:ea:0a:d6:f7:c6:64:97:90:15:71:6c:c8: e7:54:a4:42:b7:50:7e:68:b3:ee:27:7f:4d:c0:8f:17:73:9a: 8b:90:0d:cb:d5:99:90:4f:a5:c2:57:f3:e5:7d:0c:60:09:d6: e6:c4:01:20:e6:e3:f2:24:b3:ea:be:e1:90:86:ec:25:a1:b0: 78:1a:a3:af:fa:d8:ce:8f:b2:91:f9:c4:bb:7f:b3:27:04:8e: fc:29:3f:00:af:c2:21:fd:1e:cb:2c:9c:55:6c:98:55:ba:84: ec:5a:da:1c:e9:ff:f9:09:04:e9:ca:f9:df:dc:40:5d:75:3b: 01:81:46:41:cf:31:16:01:9b:77:23:d3:ab:01:99:61:2f:db: 22:bc:86:c9:27:97:0d:e6:8b:27:3c:d2:32:04:3e:04:50:16: 48:70:7b:be:55:42:06:ce:88:02:f2:3a:4e:55:e4:2d:89:4b: dc:2e:a9:9f:c3:55:01:7d:e9:35:21:c1:35:fb:4d:8a:92:79: 92:da:9b:3d:94:22:51:2d:9f:ce:93:3c:be:9d:60:e1:b7:b7: cb:7e:ee:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTp+qmt4s6R9LYcHEfDFd7zHtKYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTA2MDMxMzQ4NTZaFw0yNTA2MDYyMDExNTZaMDMxMTAvBgNV BAMTKEU5QzRCMzI5MEZCNEQxMDM4Mjk3Qzc3QTZGMjkzNDdEMzdEMUM0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0x7xzgXxVwLZddBKqca9FDlw T05dX8PTl0e2cgXDxDNZt1MbVhMJUFV6q+Re+u0lD/NfieSX94LSb8sU9Yendfos DdZEKOGsCkxbxFGO846j+L1vIVJ+aZZX4cSSgi4mcYgIeSnP2F9drmrHND6h2VPc Go2QQ+1TgC0JA1IBrMXJE0bz9sjgpn3/qPkAFVzN7ibwEFWGS8usfJeaNtTCgWuC V6dLmOgRFsDOLF5Ec+dECL2re9BGEfMD24205WP6r29IMYVqrWLDm1GAz14MnG0d 0bRs1hDl3JFZyQATXnmoaBdp0VMYaSNrVJLbPQI5MAEk/vrnFFqZaHxLaNwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6cSzKQ+00QOCl8d6byk0fTfRxC8wHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXM4PEMXtupK6xF5Yf+iSoh5ZydwSVmeKNe pfOdLjPj67tFbDiGgE+UbOoK1vfGZJeQFXFsyOdUpEK3UH5os+4nf03AjxdzmouQ DcvVmZBPpcJX8+V9DGAJ1ubEASDm4/Iks+q+4ZCG7CWhsHgao6/62M6PspH5xLt/ sycEjvwpPwCvwiH9HsssnFVsmFW6hOxa2hzp//kJBOnK+d/cQF11OwGBRkHPMRYB m3cj06sBmWEv2yK8hsknlw3miyc80jIEPgRQFkhwe75VQgbOiALyOk5V5C2JS9wu qZ/DVQF96TUhwTX7TYqSeZLamz2UIlEtn86TPL6dYOG3t8t+7m0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:31 2025 by rpki-client