$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: oTPkCQ+ixe3wxo+hRPbOf+9v2w0UZ188hyKAl78m9nY= Subject key identifier: 0D:D3:78:F6:2B:09:72:E3:E8:0E:75:0E:D6:6E:44:2D:63:C1:05:46 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 301E35B4A11076A4A4881ED39BBB2C26F6564D46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 0184 Signing time: Fri 04 Apr 2025 07:41:38 +0000 Manifest this update: Fri 04 Apr 2025 07:36:38 +0000 Manifest next update: Mon 07 Apr 2025 18:32:38 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: WWmpsftKu+IKCgQebff6dyPXhi+PQY++LXbnHvJ8iG0=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1e:35:b4:a1:10:76:a4:a4:88:1e:d3:9b:bb:2c:26:f6:56:4d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Apr 4 07:36:38 2025 GMT Not After : Apr 7 18:32:38 2025 GMT Subject: CN=0DD378F62B0972E3E80E750ED66E442D63C10546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:ba:fa:54:38:e9:48:a2:42:fc:9b:62:e7: 3c:77:78:ac:da:ff:f1:d3:be:c2:b4:a7:c1:ab:1d: 0e:5b:6c:2a:3c:1d:71:82:a2:1f:b0:31:c2:60:f4: 69:1f:ae:62:56:38:57:8f:09:7a:ef:cf:24:33:5c: 32:83:1e:c4:08:96:ba:bb:63:5a:0f:f1:26:25:92: c5:78:61:f0:0b:a5:3a:61:5a:ac:7d:3f:0f:0d:66: 4d:f2:5c:d4:95:67:68:56:07:42:fb:3b:a4:a0:9c: d0:70:08:99:c9:c3:f4:b5:d7:39:a3:c4:c5:a2:d9: c1:5c:54:ef:28:e7:74:c6:60:e3:4c:1b:78:aa:2c: 57:7d:c0:ca:73:87:a9:59:be:02:25:24:9f:7d:cc: a8:98:01:b1:b4:98:90:eb:6c:4b:75:d6:27:34:7f: 80:08:56:0a:dc:99:44:d6:f2:7b:49:e3:b1:c9:7a: cf:68:94:e1:0e:1e:02:a8:87:78:26:62:e3:25:0e: 8a:88:7e:39:e1:98:fc:ff:30:77:eb:ee:d4:73:10: 41:6e:dc:fc:c9:56:3a:f9:73:3d:19:d1:10:b5:11: 9d:fc:bf:f3:f0:16:12:50:68:ef:49:f6:c1:1d:89: 69:ad:2a:83:63:a0:1d:16:8a:fe:39:6e:bc:0e:ee: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D3:78:F6:2B:09:72:E3:E8:0E:75:0E:D6:6E:44:2D:63:C1:05:46 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:ed:fb:ec:b3:7a:a5:8b:28:5f:b7:14:e6:1e:b9:26:2b: 1d:3d:2d:4c:52:b6:e9:7a:ee:88:38:25:67:f0:fd:38:cf:f5: 02:f9:4a:14:95:3e:97:a4:3e:97:b3:b1:28:b1:e8:e0:39:12: 35:9c:c9:dd:a1:07:82:f8:85:b3:6d:c0:4a:f7:b3:11:3b:a9: 42:cf:9a:2f:72:cd:1c:4e:52:89:32:da:2e:8e:fe:4c:71:57: 1e:f5:da:c9:b7:1f:f0:15:9a:74:93:60:20:c4:f2:f2:79:39: e9:b4:21:56:80:18:06:3f:74:ec:28:bb:21:a1:b1:02:4f:f2: ca:bf:f0:a0:ae:1a:a0:24:51:f3:79:ab:a4:a4:8d:38:3b:e8: a8:ec:0e:99:45:62:19:7c:e0:a6:95:6d:34:36:8c:4b:d3:d8: 99:28:f6:d9:6e:9d:fb:ea:d8:dd:8a:c5:f4:f9:a4:a8:d1:20: 3a:01:1d:29:8a:93:8c:00:c1:6a:ce:17:39:c4:4f:4f:57:7e: e9:66:83:8e:d0:7c:72:70:aa:50:28:4a:a4:ab:2f:05:95:df: 0f:75:3c:45:5e:ba:fb:02:d4:32:05:bb:b1:83:49:1a:5a:57: 87:c5:34:19:6f:16:3b:71:b7:6d:a6:cb:88:e7:02:56:62:7e: aa:5e:ff:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB41tKEQdqSkiB7Tm7ssJvZWTUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA0MDQwNzM2MzhaFw0yNTA0MDcxODMyMzhaMDMxMTAvBgNV BAMTKDBERDM3OEY2MkIwOTcyRTNFODBFNzUwRUQ2NkU0NDJENjNDMTA1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXrr6VDjpSKJC/Jti5zx3eKza //HTvsK0p8GrHQ5bbCo8HXGCoh+wMcJg9GkfrmJWOFePCXrvzyQzXDKDHsQIlrq7 Y1oP8SYlksV4YfALpTphWqx9Pw8NZk3yXNSVZ2hWB0L7O6SgnNBwCJnJw/S11zmj xMWi2cFcVO8o53TGYONMG3iqLFd9wMpzh6lZvgIlJJ99zKiYAbG0mJDrbEt11ic0 f4AIVgrcmUTW8ntJ47HJes9olOEOHgKoh3gmYuMlDoqIfjnhmPz/MHfr7tRzEEFu 3PzJVjr5cz0Z0RC1EZ38v/PwFhJQaO9J9sEdiWmtKoNjoB0Wiv45brwO7qbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDdN49isJcuPoDnUO1m5ELWPBBUYwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHc7fvss3qliyhftxTmHrkmKx09LUxStul6 7og4JWfw/TjP9QL5ShSVPpekPpezsSix6OA5EjWcyd2hB4L4hbNtwEr3sxE7qULP mi9yzRxOUoky2i6O/kxxVx712sm3H/AVmnSTYCDE8vJ5Oem0IVaAGAY/dOwouyGh sQJP8sq/8KCuGqAkUfN5q6SkjTg76KjsDplFYhl84KaVbTQ2jEvT2Jko9tlunfvq 2N2KxfT5pKjRIDoBHSmKk4wAwWrOFznET09Xfulmg47QfHJwqlAoSqSrLwWV3w91 PEVeuvsC1DIFu7GDSRpaV4fFNBlvFjtxt22my4jnAlZifqpe/yc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:45 2025 by rpki-client