$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: rDaE34cVqpOY0vQs2VXI8D9V/jKSMH5ycEc7p13/NC0= Subject key identifier: F2:F0:9B:B0:DE:E3:FC:A3:5D:F5:52:6A:63:A5:64:B3:C2:DE:44:7B Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 03DFCBAC578F159B92197835C436C14C4E1A0AD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 019E Signing time: Sun 01 Jun 2025 23:21:38 +0000 Manifest this update: Sun 01 Jun 2025 23:16:37 +0000 Manifest next update: Thu 05 Jun 2025 09:44:37 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: SRSTMkKV6s083cJEuaVz8O09qZmbcvYzwoC7gh5u2ps=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:df:cb:ac:57:8f:15:9b:92:19:78:35:c4:36:c1:4c:4e:1a:0a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Jun 1 23:16:37 2025 GMT Not After : Jun 5 09:44:37 2025 GMT Subject: CN=F2F09BB0DEE3FCA35DF5526A63A564B3C2DE447B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:d9:25:48:1c:ff:14:41:df:26:76:7e:6c: c7:e1:35:5f:52:2c:66:12:86:b6:6f:42:d3:d2:15: f9:32:ff:17:06:74:ac:36:f3:e5:68:c5:ab:86:a3: 0a:14:a3:5c:46:de:db:c7:94:35:cc:e9:81:99:19: 18:56:a9:f7:ba:4e:9b:47:14:04:ff:c6:90:08:37: 02:28:59:5c:7b:ba:d5:57:f5:b4:dc:75:8e:3d:bc: 67:60:9c:dc:76:9e:50:ef:75:0a:ec:1f:85:1e:d2: 2f:1b:a7:8e:e6:81:23:4c:96:d4:60:8c:66:52:6c: 50:41:06:ca:87:61:7e:76:9d:45:62:b1:63:93:60: 03:98:29:f8:4c:25:15:bf:9d:a8:68:6a:e2:40:d4: 8c:dd:68:24:6c:f2:2c:37:23:ec:e0:4e:7a:27:7e: 93:c1:72:20:fd:6d:49:91:b9:00:54:b0:0c:68:37: a7:63:cb:00:4b:5e:18:a8:10:7f:ac:f6:7e:d2:85: 6c:75:10:67:89:5d:d5:9a:39:a6:01:d1:f7:d2:60: d1:f6:a5:36:9d:14:92:b6:99:96:e6:68:f4:c0:80: b8:af:9a:01:d6:a0:44:81:dc:c8:c5:49:95:76:04: 3b:e2:86:a5:b4:57:37:ce:cc:bd:ae:bb:67:d7:90: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F0:9B:B0:DE:E3:FC:A3:5D:F5:52:6A:63:A5:64:B3:C2:DE:44:7B X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:09:8a:52:ca:d9:94:e2:a6:f4:97:64:fa:a7:73:bb:b1:bf: 39:cc:ca:2a:a9:46:65:7b:54:9e:95:12:6d:3b:0f:12:71:8c: ec:be:3d:56:05:51:02:5e:ac:20:19:85:a2:72:58:ec:69:a3: 70:88:51:ca:57:d1:4f:e6:b5:29:57:a2:1d:c0:8f:da:e0:75: 22:9f:19:40:6c:56:87:18:0b:7f:27:03:e3:41:b7:5e:8f:0b: bc:a6:78:ad:ef:7d:29:ff:2a:36:3f:1f:16:28:04:44:cb:0e: 8b:ce:49:39:c9:87:ca:90:ad:b3:22:15:a2:ca:1c:d3:4e:0a: bf:69:71:c6:fb:6c:65:4e:d2:ea:40:a1:43:25:db:d6:48:ea: f5:36:41:4e:10:42:82:d6:6c:c7:d6:3c:a7:d6:db:59:d3:da: bc:39:42:06:23:74:0c:b7:a5:ec:90:a9:33:07:0e:d9:2b:50: 8c:2a:ae:5d:a4:e4:fa:14:32:43:ea:4a:bb:98:5d:fa:1f:a3: 84:f1:86:f3:8b:71:c5:03:9f:13:a0:ea:c8:68:fd:45:a4:c5: 27:d4:2d:2d:50:e0:84:54:3c:98:61:20:fe:23:a5:a2:b0:20: e6:3a:af:ac:19:7a:00:bf:ca:0d:29:d6:8e:6e:cf:2b:7e:58: fb:df:b3:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9/LrFePFZuSGXg1xDbBTE4aCtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA2MDEyMzE2MzdaFw0yNTA2MDUwOTQ0MzdaMDMxMTAvBgNV BAMTKEYyRjA5QkIwREVFM0ZDQTM1REY1NTI2QTYzQTU2NEIzQzJERTQ0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrNklSBz/FEHfJnZ+bMfhNV9S LGYShrZvQtPSFfky/xcGdKw28+VoxauGowoUo1xG3tvHlDXM6YGZGRhWqfe6TptH FAT/xpAINwIoWVx7utVX9bTcdY49vGdgnNx2nlDvdQrsH4Ue0i8bp47mgSNMltRg jGZSbFBBBsqHYX52nUVisWOTYAOYKfhMJRW/nahoauJA1IzdaCRs8iw3I+zgTnon fpPBciD9bUmRuQBUsAxoN6djywBLXhioEH+s9n7ShWx1EGeJXdWaOaYB0ffSYNH2 pTadFJK2mZbmaPTAgLivmgHWoESB3MjFSZV2BDvihqW0VzfOzL2uu2fXkFNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8vCbsN7j/KNd9VJqY6Vks8LeRHswHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcJilLK2ZTipvSXZPqnc7uxvznMyiqpRmV7 VJ6VEm07DxJxjOy+PVYFUQJerCAZhaJyWOxpo3CIUcpX0U/mtSlXoh3Aj9rgdSKf GUBsVocYC38nA+NBt16PC7ymeK3vfSn/KjY/HxYoBETLDovOSTnJh8qQrbMiFaLK HNNOCr9pccb7bGVO0upAoUMl29ZI6vU2QU4QQoLWbMfWPKfW21nT2rw5QgYjdAy3 peyQqTMHDtkrUIwqrl2k5PoUMkPqSruYXfofo4TxhvOLccUDnxOg6sho/UWkxSfU LS1Q4IRUPJhhIP4jpaKwIOY6r6wZegC/yg0p1o5uzyt+WPvfswg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:50 2025 by rpki-client