$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: xiePunihiIWpmppb12us5U385955+bFsX42BSj2BVRs= Subject key identifier: FE:F3:E3:F4:D9:E6:35:0F:38:03:49:CC:69:C0:E1:FE:84:11:FC:E0 Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 158E32648A9605CF11EC62E97CE3C304B9E68DE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: 0180 Signing time: Mon 02 Jun 2025 14:10:05 +0000 Manifest this update: Mon 02 Jun 2025 14:05:05 +0000 Manifest next update: Thu 05 Jun 2025 22:24:05 +0000 Files and hashes: 1: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: CSQkGTmQt+s2JfwWnvim+F5o3slRbbgf9XyF9r9GepU=) 2: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 9CQ6JFUhExdNBAYYYWcUpyzc1PDrxOfBKcNbdLlWf6U=) 3: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: hHpqodeyU8amc0Yg+Vz1Yb1kEzG9g5qGdXKGONkFhDE=) 4: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: K3N55cBe6+W2+UEDhGR/EreK/NsWeZinIyNl1uxEyoA=) 5: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: 8i3x4gBaZ9q2FeKL77QwQugTPoFrVoqppzokcKf7V9U=) 6: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: uzdxCFJ60y1EqFPWBfLgLUEnJ7LWJrfPQeMyJb9m5FM=) 7: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: G7J7jPugiANb32OeVXsIuny26WiHCHI/ojzxDb3WvVI=) 8: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: FqS1mlGjIL0BP5gK9enlmVRuaz2y9/mIcmX+UTD+qKA=) 9: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: IJ/QrpohwAAMEHf60VyOYZyE2rLKrvAARpcXl8wmM9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 22:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8e:32:64:8a:96:05:cf:11:ec:62:e9:7c:e3:c3:04:b9:e6:8d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Jun 2 14:05:05 2025 GMT Not After : Jun 5 22:24:05 2025 GMT Subject: CN=FEF3E3F4D9E6350F380349CC69C0E1FE8411FCE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:15:bd:51:5e:5c:27:26:1e:99:cb:29:2f: 9b:72:b6:59:a6:88:6d:f1:ec:df:6a:01:26:2f:66: f7:02:15:68:19:86:aa:5f:21:23:77:ac:c8:ec:a3: a0:1c:6b:7e:f0:47:ae:bd:b3:44:1f:4c:67:e9:57: c0:1a:29:5c:8e:10:a3:c6:03:6e:99:32:ac:f6:e4: fa:7b:67:9b:06:da:78:f6:0c:e4:ca:90:43:70:2b: 82:0b:ba:50:d8:d3:df:c3:78:cf:f6:55:5e:3e:2c: 9a:05:42:f6:de:a7:80:a6:f1:33:fd:06:34:cd:b9: a4:a3:fa:7e:f5:37:cb:af:77:a8:a9:b7:b9:5f:cc: 63:9f:77:4d:ae:6b:f2:f0:88:cc:3e:93:ef:c4:a9: 67:53:e7:92:d6:66:8e:70:2b:c1:09:63:6a:ea:da: bf:1f:ba:08:c6:38:90:66:b3:f0:e4:b6:f8:c1:a6: ee:e4:0f:c5:ba:1e:29:8a:0b:87:af:79:65:5c:27: e3:50:e0:30:23:54:55:52:79:1a:f5:a6:f5:5d:bb: e5:1d:db:60:0f:22:f8:c9:6f:77:65:c7:63:75:14: 4d:28:97:fd:7a:63:2a:98:a7:d6:99:e4:55:7d:63: 8a:e0:45:21:f1:78:41:75:4d:60:99:52:c9:4a:b4: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F3:E3:F4:D9:E6:35:0F:38:03:49:CC:69:C0:E1:FE:84:11:FC:E0 X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fd:d0:64:b2:22:94:32:b2:66:78:e4:8a:0a:1c:6e:64:42: ae:84:fd:b7:d6:3f:0c:6f:5a:bc:1c:1b:ab:9b:7e:c3:b8:95: e4:cc:04:55:cc:b1:3c:17:a4:d2:d4:e9:64:0f:23:bf:14:7d: c4:63:6c:83:7d:78:c9:78:6b:07:c2:4f:7e:13:5c:51:f1:ec: 12:fb:fd:3c:de:5b:65:ff:1b:64:ca:cd:e9:f6:ad:b4:a8:b4: 93:38:41:fd:c1:bc:87:ed:ed:da:30:aa:9a:5b:b2:9a:6f:8d: 2c:3f:5d:4f:c8:30:74:28:1a:c2:4f:4a:a6:80:30:1e:dc:5a: 4a:1e:ac:77:6a:b3:a9:ed:fc:23:f5:54:d7:5c:79:29:fa:0a: 2a:e1:e4:c0:be:cb:a4:11:ae:d3:64:7a:e3:dc:36:a9:d0:37: 05:07:b2:23:9b:0d:5a:44:3f:ea:a9:1c:91:16:ab:4b:8c:25: 57:b0:b3:02:40:87:a6:f5:64:02:16:02:dd:e5:8f:58:f8:42: 45:7f:72:ee:92:d9:94:30:a2:06:3e:1f:c4:b0:3a:7b:fd:21: 49:5b:d4:f3:21:4b:9e:00:ca:ca:8a:1f:6e:72:53:c0:7c:e9: f7:ce:f1:80:4d:05:67:46:5a:6a:64:e2:e2:19:ad:3a:5c:42: 67:42:35:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFY4yZIqWBc8R7GLpfOPDBLnmjeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNTA2MDIxNDA1MDVaFw0yNTA2MDUyMjI0MDVaMDMxMTAvBgNV BAMTKEZFRjNFM0Y0RDlFNjM1MEYzODAzNDlDQzY5QzBFMUZFODQxMUZDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwxW9UV5cJyYemcspL5tytlmm iG3x7N9qASYvZvcCFWgZhqpfISN3rMjso6Aca37wR669s0QfTGfpV8AaKVyOEKPG A26ZMqz25Pp7Z5sG2nj2DOTKkENwK4ILulDY09/DeM/2VV4+LJoFQvbep4Cm8TP9 BjTNuaSj+n71N8uvd6ipt7lfzGOfd02ua/LwiMw+k+/EqWdT55LWZo5wK8EJY2rq 2r8fugjGOJBms/DktvjBpu7kD8W6HimKC4eveWVcJ+NQ4DAjVFVSeRr1pvVdu+Ud 22APIvjJb3dlx2N1FE0ol/16YyqYp9aZ5FV9Y4rgRSHxeEF1TWCZUslKtC8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/vPj9NnmNQ84A0nMacDh/oQR/OAwHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT90GSyIpQysmZ45IoKHG5kQq6E/bfWPwxv WrwcG6ubfsO4leTMBFXMsTwXpNLU6WQPI78UfcRjbIN9eMl4awfCT34TXFHx7BL7 /TzeW2X/G2TKzen2rbSotJM4Qf3BvIft7dowqppbsppvjSw/XU/IMHQoGsJPSqaA MB7cWkoerHdqs6nt/CP1VNdceSn6Cirh5MC+y6QRrtNkeuPcNqnQNwUHsiObDVpE P+qpHJEWq0uMJVewswJAh6b1ZAIWAt3lj1j4QkV/cu6S2ZQwogY+H8SwOnv9IUlb 1PMhS54AysqKH25yU8B86ffO8YBNBWdGWmpk4uIZrTpcQmdCNQU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:08:36 2025 by rpki-client