$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: 3NrjrmbWYKwnFd/C+TR3Avfm1q3uNDWx8A/DLC4w9L8= Subject key identifier: F0:E6:52:49:F6:E6:83:3C:02:00:D3:21:79:54:A0:21:D2:D4:9F:DE Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 2E44C4DE6C30D61A86BCE4254E8098494C100A83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: 0167 Signing time: Sun 06 Apr 2025 09:40:04 +0000 Manifest this update: Sun 06 Apr 2025 09:35:04 +0000 Manifest next update: Wed 09 Apr 2025 19:35:04 +0000 Files and hashes: 1: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: 3Qrap3StS2fkIQ7miq9Q3K03ePDQD+lQCd1XijA6xh8=) 2: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: CSQkGTmQt+s2JfwWnvim+F5o3slRbbgf9XyF9r9GepU=) 3: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: hHpqodeyU8amc0Yg+Vz1Yb1kEzG9g5qGdXKGONkFhDE=) 4: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: 8i3x4gBaZ9q2FeKL77QwQugTPoFrVoqppzokcKf7V9U=) 5: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: FqS1mlGjIL0BP5gK9enlmVRuaz2y9/mIcmX+UTD+qKA=) 6: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 9CQ6JFUhExdNBAYYYWcUpyzc1PDrxOfBKcNbdLlWf6U=) 7: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: uzdxCFJ60y1EqFPWBfLgLUEnJ7LWJrfPQeMyJb9m5FM=) 8: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: K3N55cBe6+W2+UEDhGR/EreK/NsWeZinIyNl1uxEyoA=) 9: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: IJ/QrpohwAAMEHf60VyOYZyE2rLKrvAARpcXl8wmM9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:44:c4:de:6c:30:d6:1a:86:bc:e4:25:4e:80:98:49:4c:10:0a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Apr 6 09:35:04 2025 GMT Not After : Apr 9 19:35:04 2025 GMT Subject: CN=F0E65249F6E6833C0200D3217954A021D2D49FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:b4:58:33:c1:cf:db:e2:4e:e3:46:d9:05: 63:33:8a:1b:6a:6b:e3:ea:7e:70:1e:ca:43:14:73: 58:81:45:69:50:25:d5:c7:a9:2d:d7:89:93:36:d4: df:9a:c3:70:63:0e:ea:8a:79:98:ea:d5:9f:71:a7: 50:d4:50:c7:0f:ac:8e:ec:7b:fe:d5:b1:15:52:73: 5a:ca:77:ad:c8:c7:30:de:0e:a4:1f:66:23:05:ea: 29:28:50:bb:53:01:70:ca:37:50:fe:22:4f:4f:a3: 25:2a:23:44:c7:70:00:1a:0e:87:1c:4b:81:36:cf: 04:bc:9f:9f:3d:19:4c:ad:6d:c9:34:01:81:43:1a: 18:92:4e:21:00:de:20:40:b5:34:ee:bd:23:a0:a9: 86:7f:5b:cb:0c:f3:3d:5b:6c:ef:6b:7b:cf:62:e5: 7a:46:5b:05:7f:96:e9:3d:9d:d1:42:cd:f0:73:54: 06:9e:d3:cb:96:b2:14:6e:e6:d3:82:76:83:1a:9b: d9:41:2b:d2:f1:c9:7a:26:28:43:b3:9e:4c:a2:68: 29:56:df:36:25:2a:bb:81:a6:c8:be:db:c3:f9:7e: a8:ea:0d:cd:60:06:1a:86:30:99:ba:1f:80:ea:98: 12:ef:7b:71:94:83:4d:b3:55:54:9b:98:de:1a:99: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E6:52:49:F6:E6:83:3C:02:00:D3:21:79:54:A0:21:D2:D4:9F:DE X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bb:78:a8:06:e2:b3:ad:ad:d8:ea:e2:85:7e:2d:bd:55:6e: ca:92:ba:af:d2:58:dc:4b:a9:e2:ed:4f:f4:74:6c:4d:76:01: 7d:b2:7d:7e:45:33:0b:0d:8d:37:47:6a:61:85:e6:c2:00:18: 6a:f8:a9:14:ee:18:86:3d:91:7e:1b:74:14:7c:0e:28:0d:01: b6:50:64:1a:fa:ea:e2:e9:72:3f:6c:01:fe:0a:6f:45:20:3e: 00:2c:f8:d7:57:59:67:52:67:a1:52:52:7e:8c:69:b2:f7:cd: 48:b1:96:6e:77:4e:22:2f:04:de:de:30:5a:21:a5:c7:7a:20: 8d:bd:9c:9a:a1:e6:02:4d:3b:82:3d:ab:9e:f9:b0:21:4a:63: a4:41:8b:58:23:71:60:05:d1:db:58:09:35:70:65:44:98:4c: 53:41:f8:c4:ab:25:68:a7:12:a9:f6:cf:9c:18:b4:78:46:08: 5f:c0:63:dc:40:ee:fc:10:e0:24:93:8c:fe:e5:22:79:ce:fb: 18:7e:f3:b4:80:63:e4:a8:f3:44:88:ca:70:ef:e1:32:a5:a1: 53:2e:d9:29:1f:15:9d:b9:b8:d0:7b:15:a0:f4:3e:7a:92:ca: ff:24:b4:30:40:1b:94:9d:46:cb:6d:f5:86:6c:85:03:79:3b: 17:4e:72:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkTE3mww1hqGvOQlToCYSUwQCoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNTA0MDYwOTM1MDRaFw0yNTA0MDkxOTM1MDRaMDMxMTAvBgNV BAMTKEYwRTY1MjQ5RjZFNjgzM0MwMjAwRDMyMTc5NTRBMDIxRDJENDlGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVrRYM8HP2+JO40bZBWMzihtq a+PqfnAeykMUc1iBRWlQJdXHqS3XiZM21N+aw3BjDuqKeZjq1Z9xp1DUUMcPrI7s e/7VsRVSc1rKd63IxzDeDqQfZiMF6ikoULtTAXDKN1D+Ik9PoyUqI0THcAAaDocc S4E2zwS8n589GUytbck0AYFDGhiSTiEA3iBAtTTuvSOgqYZ/W8sM8z1bbO9re89i 5XpGWwV/luk9ndFCzfBzVAae08uWshRu5tOCdoMam9lBK9LxyXomKEOznkyiaClW 3zYlKruBpsi+28P5fqjqDc1gBhqGMJm6H4DqmBLve3GUg02zVVSbmN4amRgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OZSSfbmgzwCANMheVSgIdLUn94wHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA67eKgG4rOtrdjq4oV+Lb1VbsqSuq/SWNxL qeLtT/R0bE12AX2yfX5FMwsNjTdHamGF5sIAGGr4qRTuGIY9kX4bdBR8DigNAbZQ ZBr66uLpcj9sAf4Kb0UgPgAs+NdXWWdSZ6FSUn6MabL3zUixlm53TiIvBN7eMFoh pcd6II29nJqh5gJNO4I9q575sCFKY6RBi1gjcWAF0dtYCTVwZUSYTFNB+MSrJWin Eqn2z5wYtHhGCF/AY9xA7vwQ4CSTjP7lInnO+xh+87SAY+So80SIynDv4TKloVMu 2SkfFZ25uNB7FaD0PnqSyv8ktDBAG5SdRstt9YZshQN5OxdOcsI= -----END CERTIFICATE-----Generated at Tue Apr 8 12:09:46 2025 by rpki-client