$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft File: 1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json) Hash identifier: Y7jHXwZLaq0s78YV89RM70SX5P+ALwSL5F3hcD+dS+E= Subject key identifier: 4D:B1:5B:BB:8A:E2:60:3A:10:70:C7:E0:28:3D:6B:61:85:38:24:81 Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 7328DD278566A11168C0DF46A8E4A539AEA35590 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft Manifest number: 01D7 Signing time: Sun 01 Jun 2025 17:21:31 +0000 Manifest this update: Sun 01 Jun 2025 17:16:31 +0000 Manifest next update: Wed 04 Jun 2025 22:51:31 +0000 Files and hashes: 1: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: ykRWiMSaAsP4Z39Whyu3kvlehUT+9RaQnqBPMyF4FR0=) 2: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: AS7ErBWYOh3ltpqaacXCmV2CVPom+cE/4rFVdqtAK+c=) 3: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: 83g1exgFqaTQKU38X1D6x0BtWT5D2KATwMghhQSp0Hg=) 4: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: EFHYC7XhG7MQGG+p71C9PeqM87F/0AnjgXarEbD+y4E=) 5: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: ruQpmVZldCjNDyWAMPTDXneYwDRgNtHcaXVipKA0Xxg=) 6: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: sJCm2ee/pkpEqZ3CTb0n1XRlqsVPP4kAsamQV7lnrGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 22:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:28:dd:27:85:66:a1:11:68:c0:df:46:a8:e4:a5:39:ae:a3:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Jun 1 17:16:31 2025 GMT Not After : Jun 4 22:51:31 2025 GMT Subject: CN=4DB15BBB8AE2603A1070C7E0283D6B6185382481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:0f:cb:77:0a:5c:56:0e:06:d3:2a:76:3f: 02:54:77:a8:cb:fd:e0:84:4d:2e:ad:f4:87:6c:f4: fd:73:f9:cb:c7:2c:7e:d2:9e:db:df:61:63:64:95: aa:8e:05:c9:c7:05:b8:71:09:83:0a:9a:11:3e:93: e3:bf:25:0a:d8:ae:9c:ff:45:83:0f:77:d7:78:46: 32:60:20:bc:bd:33:d7:bf:9a:3c:cd:49:c8:64:a2: 74:39:3b:60:67:66:95:ea:d7:ec:9e:92:e1:3d:1e: 92:fa:3f:ca:ca:90:bf:ec:9c:aa:44:be:97:78:d1: 6e:e6:84:a9:76:b9:61:4b:23:ea:5f:13:96:7f:41: a4:91:a7:c9:c2:52:ab:df:af:cc:70:b0:5c:01:b8: ed:93:44:84:99:f9:bb:6b:77:52:78:5a:63:84:05: 22:f7:da:da:1c:47:b5:7c:5c:cc:5f:3e:ce:91:e5: 47:4a:34:e9:39:3b:10:d9:ed:e3:ac:f1:d9:6a:e6: df:19:c4:5f:7d:85:16:f2:6a:0b:e2:9c:6e:f6:c5: 66:76:c3:b9:74:48:17:25:e1:b6:b9:a1:8c:5d:25: a6:8a:81:62:a2:0c:0b:eb:ff:5c:b6:40:f5:6a:4a: df:53:36:22:7a:15:d9:93:b8:da:b6:64:b4:82:f6: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:5B:BB:8A:E2:60:3A:10:70:C7:E0:28:3D:6B:61:85:38:24:81 X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:71:7b:2a:71:ef:dc:af:ab:34:da:dc:99:fb:97:44:ac:3d: 95:22:3c:6b:13:5e:b9:f0:da:e8:de:c5:86:b3:f2:3d:7d:20: 86:56:16:cf:2c:11:0a:11:33:08:03:1e:0f:6b:ff:df:ba:2b: 5d:f2:36:09:2a:80:b2:f3:ff:97:20:7c:5a:b8:d0:8b:4f:81: 5d:e8:65:73:86:47:34:27:c3:a4:41:44:f1:97:3a:0f:cf:2a: b7:cc:ab:80:16:6e:ff:61:7b:f2:26:73:04:06:29:01:11:a7: 60:67:e5:9d:f4:b1:22:1d:15:c1:4d:4f:e0:13:fb:3a:76:43: a1:a0:8c:dc:2a:32:06:a7:b2:77:49:34:59:cc:29:23:f5:5e: 04:93:c5:fe:c7:a2:f8:04:88:b2:95:c7:87:97:f0:d7:64:cf: a1:d6:76:1b:05:f7:7c:6c:b9:0d:92:3a:47:a9:0a:79:29:52: c7:82:2d:04:f6:b6:86:82:35:27:80:ec:07:eb:d6:6c:cf:4f: aa:79:d7:82:3c:0a:aa:4b:6c:47:a1:a8:79:e5:e4:30:26:bd: fb:4a:37:ec:00:95:8f:d9:8b:04:68:30:e6:ea:41:44:cf:14: a1:a3:f8:42:bf:84:25:af:bb:35:3a:32:e7:75:6d:7a:c0:16: 0c:54:7a:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyjdJ4VmoRFowN9GqOSlOa6jVZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNTA2MDExNzE2MzFaFw0yNTA2MDQyMjUxMzFaMDMxMTAvBgNV BAMTKDREQjE1QkJCOEFFMjYwM0ExMDcwQzdFMDI4M0Q2QjYxODUzODI0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hg/LdwpcVg4G0yp2PwJUd6jL /eCETS6t9Ids9P1z+cvHLH7SntvfYWNklaqOBcnHBbhxCYMKmhE+k+O/JQrYrpz/ RYMPd9d4RjJgILy9M9e/mjzNSchkonQ5O2BnZpXq1+yekuE9HpL6P8rKkL/snKpE vpd40W7mhKl2uWFLI+pfE5Z/QaSRp8nCUqvfr8xwsFwBuO2TRISZ+btrd1J4WmOE BSL32tocR7V8XMxfPs6R5UdKNOk5OxDZ7eOs8dlq5t8ZxF99hRbyagvinG72xWZ2 w7l0SBcl4ba5oYxdJaaKgWKiDAvr/1y2QPVqSt9TNiJ6FdmTuNq2ZLSC9j0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTbFbu4riYDoQcMfgKD1rYYU4JIEwHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmMmMwMjUtMWQ3Ni00YTM2LTgx NjAtYTllOGFmZTM1NzlmLzAvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1 OUVBMDk3MzUzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBxeypx79yvqzTa3Jn7l0SsPZUiPGsTXrnw 2ujexYaz8j19IIZWFs8sEQoRMwgDHg9r/9+6K13yNgkqgLLz/5cgfFq40ItPgV3o ZXOGRzQnw6RBRPGXOg/PKrfMq4AWbv9he/ImcwQGKQERp2Bn5Z30sSIdFcFNT+AT +zp2Q6GgjNwqMgansndJNFnMKSP1XgSTxf7HovgEiLKVx4eX8Ndkz6HWdhsF93xs uQ2SOkepCnkpUseCLQT2toaCNSeA7Afr1mzPT6p514I8CqpLbEehqHnl5DAmvftK N+wAlY/ZiwRoMObqQUTPFKGj+EK/hCWvuzU6Mud1bXrAFgxUenM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:51 2025 by rpki-client