$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft File: 1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json) Hash identifier: s4YXLBlPZAF3msMGLfE+3BSA+XtfSZ6h69b9h9s6538= Subject key identifier: 24:C8:94:B5:B5:14:35:46:63:5A:4F:26:2A:87:A3:35:4C:B0:15:1A Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D Certificate issuer: /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Certificate serial: 7D2045C92BBBA886EA4F37FFFEB9E54D7C720464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft Manifest number: 04C0 Signing time: Fri 04 Apr 2025 17:41:59 +0000 Manifest this update: Fri 04 Apr 2025 17:36:59 +0000 Manifest next update: Tue 08 Apr 2025 04:03:59 +0000 Files and hashes: 1: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: uhFXD5HucnvLa577o/lzdkI4bHtpnmfQ2EHjnkZ6ZlU=) 2: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: Pq3N2mG7ask6ABZxtIvi5KBSzP2cDvxF96CKpdcwWS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:20:45:c9:2b:bb:a8:86:ea:4f:37:ff:fe:b9:e5:4d:7c:72:04:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Validity Not Before: Apr 4 17:36:59 2025 GMT Not After : Apr 8 04:03:59 2025 GMT Subject: CN=24C894B5B5143546635A4F262A87A3354CB0151A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:47:eb:56:7e:d1:a6:de:ff:0d:95:4a:bd: 40:14:71:0e:a9:34:25:00:1c:aa:9e:d6:1e:b9:37: cb:0e:87:30:ed:4b:3a:8c:d1:81:ed:f4:cc:85:8e: 9f:eb:d8:df:37:bf:67:cb:a9:d8:a7:dd:8e:e4:ff: 17:88:e8:35:10:61:f4:76:43:f5:1c:73:9d:91:e0: 03:f6:32:3c:87:65:00:5b:f1:0f:d9:10:d3:3e:34: 39:78:fb:29:90:c4:e5:13:cc:0c:95:15:7a:da:61: da:dd:7c:25:03:e8:83:b1:bc:0a:76:b5:d4:ed:f6: 07:2a:2a:87:fa:d3:c5:ec:6a:82:cc:bf:2d:8c:a2: 6a:dd:4c:7a:40:66:d9:57:94:e8:63:2c:f9:71:ce: ea:93:f5:18:42:1b:11:ec:85:72:bb:04:78:39:ee: 9c:76:66:19:12:b6:b8:d4:11:c5:d0:bf:10:b2:c5: 4a:77:3d:6b:dd:4a:b0:1a:0b:63:52:a3:94:7a:8a: ef:5c:c4:d6:9d:49:6a:59:13:b4:7d:2e:76:54:76: d0:8d:53:30:7d:9d:d5:51:6f:24:0a:01:30:a4:61: df:f1:99:19:57:63:d8:3d:66:2e:fb:6d:dc:fe:36: c7:9f:c1:63:1c:2a:db:15:eb:08:88:3a:eb:c9:fc: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:94:B5:B5:14:35:46:63:5A:4F:26:2A:87:A3:35:4C:B0:15:1A X509v3 Authority Key Identifier: keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:87:54:0a:2d:ec:98:82:55:26:8e:46:6f:60:70:45:f1:dd: 90:39:15:21:23:dc:c7:85:8b:94:75:40:be:25:fd:fc:7c:c5: 3f:69:6c:88:96:9f:b9:68:a6:33:bc:8e:27:d0:56:bb:7b:41: 84:78:c6:6a:bb:30:5b:9f:2b:e4:74:3e:00:d1:77:6b:fa:a3: 02:78:08:08:83:6f:b5:b1:3f:e7:11:a0:26:88:ad:a4:f0:42: b7:13:0a:68:72:64:e9:dc:59:9a:95:7d:ea:c8:87:fc:af:6f: b3:5d:8e:df:f3:85:c9:54:3b:d8:0a:6d:95:b6:e9:95:85:f4: d9:ee:0e:38:a2:71:26:ba:4e:81:9f:a9:24:bc:ac:3a:db:97: ce:b1:28:d9:fd:9f:28:70:f9:94:1c:a2:7a:9e:70:55:45:81: 80:23:ec:03:37:1b:8a:d8:41:4c:49:bb:3d:26:a9:f8:51:19: 67:c2:b0:21:7d:47:b9:3f:e6:ee:a5:49:7d:e6:2f:e6:01:2b: d9:0e:7e:6a:4d:b3:c0:78:ed:26:4a:25:41:a4:c5:bd:a1:55: 32:86:65:bc:39:46:52:10:0f:1d:fb:d2:f4:2e:99:3f:54:c6: 4e:8a:93:fb:67:b8:8e:75:85:53:3a:42:e1:88:39:e7:a5:bb: 94:6d:b3:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSBFySu7qIbqTzf//rnlTXxyBGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1 MDQyNDQ2RDAeFw0yNTA0MDQxNzM2NTlaFw0yNTA0MDgwNDAzNTlaMDMxMTAvBgNV BAMTKDI0Qzg5NEI1QjUxNDM1NDY2MzVBNEYyNjJBODdBMzM1NENCMDE1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhKUfrVn7Rpt7/DZVKvUAUcQ6p NCUAHKqe1h65N8sOhzDtSzqM0YHt9MyFjp/r2N83v2fLqdin3Y7k/xeI6DUQYfR2 Q/Ucc52R4AP2MjyHZQBb8Q/ZENM+NDl4+ymQxOUTzAyVFXraYdrdfCUD6IOxvAp2 tdTt9gcqKof608XsaoLMvy2MomrdTHpAZtlXlOhjLPlxzuqT9RhCGxHshXK7BHg5 7px2ZhkStrjUEcXQvxCyxUp3PWvdSrAaC2NSo5R6iu9cxNadSWpZE7R9LnZUdtCN UzB9ndVRbyQKATCkYd/xmRlXY9g9Zi77bdz+NsefwWMcKtsV6wiIOuvJ/KblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMiUtbUUNUZjWk8mKoejNUywFRowHwYDVR0j BBgwFoAUGg/EaVRm8ANP3HvTXZe/k1BCRG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODdhZWU3Zi1kNjViLTQ2ZWMtYTc4MS03Y2JlZjVhYWViODAvMC8xQTBGQzQ2OTU0 NjZGMDAzNEZEQzdCRDM1RDk3QkY5MzUwNDI0NDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1MDQy NDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3YWVlN2YtZDY1Yi00NmVjLWE3 ODEtN2NiZWY1YWFlYjgwLzAvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JG OTM1MDQyNDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECHVAot7JiCVSaORm9gcEXx3ZA5FSEj3MeF i5R1QL4l/fx8xT9pbIiWn7lopjO8jifQVrt7QYR4xmq7MFufK+R0PgDRd2v6owJ4 CAiDb7WxP+cRoCaIraTwQrcTCmhyZOncWZqVferIh/yvb7Ndjt/zhclUO9gKbZW2 6ZWF9NnuDjiicSa6ToGfqSS8rDrbl86xKNn9nyhw+ZQconqecFVFgYAj7AM3G4rY QUxJuz0mqfhRGWfCsCF9R7k/5u6lSX3mL+YBK9kOfmpNs8B47SZKJUGkxb2hVTKG Zbw5RlIQDx370vQumT9Uxk6Kk/tnuI51hVM6QuGIOeelu5Rts5U= -----END CERTIFICATE-----Generated at Sat Apr 5 19:00:37 2025 by rpki-client