$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: WVP53siGbmGcP3yol9WbWT41bw+Zl2idjJjKRdvUOes= Subject key identifier: CB:C8:9D:8E:85:43:02:C4:1B:9F:5E:4E:95:4C:43:02:8F:FD:20:77 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 66A6C38130720B0FDA7E1CB3EE9AE1E3F5D48CCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 01BD Signing time: Sat 05 Apr 2025 08:31:52 +0000 Manifest this update: Sat 05 Apr 2025 08:26:52 +0000 Manifest next update: Tue 08 Apr 2025 10:50:52 +0000 Files and hashes: 1: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: 4raA1mtLhdBUITLaC+vPuBcT9SkcvOJiya+7/ewFLAM=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: zA5IjZRkY2WHa3nFMdck02D7sCTeqCDhOEUWKNUvJd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 10:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a6:c3:81:30:72:0b:0f:da:7e:1c:b3:ee:9a:e1:e3:f5:d4:8c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Apr 5 08:26:52 2025 GMT Not After : Apr 8 10:50:52 2025 GMT Subject: CN=CBC89D8E854302C41B9F5E4E954C43028FFD2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:36:ba:c4:9b:03:a8:d1:57:0c:ac:73:12: 41:db:a5:c1:3c:bd:3b:1b:88:19:d7:97:bb:6e:71: 9f:d9:b1:f8:b0:9f:a5:74:f9:1f:99:ab:1c:75:c7: 03:63:a4:09:a5:f7:71:f1:df:ab:54:b2:54:ab:46: 8a:e2:bc:4c:a9:14:4e:57:b0:08:80:d7:05:6c:79: 04:6c:f7:d6:03:16:29:5a:85:8f:34:2b:f7:4c:ea: 48:bb:5f:79:5e:fe:65:93:3d:4c:0d:88:ae:6d:ac: ac:b3:4f:08:97:29:fa:f6:f5:bd:4d:a6:04:b7:89: a5:7c:fa:60:fd:03:47:95:f0:6d:b0:ec:c9:a4:9b: 4a:48:1a:b3:e1:1c:65:55:76:ec:51:50:75:de:a4: f3:cd:36:57:c7:06:cf:83:31:98:17:82:98:20:b4: 08:e1:b9:76:23:1e:81:fa:f4:85:8c:38:3f:b7:f1: fe:51:bf:43:6c:81:23:bd:0d:53:9e:1a:9b:a4:3f: f7:d3:c9:8a:de:bf:4b:60:9b:68:47:8b:c2:7a:af: 90:07:e1:73:94:22:b5:e2:a0:78:ab:58:0b:07:8e: 2f:82:cb:a3:0e:c2:7b:e7:d2:e0:08:64:46:5d:09: 5e:29:42:a7:b3:3f:14:42:43:45:f8:6d:50:0e:17: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:9D:8E:85:43:02:C4:1B:9F:5E:4E:95:4C:43:02:8F:FD:20:77 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:01:a3:f8:f6:d5:56:0a:d4:f9:9a:ad:dc:7a:58:30:bc:bf: a1:d2:ca:17:ea:c9:76:e9:d0:5a:0f:13:95:7c:a7:05:73:89: e6:e3:40:b9:3a:de:3d:dd:14:25:52:8b:6b:04:34:55:94:75: a0:5c:e9:56:50:4a:1b:66:39:f8:5b:a6:88:e0:45:f4:1d:50: 92:9b:4f:19:82:34:ca:8a:7b:2c:3e:e2:b2:ee:35:65:bc:6f: 4c:5b:6e:93:df:05:61:aa:c6:f2:95:67:60:0a:17:ce:43:f8: 54:09:da:34:f6:e2:03:d8:e3:50:5f:e5:66:34:d9:99:79:da: ed:74:3a:11:a9:ea:45:90:9e:19:c6:c0:f7:10:a1:6f:00:aa: db:2d:7a:2b:7b:b9:42:25:e0:d8:be:2d:9e:21:70:20:4e:c4: 07:0f:dc:fd:3f:77:b2:30:7c:77:8d:1a:4c:c8:39:58:23:fb: cc:48:f0:6e:f1:c6:43:7c:cd:63:31:be:97:1b:76:22:b8:0a: 0a:6b:e7:5b:52:d0:2b:70:94:8e:15:a7:0d:44:c8:95:82:b3: 6e:80:ed:43:17:05:ec:40:07:2c:da:33:07:c5:e9:bf:2f:f0: ab:09:1b:06:ec:38:41:26:24:1a:86:8f:e3:fa:cb:f4:e9:df: 2e:8a:61:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqbDgTByCw/afhyz7prh4/XUjM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTA0MDUwODI2NTJaFw0yNTA0MDgxMDUwNTJaMDMxMTAvBgNV BAMTKENCQzg5RDhFODU0MzAyQzQxQjlGNUU0RTk1NEM0MzAyOEZGRDIwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyza6xJsDqNFXDKxzEkHbpcE8 vTsbiBnXl7tucZ/Zsfiwn6V0+R+Zqxx1xwNjpAml93Hx36tUslSrRorivEypFE5X sAiA1wVseQRs99YDFilahY80K/dM6ki7X3le/mWTPUwNiK5trKyzTwiXKfr29b1N pgS3iaV8+mD9A0eV8G2w7Mmkm0pIGrPhHGVVduxRUHXepPPNNlfHBs+DMZgXgpgg tAjhuXYjHoH69IWMOD+38f5Rv0NsgSO9DVOeGpukP/fTyYrev0tgm2hHi8J6r5AH 4XOUIrXioHirWAsHji+Cy6MOwnvn0uAIZEZdCV4pQqezPxRCQ0X4bVAOF0ONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy8idjoVDAsQbn15OlUxDAo/9IHcwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMBo/j21VYK1Pmardx6WDC8v6HSyhfqyXbp 0FoPE5V8pwVziebjQLk63j3dFCVSi2sENFWUdaBc6VZQShtmOfhbpojgRfQdUJKb TxmCNMqKeyw+4rLuNWW8b0xbbpPfBWGqxvKVZ2AKF85D+FQJ2jT24gPY41Bf5WY0 2Zl52u10OhGp6kWQnhnGwPcQoW8Aqtsteit7uUIl4Ni+LZ4hcCBOxAcP3P0/d7Iw fHeNGkzIOVgj+8xI8G7xxkN8zWMxvpcbdiK4Cgpr51tS0CtwlI4Vpw1EyJWCs26A 7UMXBexAByzaMwfF6b8v8KsJGwbsOEEmJBqGj+P6y/Tp3y6KYbM= -----END CERTIFICATE-----Generated at Mon Apr 7 00:33:51 2025 by rpki-client