$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: 47TgUz63eiCLTO2hma3px/QvX8c+u+oZI6i9rn/wdz0= Subject key identifier: A0:8D:44:47:70:D8:DB:A9:CB:B1:F9:65:CD:8F:FF:09:61:78:B5:80 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 1081D2B7B7FCD3DFFBCB18DB46672DB34379E44F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 01C1 Signing time: Fri 25 Apr 2025 15:02:08 +0000 Manifest this update: Fri 25 Apr 2025 14:57:08 +0000 Manifest next update: Mon 28 Apr 2025 23:41:08 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: hidIXYxA6SsKxj2gY7109+5MNwatfyZjyGH6QfhEGaY=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: 5jjNyH4IFmanP0qvJGbyyLdkj/5QXLl3Ec+MH+kAGqY=) 3: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: XryYMjwftZwDC+LgOaBl7zvXHmw5st0pLH58FXRxB9M=) 4: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: 9ZF2Eg58CtZBkb9CJ/ttc70dTqlt4QyDCLL7yta5ufQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 23:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:81:d2:b7:b7:fc:d3:df:fb:cb:18:db:46:67:2d:b3:43:79:e4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Apr 25 14:57:08 2025 GMT Not After : Apr 28 23:41:08 2025 GMT Subject: CN=A08D444770D8DBA9CBB1F965CD8FFF096178B580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:ea:4d:97:93:dd:9a:ba:bb:bb:7e:2f:7c: a9:ac:59:01:67:8b:a7:dc:ad:b2:54:90:af:be:f3: eb:54:a0:eb:cc:3e:fa:de:52:58:6b:13:64:bb:73: 02:78:8c:6b:9e:82:b3:ec:88:09:64:6d:14:61:f8: d0:f0:bd:21:85:e3:e7:78:ea:06:4b:ac:3c:4f:79: 36:23:8b:c2:b2:54:bd:31:51:56:fa:b8:dc:48:28: b2:df:91:a5:0f:f1:0e:92:1b:08:37:ea:d8:97:8e: 10:ec:fe:e6:88:cf:67:df:b6:c4:d0:d3:15:af:00: ee:67:70:0c:3f:44:16:ef:c6:e9:de:b9:61:ce:91: d5:fd:82:7f:c2:12:2b:7d:85:69:0d:d7:a0:8c:0f: ab:ad:84:77:72:e6:1f:bf:7c:cf:d7:50:95:3f:0f: cf:30:6b:8f:72:91:e8:00:d6:7d:2e:b9:87:8a:c0: 39:68:17:fc:a9:2a:98:06:db:62:9a:e1:6c:20:f2: 63:08:db:60:f4:2c:73:a9:19:ac:e1:d1:d4:a6:d3: fc:4b:83:f5:df:2e:d0:04:64:3e:fa:21:b4:ec:e6: b7:37:28:83:e0:2b:7f:19:37:3b:2e:05:e4:27:e8: 58:86:60:46:99:2e:fe:5d:84:0c:c4:8c:4d:c1:86: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8D:44:47:70:D8:DB:A9:CB:B1:F9:65:CD:8F:FF:09:61:78:B5:80 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b5:ce:11:45:a2:c3:30:25:8d:d8:56:67:32:f8:f2:5b:21: 32:43:15:42:a5:4c:b1:d6:34:cd:a5:7e:bf:79:a1:8a:e3:87: f6:7e:29:43:74:17:dd:6e:b7:65:d1:fd:af:c6:45:22:ec:c7: 7d:55:af:cf:77:70:07:77:dd:6b:33:da:79:e3:86:b9:55:05: 39:b2:86:a2:32:65:cd:88:f4:68:8d:16:22:86:0b:47:e1:1d: d5:2b:b7:55:04:f8:88:4d:4e:5b:4d:44:5f:43:85:07:76:e8: 88:d3:52:5e:62:84:e3:db:1f:d0:f1:a6:a4:df:7e:c1:20:4c: df:3b:57:29:7f:0a:4f:60:49:ea:76:b8:62:58:66:88:1c:03: c1:26:f9:2a:10:8e:fb:de:43:77:7c:c7:7b:2f:b6:4a:a9:df: 63:ee:2c:48:f1:1b:1b:32:c7:25:d6:4b:65:8f:07:a9:16:e5: a7:67:7f:56:7e:71:0b:f5:34:14:cf:30:41:9a:eb:f3:59:d1: f7:1c:71:9d:73:60:be:7d:f1:a6:41:28:76:e0:47:33:60:45: a7:8e:7e:22:62:02:26:92:8a:44:b8:1f:fd:d7:e0:fc:b2:a2: ca:cc:3e:12:5d:91:b7:64:de:08:10:40:94:a4:f2:69:00:d1: 03:bf:06:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIHSt7f809/7yxjbRmcts0N55E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTA0MjUxNDU3MDhaFw0yNTA0MjgyMzQxMDhaMDMxMTAvBgNV BAMTKEEwOEQ0NDQ3NzBEOERCQTlDQkIxRjk2NUNEOEZGRjA5NjE3OEI1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClX+pNl5Pdmrq7u34vfKmsWQFn i6fcrbJUkK++8+tUoOvMPvreUlhrE2S7cwJ4jGuegrPsiAlkbRRh+NDwvSGF4+d4 6gZLrDxPeTYji8KyVL0xUVb6uNxIKLLfkaUP8Q6SGwg36tiXjhDs/uaIz2fftsTQ 0xWvAO5ncAw/RBbvxuneuWHOkdX9gn/CEit9hWkN16CMD6uthHdy5h+/fM/XUJU/ D88wa49ykegA1n0uuYeKwDloF/ypKpgG22Ka4Wwg8mMI22D0LHOpGazh0dSm0/xL g/XfLtAEZD76IbTs5rc3KIPgK38ZNzsuBeQn6FiGYEaZLv5dhAzEjE3BhmSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoI1ER3DY26nLsfllzY//CWF4tYAwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ21zhFFosMwJY3YVmcy+PJbITJDFUKlTLHW NM2lfr95oYrjh/Z+KUN0F91ut2XR/a/GRSLsx31Vr893cAd33Wsz2nnjhrlVBTmy hqIyZc2I9GiNFiKGC0fhHdUrt1UE+IhNTltNRF9DhQd26IjTUl5ihOPbH9DxpqTf fsEgTN87Vyl/Ck9gSep2uGJYZogcA8Em+SoQjvveQ3d8x3svtkqp32PuLEjxGxsy xyXWS2WPB6kW5adnf1Z+cQv1NBTPMEGa6/NZ0fcccZ1zYL598aZBKHbgRzNgRaeO fiJiAiaSikS4H/3X4PyyosrMPhJdkbdk3ggQQJSk8mkA0QO/Bkw= -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net