$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft (raw, json) Hash identifier: e7Sl+ol1LqWv7wqyPZBwwe5Xm0TeS1Q0m1kUEc4rz7g= Subject key identifier: 3D:27:2D:DD:3D:79:87:DE:AA:C5:B3:7F:2E:63:88:06:24:8A:5F:FE Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Certificate serial: 787C61DDD2D9571FCF61107E78CECD1257DD1E66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft Manifest number: 7D Signing time: Mon 28 Apr 2025 00:31:42 +0000 Manifest this update: Mon 28 Apr 2025 00:26:42 +0000 Manifest next update: Thu 01 May 2025 11:22:42 +0000 Files and hashes: 1: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl (hash: 7ibbCKyQ0Ol2sEh9ET0Oo/CJIlkuJmKLHdQIPzYkSUo=) 2: 3136302e32322e31332e302f32342d3234203d3e20313532373935.roa (hash: 4zrjWTGjIfmRVD7KoG+5XB5sYDfQiVJOsTHraO00txU=) 3: 3136302e32322e31322e302f32342d3234203d3e20313532373935.roa (hash: c7u9a3tNo+sinKbXEOZIkxb5lpQ3V3xHWxLJ0wK62sQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7c:61:dd:d2:d9:57:1f:cf:61:10:7e:78:ce:cd:12:57:dd:1e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Validity Not Before: Apr 28 00:26:42 2025 GMT Not After : May 1 11:22:42 2025 GMT Subject: CN=3D272DDD3D7987DEAAC5B37F2E638806248A5FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:09:ee:1d:be:37:5a:fb:f8:90:2d:fc:29: cd:71:5c:f3:16:2f:fa:f9:9b:99:09:31:02:2d:a0: c1:1e:9f:18:5c:b8:b2:99:11:5e:95:8e:6d:0c:43: 3c:86:d5:a5:66:36:b4:2b:1f:4d:2f:2e:f2:75:a0: 8d:3d:23:5d:87:e9:b3:d3:f2:1a:b8:45:31:32:b5: 3c:24:03:9f:63:7e:42:43:31:02:4b:0b:94:aa:9f: 03:29:c9:86:1a:d6:16:da:9a:8f:a3:b8:3a:ab:cd: ad:59:df:ba:c0:a5:42:53:e9:d6:f7:9c:88:2e:b8: 68:85:15:cc:db:95:54:00:fd:cf:0e:66:d3:da:04: 07:db:2c:27:82:ef:3e:1b:e9:49:ad:4c:b2:8e:c3: 2e:e8:84:6a:f5:f6:9c:f3:69:0f:52:5f:24:6a:42: 48:a1:78:0b:d8:ce:01:6f:40:77:db:16:79:be:a6: cf:69:44:93:90:26:3f:a3:02:a1:b6:8a:2d:3e:ba: 7b:fe:72:3f:c4:79:ae:69:6b:8e:00:5f:5d:b7:0e: 6f:ed:ed:e3:b0:25:5c:91:0c:01:65:f6:5e:75:e3: 07:a9:fc:80:b7:a0:cc:31:94:34:0d:1e:fc:a6:1a: fe:95:e8:b9:05:0a:d7:81:9b:6b:9d:c6:81:54:bc: ce:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:27:2D:DD:3D:79:87:DE:AA:C5:B3:7F:2E:63:88:06:24:8A:5F:FE X509v3 Authority Key Identifier: keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:91:41:c0:0e:07:35:af:a6:a1:d9:e7:e1:cf:1f:c9:11:93: 86:fa:fb:d8:a8:e1:59:fb:04:8a:96:07:f9:83:4e:77:14:39: 80:ab:89:d1:27:66:94:b7:53:7b:7d:c1:bb:12:46:37:7d:11: a6:ad:e0:82:f3:d3:43:2d:b9:54:f8:09:e0:61:c7:9b:33:32: b8:ce:78:00:3a:e0:d6:4a:f2:5a:4a:ff:a0:74:87:6f:c1:60: 07:8a:fc:78:85:78:cb:13:99:9a:d4:c6:e6:0c:35:a7:53:bb: 66:44:8a:02:c8:f1:08:8c:a4:a2:19:71:9c:3f:f5:ca:7b:dd: 0a:6c:99:64:11:79:0d:09:e6:d4:63:b0:90:73:1f:48:98:b8: 0b:08:40:e8:e9:ed:5d:9e:b2:35:af:de:9e:1e:92:4c:db:dd: 38:91:f3:55:d0:b4:d4:d2:d8:ac:57:a4:9e:2f:4d:dc:52:45: 20:14:78:0f:18:a8:b7:da:38:74:22:cd:4d:bd:ed:b8:61:a2: 60:d9:dc:0e:73:b1:dc:45:c2:9e:db:e5:1c:f5:7e:96:ee:2e: 80:a9:94:0c:a5:f8:1b:d2:53:59:ff:08:3f:39:bf:04:12:6f: 65:7f:60:21:1a:90:c5:54:80:93:82:03:5b:8f:3e:62:e9:90: e5:12:32:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHxh3dLZVx/PYRB+eM7NElfdHmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdF MEU0RDA2OTAeFw0yNTA0MjgwMDI2NDJaFw0yNTA1MDExMTIyNDJaMDMxMTAvBgNV BAMTKDNEMjcyREREM0Q3OTg3REVBQUM1QjM3RjJFNjM4ODA2MjQ4QTVGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJwnuHb43Wvv4kC38Kc1xXPMW L/r5m5kJMQItoMEenxhcuLKZEV6Vjm0MQzyG1aVmNrQrH00vLvJ1oI09I12H6bPT 8hq4RTEytTwkA59jfkJDMQJLC5SqnwMpyYYa1hbamo+juDqrza1Z37rApUJT6db3 nIguuGiFFczblVQA/c8OZtPaBAfbLCeC7z4b6UmtTLKOwy7ohGr19pzzaQ9SXyRq QkiheAvYzgFvQHfbFnm+ps9pRJOQJj+jAqG2ii0+unv+cj/Eea5pa44AX123Dm/t 7eOwJVyRDAFl9l514wep/IC3oMwxlDQNHvymGv6V6LkFCteBm2udxoFUvM6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSct3T15h96qxbN/LmOIBiSKX/4wHwYDVR0j BBgwFoAUWI3Q/OS8JDzJxtaK4E6EZ+Dk0GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMC81ODhERDBGQ0U0 QkMyNDNDQzlDNkQ2OEFFMDRFODQ2N0UwRTREMDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdFMEU0 RDA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzAvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0 NjdFMEU0RDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSRQcAOBzWvpqHZ5+HPH8kRk4b6+9io4Vn7 BIqWB/mDTncUOYCridEnZpS3U3t9wbsSRjd9Eaat4ILz00MtuVT4CeBhx5szMrjO eAA64NZK8lpK/6B0h2/BYAeK/HiFeMsTmZrUxuYMNadTu2ZEigLI8QiMpKIZcZw/ 9cp73QpsmWQReQ0J5tRjsJBzH0iYuAsIQOjp7V2esjWv3p4ekkzb3TiR81XQtNTS 2KxXpJ4vTdxSRSAUeA8YqLfaOHQizU297bhhomDZ3A5zsdxFwp7b5Rz1fpbuLoCp lAyl+BvSU1n/CD85vwQSb2V/YCEakMVUgJOCA1uPPmLpkOUSMgo= -----END CERTIFICATE-----Generated at Tue Apr 29 03:53:26 2025 by rpki-client