$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: BdN87eeBgIczHglgiAJkM2G+wHhMYW2AvIOghzqShPY= Subject key identifier: 8C:49:9E:CF:3E:1A:6E:72:C1:0F:20:12:06:78:6C:C5:2A:14:9A:F4 Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 7FB364695F249C82CDF33C0AF15B2B3F829002C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 013D Signing time: Tue 29 Apr 2025 09:50:44 +0000 Manifest this update: Tue 29 Apr 2025 09:45:44 +0000 Manifest next update: Fri 02 May 2025 15:15:44 +0000 Files and hashes: 1: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: 9myP0wG1bn3Mg+WFQ3eos/4Ru7HwwUEAJugk8nswwrg=) 2: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 15:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b3:64:69:5f:24:9c:82:cd:f3:3c:0a:f1:5b:2b:3f:82:90:02:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Apr 29 09:45:44 2025 GMT Not After : May 2 15:15:44 2025 GMT Subject: CN=8C499ECF3E1A6E72C10F201206786CC52A149AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:33:75:1f:a9:de:23:55:df:38:f6:6d:3e: 38:62:f1:81:f9:b8:5d:2a:e7:5c:03:9d:a1:bf:c1: a5:b9:7f:12:f8:85:56:5f:fe:88:24:a7:4d:79:be: 3f:24:5b:ae:28:d7:b8:f2:97:c2:4b:4f:5d:73:30: 50:e4:82:62:ba:22:ae:55:e5:dc:55:db:39:20:e2: 99:c0:d3:5e:8a:28:cb:d8:b2:e8:0d:af:98:17:70: 98:28:5c:86:e5:73:48:c7:1c:c2:a1:36:af:56:4d: fe:eb:6f:da:37:fc:5c:ce:51:9f:fc:1b:65:f9:08: 70:8c:5b:1b:7e:bf:4b:40:dc:9a:84:bd:ce:f3:e9: 45:d5:35:e3:11:ee:1b:45:91:91:f4:fc:97:b6:e9: bd:05:d7:43:8c:b9:a1:2e:1f:0b:57:e0:c0:2f:dd: 86:19:b6:49:c3:38:f4:c3:cc:c2:96:fa:0c:b5:64: 0c:83:b7:07:7a:45:c4:3f:62:8e:89:e5:7a:a4:1e: dc:d4:3f:9a:b3:0e:82:fa:c9:28:08:14:01:30:a3: 4f:e2:93:60:16:83:fa:1d:fe:dd:7e:be:db:ea:f1: 6f:b6:ed:ca:6f:c8:45:70:1c:71:80:04:8e:3a:e1: f4:d0:28:87:04:a9:98:26:6d:ce:e2:22:b9:c7:93: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:49:9E:CF:3E:1A:6E:72:C1:0F:20:12:06:78:6C:C5:2A:14:9A:F4 X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ff:5e:e5:96:9c:41:b4:d0:71:2a:17:9c:8f:56:f9:ca:55: 60:45:12:c9:56:0f:11:9f:28:ea:97:ff:d2:b3:c4:ce:21:8b: 41:ca:39:e0:bb:06:7d:13:74:90:7e:3a:83:2d:b0:14:3f:30: 29:5a:f3:41:10:77:80:e4:f1:6a:41:0f:a0:2a:00:e1:80:a1: 22:c4:2d:5a:ff:9a:de:d4:fd:19:05:51:cb:02:94:de:c7:73: 34:ef:39:13:fd:7e:8c:e0:42:3a:45:07:67:63:e8:47:f7:6f: 12:41:dd:d3:37:8c:f6:75:78:a5:9e:58:1f:e1:55:42:62:40: c9:55:f8:e5:e4:63:95:07:89:c3:8a:be:27:82:60:c8:f5:4e: 5b:a5:42:99:1f:80:5b:96:1c:d0:c9:dc:0b:22:3e:c9:58:72: 8d:cb:f5:57:aa:69:83:40:31:13:dd:ad:cb:82:82:1a:61:25: 38:65:e1:a2:7a:93:19:4f:69:84:4c:35:9c:ed:22:99:67:ec: 8b:e8:a6:7b:3f:c9:19:1e:28:9b:0b:8f:61:92:be:61:4d:f5: 46:54:e0:42:e5:b3:31:db:88:40:ad:4b:97:66:5b:65:b1:17: 1f:75:71:7e:08:f7:d0:71:2d:27:7f:7e:93:ff:0c:f2:bb:dc: 48:d1:89:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7NkaV8knILN8zwK8VsrP4KQAsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTA0MjkwOTQ1NDRaFw0yNTA1MDIxNTE1NDRaMDMxMTAvBgNV BAMTKDhDNDk5RUNGM0UxQTZFNzJDMTBGMjAxMjA2Nzg2Q0M1MkExNDlBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSTN1H6neI1XfOPZtPjhi8YH5 uF0q51wDnaG/waW5fxL4hVZf/ogkp015vj8kW64o17jyl8JLT11zMFDkgmK6Iq5V 5dxV2zkg4pnA016KKMvYsugNr5gXcJgoXIblc0jHHMKhNq9WTf7rb9o3/FzOUZ/8 G2X5CHCMWxt+v0tA3JqEvc7z6UXVNeMR7htFkZH0/Je26b0F10OMuaEuHwtX4MAv 3YYZtknDOPTDzMKW+gy1ZAyDtwd6RcQ/Yo6J5XqkHtzUP5qzDoL6ySgIFAEwo0/i k2AWg/od/t1+vtvq8W+27cpvyEVwHHGABI464fTQKIcEqZgmbc7iIrnHkzuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjEmezz4abnLBDyASBnhsxSoUmvQwHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj/XuWWnEG00HEqF5yPVvnKVWBFEslWDxGf KOqX/9KzxM4hi0HKOeC7Bn0TdJB+OoMtsBQ/MCla80EQd4Dk8WpBD6AqAOGAoSLE LVr/mt7U/RkFUcsClN7HczTvORP9fozgQjpFB2dj6Ef3bxJB3dM3jPZ1eKWeWB/h VUJiQMlV+OXkY5UHicOKvieCYMj1TlulQpkfgFuWHNDJ3AsiPslYco3L9VeqaYNA MRPdrcuCghphJThl4aJ6kxlPaYRMNZztIpln7Ivopns/yRkeKJsLj2GSvmFN9UZU 4ELlszHbiECtS5dmW2WxFx91cX4I99BxLSd/fpP/DPK73EjRifs= -----END CERTIFICATE-----Generated at Tue Apr 29 13:27:22 2025 by rpki-client