$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: e5hmTFMlG76iXvxIR1P0b2FT/3MTNSupSrX6oxR/C6Y= Subject key identifier: AF:4C:0C:33:14:3F:F8:8E:DC:DA:A1:E2:F5:5E:CE:B4:E1:8E:88:EB Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 5E68C1C1E58A81ECA5EF475AD8686A09F5AD51DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 04C6 Signing time: Mon 28 Apr 2025 06:01:11 +0000 Manifest this update: Mon 28 Apr 2025 05:56:11 +0000 Manifest next update: Thu 01 May 2025 09:17:11 +0000 Files and hashes: 1: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: 7c0oxWUcWrc0bY5Y4LEP80Omnz/N3eepsbAvQpH2nOc=) 2: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: AJi5f5HAI17fffWf8PYIDEUdv17L129SmpYGfw7CMEE=) 3: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: /C/J4teDecZN8FFlsZ+pM2I4cgGMBGzEczyPR3YBB9s=) 4: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: d0ghX40bSMS1dMb8WA83TWeR7JuJ1eSw0dLWGuACjTw=) 5: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: IwsKkFffgyNfH4ox4LfLjfZ4nzkrEVSbF9KbxXS1PIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:68:c1:c1:e5:8a:81:ec:a5:ef:47:5a:d8:68:6a:09:f5:ad:51:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Apr 28 05:56:11 2025 GMT Not After : May 1 09:17:11 2025 GMT Subject: CN=AF4C0C33143FF88EDCDAA1E2F55ECEB4E18E88EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:cd:67:75:bf:48:78:88:8e:8d:d7:84:29: 61:10:7e:84:42:ba:9f:be:8d:a8:b6:0a:74:11:d1: 7f:1b:ff:6d:29:c8:4a:72:b4:b3:12:3d:fe:cf:35: a3:da:fc:74:45:85:78:bc:d8:bf:34:0e:7f:a3:fd: f7:31:31:0f:04:49:02:9a:5a:3d:ad:1e:2b:94:91: 5f:65:42:28:8b:30:76:a6:b2:05:29:63:1d:f8:bc: cb:39:04:71:56:03:5c:7c:b4:a5:81:0a:eb:2a:ab: 51:0e:8b:23:4d:74:70:8d:77:00:72:fe:03:57:4a: 34:d6:11:d9:a0:df:86:91:1a:00:64:91:65:62:97: 1d:ca:d5:6e:61:e4:6c:b5:b3:fe:b6:62:40:54:87: c3:76:02:bc:26:d3:f7:f2:9e:43:26:de:ee:eb:2d: 02:ea:52:64:cb:28:4b:3d:75:55:f1:0f:68:02:bd: d8:a9:e3:e4:7a:67:19:1a:a2:03:ad:14:c8:ee:db: 2e:35:5b:a9:c6:29:8e:56:7e:0e:5c:f4:b3:57:77: 08:f1:90:49:69:f3:f1:e5:77:9f:f8:3a:9d:0d:fb: 1b:25:0d:71:6d:21:33:b5:2a:58:d9:74:1b:07:7b: 36:65:f7:7d:16:dd:70:d3:61:66:4c:fa:e6:0f:98: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4C:0C:33:14:3F:F8:8E:DC:DA:A1:E2:F5:5E:CE:B4:E1:8E:88:EB X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:44:ef:53:ff:b8:13:64:8b:4e:ba:05:cc:3b:9b:82:4c:c3: db:86:c1:d0:ba:49:e6:ae:10:ab:78:95:47:65:e2:7c:7c:80: fe:84:f4:96:28:0b:08:2c:84:5e:07:03:ff:87:a6:31:fa:97: bd:15:50:b6:f4:d5:b9:88:f3:0b:6c:58:fa:94:d9:37:7d:6d: 15:81:b6:b8:07:44:f0:09:72:97:86:15:c7:4b:5f:fe:22:46: bd:7a:70:a0:9d:47:c2:16:eb:78:1b:69:75:85:9b:12:89:51: 98:7a:e7:34:c5:93:49:13:49:08:ec:72:69:6b:ad:db:15:38: 7b:02:ff:68:1f:58:51:f8:63:c7:bf:61:6b:ee:f3:ce:d7:37: a9:59:52:ec:c8:a4:35:fa:34:f2:ed:ec:b4:6d:b8:78:f2:e4: 14:14:79:9a:d5:6e:f1:df:05:ad:35:30:f0:3d:1b:09:73:99: f0:4c:84:b7:d9:c0:91:33:31:60:e1:be:8e:7c:86:92:72:95: 46:c7:e8:c2:9a:8e:6d:54:c7:a6:65:ac:31:97:5d:91:d1:cc: fc:dd:56:c3:7e:92:c7:ab:d6:4d:c4:3f:32:41:a8:af:e9:1a: b0:0b:80:f5:ab:84:b6:79:c0:50:6d:23:0a:79:d5:16:50:fb: 5d:28:d6:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmjBweWKgeyl70da2GhqCfWtUdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTA0MjgwNTU2MTFaFw0yNTA1MDEwOTE3MTFaMDMxMTAvBgNV BAMTKEFGNEMwQzMzMTQzRkY4OEVEQ0RBQTFFMkY1NUVDRUI0RTE4RTg4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWM1ndb9IeIiOjdeEKWEQfoRC up++jai2CnQR0X8b/20pyEpytLMSPf7PNaPa/HRFhXi82L80Dn+j/fcxMQ8ESQKa Wj2tHiuUkV9lQiiLMHamsgUpYx34vMs5BHFWA1x8tKWBCusqq1EOiyNNdHCNdwBy /gNXSjTWEdmg34aRGgBkkWVilx3K1W5h5Gy1s/62YkBUh8N2Arwm0/fynkMm3u7r LQLqUmTLKEs9dVXxD2gCvdip4+R6ZxkaogOtFMju2y41W6nGKY5Wfg5c9LNXdwjx kElp8/Hld5/4Op0N+xslDXFtITO1KljZdBsHezZl930W3XDTYWZM+uYPmLpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr0wMMxQ/+I7c2qHi9V7OtOGOiOswHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1E71P/uBNki066Bcw7m4JMw9uGwdC6Seau EKt4lUdl4nx8gP6E9JYoCwgshF4HA/+HpjH6l70VULb01bmI8wtsWPqU2Td9bRWB trgHRPAJcpeGFcdLX/4iRr16cKCdR8IW63gbaXWFmxKJUZh65zTFk0kTSQjscmlr rdsVOHsC/2gfWFH4Y8e/YWvu887XN6lZUuzIpDX6NPLt7LRtuHjy5BQUeZrVbvHf Ba01MPA9GwlzmfBMhLfZwJEzMWDhvo58hpJylUbH6MKajm1Ux6ZlrDGXXZHRzPzd VsN+kser1k3EPzJBqK/pGrALgPWrhLZ5wFBtIwp51RZQ+10o1is= -----END CERTIFICATE-----Generated at Wed Apr 30 03:36:27 2025 by rpki-client