$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: ThGQUjbO+rUrCU/2dDLztV3YwZQeuJWNEdmuI5dvHSg= Subject key identifier: 10:68:00:5E:53:1A:5F:BF:2D:63:FE:ED:7E:EF:A6:2D:4A:EC:5A:4C Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 4A3CD00048881FC28CF8F1B898AB8C6823B0420E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 04C7 Signing time: Wed 30 Apr 2025 09:21:12 +0000 Manifest this update: Wed 30 Apr 2025 09:16:12 +0000 Manifest next update: Sat 03 May 2025 21:15:12 +0000 Files and hashes: 1: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: 7c0oxWUcWrc0bY5Y4LEP80Omnz/N3eepsbAvQpH2nOc=) 2: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: AJi5f5HAI17fffWf8PYIDEUdv17L129SmpYGfw7CMEE=) 3: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: IwsKkFffgyNfH4ox4LfLjfZ4nzkrEVSbF9KbxXS1PIc=) 4: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: d0ghX40bSMS1dMb8WA83TWeR7JuJ1eSw0dLWGuACjTw=) 5: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: 6rZ7QvdR7vPoyFhRJbJ5tLD8oBTBw9pgtGfdOmb354M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3c:d0:00:48:88:1f:c2:8c:f8:f1:b8:98:ab:8c:68:23:b0:42:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Apr 30 09:16:12 2025 GMT Not After : May 3 21:15:12 2025 GMT Subject: CN=1068005E531A5FBF2D63FEED7EEFA62D4AEC5A4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:14:90:b4:47:30:0a:b0:e8:6f:9b:0b:e1: f1:48:44:10:7a:99:9e:9c:05:ac:77:19:fa:bf:2a: 78:09:49:9e:c2:fa:7f:e6:4c:f5:e4:ae:59:f5:4c: 40:bd:85:4b:dd:98:1c:d0:8a:53:c6:c9:3f:ba:85: 4f:a2:2e:3d:79:de:b8:90:fc:1f:b9:8d:b3:55:f0: 05:3f:d1:0c:4a:04:83:f6:c4:10:55:d0:5b:6d:4e: e8:33:12:91:ee:d4:a8:f9:ac:4c:07:86:02:19:ce: 09:b0:ad:8e:98:0d:1d:7f:1e:b2:b2:a7:9e:85:4c: 90:6b:0b:6b:d2:a2:0e:ae:2f:04:bc:5f:f1:c0:73: 50:38:54:b1:c9:57:7f:e9:1e:39:ce:ce:4f:74:7b: 60:34:f0:64:f2:a0:c1:e6:a7:1d:fa:f1:41:8c:e3: 3b:f8:26:64:3b:51:1f:54:35:ed:d9:c9:2e:68:1d: 0b:0d:9d:f1:77:98:1d:b7:27:b8:82:5a:05:1d:b8: 6c:1b:3b:be:39:a6:7b:78:c6:ff:3b:8b:2a:68:00: 35:b0:0e:cc:b7:6e:5d:79:5a:97:08:7a:93:a0:c0: 4e:2d:0b:7c:91:38:08:88:b9:7a:19:cb:c2:e0:cd: 2a:bc:f1:18:40:c8:96:6a:15:f3:79:69:e8:f0:b5: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:00:5E:53:1A:5F:BF:2D:63:FE:ED:7E:EF:A6:2D:4A:EC:5A:4C X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0e:bc:af:a8:28:73:ca:99:74:05:b0:d7:f5:0f:a9:de:f1: 13:68:72:d0:fc:f5:21:7f:a6:05:12:9f:18:5e:f4:4b:20:1b: 59:dd:c4:ec:85:19:50:3a:3a:2c:ef:0a:b8:f6:0b:d0:63:3d: a6:19:0f:8c:47:de:12:83:be:28:50:8e:0f:84:cc:3f:eb:83: 29:db:a3:d5:e9:07:ac:40:30:aa:10:37:be:f7:f4:08:8d:b1: 85:2b:fd:09:a7:ec:b0:03:95:01:74:64:07:1c:9e:9c:38:db: 9b:6f:cf:d2:b1:d5:82:f5:4b:43:06:06:10:4f:10:a5:ba:4d: ad:62:a0:18:40:2e:e8:fa:42:88:31:19:2a:bd:23:cd:49:66: b0:d5:72:74:6c:ca:36:25:b6:50:41:d6:1e:7d:10:90:64:73: a1:a1:0b:26:59:ea:3c:51:68:bf:5e:bf:ee:eb:df:98:ad:a2: 60:49:b1:b9:0d:e7:d4:f3:b7:68:99:6a:55:be:a1:fa:50:a1: 53:b9:a1:7d:2d:6c:05:94:b7:4b:72:df:75:92:b7:34:b8:f9: 60:0d:bb:64:b6:5b:f9:42:23:7d:31:8d:de:1c:a1:c6:b5:0c: 32:aa:53:18:b8:c9:f6:56:fc:a5:16:f5:ce:e1:fb:fa:20:b6: 84:b3:ae:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjzQAEiIH8KM+PG4mKuMaCOwQg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTA0MzAwOTE2MTJaFw0yNTA1MDMyMTE1MTJaMDMxMTAvBgNV BAMTKDEwNjgwMDVFNTMxQTVGQkYyRDYzRkVFRDdFRUZBNjJENEFFQzVBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnxSQtEcwCrDob5sL4fFIRBB6 mZ6cBax3Gfq/KngJSZ7C+n/mTPXkrln1TEC9hUvdmBzQilPGyT+6hU+iLj153riQ /B+5jbNV8AU/0QxKBIP2xBBV0FttTugzEpHu1Kj5rEwHhgIZzgmwrY6YDR1/HrKy p56FTJBrC2vSog6uLwS8X/HAc1A4VLHJV3/pHjnOzk90e2A08GTyoMHmpx368UGM 4zv4JmQ7UR9UNe3ZyS5oHQsNnfF3mB23J7iCWgUduGwbO745pnt4xv87iypoADWw Dsy3bl15WpcIepOgwE4tC3yROAiIuXoZy8LgzSq88RhAyJZqFfN5aejwtSl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGgAXlMaX78tY/7tfu+mLUrsWkwwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8OvK+oKHPKmXQFsNf1D6ne8RNoctD89SF/ pgUSnxhe9EsgG1ndxOyFGVA6OizvCrj2C9BjPaYZD4xH3hKDvihQjg+EzD/rgynb o9XpB6xAMKoQN7739AiNsYUr/Qmn7LADlQF0ZAccnpw425tvz9Kx1YL1S0MGBhBP EKW6Ta1ioBhALuj6QogxGSq9I81JZrDVcnRsyjYltlBB1h59EJBkc6GhCyZZ6jxR aL9ev+7r35itomBJsbkN59Tzt2iZalW+ofpQoVO5oX0tbAWUt0ty33WStzS4+WAN u2S2W/lCI30xjd4coca1DDKqUxi4yfZW/KUW9c7h+/ogtoSzrsk= -----END CERTIFICATE-----Generated at Wed Apr 30 22:49:36 2025 by rpki-client