$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: BETPIA5QjTglElTEiyvt/VeHfsoawrsavQKDal/XlwE= Subject key identifier: C5:AD:02:CC:32:58:26:AC:99:1A:87:D5:E8:14:65:C7:F7:CA:29:2F Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 78245111D47BEB9D4B6CBA759FF4A53B29FFAE75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: CD Signing time: Mon 28 Apr 2025 19:01:41 +0000 Manifest this update: Mon 28 Apr 2025 18:56:41 +0000 Manifest next update: Thu 01 May 2025 19:25:41 +0000 Files and hashes: 1: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: W1cD9AvQgZkLawFL2uFkLvFqn4Nf3Cyyua6ed6GQxTU=) 2: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) 3: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:24:51:11:d4:7b:eb:9d:4b:6c:ba:75:9f:f4:a5:3b:29:ff:ae:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Apr 28 18:56:41 2025 GMT Not After : May 1 19:25:41 2025 GMT Subject: CN=C5AD02CC325826AC991A87D5E81465C7F7CA292F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:44:45:b6:64:3c:f9:7a:07:0f:11:ce:33: 00:4a:9c:38:ed:ef:f7:34:bf:18:29:66:1c:00:6d: bd:f2:58:67:33:fd:12:ab:02:5c:c6:10:08:1b:65: 80:b6:1f:dc:87:0a:f6:a8:cf:6d:5b:c6:9c:45:10: 13:32:01:3b:6f:bb:78:c9:38:f5:10:2c:2e:7a:37: 57:da:9e:8a:62:6e:c1:53:d8:34:b9:3e:d9:2d:20: 9a:29:5b:e3:c6:89:28:7a:f9:34:bf:6b:7e:8f:25: e9:f5:68:e1:ae:df:d0:1e:d4:5c:ce:64:02:74:20: 51:b2:8c:ef:bc:ea:ea:a5:a3:25:bb:ba:8c:f9:3c: 62:45:3f:96:b5:53:82:2c:28:ec:7c:b1:56:90:31: b1:e3:f3:94:aa:dd:d5:c5:86:c1:af:8f:76:1d:f7: 05:ff:be:85:a2:c6:33:30:2a:32:98:4a:07:22:62: f9:09:a9:ea:f1:93:d0:40:24:7c:a4:01:45:30:ba: a7:10:aa:89:79:72:05:b2:07:d8:fb:0e:80:08:a9: 81:61:4d:e1:44:a4:f4:81:f0:f0:3a:05:74:9a:43: cb:91:49:16:b6:34:c9:0c:cb:d8:2a:5c:c8:41:9b: 48:b8:de:cc:5a:34:39:69:69:62:f9:60:87:11:a4: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AD:02:CC:32:58:26:AC:99:1A:87:D5:E8:14:65:C7:F7:CA:29:2F X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bb:6a:e0:d5:b9:2e:6a:ae:19:ec:55:1e:5c:77:f1:0f:eb: 80:df:8b:3d:7e:c3:f7:5b:70:90:fb:48:a9:b6:d9:81:4b:74: 11:3f:55:3f:56:18:22:7f:d7:7f:79:9c:ba:00:65:d5:cb:f8: 8f:9b:8a:22:bf:ef:d5:e8:e6:02:39:5f:c4:51:bc:08:9c:ba: 4f:07:5d:b1:80:00:72:98:4e:95:f1:e3:47:b0:fd:ff:22:bf: 7c:0d:b6:51:95:a1:3f:d9:4a:f9:73:9c:36:a9:13:6f:63:41: 49:25:ec:8b:5b:1a:d3:dd:33:cd:2f:04:98:74:fe:cf:9e:31: 78:99:d8:bf:1c:8c:03:ed:f9:99:40:59:91:a8:10:bf:b5:ec: eb:04:70:7a:4c:93:d8:c2:03:9e:66:16:99:fd:93:10:30:33: 4c:8e:3e:55:53:24:14:4f:fb:00:50:1b:f2:12:6c:54:67:14: a8:ae:3a:d1:72:0f:17:07:50:ef:ac:af:ae:20:9d:8c:ea:a1: ee:8b:98:c2:75:c7:c0:e7:cc:ff:29:58:f8:a0:36:9d:e1:e2: 2e:ba:37:92:36:84:ba:4b:6f:1e:30:33:8a:89:fb:60:31:67: ee:34:a6:64:af:91:4e:a0:04:ad:3b:88:5b:2d:18:21:03:0f: ee:d8:5c:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCRREdR7651LbLp1n/SlOyn/rnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTA0MjgxODU2NDFaFw0yNTA1MDExOTI1NDFaMDMxMTAvBgNV BAMTKEM1QUQwMkNDMzI1ODI2QUM5OTFBODdENUU4MTQ2NUM3RjdDQTI5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZNkRFtmQ8+XoHDxHOMwBKnDjt 7/c0vxgpZhwAbb3yWGcz/RKrAlzGEAgbZYC2H9yHCvaoz21bxpxFEBMyATtvu3jJ OPUQLC56N1fanopibsFT2DS5PtktIJopW+PGiSh6+TS/a36PJen1aOGu39Ae1FzO ZAJ0IFGyjO+86uqloyW7uoz5PGJFP5a1U4IsKOx8sVaQMbHj85Sq3dXFhsGvj3Yd 9wX/voWixjMwKjKYSgciYvkJqerxk9BAJHykAUUwuqcQqol5cgWyB9j7DoAIqYFh TeFEpPSB8PA6BXSaQ8uRSRa2NMkMy9gqXMhBm0i43sxaNDlpaWL5YIcRpCu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxa0CzDJYJqyZGofV6BRlx/fKKS8wHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy7auDVuS5qrhnsVR5cd/EP64Dfiz1+w/db cJD7SKm22YFLdBE/VT9WGCJ/1395nLoAZdXL+I+biiK/79Xo5gI5X8RRvAicuk8H XbGAAHKYTpXx40ew/f8iv3wNtlGVoT/ZSvlznDapE29jQUkl7ItbGtPdM80vBJh0 /s+eMXiZ2L8cjAPt+ZlAWZGoEL+17OsEcHpMk9jCA55mFpn9kxAwM0yOPlVTJBRP +wBQG/ISbFRnFKiuOtFyDxcHUO+sr64gnYzqoe6LmMJ1x8DnzP8pWPigNp3h4i66 N5I2hLpLbx4wM4qJ+2AxZ+40pmSvkU6gBK07iFstGCEDD+7YXNw= -----END CERTIFICATE-----Generated at Tue Apr 29 09:36:49 2025 by rpki-client