$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: O60Zn+ylJO3xXn+D4NSHoJCju7KmQnXqueTKlJNu47g= Subject key identifier: D6:BF:51:2A:C9:E1:0B:AF:17:C4:F6:6F:E8:A0:6C:60:C6:80:C2:1F Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 7F6857038A915D748CD4122E9A3B7633E313F5DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 0135 Signing time: Tue 29 Apr 2025 10:51:39 +0000 Manifest this update: Tue 29 Apr 2025 10:46:39 +0000 Manifest next update: Fri 02 May 2025 12:37:39 +0000 Files and hashes: 1: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: pr8zP1BDzUma6YQwGrLcwj3v9zKpyAaTVwyVjC6bqWc=) 2: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 12:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:57:03:8a:91:5d:74:8c:d4:12:2e:9a:3b:76:33:e3:13:f5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Apr 29 10:46:39 2025 GMT Not After : May 2 12:37:39 2025 GMT Subject: CN=D6BF512AC9E10BAF17C4F66FE8A06C60C680C21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:91:e9:64:5b:f0:2e:51:17:d9:76:ec:bd: e2:07:33:c0:5d:af:c9:fa:9f:56:aa:a7:b3:2e:73: 05:36:15:c7:cf:08:95:62:c0:e2:90:ac:e1:4e:e0: 23:28:cd:69:68:b8:d7:70:1a:91:cf:1e:ba:55:31: 8b:b3:b8:3f:d0:8b:71:04:d5:64:43:4e:b0:86:2e: 08:12:18:f1:df:7b:01:fd:b9:1c:3e:f3:ef:0a:b4: 02:c1:c4:49:c3:a4:dc:82:bc:94:b9:2c:d9:f3:44: 0d:32:72:af:24:b6:31:9b:ff:eb:d1:2c:26:89:04: b2:61:2a:ea:c6:f1:68:98:c7:7f:9e:f2:a0:c8:12: ad:d8:70:59:8c:ad:99:90:05:30:fe:75:ee:c4:16: 29:3f:70:cd:09:39:fa:16:6f:cf:7d:6b:15:c5:4d: cf:8b:8f:a7:64:03:82:d5:cb:89:6e:5c:c6:d9:68: 3d:bb:3e:72:4d:04:8b:a3:7c:c6:c5:09:d5:7a:67: dc:0a:e5:d0:0d:23:f6:ca:9c:b0:6e:ae:60:6c:33: cc:44:c8:16:80:e9:82:9f:fa:a1:71:13:ce:ef:ec: 14:8b:f1:cb:2c:7b:7f:4f:5c:a7:fd:be:81:6b:27: 61:10:33:1b:9a:d3:18:4e:5d:ad:16:50:96:60:ad: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:51:2A:C9:E1:0B:AF:17:C4:F6:6F:E8:A0:6C:60:C6:80:C2:1F X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ea:37:03:d4:18:28:d5:a4:47:ff:6a:3f:1a:a1:62:7c:c5: db:25:95:91:08:e4:02:40:54:8f:62:42:86:85:eb:1d:e0:81: 54:66:44:f8:83:47:1f:f5:7d:eb:e4:2e:3a:e6:cd:4d:38:fd: 97:6a:31:21:ce:f5:60:a5:6a:e1:65:ce:6e:6a:0e:e0:94:5a: ea:da:26:8c:b5:d3:6e:aa:80:ab:8e:fe:4e:96:20:6d:67:d3: e7:52:ae:59:09:81:41:75:af:ae:d6:f4:9d:de:e5:96:d4:e0: 79:22:0e:b0:dd:50:a8:98:3e:63:cf:df:34:6f:94:cd:a6:e7: 29:68:85:a1:3f:a0:5e:11:06:4c:3a:2c:6f:a0:80:37:20:76: b0:7d:8d:78:e8:45:fb:00:34:61:71:38:ab:38:80:de:71:db: 9f:84:b9:34:20:37:00:38:98:d0:66:0c:21:89:ed:4a:6e:24: fd:c3:6f:21:7b:2f:a6:d4:9e:c1:62:ec:c2:b8:d7:29:af:b6: 08:0d:a4:9f:f9:d0:1d:e8:eb:e0:cc:08:d0:5f:0b:6e:0b:28: b5:4f:18:d9:01:24:8a:d2:96:53:fd:fc:33:e0:ae:96:1d:81: 27:d6:13:e9:26:64:d0:eb:4b:ae:a0:6c:67:4a:83:e2:b5:3a: 62:90:2d:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2hXA4qRXXSM1BIumjt2M+MT9d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNTA0MjkxMDQ2MzlaFw0yNTA1MDIxMjM3MzlaMDMxMTAvBgNV BAMTKEQ2QkY1MTJBQzlFMTBCQUYxN0M0RjY2RkU4QTA2QzYwQzY4MEMyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXJHpZFvwLlEX2XbsveIHM8Bd r8n6n1aqp7MucwU2FcfPCJViwOKQrOFO4CMozWlouNdwGpHPHrpVMYuzuD/Qi3EE 1WRDTrCGLggSGPHfewH9uRw+8+8KtALBxEnDpNyCvJS5LNnzRA0ycq8ktjGb/+vR LCaJBLJhKurG8WiYx3+e8qDIEq3YcFmMrZmQBTD+de7EFik/cM0JOfoWb899axXF Tc+Lj6dkA4LVy4luXMbZaD27PnJNBIujfMbFCdV6Z9wK5dANI/bKnLBurmBsM8xE yBaA6YKf+qFxE87v7BSL8csse39PXKf9voFrJ2EQMxua0xhOXa0WUJZgrU6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1r9RKsnhC68XxPZv6KBsYMaAwh8wHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrqNwPUGCjVpEf/aj8aoWJ8xdsllZEI5AJA VI9iQoaF6x3ggVRmRPiDRx/1fevkLjrmzU04/ZdqMSHO9WClauFlzm5qDuCUWura Joy1026qgKuO/k6WIG1n0+dSrlkJgUF1r67W9J3e5ZbU4HkiDrDdUKiYPmPP3zRv lM2m5ylohaE/oF4RBkw6LG+ggDcgdrB9jXjoRfsANGFxOKs4gN5x25+EuTQgNwA4 mNBmDCGJ7UpuJP3DbyF7L6bUnsFi7MK41ymvtggNpJ/50B3o6+DMCNBfC24LKLVP GNkBJIrSllP9/DPgrpYdgSfWE+kmZNDrS66gbGdKg+K1OmKQLdc= -----END CERTIFICATE-----Generated at Wed Apr 30 08:19:16 2025 by rpki-client