$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: Kxf6guo2hLVrZciPB6/Sz2MHXO9+xFK9FoSjRTrI3jA= Subject key identifier: 44:40:62:8B:8D:DC:39:1E:8A:F9:48:8B:3D:BC:7B:DB:71:7F:B1:BC Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 5C76E3337C7B3E5067EBC670DC35D1D4A276755D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 04E0 Signing time: Tue 29 Apr 2025 01:22:26 +0000 Manifest this update: Tue 29 Apr 2025 01:17:26 +0000 Manifest next update: Fri 02 May 2025 10:25:26 +0000 Files and hashes: 1: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) 2: 3130332e3135352e36352e302f32342d3234203d3e20313431363231.roa (hash: IECBJhlM+g19o+MdDoNK+OZHnRGTyJlSW5v/c2J36Jg=) 3: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: VIXnn4hCcr4uARBaWpaAWJJfIr/CdeAfPBQ5wJEQ0O4=) 4: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 10:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:76:e3:33:7c:7b:3e:50:67:eb:c6:70:dc:35:d1:d4:a2:76:75:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Apr 29 01:17:26 2025 GMT Not After : May 2 10:25:26 2025 GMT Subject: CN=4440628B8DDC391E8AF9488B3DBC7BDB717FB1BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:4e:9d:30:a9:2b:06:ac:d8:a4:e9:24:ad: 70:99:f4:64:5d:af:b5:72:56:c8:b8:3c:d5:13:97: 4c:14:4c:c6:b0:11:6d:13:20:cb:69:bf:6c:67:89: c8:b7:98:7b:17:1d:4d:e3:ce:72:60:db:4d:13:ed: 9f:0e:e4:51:ab:ea:4b:e1:3b:06:94:5f:6f:45:5f: 8a:ee:d1:55:a8:a5:ee:5a:b1:ea:f2:10:e0:24:73: f3:87:79:1d:cd:21:2d:0d:83:fd:1d:f2:b5:24:b6: 77:3e:e7:3c:60:92:11:de:ab:17:f7:87:a9:c2:bb: a4:ca:95:b3:11:8f:9c:5a:d2:f0:6e:b3:1f:5d:04: e1:fb:08:55:33:ad:07:88:15:b4:04:11:03:f3:d4: 3b:0c:01:c3:fc:21:ef:b6:61:7f:38:a0:f3:6f:52: 22:df:22:db:d6:5f:8c:59:fd:85:8a:34:43:44:11: 22:b6:86:fd:e4:3c:32:1e:88:c4:90:f3:75:31:8a: af:38:08:4a:9b:e9:1f:b3:dc:4f:fd:22:0a:26:da: 15:b5:1e:49:04:4d:a0:ee:1a:0a:19:5e:27:b3:d9: a4:ba:a0:20:30:c2:dd:cf:f8:89:2a:cc:e9:2b:04: 7f:30:0c:74:22:35:d5:1f:0c:7e:52:5b:53:f5:e6: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:40:62:8B:8D:DC:39:1E:8A:F9:48:8B:3D:BC:7B:DB:71:7F:B1:BC X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e1:3c:0f:1a:82:53:ed:dd:13:57:fb:94:b4:ed:73:10:d8: 71:ee:16:c5:f5:85:a9:0f:9b:19:59:b0:c7:8f:48:bc:35:da: 51:e2:c0:cc:b6:a8:d4:4d:c0:4b:7f:8b:ad:8a:26:4f:f5:a9: ad:87:72:ed:dc:e9:ac:8f:a2:fe:2c:94:fa:28:86:cb:37:4a: 1a:43:b1:38:13:a8:a3:a5:b6:90:10:22:7c:75:5e:28:c4:b9: bb:4d:35:0a:60:4b:c4:d2:72:c0:a3:67:13:68:c4:f1:10:91: 95:d7:0b:81:9c:42:55:9f:48:4f:90:66:f2:67:68:3d:01:dd: 8f:a4:be:6c:cd:20:89:4e:a0:96:f4:76:70:56:e3:ee:98:83: a9:23:e5:cd:1a:70:0d:7e:a8:ca:61:fb:92:3a:73:4e:8e:59: 32:66:0a:d1:a3:b0:12:37:42:ec:72:c7:1f:e0:7d:0d:f2:31: 32:e4:00:79:2c:d5:2b:48:14:ce:64:80:f8:b3:33:44:b0:cd: 04:9d:f7:a5:cb:b4:93:62:02:b1:05:60:e4:1f:e4:2c:4d:d7: b8:32:08:ea:72:44:82:97:6a:1b:34:38:09:7e:2c:fd:e4:de: 8f:89:56:6f:7b:5f:a8:63:0f:7f:21:95:2e:53:34:08:f4:ca: f5:75:08:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHbjM3x7PlBn68Zw3DXR1KJ2dV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTA0MjkwMTE3MjZaFw0yNTA1MDIxMDI1MjZaMDMxMTAvBgNV BAMTKDQ0NDA2MjhCOEREQzM5MUU4QUY5NDg4QjNEQkM3QkRCNzE3RkIxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmok6dMKkrBqzYpOkkrXCZ9GRd r7VyVsi4PNUTl0wUTMawEW0TIMtpv2xnici3mHsXHU3jznJg200T7Z8O5FGr6kvh OwaUX29FX4ru0VWope5aseryEOAkc/OHeR3NIS0Ng/0d8rUktnc+5zxgkhHeqxf3 h6nCu6TKlbMRj5xa0vBusx9dBOH7CFUzrQeIFbQEEQPz1DsMAcP8Ie+2YX84oPNv UiLfItvWX4xZ/YWKNENEESK2hv3kPDIeiMSQ83Uxiq84CEqb6R+z3E/9Igom2hW1 HkkETaDuGgoZXiez2aS6oCAwwt3P+IkqzOkrBH8wDHQiNdUfDH5SW1P15mRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUREBii43cOR6K+UiLPbx723F/sbwwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfhPA8aglPt3RNX+5S07XMQ2HHuFsX1hakP mxlZsMePSLw12lHiwMy2qNRNwEt/i62KJk/1qa2Hcu3c6ayPov4slPoohss3ShpD sTgTqKOltpAQInx1XijEubtNNQpgS8TScsCjZxNoxPEQkZXXC4GcQlWfSE+QZvJn aD0B3Y+kvmzNIIlOoJb0dnBW4+6Yg6kj5c0acA1+qMph+5I6c06OWTJmCtGjsBI3 Quxyxx/gfQ3yMTLkAHks1StIFM5kgPizM0SwzQSd96XLtJNiArEFYOQf5CxN17gy COpyRIKXahs0OAl+LP3k3o+JVm97X6hjD38hlS5TNAj0yvV1CNc= -----END CERTIFICATE-----Generated at Wed Apr 30 02:44:39 2025 by rpki-client