$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: FEfUkI7MCSj03zihuzfg9Y+i5g3l/Z7pMfiC+c0vm7U= Subject key identifier: F1:FF:A8:D7:67:DC:36:B2:FC:94:47:74:70:0C:18:2D:96:DB:EC:28 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 117E833A3DAE3974106DCA3A3F0D90A90E909338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: DE Signing time: Sat 26 Apr 2025 03:40:59 +0000 Manifest this update: Sat 26 Apr 2025 03:35:59 +0000 Manifest next update: Tue 29 Apr 2025 10:38:59 +0000 Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) 2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: KD3sIOvQIApFVscoES7C4ujNYMqICIOzOu8JpvUBqEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 10:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7e:83:3a:3d:ae:39:74:10:6d:ca:3a:3f:0d:90:a9:0e:90:93:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Apr 26 03:35:59 2025 GMT Not After : Apr 29 10:38:59 2025 GMT Subject: CN=F1FFA8D767DC36B2FC944774700C182D96DBEC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:93:62:9f:d0:ae:31:52:38:6b:78:06:43: 2d:c6:12:d7:57:8d:fa:16:d9:50:7a:4c:67:4e:48: 46:98:c5:09:dd:49:1a:6f:3c:e8:be:44:0e:0c:4c: f8:44:c7:80:22:2f:c8:f5:bd:cb:c0:3a:b9:e3:2a: 0a:02:a8:fc:29:e6:eb:93:d1:ef:5a:6a:8f:ee:e0: b4:18:0b:d0:71:76:7d:d8:3f:d4:04:63:98:30:64: 52:ab:34:d2:af:38:cb:48:da:b9:22:4d:b2:dd:a3: 8f:7c:da:86:de:2c:1c:82:23:f5:c3:d6:b4:82:47: fd:1c:a5:6e:27:b9:c3:cd:0f:5b:06:60:15:45:05: 68:61:ec:a6:85:a4:d7:b0:2b:8a:74:fa:15:5d:8f: c9:22:5e:fc:f0:bd:99:6d:a2:3d:ca:3f:62:49:44: c6:62:ef:71:62:5c:d4:e2:24:9e:4a:b9:05:08:e5: 6c:b0:a1:3b:4f:f8:59:89:20:5d:85:62:70:14:dd: 8a:8e:50:44:2c:e4:30:a2:40:2b:19:e5:67:17:17: 88:a9:01:c8:1b:17:39:ac:dc:53:35:b7:7f:ea:5a: 99:74:b7:e9:ae:f5:cb:c8:4a:f3:aa:20:48:e6:bc: 5f:67:6a:e4:06:bd:46:cc:20:4c:87:df:fe:ad:6a: aa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FF:A8:D7:67:DC:36:B2:FC:94:47:74:70:0C:18:2D:96:DB:EC:28 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a9:40:ff:02:50:89:09:ad:d8:ac:17:36:ee:73:31:b3:d4: c9:e4:6f:66:8c:8e:3d:30:7b:5f:a1:dc:79:11:32:d8:a6:c6: 93:4c:e5:02:b2:7f:92:54:4c:8d:0a:f0:43:3a:74:1b:d3:4e: d6:0e:42:e7:91:be:37:f8:bc:17:48:a6:95:68:f6:c0:83:4c: 64:b4:fd:94:a1:08:e7:d6:07:ec:67:94:1e:6f:c8:08:04:cf: 9a:b7:0d:9d:e5:c4:a3:7a:6a:9b:21:44:9a:03:1a:b5:ee:77: 0a:c6:1c:79:8b:f8:f2:2d:24:09:02:5c:30:b3:d6:ec:e7:4b: 8f:df:07:a1:41:0c:04:fe:bd:11:ce:e3:ba:18:43:17:66:03: 61:73:ee:d7:1b:4e:a2:b1:72:82:bc:0f:ad:3a:d3:fe:ef:aa: 71:b2:ee:9c:04:62:67:6d:56:ed:73:26:ea:1b:9f:cc:90:ea: e3:75:88:b3:62:68:56:68:fa:bc:17:91:18:53:87:a5:e3:e7: dc:6c:25:f4:a6:69:cc:c7:d4:07:52:43:d0:2a:c3:cf:92:fd: 4d:7e:66:a2:b8:4a:43:3c:56:17:ad:ba:38:79:bd:0f:df:6c: 30:c7:6c:37:30:bf:19:0a:95:9e:c6:79:b2:6c:d9:0d:7a:a3: 9f:ad:25:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEX6DOj2uOXQQbco6Pw2QqQ6QkzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTA0MjYwMzM1NTlaFw0yNTA0MjkxMDM4NTlaMDMxMTAvBgNV BAMTKEYxRkZBOEQ3NjdEQzM2QjJGQzk0NDc3NDcwMEMxODJEOTZEQkVDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfJNin9CuMVI4a3gGQy3GEtdX jfoW2VB6TGdOSEaYxQndSRpvPOi+RA4MTPhEx4AiL8j1vcvAOrnjKgoCqPwp5uuT 0e9aao/u4LQYC9Bxdn3YP9QEY5gwZFKrNNKvOMtI2rkiTbLdo4982obeLByCI/XD 1rSCR/0cpW4nucPND1sGYBVFBWhh7KaFpNewK4p0+hVdj8kiXvzwvZltoj3KP2JJ RMZi73FiXNTiJJ5KuQUI5WywoTtP+FmJIF2FYnAU3YqOUEQs5DCiQCsZ5WcXF4ip AcgbFzms3FM1t3/qWpl0t+mu9cvISvOqIEjmvF9nauQGvUbMIEyH3/6taqoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8f+o12fcNrL8lEd0cAwYLZbb7CgwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+pQP8CUIkJrdisFzbuczGz1Mnkb2aMjj0w e1+h3HkRMtimxpNM5QKyf5JUTI0K8EM6dBvTTtYOQueRvjf4vBdIppVo9sCDTGS0 /ZShCOfWB+xnlB5vyAgEz5q3DZ3lxKN6apshRJoDGrXudwrGHHmL+PItJAkCXDCz 1uznS4/fB6FBDAT+vRHO47oYQxdmA2Fz7tcbTqKxcoK8D6060/7vqnGy7pwEYmdt Vu1zJuobn8yQ6uN1iLNiaFZo+rwXkRhTh6Xj59xsJfSmaczH1AdSQ9Aqw8+S/U1+ ZqK4SkM8Vhetujh5vQ/fbDDHbDcwvxkKlZ7GebJs2Q16o5+tJfg= -----END CERTIFICATE-----Generated at Mon Apr 28 06:14:06 2025 by rpki-client