$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: nRA7uHsg2EefOoaCpq2EwFkFOti/Unw1Xo4cQmLbHIE= Subject key identifier: 47:11:BD:E5:EC:B0:AA:2A:ED:CC:BC:EB:BA:87:62:18:37:3F:04:94 Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 4CB201ECE7C1DE2C662749B41B770006C61B129A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 80 Signing time: Mon 28 Apr 2025 12:21:32 +0000 Manifest this update: Mon 28 Apr 2025 12:16:32 +0000 Manifest next update: Thu 01 May 2025 23:44:32 +0000 Files and hashes: 1: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: IiwJGvJXooBTapkry0rsHVHulyWnAvp0ngUMjLmkAdU=) 2: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: ef7YYSMzAtPt9zZDc7b2VbFvOqrUwp6coiKLTTrdJbk=) 3: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: O/ASHgZeblmxpbkzceq8+yIIFxdV6ZLl5CtvLrpORI4=) 4: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aTzve7Y6mBexH/WsjxWYP1/0CSlzvkwS9M1uSz5WL7A=) 5: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=) 6: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: moFK92Lb7O04I+6FG9VzJZ/FTQ4AaEmINK+chDU1cX4=) 7: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: VZgzSVIUguElIg4473Wsf+Z9jukiZs2B88mq0U4kKU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b2:01:ec:e7:c1:de:2c:66:27:49:b4:1b:77:00:06:c6:1b:12:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Apr 28 12:16:32 2025 GMT Not After : May 1 23:44:32 2025 GMT Subject: CN=4711BDE5ECB0AA2AEDCCBCEBBA876218373F0494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:44:17:5b:bf:51:81:cd:7b:58:84:f0:a4: bb:05:6c:78:0f:ae:0b:a3:af:df:eb:90:c0:79:6d: 16:00:89:4a:8b:36:da:fe:07:2f:fc:6e:0d:ef:f8: 6d:a4:6f:56:a6:cd:a2:b3:e6:4f:aa:7a:d8:14:fc: 5e:1d:16:c2:47:08:12:85:22:cf:ec:50:8c:67:94: 50:9a:e6:ba:73:0a:00:7d:4a:21:17:ed:86:7b:70: 41:7c:57:68:05:5e:18:31:f4:5e:80:44:f3:1d:b3: 87:7e:c8:d2:7a:02:a9:79:b9:d8:b7:6e:74:a6:0b: e1:0b:12:d2:14:4e:36:2c:91:4a:52:4e:a4:bd:00: d7:65:2a:8e:50:3d:28:4e:75:5f:14:67:22:de:58: 81:e4:c6:6d:78:e2:32:06:86:39:cf:82:b9:4a:a8: cd:2b:bb:49:19:f4:ef:ec:c6:03:4f:a3:1a:d8:f8: 2d:5f:0e:2e:bf:c9:d7:54:7d:b6:ed:c7:02:43:11: b7:be:4e:92:ae:ef:ce:ce:f0:de:c3:5e:09:da:d7: a3:a1:0d:c9:82:7e:ae:b5:e6:82:08:51:b6:33:76: de:b3:dd:1c:1f:07:04:93:01:9e:95:ad:87:1a:30: 27:e1:7a:0d:36:d9:1b:41:f5:d2:c5:41:0a:82:e2: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:BD:E5:EC:B0:AA:2A:ED:CC:BC:EB:BA:87:62:18:37:3F:04:94 X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:04:d9:dd:b7:00:52:2f:87:9e:04:27:00:2c:5d:34:34:f2: 78:8e:b1:fb:d6:ba:63:8f:63:52:78:4b:5f:55:6b:df:70:eb: 24:da:f7:b1:52:61:91:2e:88:1d:b6:53:4d:6e:14:04:86:04: 9b:a6:98:7a:ef:7a:c1:28:f6:2a:94:9a:12:74:dc:1b:1d:89: 4a:b5:22:9a:f0:45:2e:d7:49:a2:1c:e9:6c:7a:4b:7f:67:7b: 07:e2:f3:f2:39:18:50:dc:e5:4f:1d:c5:4e:ee:43:3c:2a:e8: 76:18:32:c5:90:3e:52:ee:09:19:e0:a5:20:d7:6f:fc:cd:d2: f5:a8:49:74:90:dc:a2:cf:56:29:94:d7:09:c3:0f:0a:d3:da: 69:95:8a:fd:cc:d6:64:b3:60:97:8f:e3:7e:6e:bd:e5:ba:37: c4:69:27:19:f1:b5:86:ea:87:fa:89:3f:1e:60:85:2b:61:9b: 0c:d7:04:01:da:5f:6d:94:61:5f:09:78:b6:49:da:ba:58:b8: 69:fa:22:d2:b9:1b:8c:7d:cb:d4:54:f8:45:d2:31:55:0e:be: 5f:46:ee:fc:9e:72:89:78:ed:c5:68:7d:55:a3:9f:df:a5:f1: b4:25:de:18:9a:67:f4:26:df:47:27:73:d0:94:1c:8e:8f:06: 43:f0:47:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLIB7OfB3ixmJ0m0G3cABsYbEpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTA0MjgxMjE2MzJaFw0yNTA1MDEyMzQ0MzJaMDMxMTAvBgNV BAMTKDQ3MTFCREU1RUNCMEFBMkFFRENDQkNFQkJBODc2MjE4MzczRjA0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9EQXW79Rgc17WITwpLsFbHgP rgujr9/rkMB5bRYAiUqLNtr+By/8bg3v+G2kb1amzaKz5k+qetgU/F4dFsJHCBKF Is/sUIxnlFCa5rpzCgB9SiEX7YZ7cEF8V2gFXhgx9F6ARPMds4d+yNJ6Aql5udi3 bnSmC+ELEtIUTjYskUpSTqS9ANdlKo5QPShOdV8UZyLeWIHkxm144jIGhjnPgrlK qM0ru0kZ9O/sxgNPoxrY+C1fDi6/yddUfbbtxwJDEbe+TpKu787O8N7DXgna16Oh DcmCfq615oIIUbYzdt6z3RwfBwSTAZ6VrYcaMCfheg022RtB9dLFQQqC4gvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxG95eywqirtzLzruodiGDc/BJQwHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8E2d23AFIvh54EJwAsXTQ08niOsfvWumOP Y1J4S19Va99w6yTa97FSYZEuiB22U01uFASGBJummHrvesEo9iqUmhJ03BsdiUq1 IprwRS7XSaIc6Wx6S39newfi8/I5GFDc5U8dxU7uQzwq6HYYMsWQPlLuCRngpSDX b/zN0vWoSXSQ3KLPVimU1wnDDwrT2mmViv3M1mSzYJeP435uveW6N8RpJxnxtYbq h/qJPx5ghSthmwzXBAHaX22UYV8JeLZJ2rpYuGn6ItK5G4x9y9RU+EXSMVUOvl9G 7vyecol47cVofVWjn9+l8bQl3hiaZ/Qm30cnc9CUHI6PBkPwRyQ= -----END CERTIFICATE-----Generated at Wed Apr 30 08:28:56 2025 by rpki-client