$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: XVBVHNOwY/e5W7T5Py2BWnt4+NHKyvrvAY071JH9TnQ= Subject key identifier: 84:CD:56:7C:09:1D:4F:5D:17:26:2F:5B:5B:A9:9E:EE:D7:33:F2:E0 Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 6B8BC9C786254E76849DA01CF536D8C47BA72953 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 0170 Signing time: Sun 27 Apr 2025 11:02:13 +0000 Manifest this update: Sun 27 Apr 2025 10:57:13 +0000 Manifest next update: Wed 30 Apr 2025 22:18:13 +0000 Files and hashes: 1: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: qNLSNSyoRSqq66rE3tVrbbxeIYZqB1Bw0+wP79LTdOY=) 2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: LIbGQcjTGWGxJqCR/9o7Sf1Rl1mg0hzyvdT64dJ+oqM=) 3: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: hDvNQGHewkHzFw/sQel6+FWEhiaMV4fGC8RWTG6o1To=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 22:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8b:c9:c7:86:25:4e:76:84:9d:a0:1c:f5:36:d8:c4:7b:a7:29:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Apr 27 10:57:13 2025 GMT Not After : Apr 30 22:18:13 2025 GMT Subject: CN=84CD567C091D4F5D17262F5B5BA99EEED733F2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:bf:f2:51:4d:ba:af:99:11:d5:b6:de:fe: bb:ea:bd:ba:f2:5e:9b:f9:cb:38:33:3b:67:27:a4: a5:5f:35:2f:8f:9a:ab:2a:5d:be:23:a2:ae:2b:09: 39:15:4b:b8:92:6d:23:95:6e:91:9a:9f:74:1c:ca: 9a:16:cc:66:e5:b4:f3:5b:57:f3:53:cd:85:52:5f: cc:ab:9d:b5:05:0e:fc:ce:ae:e1:58:38:d1:ad:b8: 15:4f:b7:93:97:8f:84:dc:67:1a:66:4f:49:c8:c0: 57:af:07:c2:25:ba:7e:cb:3d:4f:75:af:19:93:9c: f6:9f:d7:6f:12:29:c7:da:aa:ef:9b:58:21:a3:f2: 18:e7:ef:03:74:f8:57:1e:2c:80:b1:9f:12:3b:22: ca:ad:85:02:34:6e:38:62:4b:f4:ed:81:b5:69:7e: b7:f6:47:79:a3:d1:95:37:61:f2:1b:2a:dd:be:a6: 95:79:4e:4a:19:17:56:28:46:85:a6:98:ea:c3:77: d6:e6:2d:1f:cb:db:77:0f:a6:c5:dd:91:33:5f:10: 74:98:ff:c7:9f:ce:50:76:19:ec:3c:e3:66:84:16: f6:f3:3b:46:6c:59:7d:ec:5c:6b:e9:f6:e2:94:76: ca:af:92:4a:55:3a:b0:0f:3a:e8:20:64:69:9d:d5: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CD:56:7C:09:1D:4F:5D:17:26:2F:5B:5B:A9:9E:EE:D7:33:F2:E0 X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:36:a8:f0:92:cd:92:ee:c5:f4:18:1a:48:b9:ba:4a:85:fa: d6:d0:f2:8c:b3:ce:f4:b8:c2:d3:cf:61:d8:87:d8:86:25:e8: 14:94:31:48:f9:dd:89:69:f4:4f:ed:7c:e7:2a:d4:4c:6d:ee: 6b:d1:f9:5a:3d:a7:ae:77:50:61:51:2b:f1:04:8b:07:2b:f0: b6:05:37:b5:03:c4:51:0c:a9:e7:1e:bc:8b:86:8a:4a:0e:16: 13:7e:55:7d:b8:93:3c:24:07:0f:7b:a7:3e:f3:29:0c:26:12: 59:69:e1:aa:2b:53:29:bf:c8:ea:96:f7:a3:7a:a6:29:e7:ef: 23:e9:da:f4:ab:95:35:8c:f3:ee:b1:9a:1a:ed:7e:b3:d8:0e: 62:e7:c2:44:3e:a0:7f:ed:b3:ba:7a:6c:2c:5f:d1:a2:54:5c: da:27:25:d1:fd:65:2f:d2:f8:bd:c6:eb:f8:0e:20:50:51:c0: be:6c:33:4f:d6:cc:00:b2:dc:70:d6:40:f9:2a:04:cb:c5:c6: 79:b6:9f:07:33:d7:d9:20:a0:22:7b:9c:38:5f:64:89:ae:11: f8:d6:bc:28:7a:1d:1b:20:5c:5b:31:62:22:3a:48:1a:ef:db: 06:f1:c7:66:3f:77:5c:2a:b5:e0:81:60:43:10:85:ae:eb:17: 97:99:fc:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4vJx4YlTnaEnaAc9TbYxHunKVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNTA0MjcxMDU3MTNaFw0yNTA0MzAyMjE4MTNaMDMxMTAvBgNV BAMTKDg0Q0Q1NjdDMDkxRDRGNUQxNzI2MkY1QjVCQTk5RUVFRDczM0YyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfr/yUU26r5kR1bbe/rvqvbry Xpv5yzgzO2cnpKVfNS+PmqsqXb4joq4rCTkVS7iSbSOVbpGan3QcypoWzGbltPNb V/NTzYVSX8yrnbUFDvzOruFYONGtuBVPt5OXj4TcZxpmT0nIwFevB8Ilun7LPU91 rxmTnPaf128SKcfaqu+bWCGj8hjn7wN0+FceLICxnxI7IsqthQI0bjhiS/TtgbVp frf2R3mj0ZU3YfIbKt2+ppV5TkoZF1YoRoWmmOrDd9bmLR/L23cPpsXdkTNfEHSY /8efzlB2Gew842aEFvbzO0ZsWX3sXGvp9uKUdsqvkkpVOrAPOuggZGmd1b99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhM1WfAkdT10XJi9bW6me7tcz8uAwHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGw2qPCSzZLuxfQYGki5ukqF+tbQ8oyzzvS4 wtPPYdiH2IYl6BSUMUj53Ylp9E/tfOcq1Ext7mvR+Vo9p653UGFRK/EEiwcr8LYF N7UDxFEMqecevIuGikoOFhN+VX24kzwkBw97pz7zKQwmEllp4aorUym/yOqW96N6 pinn7yPp2vSrlTWM8+6xmhrtfrPYDmLnwkQ+oH/ts7p6bCxf0aJUXNonJdH9ZS/S +L3G6/gOIFBRwL5sM0/WzACy3HDWQPkqBMvFxnm2nwcz19kgoCJ7nDhfZImuEfjW vCh6HRsgXFsxYiI6SBrv2wbxx2Y/d1wqteCBYEMQha7rF5eZ/Eg= -----END CERTIFICATE-----Generated at Mon Apr 28 00:45:00 2025 by rpki-client