$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: vMT2WEq6OGQX5BHWlU/ZtGUrAY93gtOgQJlhfWwh+5A= Subject key identifier: 78:D8:3F:8D:6F:B4:F1:94:92:9E:2E:E3:DF:3A:CA:53:B9:10:6A:D4 Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 1EE40179FFC16BFCEB5F1E81F3A318ADC7A24398 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 0441 Signing time: Mon 28 Apr 2025 10:50:45 +0000 Manifest this update: Mon 28 Apr 2025 10:45:45 +0000 Manifest next update: Thu 01 May 2025 21:51:45 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: 8Q6Ja4+FBCMVjxp75iktXQMgyvElquVgRng+jWYaUXc=) 2: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: aKnOKOXrf8WDLTz9lOnMLQ3rz67XYoyw6eEFmfbGG64=) 3: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: O92swGjER4goYerSQA/hNsMyhySsjrov1vP0Vm1791M=) 4: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=) 5: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: Bkimq3Y+FDCpoXrJVzQHrak+YkAyXPLShZBbOm7jcf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e4:01:79:ff:c1:6b:fc:eb:5f:1e:81:f3:a3:18:ad:c7:a2:43:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Apr 28 10:45:45 2025 GMT Not After : May 1 21:51:45 2025 GMT Subject: CN=78D83F8D6FB4F194929E2EE3DF3ACA53B9106AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:47:4a:4f:34:f1:ea:32:00:55:6d:ab:e0: 08:f0:2b:90:87:f4:c3:28:a2:40:d1:17:af:c8:4e: 5c:f2:40:08:43:b0:45:91:9b:e6:4a:6f:b9:f6:aa: 5f:87:95:3f:bf:84:96:77:ec:53:6e:55:6b:f0:9f: f7:23:d9:af:c1:5f:a2:89:8c:59:fc:08:fd:bf:11: 61:40:35:e8:a3:c4:4d:a5:2a:07:cd:a2:13:93:45: 16:33:03:7f:f1:41:02:29:34:a9:db:88:f8:8d:6b: 2c:57:c8:5d:bc:e8:15:6e:d9:99:69:06:d3:27:63: b3:87:98:27:75:a6:c6:a7:4e:bd:f6:94:50:0b:e3: 09:94:82:23:53:15:a2:bf:15:ff:42:84:0a:eb:af: be:30:e5:50:95:e8:64:47:87:7d:c7:37:4c:72:32: 0b:1d:a5:5f:fc:0d:4e:0b:bc:9a:6c:c1:76:42:67: 1d:b0:7c:4c:e2:11:09:b1:64:49:5a:60:1b:2d:24: 6b:9a:2d:f2:18:e5:69:10:63:b3:47:6b:f3:33:00: af:74:32:be:3a:65:46:cc:60:0d:c2:bb:96:e9:c3: bc:d0:b6:83:c8:95:cb:cc:db:0d:74:7c:7d:ed:ff: eb:07:4d:52:e7:80:55:be:f4:a3:0f:9e:35:dd:12: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D8:3F:8D:6F:B4:F1:94:92:9E:2E:E3:DF:3A:CA:53:B9:10:6A:D4 X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ad:90:c3:e1:c6:08:1b:3d:7d:1a:80:63:db:78:d7:d8:23: de:f5:fd:f4:c9:89:74:10:6a:aa:17:64:e7:43:79:d5:e2:d3: 0e:e4:cb:18:6f:8d:a5:d8:2f:17:3e:75:26:7b:a6:a8:5e:cc: d8:fe:33:c4:55:f5:fd:1e:50:f4:64:a3:fc:96:34:29:de:bd: a9:c0:c8:51:f3:a0:28:1e:32:76:a0:a8:03:40:12:e3:09:d1: c9:0f:24:8d:e6:3d:da:79:ed:8d:d2:26:2c:b0:25:15:55:8e: 8c:73:97:68:c0:a6:bc:b8:0d:fa:de:8a:90:58:c2:40:52:75: 52:f4:d4:d6:9a:4e:74:d1:18:52:50:28:1a:e6:80:31:23:38: 00:ac:5c:9d:bf:02:0c:4c:fa:04:6d:14:38:97:a1:1b:d8:8d: 5f:d5:7e:6b:05:f3:b0:c1:30:fb:ec:74:62:74:99:39:5c:59: 6a:dc:e4:7b:10:2b:2f:ef:3e:f2:58:07:7b:bb:63:54:21:93: b1:dc:d0:cd:77:22:2f:25:5b:c6:e1:97:c3:b1:5a:c5:06:38: 86:57:41:62:6d:68:3a:46:c1:b9:bc:6a:d1:8d:9a:a7:7b:b7: 9b:aa:2e:5c:37:88:7a:3d:50:d6:c0:69:f3:81:13:f7:8c:11: 29:87:c4:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuQBef/Ba/zrXx6B86MYrceiQ5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTA0MjgxMDQ1NDVaFw0yNTA1MDEyMTUxNDVaMDMxMTAvBgNV BAMTKDc4RDgzRjhENkZCNEYxOTQ5MjlFMkVFM0RGM0FDQTUzQjkxMDZBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eUdKTzTx6jIAVW2r4AjwK5CH 9MMookDRF6/ITlzyQAhDsEWRm+ZKb7n2ql+HlT+/hJZ37FNuVWvwn/cj2a/BX6KJ jFn8CP2/EWFANeijxE2lKgfNohOTRRYzA3/xQQIpNKnbiPiNayxXyF286BVu2Zlp BtMnY7OHmCd1psanTr32lFAL4wmUgiNTFaK/Ff9ChArrr74w5VCV6GRHh33HN0xy MgsdpV/8DU4LvJpswXZCZx2wfEziEQmxZElaYBstJGuaLfIY5WkQY7NHa/MzAK90 Mr46ZUbMYA3Cu5bpw7zQtoPIlcvM2w10fH3t/+sHTVLngFW+9KMPnjXdEvTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeNg/jW+08ZSSni7j3zrKU7kQatQwHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWtkMPhxggbPX0agGPbeNfYI971/fTJiXQQ aqoXZOdDedXi0w7kyxhvjaXYLxc+dSZ7pqhezNj+M8RV9f0eUPRko/yWNCnevanA yFHzoCgeMnagqANAEuMJ0ckPJI3mPdp57Y3SJiywJRVVjoxzl2jApry4DfreipBY wkBSdVL01NaaTnTRGFJQKBrmgDEjOACsXJ2/AgxM+gRtFDiXoRvYjV/VfmsF87DB MPvsdGJ0mTlcWWrc5HsQKy/vPvJYB3u7Y1Qhk7Hc0M13Ii8lW8bhl8OxWsUGOIZX QWJtaDpGwbm8atGNmqd7t5uqLlw3iHo9UNbAafOBE/eMESmHxNI= -----END CERTIFICATE-----Generated at Wed Apr 30 16:15:29 2025 by rpki-client