$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: s3MEu4dZlDzNWlBgWLMFD09UlT44hIoPyVvWK0ZHB+w= Subject key identifier: B0:32:FB:16:91:33:B4:9E:65:9B:7F:12:31:14:A6:44:3D:95:2B:52 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 7924279D83A755BFBAA63C5615CCFFB1003CA467 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 04C9 Signing time: Sun 27 Apr 2025 06:50:03 +0000 Manifest this update: Sun 27 Apr 2025 06:45:03 +0000 Manifest next update: Wed 30 Apr 2025 09:28:03 +0000 Files and hashes: 1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: hsPXQKay+qedGG/jMzXptueav18vcMllJ1dIk7iOf1k=) 2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: mqdJ7HYlM61PMJqJpmdFB9Z5+pmuTTfje9nsxJZ+x0s=) 3: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: eP9HYV3PuOgWsaNidklL7fFxAiMdSf/LVzna0rIUQhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 09:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:24:27:9d:83:a7:55:bf:ba:a6:3c:56:15:cc:ff:b1:00:3c:a4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Apr 27 06:45:03 2025 GMT Not After : Apr 30 09:28:03 2025 GMT Subject: CN=B032FB169133B49E659B7F123114A6443D952B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:ff:bc:ca:de:9f:36:fc:9c:4c:3a:65:f3: c3:16:88:8f:08:42:e3:e4:20:d2:cd:41:51:52:8a: a2:5e:0f:29:cf:5d:5e:53:10:fc:e1:7a:05:9a:23: da:7b:56:ae:8a:05:9e:56:c7:55:2b:14:8b:38:30: 5d:34:12:9c:b7:3f:4d:91:7a:e5:55:f7:91:b2:1c: f0:9a:4b:ee:65:1d:48:fe:0b:77:d9:03:2e:d6:b8: 22:88:96:0b:59:f4:b9:57:98:2d:41:27:7a:93:8e: 41:46:f6:f8:c7:f4:94:b6:c4:be:bc:a1:2d:c2:95: 0a:8a:87:9e:fd:80:9b:95:59:95:e3:c0:b3:6c:b8: e1:5e:cd:00:eb:fa:24:e4:2b:0f:93:61:95:a8:bb: b6:a1:55:1c:04:88:ce:1e:24:6e:9b:37:e4:81:3c: 78:cc:fb:2b:fc:0d:b8:36:f0:b2:6e:33:41:0e:1a: 41:ff:59:6a:62:5f:b7:66:61:25:8a:4e:a2:c8:c2: 2b:3b:88:2e:b6:49:8c:11:54:f4:37:6a:b8:1a:16: 14:90:91:5a:96:9c:ef:9a:be:e0:99:14:80:c9:7a: 98:3e:57:29:c3:ee:72:82:07:01:f6:81:6c:bb:ac: c2:3e:22:89:aa:57:f3:46:79:f0:e1:24:1f:d5:ca: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:32:FB:16:91:33:B4:9E:65:9B:7F:12:31:14:A6:44:3D:95:2B:52 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:97:08:b7:e4:6b:a3:15:b9:ee:f9:18:d3:02:83:82:62:49: d2:b1:52:77:ab:f3:42:d5:81:a1:e9:e1:68:45:c8:ee:4d:30: d8:97:29:7f:9d:d9:d9:5d:1d:e2:e1:e9:ab:f6:77:ff:64:61: ac:66:eb:6a:c6:7f:0e:9e:60:9f:eb:85:ed:45:bf:f0:ea:23: 21:c1:e8:6a:f4:4a:20:22:46:7f:88:f1:d3:d1:3b:b9:08:6c: 96:f0:dc:68:73:fe:89:08:50:b6:36:1f:c9:61:0a:e6:97:e9: 16:04:87:14:86:8a:a5:4b:40:fe:d3:60:e0:ef:0a:e4:1b:08: d9:26:b4:41:1f:7b:16:cc:3e:8b:ef:be:97:dc:74:28:f3:34: 51:e0:16:a1:56:1a:8e:f4:67:b7:33:0f:0c:eb:11:00:19:5e: 43:02:ca:23:f6:a5:f8:cf:e8:eb:3b:33:12:1e:d9:97:1a:5e: 89:c3:b8:ab:32:0a:07:eb:f2:c3:a7:3b:28:d9:44:b1:5c:7f: 16:66:1d:69:b2:6f:12:cb:c2:e4:f1:ba:80:9e:58:a7:ab:1b: 03:93:01:0f:c3:9c:88:0d:24:03:60:cf:2d:26:93:63:7f:48: 0f:5b:65:41:c4:3b:2d:ab:15:96:ba:be:e3:8a:f0:d4:37:e3: 94:e7:3e:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSQnnYOnVb+6pjxWFcz/sQA8pGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTA0MjcwNjQ1MDNaFw0yNTA0MzAwOTI4MDNaMDMxMTAvBgNV BAMTKEIwMzJGQjE2OTEzM0I0OUU2NTlCN0YxMjMxMTRBNjQ0M0Q5NTJCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAP+8yt6fNvycTDpl88MWiI8I QuPkINLNQVFSiqJeDynPXV5TEPzhegWaI9p7Vq6KBZ5Wx1UrFIs4MF00Epy3P02R euVV95GyHPCaS+5lHUj+C3fZAy7WuCKIlgtZ9LlXmC1BJ3qTjkFG9vjH9JS2xL68 oS3ClQqKh579gJuVWZXjwLNsuOFezQDr+iTkKw+TYZWou7ahVRwEiM4eJG6bN+SB PHjM+yv8Dbg28LJuM0EOGkH/WWpiX7dmYSWKTqLIwis7iC62SYwRVPQ3argaFhSQ kVqWnO+avuCZFIDJepg+VynD7nKCBwH2gWy7rMI+IomqV/NGefDhJB/VypdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDL7FpEztJ5lm38SMRSmRD2VK1IwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmXCLfka6MVue75GNMCg4JiSdKxUner80LV gaHp4WhFyO5NMNiXKX+d2dldHeLh6av2d/9kYaxm62rGfw6eYJ/rhe1Fv/DqIyHB 6Gr0SiAiRn+I8dPRO7kIbJbw3Ghz/okIULY2H8lhCuaX6RYEhxSGiqVLQP7TYODv CuQbCNkmtEEfexbMPovvvpfcdCjzNFHgFqFWGo70Z7czDwzrEQAZXkMCyiP2pfjP 6Os7MxIe2ZcaXonDuKsyCgfr8sOnOyjZRLFcfxZmHWmybxLLwuTxuoCeWKerGwOT AQ/DnIgNJANgzy0mk2N/SA9bZUHEOy2rFZa6vuOK8NQ345TnPis= -----END CERTIFICATE-----Generated at Mon Apr 28 09:27:05 2025 by rpki-client