$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: udvuHQFH4ApyfcdLlvCE3IHJmtSWcQlNyZG8/q3fFCo= Subject key identifier: 94:36:23:94:F0:65:37:78:91:FF:47:F6:40:05:3E:F3:08:B2:23:FE Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 7250AD5D0A98278910E40A3CA2DD6A7464E90131 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: EF Signing time: Tue 29 Apr 2025 23:00:43 +0000 Manifest this update: Tue 29 Apr 2025 22:55:43 +0000 Manifest next update: Sat 03 May 2025 02:22:43 +0000 Files and hashes: 1: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: GdFQ16ys5THdsOt0JvI+f1x6ys8/DZCpLZHhWmZPVdg=) 2: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: XfgVgf8T6AfobrS9gDPf8Zzb58/Q02iPcrleWnv6oPQ=) 3: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: 8rRzKbXxM7JbqlliFf/wDyC7Rc9CVk2AoWCVylO5lhs=) 4: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 0vbyY37xfecmYZZ06+vwEcy+Hnbk4rhg/muBGmLCtEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:50:ad:5d:0a:98:27:89:10:e4:0a:3c:a2:dd:6a:74:64:e9:01:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Apr 29 22:55:43 2025 GMT Not After : May 3 02:22:43 2025 GMT Subject: CN=94362394F065377891FF47F640053EF308B223FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ec:51:b3:3c:f2:b6:89:e3:a7:d3:06:ed:be: 64:42:b0:1e:a1:84:90:4c:22:ca:a4:de:d0:a4:af: c6:d8:07:07:b2:47:df:55:18:93:71:ab:89:52:f4: 6d:2c:49:7e:ab:d1:eb:ca:c3:6e:c3:4e:81:a4:13: f7:2f:b5:34:c4:9c:24:7e:a6:b7:16:29:dc:60:d7: 38:fa:f0:de:b9:13:b1:df:02:bc:de:36:51:fc:47: 90:56:01:fa:73:9f:5f:4a:2f:55:9f:3a:de:e7:4a: 91:f4:f0:17:cb:03:be:18:c2:de:09:ce:53:0e:e9: 78:be:9b:d5:0c:59:e1:ae:8e:3b:e5:7d:e0:44:19: 2f:ad:9a:f2:1d:a8:7c:36:8f:a2:e7:2d:52:12:47: 16:34:e0:9a:08:b4:07:93:52:35:32:8a:c1:07:e1: d8:9f:19:54:22:d0:60:ce:ce:8f:b6:5d:d4:37:4a: d5:dc:19:14:4a:a9:7c:96:65:ac:89:07:07:e2:7d: 36:39:5f:e4:07:26:cd:58:0e:de:0e:73:2f:0f:60: 17:78:a1:3b:09:cf:27:1b:25:ca:51:bb:6f:e2:53: 8c:3f:a4:79:2a:98:63:af:98:be:2e:49:63:ba:7c: 12:fc:e1:b1:ba:97:ee:5c:47:f9:49:5b:fa:02:dd: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:36:23:94:F0:65:37:78:91:FF:47:F6:40:05:3E:F3:08:B2:23:FE X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7f:1b:a4:bc:14:d7:8d:74:bc:c5:f9:1e:b1:59:9e:a0:f9: 61:2b:78:c3:57:58:b7:4c:09:c1:ea:a7:a1:8c:1f:95:1c:f7: c3:de:18:32:07:dd:51:6e:1a:df:b2:76:f0:b6:d2:e4:f8:39: ce:99:f0:c5:4c:b2:dc:b3:57:cb:eb:dd:83:89:f0:bb:07:7e: b5:bc:2b:64:d1:a5:d1:03:84:dd:91:c3:52:b1:ec:f3:7d:6d: 1c:e1:4d:db:4d:67:2b:fe:35:d9:04:06:b8:c4:ea:50:71:5b: 95:a1:dd:8e:a9:00:40:ad:4d:c0:67:64:c2:89:02:1d:f6:24: 83:50:09:e6:48:4a:f0:e4:a5:9a:0b:4d:1e:8c:73:59:9d:d3: c8:17:f4:7e:18:a4:12:01:39:49:44:0a:6d:ee:9c:23:93:07: b6:36:31:b8:e0:6c:9c:84:a5:a1:f1:db:b7:af:ba:05:6b:88: b6:cf:49:a9:21:53:d3:c6:bc:70:31:fd:fd:b9:f7:94:b8:b0: 7f:6a:5a:39:29:74:a5:24:46:ae:07:7c:95:c0:81:d1:4a:98: 85:23:2c:f6:e4:28:b7:91:04:7b:75:0c:25:c4:fe:37:c5:5f: 9d:07:9d:ee:a4:9c:80:f8:9b:97:e5:d5:78:f4:71:95:dc:f1: 45:84:26:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUclCtXQqYJ4kQ5Ao8ot1qdGTpATEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTA0MjkyMjU1NDNaFw0yNTA1MDMwMjIyNDNaMDMxMTAvBgNV BAMTKDk0MzYyMzk0RjA2NTM3Nzg5MUZGNDdGNjQwMDUzRUYzMDhCMjIzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs7FGzPPK2ieOn0wbtvmRCsB6h hJBMIsqk3tCkr8bYBweyR99VGJNxq4lS9G0sSX6r0evKw27DToGkE/cvtTTEnCR+ prcWKdxg1zj68N65E7HfArzeNlH8R5BWAfpzn19KL1WfOt7nSpH08BfLA74Ywt4J zlMO6Xi+m9UMWeGujjvlfeBEGS+tmvIdqHw2j6LnLVISRxY04JoItAeTUjUyisEH 4difGVQi0GDOzo+2XdQ3StXcGRRKqXyWZayJBwfifTY5X+QHJs1YDt4Ocy8PYBd4 oTsJzycbJcpRu2/iU4w/pHkqmGOvmL4uSWO6fBL84bG6l+5cR/lJW/oC3Re5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlDYjlPBlN3iR/0f2QAU+8wiyI/4wHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIR/G6S8FNeNdLzF+R6xWZ6g+WEreMNXWLdM CcHqp6GMH5Uc98PeGDIH3VFuGt+ydvC20uT4Oc6Z8MVMstyzV8vr3YOJ8LsHfrW8 K2TRpdEDhN2Rw1Kx7PN9bRzhTdtNZyv+NdkEBrjE6lBxW5Wh3Y6pAECtTcBnZMKJ Ah32JINQCeZISvDkpZoLTR6Mc1md08gX9H4YpBIBOUlECm3unCOTB7Y2MbjgbJyE paHx27evugVriLbPSakhU9PGvHAx/f2595S4sH9qWjkpdKUkRq4HfJXAgdFKmIUj LPbkKLeRBHt1DCXE/jfFX50Hne6knID4m5fl1Xj0cZXc8UWEJmw= -----END CERTIFICATE-----Generated at Wed Apr 30 03:47:23 2025 by rpki-client