$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: +2g1CX7CURkHvcDW8mcTTqLOnCKnlAEheF/TJv56lSE= Subject key identifier: 6F:7C:D2:98:35:66:FB:51:6F:1B:77:4B:D6:42:A9:C3:CD:1D:81:BE Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 464E8EB42302A0621F49BB903808FFECD63B64BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 01A1 Signing time: Wed 30 Apr 2025 17:51:21 +0000 Manifest this update: Wed 30 Apr 2025 17:46:21 +0000 Manifest next update: Sun 04 May 2025 04:21:21 +0000 Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: aL6KMSHOhp+8h4nLkgJ4BNjeB3Q0sDME36167pFPzeU=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: yfirY/IdmmUBXQP+agxLPC5R2mzKmb/7B1nbgYo1Od4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4e:8e:b4:23:02:a0:62:1f:49:bb:90:38:08:ff:ec:d6:3b:64:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Apr 30 17:46:21 2025 GMT Not After : May 4 04:21:21 2025 GMT Subject: CN=6F7CD2983566FB516F1B774BD642A9C3CD1D81BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:93:90:e5:b5:47:51:78:13:70:a1:2a:a8:ca: a5:87:db:98:ef:27:69:ef:84:a9:e6:7c:07:44:f6: 21:4d:8b:18:63:50:8e:9f:c8:2a:d2:ec:c7:3e:f9: b3:bf:89:6c:d9:91:44:dd:80:70:48:89:42:c5:b4: 6a:6e:c6:e8:aa:74:47:da:0e:c3:3b:5e:df:f4:01: 49:c6:76:0b:95:70:c7:a2:03:d6:5d:a1:0c:e4:49: 47:63:34:34:8b:01:db:ec:57:39:5a:27:56:cc:2e: ff:14:46:18:22:42:39:8a:ae:c2:ec:fd:51:2b:0b: 3c:3f:c0:9f:62:e6:7e:b5:6c:51:b3:53:c7:44:48: 0e:f7:ec:f3:fd:5c:21:0f:c4:c3:74:b1:e3:f8:51: 26:05:3a:c1:79:ef:0e:d6:36:5a:e2:49:59:be:02: 54:59:2e:f1:46:e1:d2:c6:45:6c:3f:f3:c3:b1:22: 8d:b0:e2:54:3a:6d:f7:91:71:21:0a:70:08:d4:e4: 0e:a5:f8:b0:ff:2c:6a:67:c8:f1:b4:d2:92:b1:60: fd:0e:e2:73:17:f6:76:25:97:a4:f5:50:c9:47:1b: 01:67:06:eb:ed:da:72:1a:d8:e2:9d:e5:83:18:ed: 5e:50:54:24:8c:8a:be:d3:f0:5f:ad:5a:95:0b:92: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7C:D2:98:35:66:FB:51:6F:1B:77:4B:D6:42:A9:C3:CD:1D:81:BE X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c4:27:b9:f4:5b:55:2e:65:15:2d:2b:fb:be:46:eb:6d:35: 6e:af:cd:27:2f:10:b3:df:dd:ef:a1:ac:6e:79:f9:24:ad:8d: 38:e0:50:8c:15:1b:34:d7:b4:f2:b9:04:d2:eb:ce:c7:73:41: 31:73:d4:cc:ef:9c:36:04:b3:b7:2b:bc:9a:64:aa:f4:8d:94: 7a:04:64:18:cb:55:c6:c2:7a:6b:69:41:87:d1:07:e2:e7:01: cf:5c:15:7a:f3:e7:d3:8d:af:86:5f:11:bf:d3:8a:32:3d:30: 3e:a0:14:29:d7:07:cc:6a:a4:25:19:be:7b:38:af:82:fc:7a: 53:10:67:55:ea:c2:3c:f8:1b:3c:d4:a5:ee:1f:90:9a:6a:ab: bf:85:6f:e8:e9:c6:0f:67:10:65:19:ef:b7:90:f9:f2:5b:10: 67:f2:6e:07:a6:f2:3b:c9:78:6c:de:f3:ca:64:75:45:01:23: 2c:ca:08:32:0b:49:eb:6f:83:e1:e1:be:9c:fc:22:4d:a5:6f: 74:e0:f6:b1:d8:99:a0:3f:8a:dd:d9:a0:5a:92:fb:07:7b:b4: 06:a8:d2:56:92:3a:d7:50:9b:d9:1c:9b:e2:e2:a1:15:ed:b3: 30:00:2d:5b:fb:80:1f:fa:6e:22:59:fb:9b:da:a3:4b:47:1f: a3:10:94:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURk6OtCMCoGIfSbuQOAj/7NY7ZLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNTA0MzAxNzQ2MjFaFw0yNTA1MDQwNDIxMjFaMDMxMTAvBgNV BAMTKDZGN0NEMjk4MzU2NkZCNTE2RjFCNzc0QkQ2NDJBOUMzQ0QxRDgxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDck5DltUdReBNwoSqoyqWH25jv J2nvhKnmfAdE9iFNixhjUI6fyCrS7Mc++bO/iWzZkUTdgHBIiULFtGpuxuiqdEfa DsM7Xt/0AUnGdguVcMeiA9ZdoQzkSUdjNDSLAdvsVzlaJ1bMLv8URhgiQjmKrsLs /VErCzw/wJ9i5n61bFGzU8dESA737PP9XCEPxMN0seP4USYFOsF57w7WNlriSVm+ AlRZLvFG4dLGRWw/88OxIo2w4lQ6bfeRcSEKcAjU5A6l+LD/LGpnyPG00pKxYP0O 4nMX9nYll6T1UMlHGwFnBuvt2nIa2OKd5YMY7V5QVCSMir7T8F+tWpULkqddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3zSmDVm+1FvG3dL1kKpw80dgb4wHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnEJ7n0W1UuZRUtK/u+RuttNW6vzScvELPf 3e+hrG55+SStjTjgUIwVGzTXtPK5BNLrzsdzQTFz1MzvnDYEs7crvJpkqvSNlHoE ZBjLVcbCemtpQYfRB+LnAc9cFXrz59ONr4ZfEb/TijI9MD6gFCnXB8xqpCUZvns4 r4L8elMQZ1Xqwjz4GzzUpe4fkJpqq7+Fb+jpxg9nEGUZ77eQ+fJbEGfybgem8jvJ eGze88pkdUUBIyzKCDILSetvg+Hhvpz8Ik2lb3Tg9rHYmaA/it3ZoFqS+wd7tAao 0laSOtdQm9kcm+LioRXtszAALVv7gB/6biJZ+5vao0tHH6MQlFo= -----END CERTIFICATE-----Generated at Wed Apr 30 20:58:49 2025 by rpki-client