$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: fKwo6TMYaAX+SQ2eZA551fAgv9RbEVUtuyyRF5ayp2U= Subject key identifier: 5A:E2:BB:C7:26:A5:62:93:30:52:01:65:49:EC:F3:01:ED:0D:97:AB Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 60A0C70BD197B0E73107AA5F88B0522ECB5E6F2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 01B2 Signing time: Mon 28 Apr 2025 18:01:41 +0000 Manifest this update: Mon 28 Apr 2025 17:56:41 +0000 Manifest next update: Thu 01 May 2025 22:21:41 +0000 Files and hashes: 1: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: AKPXI5HtK1H69XBtRXRIfvEEobzbxJX9lZLZxxbXfrI=) 2: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a0:c7:0b:d1:97:b0:e7:31:07:aa:5f:88:b0:52:2e:cb:5e:6f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Apr 28 17:56:41 2025 GMT Not After : May 1 22:21:41 2025 GMT Subject: CN=5AE2BBC726A562933052016549ECF301ED0D97AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:32:59:cb:8b:2c:de:fd:c1:27:8f:25:8d: 92:eb:5c:dd:f4:7a:e9:2b:0f:e0:51:02:ec:5b:43: 4a:85:cb:c0:af:84:07:a2:f1:4c:a5:0c:c1:6c:3d: 2a:b4:26:1c:c4:86:ca:36:fc:08:b1:db:d1:94:ab: 75:ed:19:a6:14:ed:fc:fc:bb:af:d1:89:84:07:3e: 8f:1f:a9:85:0f:f0:2a:08:28:f3:ec:97:ae:72:5d: f8:b3:d0:f7:cf:15:b2:5c:cc:d2:8b:ca:3a:f5:5d: 1b:49:80:cc:2c:2c:31:31:13:13:ce:5c:f9:a1:ae: a9:c5:61:c6:f5:a9:1f:17:d6:5e:9b:ae:e2:12:e3: 30:82:2a:72:73:5e:55:15:01:93:b9:a9:78:25:f5: 14:af:57:33:59:48:f4:9c:95:0d:9b:30:81:24:9c: 41:bb:36:ae:29:9f:e2:c0:0a:c4:92:1b:7a:11:2c: a1:e6:ac:8d:33:fc:de:8a:1d:6c:8c:7d:24:ed:2e: a3:6b:63:20:90:e1:91:92:8c:e4:7b:61:03:15:20: 1b:68:79:da:37:29:04:3f:b1:a3:fa:9a:e9:a3:c9: 1b:5a:e8:65:f0:55:37:68:33:4e:0b:0d:33:0e:93: cf:2a:5a:d4:4b:32:46:ae:08:4f:63:1c:da:f8:1a: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:BB:C7:26:A5:62:93:30:52:01:65:49:EC:F3:01:ED:0D:97:AB X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ed:ac:68:e4:c4:4f:6e:d8:aa:b5:87:13:1b:b1:9f:62:df: 0c:31:5c:6c:85:4d:7f:72:e4:5f:04:c6:66:bd:b3:5d:2f:e6: 3d:eb:44:cf:bd:53:a5:6c:e1:4d:8c:f7:43:db:19:1b:55:54: 4b:e4:54:3b:20:5b:2e:72:6c:bf:89:f6:5d:3f:b1:1d:cd:50: 93:f1:9c:d6:43:3a:9e:e7:0e:72:8a:54:61:82:5a:c4:4f:66: 85:ab:5d:23:fb:e0:82:a6:5b:94:3d:df:01:79:c5:c1:62:23: 00:6c:8f:31:26:64:8f:1b:2a:32:0c:e1:69:79:62:85:32:1c: c1:2c:07:68:cc:c7:ed:f4:83:f3:2c:8d:4b:87:33:b7:02:af: 58:94:26:33:30:7a:f6:bf:27:dd:bb:ac:65:c5:d9:bd:ff:6b: 32:67:ef:1b:78:06:61:44:3b:bf:ab:78:2e:e1:d2:f6:c7:0d: fc:f8:e5:d3:66:67:50:04:9b:3f:a6:bd:1f:52:3b:00:4d:d2: a7:83:16:47:fb:cf:39:c1:08:55:b0:0a:f4:b5:e5:b1:f4:ab: 53:3b:70:a2:7a:76:27:83:1e:7e:27:71:b0:23:53:8f:d1:f0: c9:d4:c1:71:28:61:49:b7:fa:16:65:f5:76:fb:49:98:e3:4f: 81:e7:c5:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKDHC9GXsOcxB6pfiLBSLstebywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTA0MjgxNzU2NDFaFw0yNTA1MDEyMjIxNDFaMDMxMTAvBgNV BAMTKDVBRTJCQkM3MjZBNTYyOTMzMDUyMDE2NTQ5RUNGMzAxRUQwRDk3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/zJZy4ss3v3BJ48ljZLrXN30 eukrD+BRAuxbQ0qFy8CvhAei8UylDMFsPSq0JhzEhso2/Aix29GUq3XtGaYU7fz8 u6/RiYQHPo8fqYUP8CoIKPPsl65yXfiz0PfPFbJczNKLyjr1XRtJgMwsLDExExPO XPmhrqnFYcb1qR8X1l6bruIS4zCCKnJzXlUVAZO5qXgl9RSvVzNZSPSclQ2bMIEk nEG7Nq4pn+LACsSSG3oRLKHmrI0z/N6KHWyMfSTtLqNrYyCQ4ZGSjOR7YQMVIBto edo3KQQ/saP6mumjyRta6GXwVTdoM04LDTMOk88qWtRLMkauCE9jHNr4GjETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuK7xyalYpMwUgFlSezzAe0Nl6swHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHtrGjkxE9u2Kq1hxMbsZ9i3wwxXGyFTX9y 5F8Exma9s10v5j3rRM+9U6Vs4U2M90PbGRtVVEvkVDsgWy5ybL+J9l0/sR3NUJPx nNZDOp7nDnKKVGGCWsRPZoWrXSP74IKmW5Q93wF5xcFiIwBsjzEmZI8bKjIM4Wl5 YoUyHMEsB2jMx+30g/MsjUuHM7cCr1iUJjMweva/J927rGXF2b3/azJn7xt4BmFE O7+reC7h0vbHDfz45dNmZ1AEmz+mvR9SOwBN0qeDFkf7zznBCFWwCvS15bH0q1M7 cKJ6dieDHn4ncbAjU4/R8MnUwXEoYUm3+hZl9Xb7SZjjT4HnxeY= -----END CERTIFICATE-----Generated at Tue Apr 29 09:38:27 2025 by rpki-client