$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: biTmVxTedfbAQ4AVae0XCampGM8agghkqRqf0ehezpk= Subject key identifier: 67:3F:1F:43:34:AD:D1:AB:8A:78:16:C1:4C:61:63:76:CC:87:49:9D Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 79359F49D884497841D4376DD34E777D666FCDDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 1F Signing time: Sun 27 Apr 2025 00:52:16 +0000 Manifest this update: Sun 27 Apr 2025 00:47:16 +0000 Manifest next update: Wed 30 Apr 2025 10:22:16 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: 5qQyyMCdhCXNVI3WGdKBINU4jxlYWoIrkm6iHCBlu+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 10:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:35:9f:49:d8:84:49:78:41:d4:37:6d:d3:4e:77:7d:66:6f:cd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Apr 27 00:47:16 2025 GMT Not After : Apr 30 10:22:16 2025 GMT Subject: CN=673F1F4334ADD1AB8A7816C14C616376CC87499D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:2f:ba:c8:52:58:42:ee:9d:7c:22:09:36: 13:57:7b:97:85:b2:51:0c:a0:96:85:b2:f7:e8:ce: 58:e1:8e:31:a8:d4:84:33:87:b2:79:0c:8e:74:5f: e2:85:a8:cc:c7:d0:ac:66:67:3c:34:ed:05:c0:19: 3d:e1:c3:25:02:98:b7:e1:5a:bd:6d:9a:86:53:ee: 44:67:67:41:cf:6e:08:44:c0:98:36:e0:e4:eb:65: ab:6f:3e:e8:5d:12:e0:4b:57:ef:e1:5b:cc:7c:2b: 25:4f:91:9a:44:aa:6a:74:89:8a:35:2c:8d:04:6f: ce:73:ad:f5:11:f3:d9:5a:ac:1a:2a:13:12:0a:e5: 3f:48:58:1e:e0:73:ca:21:a6:b4:cf:5f:21:5e:34: d6:50:e1:9e:01:e1:2b:dc:4f:97:b4:ec:28:18:f9: c7:4c:94:a0:26:66:8e:fa:9c:9d:42:7b:ec:cf:a7: 20:d8:19:4a:5c:37:6b:67:a6:e7:10:9a:39:1d:1c: c4:cc:c1:d1:a7:6c:bd:81:f1:c5:c0:ac:8b:e1:41: 9f:9b:d6:c3:1d:c9:10:92:8b:05:e8:3e:e5:0b:1e: 10:2c:38:79:26:77:51:99:b4:29:36:a8:fc:61:d8: 08:d5:b7:1f:ca:e0:fc:14:e8:a3:e1:d6:44:df:5f: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3F:1F:43:34:AD:D1:AB:8A:78:16:C1:4C:61:63:76:CC:87:49:9D X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ed:70:6f:68:d6:2b:df:e4:65:95:bb:ff:0e:3f:c2:cd:9a: 57:7a:69:b5:89:8e:7a:27:44:1a:f6:d3:46:8f:c8:67:5d:6a: 75:88:7d:bc:0b:89:3c:07:7b:6d:64:38:88:93:ab:b3:c1:14: bf:d9:02:02:8a:75:7e:ad:fb:48:a2:22:50:e7:93:13:da:5b: 81:eb:69:2b:8e:8a:87:3b:48:28:ed:0d:77:ef:69:a3:5b:fa: 80:68:d6:c8:f8:b8:30:92:2e:29:a8:6f:93:e8:75:ef:e5:71: 3c:cd:bf:0c:0b:dc:01:19:df:42:e4:a5:f8:31:fe:17:23:13: 70:21:cd:c6:ec:6d:27:5e:67:d9:9d:e0:a3:9c:c9:38:ec:cc: 51:b8:bf:1a:6f:c2:06:97:4b:8d:92:44:d3:98:59:d0:b4:aa: e7:4b:b3:54:74:6b:a2:a6:b3:dc:2e:93:f4:1e:22:c2:81:d9: a6:71:ab:8f:0a:1e:71:29:0d:c7:97:71:b6:99:e0:3c:e4:b3: af:f6:ea:69:a5:ea:09:21:f0:a0:8f:38:8d:2a:18:e8:2f:21: b2:e0:d4:dc:29:f9:33:07:2a:6b:1c:69:9e:3c:b0:c6:57:85: 32:79:57:f4:56:70:35:4e:61:da:ff:9d:70:f8:58:81:e8:3e: 4c:0d:11:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTWfSdiESXhB1Ddt0053fWZvzdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTA0MjcwMDQ3MTZaFw0yNTA0MzAxMDIyMTZaMDMxMTAvBgNV BAMTKDY3M0YxRjQzMzRBREQxQUI4QTc4MTZDMTRDNjE2Mzc2Q0M4NzQ5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNy+6yFJYQu6dfCIJNhNXe5eF slEMoJaFsvfozljhjjGo1IQzh7J5DI50X+KFqMzH0KxmZzw07QXAGT3hwyUCmLfh Wr1tmoZT7kRnZ0HPbghEwJg24OTrZatvPuhdEuBLV+/hW8x8KyVPkZpEqmp0iYo1 LI0Eb85zrfUR89larBoqExIK5T9IWB7gc8ohprTPXyFeNNZQ4Z4B4SvcT5e07CgY +cdMlKAmZo76nJ1Ce+zPpyDYGUpcN2tnpucQmjkdHMTMwdGnbL2B8cXArIvhQZ+b 1sMdyRCSiwXoPuULHhAsOHkmd1GZtCk2qPxh2AjVtx/K4PwU6KPh1kTfX9DPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZz8fQzSt0auKeBbBTGFjdsyHSZ0wHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7tcG9o1ivf5GWVu/8OP8LNmld6abWJjnon RBr200aPyGddanWIfbwLiTwHe21kOIiTq7PBFL/ZAgKKdX6t+0iiIlDnkxPaW4Hr aSuOioc7SCjtDXfvaaNb+oBo1sj4uDCSLimob5Pode/lcTzNvwwL3AEZ30Lkpfgx /hcjE3AhzcbsbSdeZ9md4KOcyTjszFG4vxpvwgaXS42SRNOYWdC0qudLs1R0a6Km s9wuk/QeIsKB2aZxq48KHnEpDceXcbaZ4Dzks6/26mml6gkh8KCPOI0qGOgvIbLg 1Nwp+TMHKmscaZ48sMZXhTJ5V/RWcDVOYdr/nXD4WIHoPkwNEes= -----END CERTIFICATE-----Generated at Tue Apr 29 09:32:48 2025 by rpki-client