$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: jD36x40UXDKtQDeh/WLQgFG/GwKp+ZYcF9Aye0psfyw= Subject key identifier: 39:79:D4:7C:1D:ED:28:D4:6D:95:23:C9:0F:82:20:70:E6:FD:C2:F2 Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 097CAFC5A808E7AEA9E77D6CF7A1689C5D1995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 04C8 Signing time: Mon 28 Apr 2025 09:40:38 +0000 Manifest this update: Mon 28 Apr 2025 09:35:38 +0000 Manifest next update: Thu 01 May 2025 16:43:38 +0000 Files and hashes: 1: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: PBS24O+Ag988ovNHdwwWEYP3U+1tu1CqBmIH18hjG6M=) 2: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: E+KuCnpDJswfYrMDV5pvCqpud+lNA7NpDYnh/LQt9Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7c:af:c5:a8:08:e7:ae:a9:e7:7d:6c:f7:a1:68:9c:5d:19:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: Apr 28 09:35:38 2025 GMT Not After : May 1 16:43:38 2025 GMT Subject: CN=3979D47C1DED28D46D9523C90F822070E6FDC2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b5:c1:85:d6:47:80:e2:84:c2:db:c0:a2:4f: d3:c5:4d:20:d1:5e:80:5e:a5:3e:9e:f2:3c:82:be: 5d:ef:7f:e4:c6:c6:1a:d9:fc:83:cc:03:14:87:ca: 42:dc:7b:a2:ba:95:18:1c:ca:e3:ef:6c:f7:51:10: df:4e:15:bd:5c:58:21:27:8c:db:71:5f:e0:5f:aa: 1f:db:61:4e:72:e9:c6:48:90:09:ff:af:60:5c:4c: 8e:69:b1:e4:16:e3:a7:92:9c:a0:5f:bb:9c:d8:20: 35:c1:0c:3b:1b:4a:56:04:08:a7:ed:c9:b2:c1:c1: ee:dc:31:db:92:46:1b:ce:ff:68:e7:0a:ec:3e:99: 67:f7:49:22:b5:29:fe:94:2e:53:5f:88:73:04:c1: f6:bb:9e:2f:3a:6d:e7:a9:b3:60:bb:e8:d6:ee:0f: 54:b1:f4:20:48:36:ca:7b:88:43:e9:97:d2:ac:2b: b4:47:90:20:3e:ac:f1:b2:7e:d1:08:f2:87:c5:86: 3e:df:9e:d0:c3:f4:f8:c5:e1:a1:9a:a9:55:55:29: 54:98:c8:f3:d2:d0:42:89:fc:11:7a:7a:22:82:cc: e9:a7:fb:9e:7d:ae:ca:33:72:83:8d:13:5d:46:43: cd:a8:6d:06:3d:41:34:e7:28:f8:86:21:69:06:eb: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:D4:7C:1D:ED:28:D4:6D:95:23:C9:0F:82:20:70:E6:FD:C2:F2 X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:30:3d:4d:89:5a:67:cb:e2:79:6a:15:c5:9f:66:7f:a0:59: f7:0d:87:b2:1a:f7:c2:0a:3a:45:28:38:24:8a:65:e0:da:57: da:29:c5:7c:51:37:2a:88:a0:14:d0:83:0f:e8:e1:21:b1:9d: 3c:fa:a8:7e:86:5b:d1:61:6d:f4:6c:0d:69:43:15:2a:a5:fb: cf:70:da:20:8c:0b:8c:4d:1c:3c:26:91:33:a3:69:59:22:60: ac:1e:31:d4:31:27:50:7a:38:a8:06:28:66:6c:ed:a2:e2:1b: fc:aa:1f:86:fc:ba:00:4a:db:0c:53:62:de:a2:e8:9f:2d:12: bb:85:07:fc:d6:59:b3:07:3a:8c:7d:7c:cb:6e:dc:f1:02:2c: 38:94:a1:db:58:14:cf:12:68:e6:db:c5:ac:75:97:a6:83:36: 1e:41:3f:ea:2d:77:30:1d:1e:18:d7:24:d7:32:d9:5f:29:8c: 9d:60:a2:b4:a0:69:ec:3f:81:c2:68:b9:b7:88:1a:21:4e:2a: 8c:02:08:e0:5d:bc:c3:9f:b9:d3:08:16:08:94:4b:f2:9c:34: 4d:3c:ed:08:d3:d7:bb:bf:f5:9e:58:d5:69:f8:76:b4:4f:8f: ed:99:89:87:23:34:4e:bc:af:e4:a2:06:03:4b:36:12:a6:37: 80:a5:e1:8a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITCXyvxagI566p531s96FonF0ZlTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5MTlCNjBFNEQ3RTExNzFCNjYyNEYzMThBREExQjc0NTAy QTNBMDE4MB4XDTI1MDQyODA5MzUzOFoXDTI1MDUwMTE2NDMzOFowMzExMC8GA1UE AxMoMzk3OUQ0N0MxREVEMjhENDZEOTUyM0M5MEY4MjIwNzBFNkZEQzJGMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPW1wYXWR4DihMLbwKJP08VNINFe gF6lPp7yPIK+Xe9/5MbGGtn8g8wDFIfKQtx7orqVGBzK4+9s91EQ304VvVxYISeM 23Ff4F+qH9thTnLpxkiQCf+vYFxMjmmx5Bbjp5KcoF+7nNggNcEMOxtKVgQIp+3J ssHB7twx25JGG87/aOcK7D6ZZ/dJIrUp/pQuU1+IcwTB9rueLzpt56mzYLvo1u4P VLH0IEg2ynuIQ+mX0qwrtEeQID6s8bJ+0Qjyh8WGPt+e0MP0+MXhoZqpVVUpVJjI 89LQQon8EXp6IoLM6af7nn2uyjNyg40TXUZDzahtBj1BNOco+IYhaQbroxsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ5edR8He0o1G2VI8kPgiBw5v3C8jAfBgNVHSME GDAWgBSRm2Dk1+EXG2Yk8xitobdFAqOgGDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcw MGFlZDFkLTk0YzktNDlhNi1hNjA5LTg4MmUwM2NkMDdiYS8wLzkxOUI2MEU0RDdF MTE3MUI2NjI0RjMxOEFEQTFCNzQ1MDJBM0EwMTguY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi85MTlCNjBFNEQ3RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNB MDE4LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83MDBhZWQxZC05NGM5LTQ5YTYtYTYw OS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3RTExNzFCNjYyNEYzMThBREExQjc0 NTAyQTNBMDE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAeTA9TYlaZ8vieWoVxZ9mf6BZ9w2Hshr3wgo6 RSg4JIpl4NpX2inFfFE3KoigFNCDD+jhIbGdPPqofoZb0WFt9GwNaUMVKqX7z3Da IIwLjE0cPCaRM6NpWSJgrB4x1DEnUHo4qAYoZmztouIb/Kofhvy6AErbDFNi3qLo ny0Su4UH/NZZswc6jH18y27c8QIsOJSh21gUzxJo5tvFrHWXpoM2HkE/6i13MB0e GNck1zLZXymMnWCitKBp7D+Bwmi5t4gaIU4qjAII4F28w5+50wgWCJRL8pw0TTzt CNPXu7/1nljVafh2tE+P7ZmJhyM0Tryv5KIGA0s2EqY3gKXhig== -----END CERTIFICATE-----Generated at Wed Apr 30 03:06:20 2025 by rpki-client