$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: tK8JkJ53/K+cQx85dJR+WfP9ZdHuG2E7VBgO3jfJuYA= Subject key identifier: B6:AA:1E:DC:97:40:20:94:8E:D1:53:F8:26:0E:51:25:07:27:F3:C0 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 52DF407BE29C7B77EC53E2BBEDF527A6A1B8C53E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 01CA Signing time: Fri 02 May 2025 12:21:06 +0000 Manifest this update: Fri 02 May 2025 12:16:06 +0000 Manifest next update: Mon 05 May 2025 23:56:06 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: U01TYUZbFCv+3QTAy95rFR0tiYS5DFOfWQ3BAyq8zg4=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 23:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:df:40:7b:e2:9c:7b:77:ec:53:e2:bb:ed:f5:27:a6:a1:b8:c5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: May 2 12:16:06 2025 GMT Not After : May 5 23:56:06 2025 GMT Subject: CN=B6AA1EDC974020948ED153F8260E51250727F3C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:d8:42:6d:a0:33:df:80:63:a0:9f:74:d8: e4:60:06:88:4f:79:da:49:eb:85:06:4e:30:0f:ee: 43:2e:68:e2:4d:a1:7e:13:d7:c7:03:7b:1e:93:ac: ae:f7:40:95:e7:ff:cb:01:68:84:78:f7:1e:0e:29: 4b:44:f0:bd:d0:7e:7d:85:22:50:3e:3a:71:32:ba: 43:34:68:df:3e:52:b8:5c:cd:57:ef:7e:a3:a2:42: 63:0c:df:66:df:ed:ab:ba:c3:f5:d4:d0:bd:8d:40: 1b:44:ae:ab:88:67:b9:be:d8:d4:8d:55:73:de:92: 61:a3:cf:44:26:aa:c0:b9:bc:2c:91:ac:38:58:b8: 58:8c:e6:7e:69:6a:ca:48:c4:e0:c0:ed:2a:24:5a: ba:ae:27:5c:68:d1:a6:4a:45:e9:3f:ef:cd:59:4d: 6b:45:72:7a:7a:83:b1:e0:55:56:5d:ba:38:f7:ef: 2a:69:21:ae:ec:1b:9c:b9:58:4c:bd:07:9f:5e:c5: 01:97:d2:e1:34:cc:48:5e:5e:90:61:1b:8e:67:1f: f1:30:8b:fd:2e:c0:d5:8c:6e:cb:04:59:70:31:e5: 38:af:bb:c3:f5:1e:a1:ef:1d:61:e0:73:92:b8:69: b0:ec:30:be:fe:87:3c:af:04:37:a7:c7:c0:62:46: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:1E:DC:97:40:20:94:8E:D1:53:F8:26:0E:51:25:07:27:F3:C0 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:27:11:41:03:b2:4d:78:75:1a:2b:24:df:56:d2:a9:b3:ac: fc:3c:d8:b5:5d:fa:b5:4b:7a:c3:ab:dd:6c:65:c0:90:71:9b: 54:8e:44:20:3a:df:ea:43:31:bd:ca:fe:6c:02:ea:b6:49:d1: 1f:88:d9:1d:27:27:ec:d2:f1:13:e1:4f:ba:b2:92:b1:52:f9: f3:03:af:50:a8:89:b7:41:90:c8:ad:6f:6d:ea:ed:90:a4:96: c6:da:00:ca:76:1a:68:4c:e6:76:84:fd:8f:9f:2d:7a:93:d3: 93:76:83:e6:78:de:05:bd:7b:39:3e:51:4e:bf:23:c1:22:78: 98:72:bf:9f:d3:0b:8c:43:36:df:df:3e:36:3b:52:2f:17:e4: d2:2d:ed:6a:76:0d:11:56:af:e7:3e:32:69:1a:75:d2:fd:de: ab:0b:d4:89:4e:2d:ae:a7:f7:8b:f0:d3:3a:8f:ed:78:83:31: be:ad:37:d9:1c:1b:74:6a:9e:88:22:cf:7b:de:38:74:84:1f: 85:bc:53:e8:60:5b:e7:88:0e:1b:d1:8b:b2:5f:9c:a9:71:1b: 54:19:48:e4:f1:a6:17:e5:4f:56:13:68:d5:4d:b1:c8:13:d1: 07:3d:ec:bf:95:79:08:1a:0f:66:af:12:cb:d4:a9:7d:4e:8c: 95:37:d3:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUt9Ae+Kce3fsU+K77fUnpqG4xT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTA1MDIxMjE2MDZaFw0yNTA1MDUyMzU2MDZaMDMxMTAvBgNV BAMTKEI2QUExRURDOTc0MDIwOTQ4RUQxNTNGODI2MEU1MTI1MDcyN0YzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSthCbaAz34BjoJ902ORgBohP edpJ64UGTjAP7kMuaOJNoX4T18cDex6TrK73QJXn/8sBaIR49x4OKUtE8L3Qfn2F IlA+OnEyukM0aN8+UrhczVfvfqOiQmMM32bf7au6w/XU0L2NQBtErquIZ7m+2NSN VXPekmGjz0QmqsC5vCyRrDhYuFiM5n5paspIxODA7SokWrquJ1xo0aZKRek/781Z TWtFcnp6g7HgVVZdujj37yppIa7sG5y5WEy9B59exQGX0uE0zEheXpBhG45nH/Ew i/0uwNWMbssEWXAx5Tivu8P1HqHvHWHgc5K4abDsML7+hzyvBDenx8BiRonNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtqoe3JdAIJSO0VP4Jg5RJQcn88AwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUnEUEDsk14dRorJN9W0qmzrPw82LVd+rVL esOr3WxlwJBxm1SORCA63+pDMb3K/mwC6rZJ0R+I2R0nJ+zS8RPhT7qykrFS+fMD r1CoibdBkMitb23q7ZCklsbaAMp2GmhM5naE/Y+fLXqT05N2g+Z43gW9ezk+UU6/ I8EieJhyv5/TC4xDNt/fPjY7Ui8X5NIt7Wp2DRFWr+c+MmkaddL93qsL1IlOLa6n 94vw0zqP7XiDMb6tN9kcG3Rqnogiz3veOHSEH4W8U+hgW+eIDhvRi7JfnKlxG1QZ SOTxphflT1YTaNVNscgT0Qc97L+VeQgaD2avEsvUqX1OjJU30yQ= -----END CERTIFICATE-----Generated at Sat May 3 13:49:22 2025 by rpki-client