$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: 16lzc4LQkL2dN7KZII2cidc5vG/fKgmu3psbhJCccC4= Subject key identifier: 5F:43:56:CA:A3:55:6E:D5:F7:D0:43:F4:69:D5:64:7B:FE:F7:D3:51 Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 73372230B476A1C3D5D19012EF046CE830D4FC66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: 90 Signing time: Mon 28 Apr 2025 11:32:06 +0000 Manifest this update: Mon 28 Apr 2025 11:27:06 +0000 Manifest next update: Thu 01 May 2025 22:02:06 +0000 Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: shl5hzE7A/Tc3LxB68K5+LeHHHNimXXsrSJroYt9mi4=) 2: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: D8jjT7Eae8cg4FqWLjbVV/e+LP9GfyT4nfG+GLvrhiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:37:22:30:b4:76:a1:c3:d5:d1:90:12:ef:04:6c:e8:30:d4:fc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Apr 28 11:27:06 2025 GMT Not After : May 1 22:02:06 2025 GMT Subject: CN=5F4356CAA3556ED5F7D043F469D5647BFEF7D351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:60:40:2b:35:50:29:bd:89:6a:17:25:fd: 79:15:92:e0:ef:e0:98:f4:fb:6e:a7:cc:14:38:70: 48:a4:b6:8c:98:a9:aa:5a:b9:ff:ae:83:9a:de:fe: 7c:3f:c9:60:d8:bf:42:0d:b1:0b:8e:89:29:06:ed: 76:a4:02:0b:c8:54:9b:5c:68:2f:48:67:36:49:af: ba:6d:b4:46:a8:3b:84:64:fc:0c:81:a3:56:9f:26: 50:3f:3e:25:6d:9a:0b:16:bd:91:2c:ce:3a:bc:53: 15:e9:60:8d:e8:e7:1b:3e:58:be:01:1c:76:70:91: 4c:c0:c5:9b:6a:27:37:b6:bb:26:c6:7f:40:dd:81: e0:ef:96:c5:14:59:1b:64:82:81:7f:c3:70:60:12: c3:28:df:9e:8f:68:b4:ac:6f:60:c6:d8:3d:fc:b9: 1b:c3:84:6b:d0:40:c4:20:6c:ae:b0:30:13:34:de: 93:51:bc:e2:9b:5a:2f:e3:cb:29:ed:b1:4d:10:bd: 84:2c:66:2b:23:56:16:20:bc:4e:ab:a2:17:80:6e: 13:16:29:e8:87:24:21:46:10:9d:cd:c8:27:f4:ce: 8a:1c:53:4d:95:ab:fb:9d:a2:a6:3f:00:80:e7:16: 33:19:0d:31:16:ff:9d:57:8f:2d:38:53:5b:ee:0d: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:43:56:CA:A3:55:6E:D5:F7:D0:43:F4:69:D5:64:7B:FE:F7:D3:51 X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:8c:9a:98:ae:c0:4c:a3:9e:be:ef:2d:a5:8e:4a:f6:89: 59:13:0f:c3:ab:97:a0:4a:c8:f4:19:88:c7:a5:4c:34:cc:42: 2f:6f:2b:cf:47:bc:14:62:24:f8:2a:3a:9b:55:b8:c4:dd:22: 52:7f:ce:d2:b6:09:06:ff:f5:b2:5c:d5:42:60:6f:44:d9:fa: e7:d8:2d:bc:4c:b2:36:81:82:19:4b:52:e1:bf:c6:0e:81:6c: 46:e8:79:55:71:1f:9f:f7:8b:0c:5f:83:53:99:8e:38:5c:19: 61:af:6f:42:47:c3:9b:e6:5b:6a:3c:38:58:53:51:66:c3:b3: fb:d2:51:2a:ed:e8:88:a8:54:4f:5d:11:9a:18:b5:c7:cf:fb: 64:c8:d3:f7:04:4e:7a:37:76:37:81:8d:64:8d:b5:37:3f:e0: 55:be:a3:c0:9f:be:30:fe:03:fe:e4:e3:65:ac:44:ca:2f:b4: 3a:42:37:ca:5f:c2:7f:93:b0:cc:4d:94:bb:99:8b:b2:91:b8: dd:65:5f:13:1a:ce:c8:d4:c8:f0:5d:83:46:11:94:d3:79:9a: 1b:be:97:ba:00:06:1a:c3:1f:48:d9:01:90:12:fb:f3:f0:67: 34:f9:6c:4a:7a:18:6c:69:3a:23:a2:fc:94:c3:3b:c1:25:b3: f3:c4:9b:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczciMLR2ocPV0ZAS7wRs6DDU/GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTA0MjgxMTI3MDZaFw0yNTA1MDEyMjAyMDZaMDMxMTAvBgNV BAMTKDVGNDM1NkNBQTM1NTZFRDVGN0QwNDNGNDY5RDU2NDdCRkVGN0QzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr12BAKzVQKb2Jahcl/XkVkuDv 4Jj0+26nzBQ4cEiktoyYqapauf+ug5re/nw/yWDYv0INsQuOiSkG7XakAgvIVJtc aC9IZzZJr7pttEaoO4Rk/AyBo1afJlA/PiVtmgsWvZEszjq8UxXpYI3o5xs+WL4B HHZwkUzAxZtqJze2uybGf0DdgeDvlsUUWRtkgoF/w3BgEsMo356PaLSsb2DG2D38 uRvDhGvQQMQgbK6wMBM03pNRvOKbWi/jyyntsU0QvYQsZisjVhYgvE6roheAbhMW KeiHJCFGEJ3NyCf0zoocU02Vq/udoqY/AIDnFjMZDTEW/51Xjy04U1vuDVXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0NWyqNVbtX30EP0adVke/7301EwHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP/jJqYrsBMo56+7y2ljkr2iVkTD8Orl6BK yPQZiMelTDTMQi9vK89HvBRiJPgqOptVuMTdIlJ/ztK2CQb/9bJc1UJgb0TZ+ufY LbxMsjaBghlLUuG/xg6BbEboeVVxH5/3iwxfg1OZjjhcGWGvb0JHw5vmW2o8OFhT UWbDs/vSUSrt6IioVE9dEZoYtcfP+2TI0/cETno3djeBjWSNtTc/4FW+o8CfvjD+ A/7k42WsRMovtDpCN8pfwn+TsMxNlLuZi7KRuN1lXxMazsjUyPBdg0YRlNN5mhu+ l7oABhrDH0jZAZAS+/PwZzT5bEp6GGxpOiOi/JTDO8Els/PEm9s= -----END CERTIFICATE-----Generated at Tue Apr 29 00:58:48 2025 by rpki-client