$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: KeGKa+Cpfp9pmv3CzjDYCqDR4jWwBOKXWHFoQHcc3LY= Subject key identifier: A3:1A:4E:3E:06:2F:06:38:61:95:BE:99:2E:48:70:6D:45:96:44:02 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 2CE9AAA3D00192B5792724CC5692DF6772E9C861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 0416 Signing time: Fri 25 Apr 2025 10:30:01 +0000 Manifest this update: Fri 25 Apr 2025 10:25:01 +0000 Manifest next update: Mon 28 Apr 2025 17:27:01 +0000 Files and hashes: 1: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: jW50ms0aH4HgWEQwGNSR71uxpw5ILP6vOExz3k18KwI=) 2: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: bcEvY5tFpvDGq8gtRpNV1zDe+gkWYJCWjk4IUeLDyi0=) 3: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: Kxj5n3XmBYqwY5xNhQm1hyvdBhggzR17lr3rokbc1x4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 17:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e9:aa:a3:d0:01:92:b5:79:27:24:cc:56:92:df:67:72:e9:c8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Apr 25 10:25:01 2025 GMT Not After : Apr 28 17:27:01 2025 GMT Subject: CN=A31A4E3E062F06386195BE992E48706D45964402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6b:f1:4d:9a:6a:e2:49:a8:7d:34:70:4a:cc: 10:1b:8e:76:7f:d8:cb:b5:cb:f0:35:6e:f2:5c:43: b5:93:48:05:a3:70:f1:5f:7e:9c:6b:77:b1:8d:78: 92:ad:a7:ab:b6:92:0a:6f:68:bf:9b:02:74:c0:b3: 9e:0a:fd:d6:30:87:d9:0b:20:5f:4e:ad:e9:47:f9: 36:4b:23:3b:23:6e:94:a5:02:5a:25:60:74:62:fd: 29:f1:ed:b5:56:5d:54:78:e8:e7:ae:6c:3c:13:49: fb:df:7c:6a:82:3f:87:06:17:90:6d:a8:12:cc:23: ac:a9:e3:32:65:04:d0:07:a4:c7:38:f3:c3:81:b9: b3:1d:40:94:12:9d:04:4f:71:f4:09:34:e7:56:92: b7:1d:ae:da:2e:21:61:8c:9e:c9:6e:0a:2b:4e:c0: eb:7d:c9:4c:87:99:dd:d5:3b:d4:f3:62:a8:1e:b0: 02:e4:42:51:f9:5b:ee:c2:c8:ff:b6:1b:e7:3e:29: 89:25:59:49:2d:60:ad:3d:2b:22:f4:2f:14:d1:57: e1:c5:4a:af:41:3f:d0:5e:32:ae:f8:a3:c5:31:b0: 19:4f:5f:5a:32:e6:e1:dd:74:a1:d3:74:28:f4:b1: f2:6b:e8:9b:8c:aa:84:49:eb:e7:31:86:e2:af:a2: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:4E:3E:06:2F:06:38:61:95:BE:99:2E:48:70:6D:45:96:44:02 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:0f:03:24:b2:3d:2c:c6:71:41:f6:9c:4b:01:58:b4:3a: d9:d6:3e:3a:0f:ba:7d:ab:0c:81:52:e5:59:01:4d:7a:92:74: 25:a7:63:12:5c:c8:bf:5b:52:8e:19:0d:83:52:dd:c8:95:9c: e3:34:5f:d7:8b:8a:a4:61:1e:e3:dd:ee:f1:26:af:99:10:40: 98:9c:fe:2c:f7:d3:64:56:87:00:d1:3e:7f:3a:6a:29:fa:26: b2:ab:97:6b:7f:6b:44:35:b4:98:5a:b9:c1:95:66:40:fb:80: a7:e1:35:83:db:76:cf:ce:61:61:7a:cd:49:33:ca:5a:64:49: 6c:bd:9b:06:4d:38:59:1f:30:5f:65:95:40:3a:f5:30:8d:e3: 49:d1:07:ff:47:c6:c0:36:3c:74:26:35:83:2e:9f:46:40:0a: 4e:f7:38:0d:08:e5:c9:dd:b5:42:6d:79:9e:2b:61:b6:3d:ff: 9c:97:18:87:d0:63:46:33:03:4e:69:9a:89:f1:b7:be:79:8f: f7:02:ea:41:89:ae:3c:51:b0:6b:a0:1a:bd:cc:2d:2a:d0:d7: 52:02:65:4d:97:86:64:30:5f:28:5e:0c:15:db:46:6a:e0:66: 26:62:67:ad:43:87:6c:79:1f:82:93:d3:ba:f5:a2:b0:9d:b8: c9:3e:b3:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOmqo9ABkrV5JyTMVpLfZ3LpyGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNTA0MjUxMDI1MDFaFw0yNTA0MjgxNzI3MDFaMDMxMTAvBgNV BAMTKEEzMUE0RTNFMDYyRjA2Mzg2MTk1QkU5OTJFNDg3MDZENDU5NjQ0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDta/FNmmriSah9NHBKzBAbjnZ/ 2Mu1y/A1bvJcQ7WTSAWjcPFffpxrd7GNeJKtp6u2kgpvaL+bAnTAs54K/dYwh9kL IF9OrelH+TZLIzsjbpSlAlolYHRi/Snx7bVWXVR46OeubDwTSfvffGqCP4cGF5Bt qBLMI6yp4zJlBNAHpMc488OBubMdQJQSnQRPcfQJNOdWkrcdrtouIWGMnsluCitO wOt9yUyHmd3VO9TzYqgesALkQlH5W+7CyP+2G+c+KYklWUktYK09KyL0LxTRV+HF Sq9BP9BeMq74o8UxsBlPX1oy5uHddKHTdCj0sfJr6JuMqoRJ6+cxhuKvohbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoxpOPgYvBjhhlb6ZLkhwbUWWRAIwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJsDwMksj0sxnFB9pxLAVi0OtnWPjoPun2r DIFS5VkBTXqSdCWnYxJcyL9bUo4ZDYNS3ciVnOM0X9eLiqRhHuPd7vEmr5kQQJic /iz302RWhwDRPn86ain6JrKrl2t/a0Q1tJhaucGVZkD7gKfhNYPbds/OYWF6zUkz ylpkSWy9mwZNOFkfMF9llUA69TCN40nRB/9HxsA2PHQmNYMun0ZACk73OA0I5cnd tUJteZ4rYbY9/5yXGIfQY0YzA05pmonxt755j/cC6kGJrjxRsGugGr3MLSrQ11IC ZU2XhmQwXyheDBXbRmrgZiZiZ61Dh2x5H4KT07r1orCduMk+s1U= -----END CERTIFICATE-----Generated at Sun Apr 27 18:55:09 2025 by rpki-client