$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: l3eitf0T0AL+5bPfUpUStAsVuyz3pZ2NA1S+NLMXze8= Subject key identifier: 1B:C7:C9:CC:EB:3B:6F:15:C0:09:96:64:95:BF:D5:32:13:70:35:30 Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 6812CBC8097F6B2A73FAB3EADE232FEB3C09EEEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 0143 Signing time: Mon 28 Apr 2025 15:00:02 +0000 Manifest this update: Mon 28 Apr 2025 14:55:02 +0000 Manifest next update: Thu 01 May 2025 22:45:02 +0000 Files and hashes: 1: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: UmiTMbLoYY7aCJmMyTz/6ntSWhIi4Fe3J6qai9F13no=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DCx7j/PqY/+rgrc9ArlbSADHe4Cwa01sUUvNHN3T5RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:12:cb:c8:09:7f:6b:2a:73:fa:b3:ea:de:23:2f:eb:3c:09:ee:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Apr 28 14:55:02 2025 GMT Not After : May 1 22:45:02 2025 GMT Subject: CN=1BC7C9CCEB3B6F15C009966495BFD53213703530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:89:7c:39:fe:97:20:74:8b:1c:d9:a2:95:29: 6f:0d:6f:f9:78:bd:86:74:ba:a7:2c:04:7d:da:bb: 4a:03:49:9e:96:6f:d9:a7:fc:46:21:1e:ce:9a:7b: d9:f2:be:60:81:d8:e1:3d:99:94:8e:26:3c:2a:0f: aa:04:30:d2:e7:27:34:4b:25:28:21:36:38:72:ae: dc:8c:c3:46:f6:73:13:d8:69:cf:6e:8e:0d:7e:cc: a8:84:e1:bf:f1:33:c1:34:8b:02:81:55:4b:a6:85: c0:1b:d7:57:e0:4b:a9:f9:a4:bc:18:d4:e1:33:34: 12:1c:dd:75:7b:20:2a:a5:3b:6a:74:0b:8a:3b:b7: 3b:50:59:b4:39:92:d2:53:cc:ee:eb:eb:be:15:af: e4:c3:93:9e:62:9b:0d:c2:73:02:82:cb:3d:33:ec: 31:10:22:4e:89:b7:15:85:0c:89:1d:5c:6f:e5:44: 7e:29:cf:ba:f3:98:4c:0e:dc:15:dc:fb:bf:da:51: 60:02:d1:01:be:ba:cb:cb:ca:66:1b:50:71:7d:84: 69:50:91:28:ad:95:b7:f0:0b:f7:2e:04:17:d3:5f: 50:62:f4:dc:de:9e:40:cb:a2:c8:ee:31:29:62:4f: e9:0a:ee:51:a3:1d:69:8e:53:ec:f5:49:e2:fb:f0: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C7:C9:CC:EB:3B:6F:15:C0:09:96:64:95:BF:D5:32:13:70:35:30 X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4c:4f:6f:10:4c:0b:61:9c:70:d8:4c:42:dc:18:f4:1b:b7: 7a:07:4d:32:3b:29:47:ea:4b:67:9b:3d:06:f8:12:b0:2e:3d: a0:ec:95:50:35:3c:25:e7:f5:78:45:d3:3e:62:40:87:08:38: 01:f9:37:ce:14:2a:c5:fd:35:7a:97:92:53:d9:ee:5d:e2:c3: 66:a9:17:bd:1d:41:fa:87:b6:8f:a6:18:c4:eb:9c:1e:90:b0: 36:45:6a:78:e0:4d:40:96:fb:06:ec:4d:7d:e2:26:3e:e5:e7: 85:91:8c:e0:e5:e3:53:ae:29:7a:02:c6:7e:5e:8d:af:0f:f6: 56:c9:62:d1:9b:c4:dd:97:33:f5:98:93:ba:2d:27:8b:0b:62: ea:44:e1:30:6f:47:ce:e3:7a:e8:dc:20:6e:2d:de:ed:11:71: 07:58:61:1d:31:56:47:a2:7c:3a:fe:9e:db:bb:26:4e:32:1a: 0f:70:b8:68:9f:71:67:8d:a5:b3:18:3c:cf:e1:c5:c0:62:7a: 90:9d:ea:dc:6a:f4:e1:58:7c:58:c7:79:24:2b:6f:43:df:63: 85:d8:a0:7a:34:a1:a4:e1:cb:f8:d2:84:78:07:c7:3a:d4:ae: 10:7e:d6:65:36:f4:4a:c8:b5:ad:b7:fc:ef:91:43:3d:bd:ab: d2:94:c0:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBLLyAl/aypz+rPq3iMv6zwJ7uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNTA0MjgxNDU1MDJaFw0yNTA1MDEyMjQ1MDJaMDMxMTAvBgNV BAMTKDFCQzdDOUNDRUIzQjZGMTVDMDA5OTY2NDk1QkZENTMyMTM3MDM1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4iXw5/pcgdIsc2aKVKW8Nb/l4 vYZ0uqcsBH3au0oDSZ6Wb9mn/EYhHs6ae9nyvmCB2OE9mZSOJjwqD6oEMNLnJzRL JSghNjhyrtyMw0b2cxPYac9ujg1+zKiE4b/xM8E0iwKBVUumhcAb11fgS6n5pLwY 1OEzNBIc3XV7ICqlO2p0C4o7tztQWbQ5ktJTzO7r674Vr+TDk55imw3CcwKCyz0z 7DEQIk6JtxWFDIkdXG/lRH4pz7rzmEwO3BXc+7/aUWAC0QG+usvLymYbUHF9hGlQ kSitlbfwC/cuBBfTX1Bi9NzenkDLosjuMSliT+kK7lGjHWmOU+z1SeL78Ie1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8fJzOs7bxXACZZklb/VMhNwNTAwHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZMT28QTAthnHDYTELcGPQbt3oHTTI7KUfq S2ebPQb4ErAuPaDslVA1PCXn9XhF0z5iQIcIOAH5N84UKsX9NXqXklPZ7l3iw2ap F70dQfqHto+mGMTrnB6QsDZFanjgTUCW+wbsTX3iJj7l54WRjODl41OuKXoCxn5e ja8P9lbJYtGbxN2XM/WYk7otJ4sLYupE4TBvR87jeujcIG4t3u0RcQdYYR0xVkei fDr+ntu7Jk4yGg9wuGifcWeNpbMYPM/hxcBiepCd6txq9OFYfFjHeSQrb0PfY4XY oHo0oaThy/jShHgHxzrUrhB+1mU29ErIta23/O+RQz29q9KUwA4= -----END CERTIFICATE-----Generated at Tue Apr 29 17:27:06 2025 by rpki-client