$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: Qgw4aHuS7SzxnzQ9AVu+F3hqr3qOmg1m/eNhfVzA4+k= Subject key identifier: A6:F7:60:B8:CF:6D:C4:3B:5D:2D:08:53:FA:B4:F8:DA:BB:6A:F7:A4 Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 376E0221DDC7670A1513E30FEC7A6A4CB1488E66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 0159 Signing time: Tue 29 Apr 2025 18:21:16 +0000 Manifest this update: Tue 29 Apr 2025 18:16:16 +0000 Manifest next update: Fri 02 May 2025 20:30:16 +0000 Files and hashes: 1: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: 5JyUc45Ar+WUnnPms/vhTtlq6QxsneXJlzQhHnfxu2g=) 2: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: jLdTwnwuZ2oNm7k6y9AMJvKWkqS7oKk99hplqsfZVHE=) 3: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: ja3IpRMbJ39xL9dCXnsQKYTFFR+b+ZemcabWb42o+iQ=) 4: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: BffdL0xKitvxF+n5DIFwc3meIV1XU+P2BJOh3472GOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 20:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6e:02:21:dd:c7:67:0a:15:13:e3:0f:ec:7a:6a:4c:b1:48:8e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Apr 29 18:16:16 2025 GMT Not After : May 2 20:30:16 2025 GMT Subject: CN=A6F760B8CF6DC43B5D2D0853FAB4F8DABB6AF7A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:30:88:5f:bf:06:de:32:8a:ba:e1:f6:5a: 07:44:64:08:12:76:c9:b0:3d:3d:56:14:6a:b9:10: 6c:33:0b:41:4c:83:97:1a:09:f8:7f:bd:17:5c:c1: 16:88:c2:bf:78:62:f7:0d:d8:fe:ef:35:1a:09:27: ff:2a:92:e7:d7:59:d7:62:2a:13:06:0f:8d:f8:72: 25:fe:61:cd:c0:6f:35:04:7c:f2:7d:f2:1b:1d:f3: b0:cb:3c:92:af:66:a7:c7:bd:c4:8d:17:d6:d4:4a: a3:cf:27:62:f8:ca:dc:38:05:ac:3e:ea:91:b0:1f: c6:8e:90:69:fd:4f:3a:e9:59:86:aa:9f:ee:f2:40: 89:aa:46:eb:91:1d:1c:4b:18:4a:80:c7:d5:b1:82: e2:ea:ef:90:74:f6:89:6b:33:53:a1:63:52:85:d4: 94:26:a8:0f:9a:cd:49:29:c1:c9:19:e7:0c:49:d6: a7:ab:70:5e:73:6c:48:43:dc:f7:be:e9:5e:99:10: d5:b5:1e:b2:33:90:ab:4a:04:6d:9e:30:1f:51:87: 08:99:30:fe:77:98:a8:29:d1:fe:76:b4:e1:06:24: 67:43:db:9d:2e:34:45:17:61:80:50:57:37:5f:15: a9:cc:5a:de:95:a4:56:8f:26:cb:1a:64:b9:9e:d8: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F7:60:B8:CF:6D:C4:3B:5D:2D:08:53:FA:B4:F8:DA:BB:6A:F7:A4 X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f2:5c:fe:5f:d0:b4:17:f4:db:ef:26:1d:b5:02:03:0f:73: 45:80:03:05:6a:ce:9b:96:bf:8e:1a:c0:40:2f:d7:fb:04:3a: 1e:d1:02:02:ca:68:c6:6b:c3:7a:14:90:0a:48:d4:ca:44:7a: 18:9c:e2:b4:70:a8:42:d7:f4:f1:ad:0c:c1:91:33:7e:ea:d0: 44:de:11:1a:75:05:f9:75:29:6a:97:80:54:db:ea:ba:5e:37: c3:64:04:b1:a0:be:4d:41:5e:3d:a4:f5:b3:d3:5d:d1:3e:7d: cd:25:cb:08:73:98:9d:e7:24:b2:e2:92:51:3a:fd:9b:80:f6: 33:21:d6:b9:9b:fd:ae:26:b1:fc:41:92:6b:75:58:0c:4e:eb: eb:d8:c2:66:1a:e2:04:ef:b5:bf:a9:59:6b:7d:52:b5:8c:d5: eb:ef:44:c9:57:8c:64:3f:22:84:70:4a:c9:d1:a8:d1:fe:22: e8:6c:c1:15:cf:5a:2f:65:87:11:3b:e9:58:0a:52:dd:46:6f: 3b:84:ea:ed:f2:8d:62:65:59:a4:0a:5a:dc:05:b1:86:93:ae: 67:4a:48:c5:37:1b:2e:36:2e:66:d4:da:80:66:81:e3:20:da: e4:f0:7c:85:92:25:0a:d5:9f:87:ae:5a:dd:e5:01:95:b8:51: 0e:ff:04:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN24CId3HZwoVE+MP7HpqTLFIjmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNTA0MjkxODE2MTZaFw0yNTA1MDIyMDMwMTZaMDMxMTAvBgNV BAMTKEE2Rjc2MEI4Q0Y2REM0M0I1RDJEMDg1M0ZBQjRGOERBQkI2QUY3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HjCIX78G3jKKuuH2WgdEZAgS dsmwPT1WFGq5EGwzC0FMg5caCfh/vRdcwRaIwr94YvcN2P7vNRoJJ/8qkufXWddi KhMGD434ciX+Yc3AbzUEfPJ98hsd87DLPJKvZqfHvcSNF9bUSqPPJ2L4ytw4Baw+ 6pGwH8aOkGn9TzrpWYaqn+7yQImqRuuRHRxLGEqAx9WxguLq75B09olrM1OhY1KF 1JQmqA+azUkpwckZ5wxJ1qercF5zbEhD3Pe+6V6ZENW1HrIzkKtKBG2eMB9RhwiZ MP53mKgp0f52tOEGJGdD250uNEUXYYBQVzdfFanMWt6VpFaPJssaZLme2OeTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpvdguM9txDtdLQhT+rT42rtq96QwHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPyXP5f0LQX9NvvJh21AgMPc0WAAwVqzpuW v44awEAv1/sEOh7RAgLKaMZrw3oUkApI1MpEehic4rRwqELX9PGtDMGRM37q0ETe ERp1Bfl1KWqXgFTb6rpeN8NkBLGgvk1BXj2k9bPTXdE+fc0lywhzmJ3nJLLiklE6 /ZuA9jMh1rmb/a4msfxBkmt1WAxO6+vYwmYa4gTvtb+pWWt9UrWM1evvRMlXjGQ/ IoRwSsnRqNH+IuhswRXPWi9lhxE76VgKUt1GbzuE6u3yjWJlWaQKWtwFsYaTrmdK SMU3Gy42LmbU2oBmgeMg2uTwfIWSJQrVn4euWt3lAZW4UQ7/BPE= -----END CERTIFICATE-----Generated at Wed Apr 30 22:41:58 2025 by rpki-client