$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: 38g4wL3PPWhkW2I3F00K7NGzBrccezOXC3zQv/llfEY= Subject key identifier: 93:A7:92:C9:99:AF:93:6C:85:C7:4C:7B:70:15:07:13:75:B7:6B:0C Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 60DC49759953AF76FC036E3AB29C8DEE11F973F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 01EB Signing time: Sun 27 Apr 2025 09:01:20 +0000 Manifest this update: Sun 27 Apr 2025 08:56:20 +0000 Manifest next update: Wed 30 Apr 2025 17:03:20 +0000 Files and hashes: 1: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: 47wUao6G1SAgXEbNjotDGhA1ZRxX3ov9wCXKxPYZImw=) 4: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: xSl5S79BfyBgOXzpCa2+vFeAMzKVXM9pSMn5k0NLon8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dc:49:75:99:53:af:76:fc:03:6e:3a:b2:9c:8d:ee:11:f9:73:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Apr 27 08:56:20 2025 GMT Not After : Apr 30 17:03:20 2025 GMT Subject: CN=93A792C999AF936C85C74C7B7015071375B76B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:17:dc:80:07:f5:f1:75:85:14:bc:9e:81: a2:1b:8f:02:70:dc:9e:da:96:93:72:b6:71:c3:6e: 0c:d9:9e:27:82:e0:ec:1a:66:01:3c:e8:7d:f2:ba: 37:05:79:07:4d:c1:09:63:4e:30:d5:13:a7:12:a4: 43:1c:8e:81:6a:4d:fa:fe:9e:36:b2:64:f9:8b:58: f8:4a:c4:1c:55:cb:d8:4d:00:2b:89:70:0b:e6:ba: fc:1a:4e:0d:60:64:a8:40:62:4c:3f:b9:c0:97:d7: a6:3f:f4:d5:18:d7:26:29:f0:73:2f:7f:03:0e:30: 4c:4f:2d:89:1a:1a:0a:87:cb:ff:63:6c:22:c5:7a: 98:b3:b8:ec:d0:ef:77:3a:fe:40:e0:08:44:f3:7b: bb:55:48:ff:b5:72:a9:1d:7a:1c:0b:37:d3:40:55: bb:4d:71:78:54:22:06:bd:58:15:9c:15:ed:15:5b: 12:d3:24:53:12:47:75:65:47:8d:66:f7:5c:cb:21: 85:a3:98:85:09:77:81:b4:4c:cf:3a:68:62:bc:51: a6:5e:0b:8d:eb:f7:3e:f5:fe:44:f0:c7:45:ff:5c: 5b:b0:2b:71:c6:2c:9f:74:c2:a2:db:ba:0f:3c:a6: 99:fa:73:7c:76:cb:1a:12:19:9b:0d:ec:41:cd:8c: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A7:92:C9:99:AF:93:6C:85:C7:4C:7B:70:15:07:13:75:B7:6B:0C X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:91:3a:0d:39:af:f9:e0:6d:d5:cf:a4:9c:91:65:85:99:9d: dc:7e:13:66:b6:fa:7e:77:29:f7:b2:c7:47:6a:40:38:a7:49: 41:ae:19:0e:fe:b0:9b:78:45:30:61:ca:9e:8c:82:5e:48:0d: fa:39:11:8a:63:69:81:97:1f:7c:d7:9f:71:aa:dc:c4:66:7a: 7f:b1:64:e3:ca:e6:6b:f2:e2:2b:f3:0a:42:b9:47:9a:d2:e3: 17:14:a9:66:1d:f5:9a:b4:4e:51:ee:6b:69:d3:5f:98:30:c2: 5b:db:9d:d1:87:6b:f6:9d:33:62:39:eb:6f:e9:27:94:9b:e7: e1:a6:92:9d:17:a7:ac:b5:40:c5:aa:3a:46:a1:f5:1f:f9:40: 64:46:9c:00:e8:a6:0d:ab:ae:d4:2a:73:6d:3f:77:1b:c4:37: 84:9a:84:2d:d1:a3:ae:f1:75:3f:2a:40:cf:90:2a:37:8a:bd: d6:81:e3:3f:be:90:8a:69:e9:c5:c8:00:37:24:3b:6e:1f:c2: f5:61:7d:a7:ec:23:ac:e0:87:e6:30:e8:98:80:0f:79:6c:60: 84:c9:13:83:c0:e7:9b:0e:b6:50:30:89:fa:9b:fa:6f:29:c3: f7:84:66:04:a0:e3:0a:79:c8:de:97:24:d5:cf:82:25:69:63: 3b:81:5a:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNxJdZlTr3b8A246spyN7hH5c/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA0MjcwODU2MjBaFw0yNTA0MzAxNzAzMjBaMDMxMTAvBgNV BAMTKDkzQTc5MkM5OTlBRjkzNkM4NUM3NEM3QjcwMTUwNzEzNzVCNzZCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3RfcgAf18XWFFLyegaIbjwJw 3J7alpNytnHDbgzZnieC4OwaZgE86H3yujcFeQdNwQljTjDVE6cSpEMcjoFqTfr+ njayZPmLWPhKxBxVy9hNACuJcAvmuvwaTg1gZKhAYkw/ucCX16Y/9NUY1yYp8HMv fwMOMExPLYkaGgqHy/9jbCLFepizuOzQ73c6/kDgCETze7tVSP+1cqkdehwLN9NA VbtNcXhUIga9WBWcFe0VWxLTJFMSR3VlR41m91zLIYWjmIUJd4G0TM86aGK8UaZe C43r9z71/kTwx0X/XFuwK3HGLJ90wqLbug88ppn6c3x2yxoSGZsN7EHNjCYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6eSyZmvk2yFx0x7cBUHE3W3awwwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGROg05r/ngbdXPpJyRZYWZndx+E2a2+n53 Kfeyx0dqQDinSUGuGQ7+sJt4RTBhyp6Mgl5IDfo5EYpjaYGXH3zXn3Gq3MRmen+x ZOPK5mvy4ivzCkK5R5rS4xcUqWYd9Zq0TlHua2nTX5gwwlvbndGHa/adM2I562/p J5Sb5+Gmkp0Xp6y1QMWqOkah9R/5QGRGnADopg2rrtQqc20/dxvEN4SahC3Ro67x dT8qQM+QKjeKvdaB4z++kIpp6cXIADckO24fwvVhfafsI6zgh+Yw6JiAD3lsYITJ E4PA55sOtlAwifqb+m8pw/eEZgSg4wp5yN6XJNXPgiVpYzuBWqI= -----END CERTIFICATE-----Generated at Mon Apr 28 13:38:57 2025 by rpki-client