$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: 02PNlfie7oFE+3zq7J+JRGXQMOHLwutMLIFBWtdpBgY= Subject key identifier: BB:D5:D4:0E:35:FE:7A:12:22:D1:CF:4E:25:8D:44:D6:10:BB:EB:34 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 20484F8D3615B8E8A3E157FC0F8C7CB31D428B74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 044D Signing time: Wed 30 Apr 2025 05:01:04 +0000 Manifest this update: Wed 30 Apr 2025 04:56:04 +0000 Manifest next update: Sat 03 May 2025 08:32:04 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: ThbRHJhd1S/gXsssJzE0HVqMktRjxEp7Gt1vsRTdgy0=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) 6: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 08:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:48:4f:8d:36:15:b8:e8:a3:e1:57:fc:0f:8c:7c:b3:1d:42:8b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Apr 30 04:56:04 2025 GMT Not After : May 3 08:32:04 2025 GMT Subject: CN=BBD5D40E35FE7A1222D1CF4E258D44D610BBEB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:79:07:20:e2:47:ec:8f:71:e2:dc:0e:2a: 91:96:0d:86:57:46:07:5a:ee:9f:b6:54:ab:c2:99: 84:1b:60:5c:95:58:2c:e0:fb:7a:0f:f2:92:99:e4: 82:44:26:e6:ee:37:a3:20:36:6e:49:ab:64:7c:ae: f5:cb:47:21:9b:09:00:3d:41:7e:3a:f9:7f:28:9f: f2:95:4b:56:0d:fc:ff:6a:5f:69:1b:06:d1:bc:8e: 3e:56:44:d4:68:a1:57:96:9b:bc:ff:6b:66:9c:e1: 4d:76:81:aa:63:75:c2:f5:fe:60:b2:1c:e8:ab:b2: 30:ed:a3:ff:9e:6b:38:72:98:73:d7:ef:20:14:6a: f5:db:b7:92:67:19:5e:e7:10:84:a5:52:2b:6e:1a: d7:89:0b:71:99:34:bb:f5:19:3d:a7:31:2b:d8:95: b9:34:e0:9d:ef:6a:31:be:27:7f:e9:16:d8:56:aa: aa:66:82:2f:cb:4e:78:34:c1:94:e5:30:e5:cb:a0: 5f:c4:81:f9:20:35:2f:38:6e:df:31:a7:6a:a8:01: a5:32:1b:1b:c2:5c:a6:ea:b5:0e:89:25:4c:01:35: 3f:21:70:d0:4b:22:c8:a3:cc:5b:7d:c5:2e:1f:19: 5e:91:c0:20:88:1c:1e:22:29:4b:a2:87:95:31:b5: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D5:D4:0E:35:FE:7A:12:22:D1:CF:4E:25:8D:44:D6:10:BB:EB:34 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e8:59:3c:41:c9:b7:cd:bf:a3:ed:a3:64:92:c0:ec:a9:47: 46:5e:51:03:57:f5:b3:a1:a1:8e:8e:f0:98:06:c7:eb:10:31: d3:7f:c2:85:c2:47:de:ad:4a:48:3a:1d:76:83:2d:5c:22:6c: c1:22:28:de:29:68:37:18:4f:3d:92:cb:b3:97:0e:2d:26:ad: 34:eb:94:a5:a0:c7:12:21:df:2a:74:45:a9:48:a7:87:24:53: 65:07:ca:3a:23:5f:f3:e5:58:48:25:55:b9:16:18:76:08:3c: 9c:c8:a6:10:54:58:62:03:83:4e:11:39:5b:20:ba:35:95:a5: 2e:2c:9b:2f:86:eb:40:ab:cf:66:1a:33:cb:93:0f:ae:1c:26: 0a:d9:9f:cc:e1:4f:da:a3:f2:65:cb:56:c3:5b:c9:78:21:6b: a9:3d:02:3a:7c:d7:82:d6:5e:a2:6c:ad:60:8d:d6:bb:c6:2a: 16:8c:a3:c9:ef:32:af:62:6e:ce:10:05:66:17:55:fd:c9:13: f4:6a:e3:18:db:c1:f0:26:36:02:52:8b:1f:96:32:83:2e:20: 01:a5:af:fd:16:7c:5c:ef:1b:3e:bd:db:62:f6:33:b4:62:5a: 7e:02:cd:e2:51:2f:51:a4:05:60:96:01:83:40:f4:19:67:05: 68:21:b1:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEhPjTYVuOij4Vf8D4x8sx1Ci3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA0MzAwNDU2MDRaFw0yNTA1MDMwODMyMDRaMDMxMTAvBgNV BAMTKEJCRDVENDBFMzVGRTdBMTIyMkQxQ0Y0RTI1OEQ0NEQ2MTBCQkVCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/83kHIOJH7I9x4twOKpGWDYZX Rgda7p+2VKvCmYQbYFyVWCzg+3oP8pKZ5IJEJubuN6MgNm5Jq2R8rvXLRyGbCQA9 QX46+X8on/KVS1YN/P9qX2kbBtG8jj5WRNRooVeWm7z/a2ac4U12gapjdcL1/mCy HOirsjDto/+eazhymHPX7yAUavXbt5JnGV7nEISlUituGteJC3GZNLv1GT2nMSvY lbk04J3vajG+J3/pFthWqqpmgi/LTng0wZTlMOXLoF/EgfkgNS84bt8xp2qoAaUy GxvCXKbqtQ6JJUwBNT8hcNBLIsijzFt9xS4fGV6RwCCIHB4iKUuih5UxtbTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9XUDjX+ehIi0c9OJY1E1hC76zQwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHoWTxBybfNv6Pto2SSwOypR0ZeUQNX9bOh oY6O8JgGx+sQMdN/woXCR96tSkg6HXaDLVwibMEiKN4paDcYTz2Sy7OXDi0mrTTr lKWgxxIh3yp0RalIp4ckU2UHyjojX/PlWEglVbkWGHYIPJzIphBUWGIDg04ROVsg ujWVpS4smy+G60Crz2YaM8uTD64cJgrZn8zhT9qj8mXLVsNbyXgha6k9Ajp814LW XqJsrWCN1rvGKhaMo8nvMq9ibs4QBWYXVf3JE/Rq4xjbwfAmNgJSix+WMoMuIAGl r/0WfFzvGz6922L2M7RiWn4CzeJRL1GkBWCWAYNA9BlnBWghsbk= -----END CERTIFICATE-----Generated at Wed Apr 30 08:28:53 2025 by rpki-client