$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: btySDYRn0WCzTGYE4zlNLXRFNYyF2ztS6/HUn3wQIhM= Subject key identifier: F1:83:F0:CD:8C:7A:DD:7E:9D:3A:94:DA:F4:39:AD:CD:92:71:D7:7A Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 298BBC0F39C125DCC7084D9D64B344699EB91F61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: 94 Signing time: Sat 26 Apr 2025 09:00:46 +0000 Manifest this update: Sat 26 Apr 2025 08:55:46 +0000 Manifest next update: Tue 29 Apr 2025 14:19:46 +0000 Files and hashes: 1: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: JnKqYKwQ+ZsE9/hX1Ni7NtFe+7xCbS50E62tBywGdP0=) 2: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: r2hXreEY+VRAQGcl/v1nEspZ0+VSQl3vloIjw9JG664=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 14:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8b:bc:0f:39:c1:25:dc:c7:08:4d:9d:64:b3:44:69:9e:b9:1f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Apr 26 08:55:46 2025 GMT Not After : Apr 29 14:19:46 2025 GMT Subject: CN=F183F0CD8C7ADD7E9D3A94DAF439ADCD9271D77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:08:8f:4f:4b:5c:bf:a5:90:37:c3:be:e8:61: ea:86:38:20:c9:0f:7a:68:f6:b4:0f:07:03:cc:59: 4a:7e:b9:8c:e8:74:c6:25:ab:f5:d4:bc:e7:7f:b6: 27:62:56:31:6c:37:fc:62:31:cd:51:8e:d3:ea:b5: c4:ae:42:c7:51:9b:a6:d4:80:00:f7:86:1e:9d:a1: 30:96:b2:2b:69:1a:2b:ce:66:d3:5f:2e:05:c7:ea: 3d:ba:a8:8f:69:46:4d:56:bc:59:b0:39:5e:ba:98: 24:28:4b:38:37:06:eb:b0:03:36:7f:d7:75:a7:cf: f3:b2:b1:a7:85:3f:33:0c:51:09:7f:1f:91:73:89: 42:ca:72:d7:0e:7e:07:82:bd:c2:b8:aa:9a:1b:7e: 54:15:3b:67:b6:97:25:ef:a0:fa:93:a0:a1:12:79: 64:71:c6:b1:32:34:e7:ce:31:ed:d2:83:06:9f:78: 8a:95:dd:03:da:e4:0e:55:2b:16:7d:aa:c7:7a:67: 6b:b8:29:2d:47:a1:4f:1c:ed:1e:67:27:b6:15:e2: 0d:cf:67:de:d2:48:db:a5:02:44:f0:ef:bf:63:ae: 7a:c3:1a:95:87:ce:2e:7f:d6:a4:d3:1d:0e:9d:19: 0f:78:12:54:4b:59:42:4b:ad:32:55:1c:ed:e9:e5: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:83:F0:CD:8C:7A:DD:7E:9D:3A:94:DA:F4:39:AD:CD:92:71:D7:7A X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c9:6a:78:73:38:f5:b4:9e:85:6e:2d:a6:4c:7b:ba:c4:8b: 18:96:59:7d:ce:3a:bd:59:79:74:4e:51:f8:48:15:9d:b0:5d: 3b:06:a6:dc:65:88:9d:ab:43:ff:57:95:ba:90:46:d9:6f:a5: 06:ea:2a:24:7b:6c:78:61:62:46:05:1f:99:29:65:19:df:37: a3:a5:8c:77:75:85:96:7e:dc:40:0e:7e:20:3b:67:52:f0:41: f2:ef:61:a2:1d:cb:05:b1:e0:fc:38:bb:da:da:bc:41:62:92: ae:6a:12:fc:d8:39:89:f1:fa:13:19:2b:eb:39:21:2e:9b:55: 76:bc:d7:80:e1:29:77:89:2b:98:1c:6c:51:1a:c8:1e:ed:0b: 9b:a4:dd:ff:60:e6:d2:4b:7b:7f:84:a7:0d:fb:26:c0:95:e9: 51:21:9a:34:e4:be:da:37:a8:48:d7:70:af:6b:75:f4:26:c9: 3c:cc:19:3f:ab:2b:17:af:56:84:21:f3:e1:13:46:62:99:02: 17:cc:a2:6e:fd:47:d8:e0:5b:40:fe:87:83:c1:58:67:ae:c4: 56:3f:9b:e2:c4:39:87:32:07:70:9f:74:b5:4b:b4:13:6b:64: 1d:05:f8:d0:5d:91:9d:70:b4:ee:90:d0:04:22:90:29:ea:4a: 26:76:00:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYu8DznBJdzHCE2dZLNEaZ65H2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNTA0MjYwODU1NDZaFw0yNTA0MjkxNDE5NDZaMDMxMTAvBgNV BAMTKEYxODNGMENEOEM3QUREN0U5RDNBOTREQUY0MzlBRENEOTI3MUQ3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCI9PS1y/pZA3w77oYeqGOCDJ D3po9rQPBwPMWUp+uYzodMYlq/XUvOd/tidiVjFsN/xiMc1RjtPqtcSuQsdRm6bU gAD3hh6doTCWsitpGivOZtNfLgXH6j26qI9pRk1WvFmwOV66mCQoSzg3BuuwAzZ/ 13Wnz/OysaeFPzMMUQl/H5FziULKctcOfgeCvcK4qpobflQVO2e2lyXvoPqToKES eWRxxrEyNOfOMe3SgwafeIqV3QPa5A5VKxZ9qsd6Z2u4KS1HoU8c7R5nJ7YV4g3P Z97SSNulAkTw779jrnrDGpWHzi5/1qTTHQ6dGQ94ElRLWUJLrTJVHO3p5SuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8YPwzYx63X6dOpTa9DmtzZJx13owHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDJanhzOPW0noVuLaZMe7rEixiWWX3OOr1Z eXROUfhIFZ2wXTsGptxliJ2rQ/9XlbqQRtlvpQbqKiR7bHhhYkYFH5kpZRnfN6Ol jHd1hZZ+3EAOfiA7Z1LwQfLvYaIdywWx4Pw4u9ravEFikq5qEvzYOYnx+hMZK+s5 IS6bVXa814DhKXeJK5gcbFEayB7tC5uk3f9g5tJLe3+Epw37JsCV6VEhmjTkvto3 qEjXcK9rdfQmyTzMGT+rKxevVoQh8+ETRmKZAhfMom79R9jgW0D+h4PBWGeuxFY/ m+LEOYcyB3CfdLVLtBNrZB0F+NBdkZ1wtO6Q0AQikCnqSiZ2AIM= -----END CERTIFICATE-----Generated at Mon Apr 28 12:29:41 2025 by rpki-client