$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: ELIHP3qfdLQJ6V0OzL27iALma62Gqqxjo5k046eNSRE= Subject key identifier: 77:E3:62:0C:E9:32:1A:4F:97:7F:3B:CD:B0:67:C5:9B:18:E5:21:14 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 264BD4FF1FB55B0A7948FC69A2FECB5B3CAE50B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 0152 Signing time: Mon 28 Apr 2025 19:10:59 +0000 Manifest this update: Mon 28 Apr 2025 19:05:59 +0000 Manifest next update: Fri 02 May 2025 00:05:59 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 2: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: FPUIWxP7eqtRih5z7Pfx9f5L6N2lmbCiK+qawqu1BVM=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: 17ChIozSdmJ+qCeyTnh6PolCU0A1lGl43AAQ9utL0Ec=) 4: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4b:d4:ff:1f:b5:5b:0a:79:48:fc:69:a2:fe:cb:5b:3c:ae:50:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Apr 28 19:05:59 2025 GMT Not After : May 2 00:05:59 2025 GMT Subject: CN=77E3620CE9321A4F977F3BCDB067C59B18E52114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:46:28:53:77:da:6a:c8:d3:3b:83:f2:2f: 01:94:10:c5:b8:e2:b2:d7:14:20:d6:14:74:25:80: c5:56:bc:1d:06:37:da:b3:0d:19:b5:a4:e3:65:8e: 9e:ab:42:a6:f7:f5:69:c8:7c:51:db:32:c7:17:cf: bd:2a:61:a7:93:51:89:cf:48:f8:7d:7a:8e:06:34: a0:38:2d:0c:b0:6c:5d:f2:a1:20:3f:4e:81:82:81: 03:ba:df:49:79:51:22:da:80:9e:09:83:f7:77:1b: 31:76:15:57:37:11:04:74:11:52:0b:48:d0:44:6b: e0:9d:f9:f0:84:af:1c:6d:16:3b:47:f0:ff:0e:6b: 52:3c:ac:d9:ea:b3:85:fe:48:be:af:31:73:f0:d1: 4a:d8:fb:69:c5:d9:e6:00:f2:05:b2:d5:c9:41:87: 4c:a4:2f:72:1f:d0:fd:b4:49:62:dd:9e:66:ad:da: 3c:7a:cc:35:69:5e:bf:8e:c4:1b:b3:42:25:58:66: 40:54:81:cf:5b:ff:51:7b:30:a1:ed:9e:df:44:93: 29:e1:2f:2b:12:21:15:ff:3d:1d:8a:11:72:5c:98: 99:cd:2a:49:12:35:30:39:28:ba:ae:e7:36:d4:31: ae:6b:f3:c7:74:97:28:b0:8b:cd:db:4d:37:d8:b9: c6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E3:62:0C:E9:32:1A:4F:97:7F:3B:CD:B0:67:C5:9B:18:E5:21:14 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:91:40:bf:d2:c1:11:e9:96:6a:d0:a7:13:56:a2:6a:7b:2c: f0:a4:a3:55:2a:ba:ce:91:e8:68:f2:8d:97:3a:32:a4:aa:52: 71:12:5a:56:30:ee:68:d3:b6:75:68:98:da:9c:61:34:b2:f6: 38:05:b0:cb:2b:54:2d:a9:43:d5:2b:2f:14:90:37:9b:72:24: 9d:c6:03:a7:b5:6a:ed:da:00:25:04:22:d8:98:f9:df:d4:0a: 58:b7:08:3d:5e:4e:a2:2d:55:d5:7e:46:65:36:ab:ab:e7:9c: 38:9c:bf:a9:8d:fc:b0:e3:1b:4c:cd:41:82:37:0e:93:f5:a2: 9d:53:2b:e8:d8:18:df:4f:00:20:42:da:9b:ea:9d:c1:58:cb: dc:36:48:9f:4d:8c:43:d4:ba:a8:ef:6b:d1:05:a2:4f:a7:0b: 78:a3:c1:bb:d4:91:6b:2b:93:5d:3c:62:8d:72:c6:3f:dd:da: c5:bd:c8:b2:9a:81:1f:78:a3:46:88:61:c7:ee:fe:bb:54:c6: 79:40:19:31:77:26:f0:28:de:b4:76:68:c8:87:fd:5d:65:84: 11:2b:01:07:ca:2e:76:b2:48:dd:04:25:e7:18:20:5b:64:ac: d7:0c:2b:bc:48:08:c9:f7:d1:f4:47:f8:6b:87:b0:a6:31:21: d9:a0:fb:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkvU/x+1Wwp5SPxpov7LWzyuULAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTA0MjgxOTA1NTlaFw0yNTA1MDIwMDA1NTlaMDMxMTAvBgNV BAMTKDc3RTM2MjBDRTkzMjFBNEY5NzdGM0JDREIwNjdDNTlCMThFNTIxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgm0YoU3faasjTO4PyLwGUEMW4 4rLXFCDWFHQlgMVWvB0GN9qzDRm1pONljp6rQqb39WnIfFHbMscXz70qYaeTUYnP SPh9eo4GNKA4LQywbF3yoSA/ToGCgQO630l5USLagJ4Jg/d3GzF2FVc3EQR0EVIL SNBEa+Cd+fCErxxtFjtH8P8Oa1I8rNnqs4X+SL6vMXPw0UrY+2nF2eYA8gWy1clB h0ykL3If0P20SWLdnmat2jx6zDVpXr+OxBuzQiVYZkBUgc9b/1F7MKHtnt9Ekynh LysSIRX/PR2KEXJcmJnNKkkSNTA5KLqu5zbUMa5r88d0lyiwi83bTTfYucbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd+NiDOkyGk+XfzvNsGfFmxjlIRQwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmRQL/SwRHplmrQpxNWomp7LPCko1Uqus6R 6GjyjZc6MqSqUnESWlYw7mjTtnVomNqcYTSy9jgFsMsrVC2pQ9UrLxSQN5tyJJ3G A6e1au3aACUEItiY+d/UCli3CD1eTqItVdV+RmU2q6vnnDicv6mN/LDjG0zNQYI3 DpP1op1TK+jYGN9PACBC2pvqncFYy9w2SJ9NjEPUuqjva9EFok+nC3ijwbvUkWsr k108Yo1yxj/d2sW9yLKagR94o0aIYcfu/rtUxnlAGTF3JvAo3rR2aMiH/V1lhBEr AQfKLnaySN0EJecYIFtkrNcMK7xICMn30fRH+GuHsKYxIdmg+3g= -----END CERTIFICATE-----Generated at Wed Apr 30 05:26:59 2025 by rpki-client