$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: eXnJA3TSGYn+HopQhhXESpDYU1hzoZ3DtBILpHtBwfs= Subject key identifier: A5:F9:88:19:9E:AE:28:D9:DE:69:B7:47:93:D0:C0:46:73:84:94:57 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 3ECECE0F21E0630C779B7ED7943C36109A107AC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: 5D Signing time: Sun 27 Apr 2025 03:50:36 +0000 Manifest this update: Sun 27 Apr 2025 03:45:36 +0000 Manifest next update: Wed 30 Apr 2025 07:01:36 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: sOtuWgUabNlSkXJrsTuvhWyKxY349Rg280lYvRDlFuQ=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ce:ce:0f:21:e0:63:0c:77:9b:7e:d7:94:3c:36:10:9a:10:7a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Apr 27 03:45:36 2025 GMT Not After : Apr 30 07:01:36 2025 GMT Subject: CN=A5F988199EAE28D9DE69B74793D0C04673849457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:ee:d6:95:79:20:4e:26:7f:78:75:23:6a: 43:6f:17:63:bb:af:65:f3:9f:e7:13:03:74:7e:7d: 47:a7:6f:6a:ad:24:fc:51:7c:fe:87:c9:d9:c1:dd: b8:fd:3b:c9:5c:fa:8a:d4:5a:7a:26:0c:f3:2c:8d: fd:e7:2b:2a:cb:98:4b:b5:e7:89:39:c0:02:83:ef: b5:f4:bc:2b:b8:77:d3:ad:a5:18:f4:93:3c:e5:ec: 2a:21:71:39:69:b0:b8:be:b6:38:92:7b:aa:43:fb: 57:4c:b2:94:ac:40:c3:bc:45:50:fe:82:ee:53:f1: 28:85:79:e4:19:01:f8:34:fd:e0:8c:d4:59:cd:e6: 91:2d:d7:b4:9f:c0:e0:24:48:2b:c5:91:a2:ae:db: a5:1b:df:c5:63:82:0f:4d:30:4b:2d:a0:b8:61:46: 31:31:be:dc:20:64:30:c6:49:ab:d1:79:1f:ee:b5: 38:68:5b:bf:e2:83:2b:4e:c7:84:f4:63:2b:0c:e2: cb:4f:6f:7c:03:a5:cf:0f:85:59:86:92:9f:bf:1e: 67:cd:c8:e3:de:06:e8:71:a8:c8:d9:39:2e:d2:54: db:f9:31:1f:36:75:74:03:ea:7d:ec:12:c6:03:07: 5a:02:85:ad:88:3f:b4:81:b3:41:fe:1d:0d:ba:6b: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F9:88:19:9E:AE:28:D9:DE:69:B7:47:93:D0:C0:46:73:84:94:57 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ad:47:9d:f6:2d:e3:0d:f0:6d:d8:58:81:50:d6:13:91:6d: c2:7e:c5:68:4b:b6:97:6e:46:00:f3:e7:35:c4:6c:66:82:68: 13:73:dd:51:a6:e2:4f:f7:86:d7:51:05:3e:42:9c:8b:fe:1c: cc:2d:29:80:49:ce:0c:8f:2a:72:d4:bc:73:d1:12:05:42:37: ab:f4:35:ef:e2:8e:17:9e:86:df:03:8d:c9:1c:cf:65:0a:1e: eb:5f:d0:4d:8c:d8:6d:58:1b:fd:c9:21:bf:6b:30:77:5a:9b: 39:e1:54:f4:fd:cf:36:51:97:58:b5:cd:f0:9c:2c:00:ff:ad: a2:e2:07:64:cc:b8:5c:9a:06:3a:e8:16:b3:a9:d8:82:89:22: 40:7c:40:5c:3e:02:4f:48:1e:fa:9a:77:2e:78:01:b9:cf:3b: 00:c8:6b:58:b9:72:92:22:3c:eb:f3:c9:60:92:ed:ca:03:35: c0:3b:af:c3:ed:04:d2:c8:84:91:b9:7e:57:92:e0:08:1a:c5: b9:b4:23:44:92:75:ab:28:6b:c2:3f:9c:c4:e1:2b:8e:7f:a2: 2d:a8:55:d0:e5:41:af:b4:0d:78:cb:c1:6f:64:16:31:6b:03: 29:9c:d7:db:73:bf:ee:76:eb:e6:77:95:0c:d1:e0:e6:34:48: 13:3e:ae:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPs7ODyHgYwx3m37XlDw2EJoQesgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTA0MjcwMzQ1MzZaFw0yNTA0MzAwNzAxMzZaMDMxMTAvBgNV BAMTKEE1Rjk4ODE5OUVBRTI4RDlERTY5Qjc0NzkzRDBDMDQ2NzM4NDk0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDe7WlXkgTiZ/eHUjakNvF2O7 r2Xzn+cTA3R+fUenb2qtJPxRfP6HydnB3bj9O8lc+orUWnomDPMsjf3nKyrLmEu1 54k5wAKD77X0vCu4d9OtpRj0kzzl7CohcTlpsLi+tjiSe6pD+1dMspSsQMO8RVD+ gu5T8SiFeeQZAfg0/eCM1FnN5pEt17SfwOAkSCvFkaKu26Ub38Vjgg9NMEstoLhh RjExvtwgZDDGSavReR/utThoW7/igytOx4T0YysM4stPb3wDpc8PhVmGkp+/HmfN yOPeBuhxqMjZOS7SVNv5MR82dXQD6n3sEsYDB1oCha2IP7SBs0H+HQ26a2lVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpfmIGZ6uKNneabdHk9DARnOElFcwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6tR532LeMN8G3YWIFQ1hORbcJ+xWhLtpdu RgDz5zXEbGaCaBNz3VGm4k/3htdRBT5CnIv+HMwtKYBJzgyPKnLUvHPREgVCN6v0 Ne/ijheeht8Djckcz2UKHutf0E2M2G1YG/3JIb9rMHdamznhVPT9zzZRl1i1zfCc LAD/raLiB2TMuFyaBjroFrOp2IKJIkB8QFw+Ak9IHvqady54AbnPOwDIa1i5cpIi POvzyWCS7coDNcA7r8PtBNLIhJG5fleS4Agaxbm0I0SSdasoa8I/nMThK45/oi2o VdDlQa+0DXjLwW9kFjFrAymc19tzv+526+Z3lQzR4OY0SBM+rog= -----END CERTIFICATE-----Generated at Tue Apr 29 08:38:26 2025 by rpki-client