$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: XY3FWpmovQXvyI9Aznhxcoq/r4lRwU/HwWzsYmzZM5M= Subject key identifier: 87:FC:16:7C:8E:E7:FB:4B:CD:8A:DE:6C:80:EE:07:B9:54:AE:6F:24 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 2691B5FCD8B061656A6FB53BC2BC0F447183B4D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: 9C Signing time: Mon 28 Apr 2025 00:41:09 +0000 Manifest this update: Mon 28 Apr 2025 00:36:09 +0000 Manifest next update: Thu 01 May 2025 07:58:09 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) 2: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: qdi5DadvEsEiTZwzqIhNocEnkdVXKejNTQluqj7dVm4=) 3: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) 4: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:91:b5:fc:d8:b0:61:65:6a:6f:b5:3b:c2:bc:0f:44:71:83:b4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Apr 28 00:36:09 2025 GMT Not After : May 1 07:58:09 2025 GMT Subject: CN=87FC167C8EE7FB4BCD8ADE6C80EE07B954AE6F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:2d:92:3a:ec:24:98:3c:14:32:10:2b:5a: 2e:b8:9f:6f:5a:a0:fc:6a:f8:9d:7f:ce:cd:9c:a7: 0b:90:78:db:6e:7e:5f:be:e3:4d:bb:6d:a5:96:e6: 72:ad:1e:b6:19:c3:cd:28:10:a9:cd:e4:e7:2f:56: 10:dc:16:4b:ed:32:72:e7:6a:8b:c5:e0:1a:81:7d: fc:57:df:6a:81:77:bd:23:f5:2d:e0:f3:0f:ab:5c: b4:a1:70:36:ce:f6:47:da:7c:72:b5:0c:3e:cd:44: 9a:3a:2a:d6:97:22:4a:a8:4b:e4:06:30:52:d8:fa: 23:10:90:29:4b:d9:ea:d5:60:1e:92:9f:a3:77:9f: ab:42:90:bf:0c:76:f4:8c:60:6d:ee:a1:8b:c2:3c: ce:55:18:5e:17:e7:42:96:b7:43:93:ff:95:f0:30: ff:43:37:7c:cf:6b:f6:5e:aa:e1:b7:10:50:ff:c9: e9:00:d0:f6:4a:3e:62:4c:52:35:a7:96:7c:2f:f4: 87:8b:e5:2e:99:12:bf:56:e6:f0:f7:8f:38:92:ba: 27:e7:ba:cb:d1:3f:ef:37:b1:b1:4f:e7:de:69:2b: e0:7c:75:f6:6a:d2:32:c4:0a:8d:94:0b:bb:09:45: 62:55:2c:6b:7e:63:23:89:ab:23:01:3d:50:41:28: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:16:7C:8E:E7:FB:4B:CD:8A:DE:6C:80:EE:07:B9:54:AE:6F:24 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:88:b6:ba:6e:01:8b:d9:e6:4f:1a:27:17:a3:dd:5e:93:81: 7c:b9:6f:1e:29:e7:42:80:1b:02:5b:29:1a:6a:d1:95:b6:d2: 12:50:36:d5:d1:59:8f:58:f0:4b:84:5a:b2:21:45:80:24:84: ec:57:ba:97:6e:fc:2a:e6:19:07:fc:ae:ec:21:fb:c2:95:ea: 7c:e8:79:5a:be:29:75:03:e5:1b:66:9c:85:1f:f5:31:70:b0: fe:8e:62:fb:f3:f5:9b:85:7b:d7:30:88:48:03:d0:85:09:5c: 32:a2:71:e8:56:dc:24:46:ec:4e:a3:38:09:e8:90:55:11:32: de:18:70:44:12:b5:4a:16:52:fa:84:11:11:95:81:4a:74:0f: c9:43:6c:bd:78:58:30:c0:7c:f9:5c:d9:17:2d:3e:af:72:f8: 7c:2f:15:31:e5:18:94:5d:2b:6f:50:59:93:73:d4:ad:2d:71: 6e:70:e2:e3:ff:8d:07:d8:5f:02:22:e5:19:93:09:c0:b7:64: 36:7e:7c:10:2d:99:5a:42:8d:77:6b:1a:54:ac:a7:33:d6:70: 46:71:75:ac:bb:44:98:26:98:0e:57:5d:3d:14:bc:9f:17:83: 48:bb:54:56:f9:29:9e:10:61:d3:3c:35:5c:89:86:ff:37:5f: 92:23:ed:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpG1/NiwYWVqb7U7wrwPRHGDtNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTA0MjgwMDM2MDlaFw0yNTA1MDEwNzU4MDlaMDMxMTAvBgNV BAMTKDg3RkMxNjdDOEVFN0ZCNEJDRDhBREU2QzgwRUUwN0I5NTRBRTZGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGi2SOuwkmDwUMhArWi64n29a oPxq+J1/zs2cpwuQeNtufl++4027baWW5nKtHrYZw80oEKnN5OcvVhDcFkvtMnLn aovF4BqBffxX32qBd70j9S3g8w+rXLShcDbO9kfafHK1DD7NRJo6KtaXIkqoS+QG MFLY+iMQkClL2erVYB6Sn6N3n6tCkL8MdvSMYG3uoYvCPM5VGF4X50KWt0OT/5Xw MP9DN3zPa/ZequG3EFD/yekA0PZKPmJMUjWnlnwv9IeL5S6ZEr9W5vD3jziSuifn usvRP+83sbFP595pK+B8dfZq0jLECo2UC7sJRWJVLGt+YyOJqyMBPVBBKLGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh/wWfI7n+0vNit5sgO4HuVSubyQwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKItrpuAYvZ5k8aJxej3V6TgXy5bx4p50KA GwJbKRpq0ZW20hJQNtXRWY9Y8EuEWrIhRYAkhOxXupdu/CrmGQf8ruwh+8KV6nzo eVq+KXUD5RtmnIUf9TFwsP6OYvvz9ZuFe9cwiEgD0IUJXDKicehW3CRG7E6jOAno kFURMt4YcEQStUoWUvqEERGVgUp0D8lDbL14WDDAfPlc2RctPq9y+HwvFTHlGJRd K29QWZNz1K0tcW5w4uP/jQfYXwIi5RmTCcC3ZDZ+fBAtmVpCjXdrGlSspzPWcEZx day7RJgmmA5XXT0UvJ8Xg0i7VFb5KZ4QYdM8NVyJhv83X5Ij7fs= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:10 2025 by rpki-client