$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: l3rqg+ILKpMw7I+c9QPZ7m1krAZ4NhisUXC5HgYnhC0= Subject key identifier: 16:E7:4F:07:7E:ED:2A:93:81:66:47:A0:A1:D3:DD:98:44:5C:94:57 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 1DB4547B7ED0EC7CDED0EAC3C57526448286B332 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: 83 Signing time: Sun 27 Apr 2025 08:10:39 +0000 Manifest this update: Sun 27 Apr 2025 08:05:39 +0000 Manifest next update: Wed 30 Apr 2025 15:17:39 +0000 Files and hashes: 1: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: dIklSAhTd1QkYpzQrRNxPi4OuuOcSwctGkAy0Q3T1ls=) 2: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: wkkdUtwBR3glWvq4bawJi3LjFSwVpUx48Tws7lmR0xE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b4:54:7b:7e:d0:ec:7c:de:d0:ea:c3:c5:75:26:44:82:86:b3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Apr 27 08:05:39 2025 GMT Not After : Apr 30 15:17:39 2025 GMT Subject: CN=16E74F077EED2A93816647A0A1D3DD98445C9457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:3a:11:80:03:97:8a:c1:72:ce:f5:da:64: 52:19:45:d7:7a:ab:8c:93:87:e4:9d:14:d7:5e:53: 37:29:15:c5:69:54:b1:66:77:02:62:fd:2f:26:be: 12:e2:da:e9:17:d5:f4:74:35:70:67:6e:f5:35:9c: 06:9a:bd:53:0f:e6:af:37:9c:95:92:f2:f3:7d:0f: 74:78:7d:8b:d2:e2:30:f6:db:15:77:99:e5:22:e3: 00:7b:eb:c8:ef:ef:7d:3c:2e:de:35:1a:73:13:e0: b2:ef:6e:c2:bd:3f:64:63:c2:23:7a:f1:54:fe:c4: 9b:f8:d5:c2:94:2c:ca:0e:4a:9d:d6:f9:67:b4:e4: 3f:6a:36:ba:dc:d6:a9:ee:c2:d4:a8:f7:5e:85:82: b4:c5:3c:b5:be:9c:69:7a:22:69:f3:ab:7f:84:25: 66:4d:ab:34:8d:0d:4a:50:c1:a0:da:75:c6:ff:a2: 73:1c:ca:cc:cf:43:d5:1a:90:10:89:21:0a:4e:75: 48:7d:ba:35:98:71:ae:d9:72:e0:4e:61:29:4b:7f: 69:af:e5:76:1a:c4:26:4a:c1:91:03:dc:c8:a3:80: cc:1f:27:df:2a:99:27:1e:f4:eb:12:64:c5:64:36: c4:8b:f4:e2:c7:a0:1b:c9:94:f3:32:4e:6b:2d:88: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E7:4F:07:7E:ED:2A:93:81:66:47:A0:A1:D3:DD:98:44:5C:94:57 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e2:57:8b:cd:06:09:3d:93:9a:65:7d:fe:b4:43:e1:08:24: da:86:53:93:a6:fc:59:03:24:c6:d1:84:4c:be:5b:2a:8f:79: 7e:f1:3b:8f:3a:35:d6:c6:ca:87:89:75:ef:20:14:d5:24:16: 3a:03:e5:9d:61:d7:4f:fa:7a:f5:5e:3f:b2:e7:f3:08:8e:fe: d1:8c:a5:e7:e8:c2:1b:b0:83:2f:36:d7:74:74:b2:f0:37:c6: c6:e0:19:c9:a8:d3:fc:86:9d:38:b3:e5:fe:a7:f5:36:c6:3a: 78:db:5f:d7:27:65:63:a2:2d:3a:f7:d9:cc:4c:01:4a:5c:95: 9d:d3:f8:af:fb:b3:58:02:63:fe:42:4e:08:ef:9f:26:26:8c: 2d:ad:9a:73:f7:56:46:ba:bf:aa:54:0a:0d:62:40:2c:57:41: 79:f5:ff:a2:a2:08:07:91:0a:47:ce:3c:8d:99:84:1f:39:74: 68:76:c8:e3:36:d8:cd:ff:2e:f1:f8:9d:78:e6:69:47:30:c9: 5b:76:82:40:c4:2c:7e:64:37:3a:aa:6c:99:b7:bb:9b:0b:a5: 37:86:01:5a:09:81:65:15:b7:4f:f5:5e:f6:c9:3c:34:9b:0f: 64:a0:c9:3f:e7:bb:5d:64:6c:05:96:3a:20:fb:d3:70:76:7b: 6c:b5:42:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbRUe37Q7Hze0OrDxXUmRIKGszIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTA0MjcwODA1MzlaFw0yNTA0MzAxNTE3MzlaMDMxMTAvBgNV BAMTKDE2RTc0RjA3N0VFRDJBOTM4MTY2NDdBMEExRDNERDk4NDQ1Qzk0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLzoRgAOXisFyzvXaZFIZRdd6 q4yTh+SdFNdeUzcpFcVpVLFmdwJi/S8mvhLi2ukX1fR0NXBnbvU1nAaavVMP5q83 nJWS8vN9D3R4fYvS4jD22xV3meUi4wB768jv7308Lt41GnMT4LLvbsK9P2RjwiN6 8VT+xJv41cKULMoOSp3W+We05D9qNrrc1qnuwtSo916FgrTFPLW+nGl6Imnzq3+E JWZNqzSNDUpQwaDadcb/onMcyszPQ9UakBCJIQpOdUh9ujWYca7ZcuBOYSlLf2mv 5XYaxCZKwZED3MijgMwfJ98qmSce9OsSZMVkNsSL9OLHoBvJlPMyTmstiJv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFudPB37tKpOBZkegodPdmERclFcwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbiV4vNBgk9k5plff60Q+EIJNqGU5Om/FkD JMbRhEy+WyqPeX7xO486NdbGyoeJde8gFNUkFjoD5Z1h10/6evVeP7Ln8wiO/tGM pefowhuwgy8213R0svA3xsbgGcmo0/yGnTiz5f6n9TbGOnjbX9cnZWOiLTr32cxM AUpclZ3T+K/7s1gCY/5CTgjvnyYmjC2tmnP3Vka6v6pUCg1iQCxXQXn1/6KiCAeR CkfOPI2ZhB85dGh2yOM22M3/LvH4nXjmaUcwyVt2gkDELH5kNzqqbJm3u5sLpTeG AVoJgWUVt0/1XvbJPDSbD2SgyT/nu11kbAWWOiD703B2e2y1Quw= -----END CERTIFICATE-----Generated at Sun Apr 27 12:05:04 2025 by rpki-client