$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: Mb8JZkd1kJrwQLRTPu+ZmdswvfWMVc3vnkysQjfbS7I= Subject key identifier: 7A:ED:34:A7:5A:9A:15:52:B0:F6:9B:6B:E1:25:C0:99:16:8D:27:C2 Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 6FCDF1CCFCD4495E0FC6FD178AEDF5D6EE772748 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 0489 Signing time: Mon 28 Apr 2025 14:31:50 +0000 Manifest this update: Mon 28 Apr 2025 14:26:50 +0000 Manifest next update: Thu 01 May 2025 14:38:50 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: W6WFo2Hu+QfbijXkpTTas8+VNp9aDLxId/mc15FAtA0=) 2: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: IyOwzuzsQ/NWEfpMXsQCkFK7Z2WzjjH2dPwx7rvajsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cd:f1:cc:fc:d4:49:5e:0f:c6:fd:17:8a:ed:f5:d6:ee:77:27:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Apr 28 14:26:50 2025 GMT Not After : May 1 14:38:50 2025 GMT Subject: CN=7AED34A75A9A1552B0F69B6BE125C099168D27C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:4d:36:9b:e5:ae:ba:ac:b2:5b:97:08:85: bd:02:15:b6:66:a1:ae:a3:e8:c5:04:8e:98:03:0b: 29:21:d7:0c:da:04:e7:d6:1a:f1:3c:22:c0:18:5c: ba:99:b1:00:08:86:1d:51:20:20:ec:17:b1:a1:12: 31:f1:8d:88:d1:67:04:bb:b2:75:7a:a6:a1:c6:0d: 77:c3:7c:c2:34:7e:20:af:51:45:24:13:b8:34:df: 6f:77:29:e5:79:eb:bc:0f:89:71:ea:fa:fd:64:40: 66:65:92:3d:eb:a2:59:f8:dc:a2:e3:9c:b9:d2:0c: 13:e5:85:a3:39:1d:2b:91:96:46:e9:55:24:5a:5a: 87:9f:7e:d1:e4:68:5c:0a:bc:00:07:62:b2:33:cd: 10:3a:00:a5:db:6e:ac:fd:d8:a8:7a:84:96:e2:4d: 25:d1:ea:33:55:f6:fe:28:1c:5c:c2:35:1c:64:69: 92:e3:2b:06:9b:31:62:dd:7d:18:55:99:ae:00:a4: a8:b8:ad:bc:3b:95:25:48:53:76:80:b4:df:d9:2c: d7:f3:24:98:13:dd:44:fc:c1:ec:6e:8e:f3:05:9e: ae:b6:45:90:aa:84:74:93:f3:a1:e1:d4:3f:1b:53: b4:c9:98:19:61:6d:f0:d1:a2:c4:90:d3:3c:64:2f: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:ED:34:A7:5A:9A:15:52:B0:F6:9B:6B:E1:25:C0:99:16:8D:27:C2 X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:0c:40:5b:cc:2a:2d:fa:e5:5d:7f:d6:86:7f:b6:64:f4: 1a:86:8d:87:0a:7b:4b:fc:55:0a:77:c2:8c:1d:6a:04:74:ff: 0d:b3:7d:67:01:86:3b:96:81:33:c9:9e:63:fa:16:7a:3f:60: d1:99:bd:1a:e3:92:8c:a2:31:15:df:dc:8f:ab:70:3d:4a:74: 04:58:76:22:b7:03:5e:c0:b6:1a:8b:d3:93:16:27:73:47:14: d1:63:3f:6f:ed:fe:7d:8f:53:9d:fc:70:11:34:da:ba:88:8a: 4e:f8:13:75:df:c1:06:73:cb:ed:f3:da:ea:7d:1d:4e:5d:a3: 2a:62:f9:b5:ec:e8:57:ff:a5:75:10:e8:2c:4a:d0:9e:7a:b0: 4a:b4:5a:bc:be:55:3f:5d:a5:3f:8c:ab:92:13:09:bb:95:79: 93:fe:0a:f2:3c:68:a6:86:9d:a1:b5:db:61:94:28:a2:52:f0: d6:df:10:fc:48:3d:a1:b5:e3:5b:b7:70:9b:f7:5f:b2:c5:bb: 41:38:0e:c2:37:91:c9:8b:19:f8:6f:5e:4e:a6:0c:df:30:33: fc:eb:06:68:85:13:cc:9b:e7:89:a7:3f:2b:fa:83:77:9d:1d: 42:51:ed:37:66:34:c6:34:ba:59:21:ac:b1:a5:ad:7d:f4:41: 9c:37:de:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb83xzPzUSV4Pxv0Xiu311u53J0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNTA0MjgxNDI2NTBaFw0yNTA1MDExNDM4NTBaMDMxMTAvBgNV BAMTKDdBRUQzNEE3NUE5QTE1NTJCMEY2OUI2QkUxMjVDMDk5MTY4RDI3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9E02m+WuuqyyW5cIhb0CFbZm oa6j6MUEjpgDCykh1wzaBOfWGvE8IsAYXLqZsQAIhh1RICDsF7GhEjHxjYjRZwS7 snV6pqHGDXfDfMI0fiCvUUUkE7g03293KeV567wPiXHq+v1kQGZlkj3roln43KLj nLnSDBPlhaM5HSuRlkbpVSRaWoefftHkaFwKvAAHYrIzzRA6AKXbbqz92Kh6hJbi TSXR6jNV9v4oHFzCNRxkaZLjKwabMWLdfRhVma4ApKi4rbw7lSVIU3aAtN/ZLNfz JJgT3UT8wexujvMFnq62RZCqhHST86Hh1D8bU7TJmBlhbfDRosSQ0zxkLyfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeu00p1qaFVKw9ptr4SXAmRaNJ8IwHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7pDEBbzCot+uVdf9aGf7Zk9BqGjYcKe0v8 VQp3wowdagR0/w2zfWcBhjuWgTPJnmP6Fno/YNGZvRrjkoyiMRXf3I+rcD1KdARY diK3A17AthqL05MWJ3NHFNFjP2/t/n2PU538cBE02rqIik74E3XfwQZzy+3z2up9 HU5doypi+bXs6Ff/pXUQ6CxK0J56sEq0Wry+VT9dpT+Mq5ITCbuVeZP+CvI8aKaG naG122GUKKJS8NbfEPxIPaG141u3cJv3X7LFu0E4DsI3kcmLGfhvXk6mDN8wM/zr BmiFE8yb54mnPyv6g3edHUJR7TdmNMY0ulkhrLGlrX30QZw33vI= -----END CERTIFICATE-----Generated at Wed Apr 30 11:29:07 2025 by rpki-client