$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: NM+6Zby1y7TlEXLhTKK0BHU7CTXh2h5+Pv+YnxGmusU= Subject key identifier: A4:91:96:99:29:68:9B:B7:89:69:F8:DE:26:4D:C1:5A:60:4E:4B:4A Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 3B41F5A7CB43F61A3509370ABCD837CA03F6B737 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 01DD Signing time: Wed 30 Apr 2025 09:02:00 +0000 Manifest this update: Wed 30 Apr 2025 08:57:00 +0000 Manifest next update: Sat 03 May 2025 17:39:00 +0000 Files and hashes: 1: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: Kg+qUGiJOCWlU9CEF9sF6UHMuGBLyiUY1zk9iK+p//c=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 3: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: qG87/MxvWY0iJNvMc2V0n7Xpb9BMoQqQBCDNIQcUVxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:41:f5:a7:cb:43:f6:1a:35:09:37:0a:bc:d8:37:ca:03:f6:b7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Apr 30 08:57:00 2025 GMT Not After : May 3 17:39:00 2025 GMT Subject: CN=A491969929689BB78969F8DE264DC15A604E4B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:e6:d5:36:0c:6f:5e:1c:cf:94:c1:e8:b0: d9:09:d5:6a:0f:12:6a:9d:1b:56:96:68:27:41:08: ee:55:d0:7e:d1:8f:70:ca:ce:67:41:1d:97:7f:b1: 6a:5e:1e:2a:ef:dc:70:45:a2:48:0d:09:a1:d3:e4: bf:89:de:22:80:fe:80:ef:3f:8d:bb:33:f2:09:d7: 07:0d:53:73:65:f7:28:3d:0b:f8:d1:62:30:1e:12: 0a:bf:d6:98:a5:49:c0:d4:7d:52:0f:86:28:3c:77: f5:9a:ed:58:2a:85:e0:8c:7c:32:a4:95:7c:18:f8: 8a:30:ce:54:ac:7d:07:da:94:cd:7d:22:c2:07:f6: 46:59:74:a4:9e:73:c9:32:59:dd:d4:23:be:61:2a: de:9c:ad:ba:88:71:95:24:c7:97:f3:7e:1a:59:e8: f2:ac:82:0c:51:d2:76:26:d1:1a:40:33:2a:bd:69: b4:75:6e:d2:ec:d1:9b:74:da:eb:78:38:84:ff:1d: 62:65:a3:e1:04:22:d8:18:eb:fc:d0:4a:09:e9:57: 4e:49:b5:5d:fc:22:d4:5d:2f:27:8b:d0:ca:d3:e5: 8f:fa:4d:f5:65:fe:9e:a1:9f:69:29:4c:65:52:9b: 56:95:51:31:7b:d6:e5:e8:c1:ad:b3:79:ad:ce:11: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:91:96:99:29:68:9B:B7:89:69:F8:DE:26:4D:C1:5A:60:4E:4B:4A X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:06:fa:b1:b0:24:3a:8d:f2:44:32:a6:ad:c9:48:7b:fb:19: 75:a3:72:26:b3:63:68:f5:fc:80:d0:64:30:dd:39:8a:34:0e: cd:bf:c8:a0:6b:fa:39:f5:b4:44:5e:10:79:b8:b4:09:55:f7: a4:66:20:c5:4f:61:e3:2b:e1:85:ff:fe:94:4f:c6:20:f8:0a: 35:79:e4:ea:2c:62:1c:6e:c8:6a:37:56:95:84:11:47:f4:ef: 81:e2:99:3f:da:33:a8:8a:51:27:18:51:cd:d1:ec:8b:d0:54: 95:6e:08:4a:54:66:95:4d:8d:1e:f6:a4:62:99:2d:85:79:54: f3:de:db:07:5e:60:e0:b2:ba:7e:c6:ad:e4:68:4f:21:fb:a8: 2f:72:df:23:62:02:4a:1b:ac:d8:99:2e:62:cc:b8:32:9b:c2: ca:dd:73:62:f4:e6:51:ea:cb:96:c2:e6:a0:c6:ad:d8:21:66: 89:9e:91:c9:7a:9b:b0:7d:36:fb:76:ca:5c:be:b4:dd:1c:56: 2c:f6:eb:6c:81:82:eb:eb:00:15:40:d7:29:a2:a8:50:46:3c: 67:0a:d0:91:51:43:d5:64:16:26:aa:50:fd:51:4b:92:4c:8d: 70:42:b6:4e:81:42:bb:57:bc:22:99:55:a6:62:32:66:c2:13: 42:c5:4b:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0H1p8tD9ho1CTcKvNg3ygP2tzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA0MzAwODU3MDBaFw0yNTA1MDMxNzM5MDBaMDMxMTAvBgNV BAMTKEE0OTE5Njk5Mjk2ODlCQjc4OTY5RjhERTI2NERDMTVBNjA0RTRCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPObVNgxvXhzPlMHosNkJ1WoP EmqdG1aWaCdBCO5V0H7Rj3DKzmdBHZd/sWpeHirv3HBFokgNCaHT5L+J3iKA/oDv P427M/IJ1wcNU3Nl9yg9C/jRYjAeEgq/1pilScDUfVIPhig8d/Wa7VgqheCMfDKk lXwY+IowzlSsfQfalM19IsIH9kZZdKSec8kyWd3UI75hKt6crbqIcZUkx5fzfhpZ 6PKsggxR0nYm0RpAMyq9abR1btLs0Zt02ut4OIT/HWJlo+EEItgY6/zQSgnpV05J tV38ItRdLyeL0MrT5Y/6TfVl/p6hn2kpTGVSm1aVUTF71uXowa2zea3OERNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJGWmSlom7eJafjeJk3BWmBOS0owHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEG+rGwJDqN8kQypq3JSHv7GXWjciazY2j1 /IDQZDDdOYo0Ds2/yKBr+jn1tEReEHm4tAlV96RmIMVPYeMr4YX//pRPxiD4CjV5 5OosYhxuyGo3VpWEEUf074HimT/aM6iKUScYUc3R7IvQVJVuCEpUZpVNjR72pGKZ LYV5VPPe2wdeYOCyun7GreRoTyH7qC9y3yNiAkobrNiZLmLMuDKbwsrdc2L05lHq y5bC5qDGrdghZomekcl6m7B9Nvt2yly+tN0cViz262yBguvrABVA1ymiqFBGPGcK 0JFRQ9VkFiaqUP1RS5JMjXBCtk6BQrtXvCKZVaZiMmbCE0LFS8s= -----END CERTIFICATE-----Generated at Wed Apr 30 22:01:28 2025 by rpki-client