$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: 2VeGhuySs9swZkAgfxLe7pMKENYAloGtAF/46skV1IU= Subject key identifier: 55:80:15:29:54:8B:59:0D:5A:13:46:BE:6F:F4:10:A4:79:93:71:7C Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 44C34B6ED1C8B94ED6212826F850C611712D1A2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 02CF Signing time: Fri 25 Apr 2025 17:30:54 +0000 Manifest this update: Fri 25 Apr 2025 17:25:54 +0000 Manifest next update: Mon 28 Apr 2025 20:25:54 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: +ESPL9RiV1kXE5HVVZEJFevVqgb2FPlNrLYphfud9Dg=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: NdtE3ziI4+MQSHJXiN65zMuqwRKBXjIGhBsJmcrNpMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c3:4b:6e:d1:c8:b9:4e:d6:21:28:26:f8:50:c6:11:71:2d:1a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Apr 25 17:25:54 2025 GMT Not After : Apr 28 20:25:54 2025 GMT Subject: CN=55801529548B590D5A1346BE6FF410A47993717C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4f:ef:5d:87:97:9a:49:12:54:d2:1d:29:09: 26:09:d1:f0:42:38:05:a5:42:7a:13:52:95:03:d6: 22:91:6a:84:62:66:23:cc:76:18:73:93:2e:1b:a8: 07:ed:a0:e9:a0:c6:2d:c8:34:52:fe:f6:ac:d8:ae: 5d:d5:d3:ce:58:eb:14:98:09:1b:4c:ec:02:8e:ab: 0a:12:41:ea:6b:c9:b3:b9:2c:c6:df:39:99:88:30: 00:c4:30:e7:46:b6:ea:f8:23:f3:1c:8e:9a:08:d9: c1:ba:68:d9:fc:16:92:9a:1b:58:6a:73:dd:32:73: 51:91:54:94:32:a6:59:96:a9:bf:b3:c6:7e:95:d3: 68:08:0a:90:a7:f6:87:75:e5:49:49:fb:e5:85:ef: 58:3b:4a:cd:9a:f5:00:9a:7e:60:22:82:af:6e:31: 14:48:99:42:69:5f:f8:a2:fc:44:44:60:bb:a6:c4: 3a:50:3b:81:73:61:d2:a6:35:4f:02:48:ac:46:9a: cc:44:67:8e:60:c4:33:a0:c9:31:ee:10:ea:d2:99: 30:e0:59:8a:de:63:55:20:a3:5c:1b:8b:6b:61:71: 59:70:b4:a4:3a:0f:16:3c:6d:76:2e:9e:fd:da:4d: 71:63:61:c1:a0:a7:7c:f3:f0:04:f0:28:ad:01:eb: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:80:15:29:54:8B:59:0D:5A:13:46:BE:6F:F4:10:A4:79:93:71:7C X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:78:d1:73:c1:54:e8:26:63:8f:94:69:61:1c:75:55:dd:ff: 40:d1:20:91:7b:de:62:a4:e3:7a:4b:d3:94:04:70:d7:0b:89: dc:11:e3:8d:8d:97:fb:57:da:c1:45:d3:5b:98:ee:43:77:ec: 5f:41:c4:dd:7f:4f:8d:3f:bc:86:1c:8b:da:da:cd:c7:36:4a: f1:07:a0:cd:cf:7b:38:c3:ef:92:dc:e5:26:10:cf:a6:3e:0e: c7:f9:0e:79:7c:48:5c:12:89:2a:e3:6e:58:82:cf:84:ab:c5: 98:d0:29:08:2c:a2:e2:75:25:73:90:b7:6b:ca:7c:cd:72:34: a9:ce:6f:4d:94:20:07:ca:b2:c7:4f:43:ed:c0:1b:b0:5e:14: 72:cb:4b:06:5c:86:14:50:99:57:14:80:5a:38:5e:03:a6:d4: ec:e8:4b:e4:c3:2f:e5:62:4e:3e:46:c6:19:62:21:2f:85:e3: a1:e1:2b:dc:65:06:aa:a9:67:84:22:f4:e2:8b:fe:60:f7:14: 1a:e4:10:2f:bc:da:2a:24:0d:7b:cc:10:2e:99:db:37:68:46: 7a:39:27:c9:fb:24:01:aa:7e:b4:33:b2:71:c1:11:95:83:d9: 5b:a9:e0:d1:20:2b:b7:91:e5:9a:c9:23:77:38:82:a2:b7:90: b1:19:01:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMNLbtHIuU7WISgm+FDGEXEtGiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA0MjUxNzI1NTRaFw0yNTA0MjgyMDI1NTRaMDMxMTAvBgNV BAMTKDU1ODAxNTI5NTQ4QjU5MEQ1QTEzNDZCRTZGRjQxMEE0Nzk5MzcxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWT+9dh5eaSRJU0h0pCSYJ0fBC OAWlQnoTUpUD1iKRaoRiZiPMdhhzky4bqAftoOmgxi3INFL+9qzYrl3V085Y6xSY CRtM7AKOqwoSQeprybO5LMbfOZmIMADEMOdGtur4I/McjpoI2cG6aNn8FpKaG1hq c90yc1GRVJQyplmWqb+zxn6V02gICpCn9od15UlJ++WF71g7Ss2a9QCafmAigq9u MRRImUJpX/ii/EREYLumxDpQO4FzYdKmNU8CSKxGmsxEZ45gxDOgyTHuEOrSmTDg WYreY1Ugo1wbi2thcVlwtKQ6DxY8bXYunv3aTXFjYcGgp3zz8ATwKK0B677DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYAVKVSLWQ1aE0a+b/QQpHmTcXwwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ940XPBVOgmY4+UaWEcdVXd/0DRIJF73mKk 43pL05QEcNcLidwR442Nl/tX2sFF01uY7kN37F9BxN1/T40/vIYci9razcc2SvEH oM3PezjD75Lc5SYQz6Y+Dsf5Dnl8SFwSiSrjbliCz4SrxZjQKQgsouJ1JXOQt2vK fM1yNKnOb02UIAfKssdPQ+3AG7BeFHLLSwZchhRQmVcUgFo4XgOm1OzoS+TDL+Vi Tj5GxhliIS+F46HhK9xlBqqpZ4Qi9OKL/mD3FBrkEC+82iokDXvMEC6Z2zdoRno5 J8n7JAGqfrQzsnHBEZWD2Vup4NEgK7eR5ZrJI3c4gqK3kLEZATA= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:40 2025 by rpki-client