$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: S9/6wXyA9EG/zrsX0FWkrO1d5zAWjo8VUv4Ci26T3R0= Subject key identifier: E0:09:4C:FC:EE:12:62:4C:E9:07:47:C9:F3:17:DF:26:4D:69:B6:6F Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 404FED59F96071F6BFF69122FF1070398253ED7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: 52 Signing time: Sat 26 Apr 2025 19:30:35 +0000 Manifest this update: Sat 26 Apr 2025 19:25:35 +0000 Manifest next update: Wed 30 Apr 2025 03:39:35 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: Mh2qAtV9OXmT8dkxySa/tVQuTPHOj1MMmtUTif0IndI=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: HDfQ1ZWJGYZWJfpqSCEXJJBaO+Q2n/tkWBUNgIvmWIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 03:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4f:ed:59:f9:60:71:f6:bf:f6:91:22:ff:10:70:39:82:53:ed:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Apr 26 19:25:35 2025 GMT Not After : Apr 30 03:39:35 2025 GMT Subject: CN=E0094CFCEE12624CE90747C9F317DF264D69B66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:ec:bb:19:19:e3:50:09:a3:3e:43:be:fa: 6c:5c:56:f7:a2:49:29:52:60:6d:08:e8:6f:9b:b3: 35:c7:32:a2:f5:19:e4:dc:1b:d1:62:75:fd:85:a9: 72:85:3a:bf:94:81:e7:e0:6b:25:68:0d:b8:4a:b7: 20:33:0c:fb:d6:9c:6c:81:c0:69:46:ec:3d:66:16: d0:47:d1:bd:a7:b4:c2:b3:c4:72:76:10:fd:2a:2d: 7f:0e:af:ec:38:6a:be:83:d0:ac:45:10:c0:c2:56: 44:e8:1e:64:b6:07:4f:36:3e:63:0c:2b:20:ce:4f: a7:87:d8:2c:26:62:d1:52:ee:98:d3:f3:d6:57:7d: 8e:15:77:3e:01:42:1e:21:1c:3f:ce:56:8f:b7:a6: a2:42:b8:3b:0d:30:7f:3f:66:77:fc:a0:5c:cb:3d: e4:4c:23:5f:80:a4:9a:53:24:80:c9:63:c1:1f:c2: 23:57:2a:3c:0e:17:00:d2:4f:7c:f9:9a:ae:f2:cc: 45:37:60:cb:b1:1b:46:46:11:c3:da:59:1e:28:23: d6:01:be:a6:61:0b:a7:13:60:e6:f3:56:01:2c:f8: 89:de:23:5d:f0:5b:c5:0a:46:74:e4:23:2e:ea:3e: 39:b9:70:3c:32:2d:5d:8c:c1:4c:36:9f:c5:34:c5: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:4C:FC:EE:12:62:4C:E9:07:47:C9:F3:17:DF:26:4D:69:B6:6F X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0c:c0:da:36:24:79:99:fa:7f:2d:10:57:8c:7c:a3:ee:1e: 02:e2:31:d3:02:c7:cc:e7:36:bd:7f:77:9d:0e:b1:a5:f5:e4: 07:3e:a0:58:a4:1b:38:b2:ba:ab:ff:8d:fe:f3:0d:9a:3f:8f: 01:c4:ab:07:84:ab:cf:ec:ae:48:ba:f9:c5:40:16:e6:8a:25: 4e:02:b9:24:a1:d8:e6:fc:5f:f8:fb:d5:9b:d8:4f:2e:70:b7: e0:56:30:0e:92:3a:f4:d8:f0:bb:f4:23:11:23:0a:8d:2c:05: 32:fd:9a:bc:f8:46:15:b6:04:d1:2c:29:e5:c1:19:1a:5f:c3: 9e:29:8c:ff:86:54:aa:a6:72:17:7d:a9:d6:b4:3e:0b:ca:77: 38:89:2d:b3:9d:1e:f6:25:2c:15:af:0d:52:da:54:29:81:ed: 0b:8e:ef:14:c2:43:a5:6a:af:12:5b:cf:5c:d0:d3:23:67:b6: f8:c5:93:5d:9d:56:3f:1f:38:0b:73:52:c7:5a:6e:29:27:a1: 6f:88:1b:f5:a4:c9:c7:eb:f1:be:99:3a:bf:2c:cd:a8:95:49: d3:7d:78:7b:95:6b:05:0b:2f:7f:09:0e:3e:1b:22:d5:87:f4: b3:17:29:8a:e5:25:a6:5c:76:53:1b:65:90:6c:80:57:e4:7f: 69:c6:13:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQE/tWflgcfa/9pEi/xBwOYJT7X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTA0MjYxOTI1MzVaFw0yNTA0MzAwMzM5MzVaMDMxMTAvBgNV BAMTKEUwMDk0Q0ZDRUUxMjYyNENFOTA3NDdDOUYzMTdERjI2NEQ2OUI2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyey7GRnjUAmjPkO++mxcVvei SSlSYG0I6G+bszXHMqL1GeTcG9Fidf2FqXKFOr+UgefgayVoDbhKtyAzDPvWnGyB wGlG7D1mFtBH0b2ntMKzxHJ2EP0qLX8Or+w4ar6D0KxFEMDCVkToHmS2B082PmMM KyDOT6eH2CwmYtFS7pjT89ZXfY4Vdz4BQh4hHD/OVo+3pqJCuDsNMH8/Znf8oFzL PeRMI1+ApJpTJIDJY8EfwiNXKjwOFwDST3z5mq7yzEU3YMuxG0ZGEcPaWR4oI9YB vqZhC6cTYObzVgEs+IneI13wW8UKRnTkIy7qPjm5cDwyLV2MwUw2n8U0xVJRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4AlM/O4SYkzpB0fJ8xffJk1ptm8wHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcMwNo2JHmZ+n8tEFeMfKPuHgLiMdMCx8zn Nr1/d50OsaX15Ac+oFikGziyuqv/jf7zDZo/jwHEqweEq8/srki6+cVAFuaKJU4C uSSh2Ob8X/j71ZvYTy5wt+BWMA6SOvTY8Lv0IxEjCo0sBTL9mrz4RhW2BNEsKeXB GRpfw54pjP+GVKqmchd9qda0PgvKdziJLbOdHvYlLBWvDVLaVCmB7QuO7xTCQ6Vq rxJbz1zQ0yNntvjFk12dVj8fOAtzUsdabiknoW+IG/Wkycfr8b6ZOr8szaiVSdN9 eHuVawULL38JDj4bItWH9LMXKYrlJaZcdlMbZZBsgFfkf2nGEzk= -----END CERTIFICATE-----Generated at Mon Apr 28 07:02:16 2025 by rpki-client