$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: t247BTena77J9T5rt4NPADh4VSLdxwPsH42Z1CSSD60= Subject key identifier: 30:48:20:98:8D:91:D2:BA:1C:AC:92:59:BD:B5:5E:D6:AD:E1:60:A0 Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 69962935BCAB3B7A9C375B45E8DEA6207C7B374B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 02DE Signing time: Tue 29 Apr 2025 20:30:34 +0000 Manifest this update: Tue 29 Apr 2025 20:25:34 +0000 Manifest next update: Sat 03 May 2025 04:53:34 +0000 Files and hashes: 1: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: 8pVdONx+0B7HzvlmWjfUUOE8jWcjWCCvoVvW/VBNAgQ=) 2: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: LhGR42TjXQE0n8Hbbib7SFqqNWq8vqTJncLaU+qdyCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 04:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:96:29:35:bc:ab:3b:7a:9c:37:5b:45:e8:de:a6:20:7c:7b:37:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Apr 29 20:25:34 2025 GMT Not After : May 3 04:53:34 2025 GMT Subject: CN=304820988D91D2BA1CAC9259BDB55ED6ADE160A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:e6:54:76:b1:1a:5c:a5:f7:59:d3:48:dd: 4c:9b:93:bd:cb:05:a3:f6:10:ac:a5:d3:6d:7e:78: 58:73:4d:44:c7:d5:b1:0c:97:b6:45:0e:66:ed:d4: 02:97:f1:f8:44:e1:2b:a1:4c:8f:2b:d4:be:f0:39: 50:00:ba:76:0f:e6:c2:e3:62:0a:ac:a9:df:ec:89: ec:24:27:e5:d3:b3:26:13:55:7f:29:e6:85:28:de: 39:2e:8c:34:a8:93:b1:ba:20:5f:f6:3b:ff:44:2c: bf:a6:d6:70:ca:4c:eb:d0:2a:02:ff:95:ab:88:47: 41:9a:d8:a7:82:20:54:ca:cd:15:d2:1c:3d:b5:bc: b8:dc:1d:d5:c0:89:be:99:02:5f:79:57:13:db:e2: d7:aa:1d:fe:22:05:02:ea:34:46:af:46:01:1e:c3: 04:65:44:ac:f9:81:c4:cb:2e:75:3f:68:12:61:78: db:56:be:d9:49:81:ae:ee:32:e5:c8:69:b0:2d:d1: e5:32:15:80:a9:75:7a:37:f6:56:82:5e:47:88:c8: a5:dd:c3:24:e5:fe:85:0c:02:12:98:87:d3:7b:8e: 21:df:fd:f6:e5:8f:0f:70:38:9d:f2:bd:7a:d1:bd: b7:ab:f0:3d:06:4a:76:2d:a2:f4:b7:8b:ec:c4:a7: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:48:20:98:8D:91:D2:BA:1C:AC:92:59:BD:B5:5E:D6:AD:E1:60:A0 X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9c:bc:ed:a0:fe:11:e9:79:cc:50:d4:b9:b2:89:02:ae:25: 2c:36:16:14:53:83:a0:fd:61:85:c7:00:9d:8e:18:5d:1b:99: b8:cb:fd:1f:71:34:4a:f7:71:11:41:b2:6e:cd:f9:71:1a:ed: de:45:cb:df:6d:74:eb:a8:86:3e:42:c5:ca:ff:c5:c5:bf:09: 7a:86:b5:a2:9c:2f:c2:92:c5:bb:1e:8f:e5:7a:7a:ab:1a:6a: 59:fb:b3:25:0d:76:0d:3a:27:59:8e:ff:61:57:39:a6:b6:75: 84:b7:86:72:52:35:fe:0f:f0:d7:cc:96:53:37:7d:cb:63:d3: 33:5a:6a:4b:61:67:d0:f5:0e:69:0c:d8:02:fd:08:cc:1c:46: 56:b3:73:3a:0c:27:87:0c:98:6a:fe:ed:f3:40:90:2a:84:6a: 05:ab:f3:10:c0:04:4d:1e:8e:43:06:1d:8f:2a:a8:e8:40:52: fd:7b:fd:98:77:8d:b0:a4:f1:d1:46:35:5b:29:93:6e:21:36: 12:72:3c:1f:2a:a2:ab:93:16:e3:33:7f:b7:a3:10:a1:f3:99: 49:a6:de:1c:8a:80:21:1c:7f:81:d8:9b:c1:40:48:75:98:87: 65:c5:21:82:ab:4c:96:f6:c5:f5:68:16:be:17:31:24:7a:04: 1d:4c:61:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZYpNbyrO3qcN1tF6N6mIHx7N0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNTA0MjkyMDI1MzRaFw0yNTA1MDMwNDUzMzRaMDMxMTAvBgNV BAMTKDMwNDgyMDk4OEQ5MUQyQkExQ0FDOTI1OUJEQjU1RUQ2QURFMTYwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQuZUdrEaXKX3WdNI3Uybk73L BaP2EKyl021+eFhzTUTH1bEMl7ZFDmbt1AKX8fhE4SuhTI8r1L7wOVAAunYP5sLj Ygqsqd/siewkJ+XTsyYTVX8p5oUo3jkujDSok7G6IF/2O/9ELL+m1nDKTOvQKgL/ lauIR0Ga2KeCIFTKzRXSHD21vLjcHdXAib6ZAl95VxPb4teqHf4iBQLqNEavRgEe wwRlRKz5gcTLLnU/aBJheNtWvtlJga7uMuXIabAt0eUyFYCpdXo39laCXkeIyKXd wyTl/oUMAhKYh9N7jiHf/fbljw9wOJ3yvXrRvber8D0GSnYtovS3i+zEp+GxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMEggmI2R0rocrJJZvbVe1q3hYKAwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGacvO2g/hHpecxQ1LmyiQKuJSw2FhRTg6D9 YYXHAJ2OGF0bmbjL/R9xNEr3cRFBsm7N+XEa7d5Fy99tdOuohj5Cxcr/xcW/CXqG taKcL8KSxbsej+V6eqsaaln7syUNdg06J1mO/2FXOaa2dYS3hnJSNf4P8NfMllM3 fctj0zNaakthZ9D1DmkM2AL9CMwcRlazczoMJ4cMmGr+7fNAkCqEagWr8xDABE0e jkMGHY8qqOhAUv17/Zh3jbCk8dFGNVspk24hNhJyPB8qoquTFuMzf7ejEKHzmUmm 3hyKgCEcf4HYm8FASHWYh2XFIYKrTJb2xfVoFr4XMSR6BB1MYXw= -----END CERTIFICATE-----Generated at Wed Apr 30 08:15:20 2025 by rpki-client