$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: GKceu2mJNubh6/w6slaDHIT9F3AYWe8PcFrZuD79ey8= Subject key identifier: D4:FB:B3:B6:3C:2E:D1:76:44:A2:83:65:1D:F1:16:32:BD:24:A8:E0 Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 331F640A483F0EC0B5C12B4A279036DE4D22DC03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 04E8 Signing time: Wed 30 Apr 2025 16:00:39 +0000 Manifest this update: Wed 30 Apr 2025 15:55:39 +0000 Manifest next update: Sat 03 May 2025 23:05:39 +0000 Files and hashes: 1: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: 0aRFrXTSbHUOy2mZwEH0txx1Tk9Q/AHJdIJdOAn4gUw=) 2: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: N575Rd04sdWuljy+/gWPBi8EMbVoyPyHMDMfsQ5bHKg=) 3: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: WFSDay7rRMukAnUHhkMS6II3gaMBs+bzWm8fLGKYw4Q=) 4: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1f:64:0a:48:3f:0e:c0:b5:c1:2b:4a:27:90:36:de:4d:22:dc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Apr 30 15:55:39 2025 GMT Not After : May 3 23:05:39 2025 GMT Subject: CN=D4FBB3B63C2ED17644A283651DF11632BD24A8E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:a1:42:11:1d:e6:ea:44:aa:60:14:ab:2d: 55:44:3a:aa:f5:a2:b9:df:60:54:92:10:1c:84:b8: 87:36:4c:75:22:2e:2e:64:3e:ce:48:57:a0:03:d9: 44:50:87:20:4e:5a:5d:b6:8f:ef:77:1c:27:b7:fa: 9f:6b:0b:1e:e2:bd:af:18:da:e3:ff:2b:cf:0a:93: 49:8d:ec:ea:44:a1:ba:5f:89:40:54:c2:c7:e9:35: 56:0b:14:d4:29:7e:6d:02:3b:ec:7f:88:8d:09:18: 50:73:50:96:6f:80:c2:58:7c:b4:27:ff:18:42:4e: ee:87:b5:d4:1a:37:60:11:2c:29:28:c1:34:98:4e: 23:ea:a9:a0:c9:9b:2d:82:1f:5f:b6:a7:29:1a:f8: 1a:ed:e2:16:39:fe:a0:40:79:11:55:62:b8:e4:6e: e1:37:1a:40:55:3c:23:4d:13:bd:21:20:d3:cd:96: e1:0b:07:d7:42:c6:79:cc:74:3b:76:d8:08:3f:d5: 12:01:fd:51:db:a7:2f:c5:46:41:3b:da:91:93:3a: a6:52:86:6f:2f:e7:90:a9:25:e6:c0:fe:b0:59:88: d9:b9:f0:c0:c4:05:3f:fb:c5:eb:70:95:eb:b8:72: dd:4d:a0:6a:20:e3:c2:62:99:8c:2d:82:a9:6e:7d: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FB:B3:B6:3C:2E:D1:76:44:A2:83:65:1D:F1:16:32:BD:24:A8:E0 X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2a:f7:84:32:3a:29:d7:fb:8d:f2:ab:e9:93:df:07:61:99: f8:04:ba:06:fe:24:91:47:da:41:35:00:94:64:70:c2:cd:b0: 03:25:8f:68:ed:c4:09:73:6d:60:5c:66:5e:c6:0a:d1:dd:42: d5:30:d0:b9:48:66:15:d3:a6:e6:78:3d:62:83:7e:7a:94:42: 9d:02:ca:39:74:06:11:97:1f:4f:26:89:9c:27:ac:e0:83:03: 3e:3a:7c:4e:f9:58:68:38:6b:44:01:9b:de:aa:a9:d5:da:9e: e9:35:63:6e:90:7e:10:fb:73:f4:0c:22:3f:ae:dc:24:a4:4b: ba:16:7d:d9:9c:fe:c9:2a:ea:8d:ba:65:63:0b:6f:de:58:95: 16:1b:4e:73:16:d9:9f:92:24:b6:94:34:6d:e2:2e:ed:cc:73: 75:00:f3:19:16:23:9e:52:16:7a:00:34:c3:9d:67:8f:61:41: 6f:9d:75:08:d8:6d:3f:d2:0a:bf:4d:2f:d1:a0:18:1f:b3:51: 35:bd:b7:b5:60:2b:e7:7c:b4:b8:56:e2:c9:e7:00:89:84:0c: 26:0b:a3:51:25:db:2f:19:68:8f:e5:06:05:2d:95:4a:e7:39: 08:4d:9c:77:74:9a:18:95:ff:ba:90:e2:82:7e:6f:56:61:14: 3c:5e:df:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMx9kCkg/DsC1wStKJ5A23k0i3AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTA0MzAxNTU1MzlaFw0yNTA1MDMyMzA1MzlaMDMxMTAvBgNV BAMTKEQ0RkJCM0I2M0MyRUQxNzY0NEEyODM2NTFERjExNjMyQkQyNEE4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbKFCER3m6kSqYBSrLVVEOqr1 ornfYFSSEByEuIc2THUiLi5kPs5IV6AD2URQhyBOWl22j+93HCe3+p9rCx7iva8Y 2uP/K88Kk0mN7OpEobpfiUBUwsfpNVYLFNQpfm0CO+x/iI0JGFBzUJZvgMJYfLQn /xhCTu6HtdQaN2ARLCkowTSYTiPqqaDJmy2CH1+2pyka+Brt4hY5/qBAeRFVYrjk buE3GkBVPCNNE70hINPNluELB9dCxnnMdDt22Ag/1RIB/VHbpy/FRkE72pGTOqZS hm8v55CpJebA/rBZiNm58MDEBT/7xetwleu4ct1NoGog48JimYwtgqlufRVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Puztjwu0XZEooNlHfEWMr0kqOAwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIq94QyOinX+43yq+mT3wdhmfgEugb+JJFH 2kE1AJRkcMLNsAMlj2jtxAlzbWBcZl7GCtHdQtUw0LlIZhXTpuZ4PWKDfnqUQp0C yjl0BhGXH08miZwnrOCDAz46fE75WGg4a0QBm96qqdXanuk1Y26QfhD7c/QMIj+u 3CSkS7oWfdmc/skq6o26ZWMLb95YlRYbTnMW2Z+SJLaUNG3iLu3Mc3UA8xkWI55S FnoANMOdZ49hQW+ddQjYbT/SCr9NL9GgGB+zUTW9t7VgK+d8tLhW4snnAImEDCYL o1El2y8ZaI/lBgUtlUrnOQhNnHd0mhiV/7qQ4oJ+b1ZhFDxe3yw= -----END CERTIFICATE-----Generated at Thu May 1 09:31:31 2025 by rpki-client