$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft File: C619643EEB518333DAE2A79933BEB1320C89CA87.mft (raw, json) Hash identifier: tnAqjMBqUqslFK5VkB4m89hfQXEe/rW5T2x9PcNKlhE= Subject key identifier: 59:A7:0C:D1:73:57:33:A1:50:5D:0F:B2:3C:CC:B9:63:CF:A4:F3:0B Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 Certificate issuer: /CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Certificate serial: 32F010F1E7ADCBA5EB0616E4D586C488032F871D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft Manifest number: 57 Signing time: Sun 27 Apr 2025 12:11:11 +0000 Manifest this update: Sun 27 Apr 2025 12:06:11 +0000 Manifest next update: Wed 30 Apr 2025 18:39:11 +0000 Files and hashes: 1: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: hIlg+Qt1QESY9Y8aeztegkZN8iCL71JNX4sa7hGChZk=) 2: C619643EEB518333DAE2A79933BEB1320C89CA87.crl (hash: H2GNdXbTMWscsbbcWdqSmWC+PtB5efYDPREbZjwgXCY=) 3: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: gsHh3wTMSE0Um3OSJBZIKaO5EpyUMdma+U85cb050E4=) 4: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: 7jJX4tA0NHHCSnCkhJQuXs74UXPq++JdHUV1H/oU7A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 18:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f0:10:f1:e7:ad:cb:a5:eb:06:16:e4:d5:86:c4:88:03:2f:87:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Validity Not Before: Apr 27 12:06:11 2025 GMT Not After : Apr 30 18:39:11 2025 GMT Subject: CN=59A70CD1735733A1505D0FB23CCCB963CFA4F30B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:58:01:ce:29:66:64:8e:82:4d:b4:a7:d6: c4:d4:e4:a0:d3:d0:93:52:d8:46:7f:59:26:dc:d7: a3:c5:33:9f:0f:d2:e9:03:ca:0f:23:50:ef:43:10: 5c:be:94:17:54:30:19:47:c9:fb:3e:c7:04:cd:ab: 43:3b:0c:fa:7c:a4:26:4c:02:6c:af:b0:59:d0:dd: 67:a3:cd:77:d9:e7:b6:2e:11:00:b2:bc:a1:c6:4c: c4:bb:6e:41:7c:53:d7:05:bc:ab:77:0a:1f:9e:b3: 88:d2:76:7c:f9:68:13:0d:bb:1d:67:b1:3a:49:0a: 13:05:33:b9:ae:fd:73:93:8e:5e:81:89:88:33:2f: c7:f9:b5:26:5f:81:7f:c6:5a:de:0d:ee:e5:f5:1d: 22:a9:8c:3b:c6:1e:59:59:4f:4b:ae:35:77:af:73: 61:e1:d9:0c:4c:12:20:4a:b5:e6:c6:53:7f:88:5a: 4a:e9:c5:57:f9:2a:1b:7c:b6:7c:e4:7f:51:ff:ce: 43:73:55:cd:19:7b:dd:52:c9:54:28:f1:1a:27:c5: 30:06:c1:f5:9d:67:61:ed:79:43:7b:2a:99:59:2d: a0:96:ab:2d:35:49:9d:4f:20:2a:f2:6a:b4:71:2a: 07:06:c0:1a:e8:07:f9:1e:10:44:7a:64:70:e0:96: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:0C:D1:73:57:33:A1:50:5D:0F:B2:3C:CC:B9:63:CF:A4:F3:0B X509v3 Authority Key Identifier: keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e4:1e:d8:fc:29:e5:33:6e:d7:e6:6f:ea:17:8f:35:62:68: a8:e5:dd:f9:09:db:15:00:44:e0:bc:c3:98:13:2a:87:b2:53: 8d:43:c9:12:21:bb:f3:f3:05:5c:03:88:66:e2:1a:8d:b5:d7: 95:59:dc:fc:1a:87:8e:25:c7:20:4e:3a:e4:13:1b:f6:72:66: 27:82:db:b0:d0:67:21:22:77:40:88:9b:72:b1:8b:2d:2f:fe: 9e:da:57:d4:8d:1c:35:18:ac:d3:16:6d:cb:78:76:3a:f0:94: e5:d4:45:61:98:d8:5f:0b:6f:46:d7:01:8e:47:10:2e:d0:6b: 67:14:9c:76:56:18:5a:83:79:d0:d5:0a:cb:e3:8e:42:e3:24: 9a:03:67:16:07:02:48:f0:3b:68:b3:76:47:cc:3a:eb:c7:b5: a0:be:32:b8:ff:49:c9:05:cf:73:2e:3b:3e:e6:cf:52:05:6e: 13:92:fa:8c:4e:49:77:6b:67:d1:3e:6d:31:8f:41:73:7a:44: dc:79:71:47:94:d5:b1:24:cd:97:82:43:a7:7c:0b:af:be:33: 14:29:69:f0:a7:37:9c:6c:7a:c7:1c:cc:55:a7:a3:e3:91:e9: f6:83:82:fd:c6:cb:2a:a8:3a:50:7a:be:df:69:59:9e:2e:01: 13:29:fe:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvAQ8eety6XrBhbk1YbEiAMvhx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIw Qzg5Q0E4NzAeFw0yNTA0MjcxMjA2MTFaFw0yNTA0MzAxODM5MTFaMDMxMTAvBgNV BAMTKDU5QTcwQ0QxNzM1NzMzQTE1MDVEMEZCMjNDQ0NCOTYzQ0ZBNEYzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WFgBzilmZI6CTbSn1sTU5KDT 0JNS2EZ/WSbc16PFM58P0ukDyg8jUO9DEFy+lBdUMBlHyfs+xwTNq0M7DPp8pCZM AmyvsFnQ3WejzXfZ57YuEQCyvKHGTMS7bkF8U9cFvKt3Ch+es4jSdnz5aBMNux1n sTpJChMFM7mu/XOTjl6BiYgzL8f5tSZfgX/GWt4N7uX1HSKpjDvGHllZT0uuNXev c2Hh2QxMEiBKtebGU3+IWkrpxVf5Kht8tnzkf1H/zkNzVc0Ze91SyVQo8RonxTAG wfWdZ2HteUN7KplZLaCWqy01SZ1PICryarRxKgcGwBroB/keEER6ZHDglpoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWacM0XNXM6FQXQ+yPMy5Y8+k8wswHwYDVR0j BBgwFoAUxhlkPutRgzPa4qeZM76xMgyJyocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmMzMGM3MS1kZjJkLTRmYzctYjQzNS03NTExZGYyODdhNmIvMC9DNjE5NjQzRUVC NTE4MzMzREFFMkE3OTkzM0JFQjEzMjBDODlDQTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIwQzg5 Q0E4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIx MzIwQzg5Q0E4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnkHtj8KeUzbtfmb+oXjzViaKjl3fkJ2xUA ROC8w5gTKoeyU41DyRIhu/PzBVwDiGbiGo2115VZ3Pwah44lxyBOOuQTG/ZyZieC 27DQZyEid0CIm3Kxiy0v/p7aV9SNHDUYrNMWbct4djrwlOXURWGY2F8Lb0bXAY5H EC7Qa2cUnHZWGFqDedDVCsvjjkLjJJoDZxYHAkjwO2izdkfMOuvHtaC+Mrj/SckF z3MuOz7mz1IFbhOS+oxOSXdrZ9E+bTGPQXN6RNx5cUeU1bEkzZeCQ6d8C6++MxQp afCnN5xsescczFWno+OR6faDgv3GyyqoOlB6vt9pWZ4uARMp/lk= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:35 2025 by rpki-client