$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: MDI08+FYgJy+Px8BAnBzHQIvexO6+tw8goFsiB8PjL4= Subject key identifier: 16:F0:54:AA:0C:BE:10:27:9E:59:22:7D:CC:B6:3D:A4:CB:85:C6:95 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 0785EB29433766AAB96D4976853BB7754689896E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0144 Signing time: Mon 28 Apr 2025 04:04:28 +0000 Manifest this update: Mon 28 Apr 2025 03:59:28 +0000 Manifest next update: Thu 01 May 2025 10:06:28 +0000 Files and hashes: 1: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) 2: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 3: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: mAEIyyg7fVQoTBwYSOiRZJlm0yowPdZ4IQnWM3doPJo=) 4: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 10:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:85:eb:29:43:37:66:aa:b9:6d:49:76:85:3b:b7:75:46:89:89:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Apr 28 03:59:28 2025 GMT Not After : May 1 10:06:28 2025 GMT Subject: CN=16F054AA0CBE10279E59227DCCB63DA4CB85C695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:46:cf:db:50:c9:2f:49:b9:5e:ea:27:f5: 24:c4:6a:ba:cb:0d:d2:c6:50:9b:dd:d6:44:f4:81: 95:af:f5:cd:c9:a7:71:9e:29:c6:1d:94:06:c1:cb: 51:48:9e:a5:9a:ff:ce:46:47:b3:09:9b:39:a4:7c: 0d:c9:d0:75:7a:08:71:61:ec:8a:69:6c:9f:9e:f6: 47:0d:b2:35:48:70:28:47:d3:81:b5:de:2f:8e:6d: 0a:2d:38:06:82:cc:65:a4:4f:2d:4b:b6:6d:1a:8a: 04:ab:bd:30:52:36:14:76:df:2f:47:39:9e:41:a8: db:74:3a:50:d3:85:27:34:b5:f1:d4:66:fc:dc:8b: 85:0e:a0:fb:01:e4:a5:e0:78:88:41:bc:a7:39:6f: ef:93:52:4b:89:82:2d:db:01:28:33:08:36:3a:5e: 77:89:52:e7:c0:9c:cf:99:6a:3d:19:41:59:ac:f0: 20:05:51:43:12:68:43:6d:79:ef:32:97:21:9e:bc: d6:fe:6e:76:23:8f:4c:d8:ee:65:d3:5b:6c:ff:34: 0e:90:20:b6:7a:bd:91:80:05:3e:9b:ca:91:61:55: 89:41:e1:d7:a7:8c:59:9f:6e:3f:43:e3:87:69:32: 2c:44:5b:c6:48:a0:e8:a9:1d:f0:93:ed:69:c6:fd: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:54:AA:0C:BE:10:27:9E:59:22:7D:CC:B6:3D:A4:CB:85:C6:95 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c3:bb:92:20:f5:ec:50:12:ac:a3:e7:47:bf:05:81:30:82: fb:19:3b:e9:b1:af:05:55:97:d9:a8:40:1e:fe:49:74:76:30: 4a:e7:40:64:e1:ca:0d:4e:1e:69:9d:18:2c:1c:5f:e7:97:16: 94:8e:10:08:86:22:a8:5e:f9:ef:e2:95:32:83:c6:cf:03:4e: b6:ef:c3:04:75:6c:16:d1:13:4e:55:9a:7a:f6:87:fa:e7:b9: 45:68:ce:ca:bb:0f:62:77:d8:a8:f8:12:d9:72:44:cb:9f:77: a6:83:75:3c:2f:b6:f7:78:42:63:2f:ed:38:8b:bd:ed:74:54: d7:42:aa:a0:cc:5d:ec:1d:9d:89:98:7d:e6:32:f6:37:a6:b6: e6:f0:e7:91:4a:a8:fa:bb:d0:61:00:6f:e7:a9:38:26:12:53: 9f:03:44:62:36:8b:e0:c9:a8:4c:e4:c3:e5:e2:02:c3:60:07: 80:03:9b:65:d5:c0:4c:fd:ba:99:82:c3:ff:66:38:f6:4a:fa: 89:d3:f5:9c:b9:30:d5:3e:d1:20:b2:2b:c8:0b:db:0a:e1:98: a2:6f:3c:4c:d7:ae:8e:bb:eb:d5:77:7f:cd:64:99:02:c0:9d: da:68:8b:e0:4d:d8:84:98:ef:6c:8b:53:2a:4e:df:ef:d3:46: ba:2f:70:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4XrKUM3Zqq5bUl2hTu3dUaJiW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA0MjgwMzU5MjhaFw0yNTA1MDExMDA2MjhaMDMxMTAvBgNV BAMTKDE2RjA1NEFBMENCRTEwMjc5RTU5MjI3RENDQjYzREE0Q0I4NUM2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aEbP21DJL0m5Xuon9STEarrL DdLGUJvd1kT0gZWv9c3Jp3GeKcYdlAbBy1FInqWa/85GR7MJmzmkfA3J0HV6CHFh 7IppbJ+e9kcNsjVIcChH04G13i+ObQotOAaCzGWkTy1Ltm0aigSrvTBSNhR23y9H OZ5BqNt0OlDThSc0tfHUZvzci4UOoPsB5KXgeIhBvKc5b++TUkuJgi3bASgzCDY6 XneJUufAnM+Zaj0ZQVms8CAFUUMSaENtee8ylyGevNb+bnYjj0zY7mXTW2z/NA6Q ILZ6vZGABT6bypFhVYlB4denjFmfbj9D44dpMixEW8ZIoOipHfCT7WnG/VoxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvBUqgy+ECeeWSJ9zLY9pMuFxpUwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfDu5Ig9exQEqyj50e/BYEwgvsZO+mxrwVV l9moQB7+SXR2MErnQGThyg1OHmmdGCwcX+eXFpSOEAiGIqhe+e/ilTKDxs8DTrbv wwR1bBbRE05Vmnr2h/rnuUVozsq7D2J32Kj4EtlyRMufd6aDdTwvtvd4QmMv7TiL ve10VNdCqqDMXewdnYmYfeYy9jemtubw55FKqPq70GEAb+epOCYSU58DRGI2i+DJ qEzkw+XiAsNgB4ADm2XVwEz9upmCw/9mOPZK+onT9Zy5MNU+0SCyK8gL2wrhmKJv PEzXro6769V3f81kmQLAndpoi+BN2ISY72yLUypO3+/TRrovcPk= -----END CERTIFICATE-----Generated at Wed Apr 30 08:18:50 2025 by rpki-client