$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: qda3Wi2VGenIk2ovTf+jQFaoIOopJp8U1aWFCb4rge0= Subject key identifier: 86:DD:4C:C3:63:81:5D:D8:99:0A:7D:D6:71:34:01:6E:57:60:46:FC Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 611F41CA21C3B26C3A46697C87294E37AB47734D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 02A6 Signing time: Sat 26 Apr 2025 13:41:03 +0000 Manifest this update: Sat 26 Apr 2025 13:36:03 +0000 Manifest next update: Tue 29 Apr 2025 15:12:03 +0000 Files and hashes: 1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=) 2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: a/WTuLZT1OxYqmPE7cgIE0SjDgXhaKqf5KUkzl+vLSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1f:41:ca:21:c3:b2:6c:3a:46:69:7c:87:29:4e:37:ab:47:73:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Apr 26 13:36:03 2025 GMT Not After : Apr 29 15:12:03 2025 GMT Subject: CN=86DD4CC363815DD8990A7DD67134016E576046FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:82:9e:5c:04:7f:ff:c1:c8:f3:8c:2f:6e: dc:51:41:3e:c2:4c:1c:b6:f0:aa:7f:13:ea:ae:f5: bd:ba:68:f9:15:6c:b2:8c:c2:e5:47:96:08:a0:ed: 3e:f1:41:1c:4b:b8:da:cd:dc:c9:2d:9f:66:4c:3f: d7:b5:14:78:f6:a5:ab:22:1b:28:9a:ae:5f:97:26: 19:0f:8d:e9:d6:8b:06:28:f7:f1:a4:6b:21:82:6b: db:7d:f4:16:89:7b:f0:2b:85:21:84:66:f8:3b:b3: 22:62:f0:cd:f5:27:c5:48:cb:ad:00:15:f9:14:13: 26:c6:9f:ca:06:2d:a8:e3:d9:7f:7e:fe:c4:8b:aa: a3:14:14:b3:a0:94:f9:65:5c:f6:27:0f:49:e0:73: 38:34:ec:84:90:ad:6b:28:72:82:3b:e3:c4:5e:90: 59:79:c7:00:ae:a9:0b:1a:c6:35:03:47:b5:68:3b: 37:77:e2:cf:8f:d2:2c:87:5e:ad:1f:2d:cc:d8:49: 50:09:a7:3e:9e:26:3a:e2:01:93:31:2a:58:e1:c6: 40:27:87:08:0d:ca:d3:4d:fb:d6:58:33:c4:50:ab: f8:31:74:b5:4e:ab:aa:7f:a4:3d:ef:0d:85:94:26: 9e:ba:07:fe:47:1f:28:c6:e9:47:04:ce:a3:f0:a9: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:4C:C3:63:81:5D:D8:99:0A:7D:D6:71:34:01:6E:57:60:46:FC X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f1:2d:b7:b5:41:4d:f0:49:21:4e:8d:cd:95:55:50:84:19: 08:a2:e6:98:63:00:9b:e6:26:f2:25:f8:89:80:ae:27:2d:23: b9:d4:0b:aa:9f:0e:bd:5c:1e:dd:6b:86:ff:a9:d0:16:74:ee: ac:a9:19:aa:6a:c1:38:c7:f0:c2:4d:24:39:1b:12:07:55:8b: 64:8b:97:f6:7c:f8:8d:53:ec:97:e9:ff:60:f3:c8:a1:aa:95: 22:31:76:c5:ca:2a:8f:37:3a:94:f3:12:84:ed:60:94:27:2a: 3a:87:cf:dd:dd:1a:cf:cd:4a:fc:ce:cf:22:54:88:93:56:44: 44:66:ac:2a:86:bf:5d:c4:b0:f4:61:82:db:3e:30:66:01:5f: d6:2c:70:89:27:b9:8a:28:40:2b:2d:17:51:1c:0e:df:db:73: 36:ba:a3:54:0e:4c:44:25:c1:20:fc:da:23:9b:ee:f5:75:3d: a8:0b:94:31:a9:55:6b:f7:e6:92:07:e4:72:37:78:ca:8b:81: 15:f5:c0:5d:b4:89:a2:99:6d:5e:90:f4:a7:d3:77:3a:ae:b5: e1:02:22:75:19:e2:2c:1c:5e:0c:c1:54:4f:3c:9d:bd:8d:e3: 9f:84:82:44:1c:dd:aa:e7:13:4e:e3:5b:6a:51:5d:3e:08:db: d8:0f:af:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYR9ByiHDsmw6Rml8hylON6tHc00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTA0MjYxMzM2MDNaFw0yNTA0MjkxNTEyMDNaMDMxMTAvBgNV BAMTKDg2REQ0Q0MzNjM4MTVERDg5OTBBN0RENjcxMzQwMTZFNTc2MDQ2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ44KeXAR//8HI84wvbtxRQT7C TBy28Kp/E+qu9b26aPkVbLKMwuVHlgig7T7xQRxLuNrN3Mktn2ZMP9e1FHj2pasi Gyiarl+XJhkPjenWiwYo9/GkayGCa9t99BaJe/ArhSGEZvg7syJi8M31J8VIy60A FfkUEybGn8oGLajj2X9+/sSLqqMUFLOglPllXPYnD0ngczg07ISQrWsocoI748Re kFl5xwCuqQsaxjUDR7VoOzd34s+P0iyHXq0fLczYSVAJpz6eJjriAZMxKljhxkAn hwgNytNN+9ZYM8RQq/gxdLVOq6p/pD3vDYWUJp66B/5HHyjG6UcEzqPwqa6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUht1Mw2OBXdiZCn3WcTQBbldgRvwwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPxLbe1QU3wSSFOjc2VVVCEGQii5phjAJvm JvIl+ImArictI7nUC6qfDr1cHt1rhv+p0BZ07qypGapqwTjH8MJNJDkbEgdVi2SL l/Z8+I1T7Jfp/2DzyKGqlSIxdsXKKo83OpTzEoTtYJQnKjqHz93dGs/NSvzOzyJU iJNWRERmrCqGv13EsPRhgts+MGYBX9YscIknuYooQCstF1EcDt/bcza6o1QOTEQl wSD82iOb7vV1PagLlDGpVWv35pIH5HI3eMqLgRX1wF20iaKZbV6Q9KfTdzquteEC InUZ4iwcXgzBVE88nb2N45+EgkQc3arnE07jW2pRXT4I29gPr64= -----END CERTIFICATE-----Generated at Sat Apr 26 18:27:59 2025 by rpki-client