$ rpki-client -vvf repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft File: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft (raw, json) Hash identifier: ea8ftX9YOMy/EX7cWVVgBUg8JmhPfZW/sSWmGMgQ3iw= Subject key identifier: 96:4A:5F:5B:52:E9:E5:F1:C6:08:D3:75:53:50:FD:4A:10:DD:2F:99 Authority key identifier: 19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC Certificate issuer: /CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Certificate serial: 13556E21EB6BB70BC59FFB4CDAE7B04D5944B8CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft Manifest number: 04C7 Signing time: Sun 27 Apr 2025 00:30:45 +0000 Manifest this update: Sun 27 Apr 2025 00:25:45 +0000 Manifest next update: Wed 30 Apr 2025 10:31:45 +0000 Files and hashes: 1: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: tIUNNHogAshyrbqjnX1GaJzBRxYDzn5Soyh5hC3SwkU=) 2: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl (hash: m6uWOdQcvJfIqjj9aP4uYhmBHtkkp5b0f99NS+u67tI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 10:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:55:6e:21:eb:6b:b7:0b:c5:9f:fb:4c:da:e7:b0:4d:59:44:b8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Validity Not Before: Apr 27 00:25:45 2025 GMT Not After : Apr 30 10:31:45 2025 GMT Subject: CN=964A5F5B52E9E5F1C608D3755350FD4A10DD2F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:e3:61:19:6a:0b:d4:d0:9f:5f:b6:90:0b: 03:a2:d8:1f:73:55:86:3a:67:e9:98:cc:af:cf:2a: 37:4a:73:79:fa:06:d8:16:5d:5a:11:a9:11:49:87: 49:bc:f7:48:58:79:7f:3b:f1:75:09:b3:4a:d3:e3: 38:c8:32:37:fb:64:70:57:28:c6:f5:27:0b:c0:d3: 74:65:b1:30:2b:83:85:12:5e:97:7b:63:41:f8:3b: 6a:eb:2a:9b:43:6b:69:a3:cd:1f:4a:49:7d:71:7b: 74:34:f6:5f:1e:0c:46:f3:f4:ed:d9:8e:79:15:c6: c9:d9:7a:16:f2:79:dd:63:c9:1d:8b:9b:24:a3:ee: 5f:46:35:bf:9c:07:7f:19:27:f5:9e:cf:8b:6d:20: 4e:46:19:2d:5e:4f:24:03:95:de:ae:8a:83:ec:2e: ed:70:9d:b4:57:2a:48:3c:77:f4:36:bc:ad:01:25: 15:7d:7e:01:f9:3b:b9:35:5d:d6:a6:6e:27:7b:c1: dc:98:3b:25:02:d9:bd:9c:c5:ef:30:ad:2a:45:30: 11:88:ec:74:2c:e6:71:b7:e9:83:92:c3:46:8e:19: 73:b1:44:b6:98:50:d8:19:7c:60:b3:17:e6:e6:09: 0b:b3:f5:b5:cd:2b:66:e6:14:29:22:06:32:01:8d: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4A:5F:5B:52:E9:E5:F1:C6:08:D3:75:53:50:FD:4A:10:DD:2F:99 X509v3 Authority Key Identifier: keyid:19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:22:01:28:6b:44:02:e4:fe:1d:09:49:bb:e1:ef:49:f0:7c: 01:84:48:3d:9e:51:1b:5a:76:49:66:38:f3:fa:ca:6d:61:c5: 9d:9e:ed:b8:c6:1a:8f:5d:4f:61:d5:04:bc:02:f9:98:08:37: 2b:69:bf:48:69:23:5a:ef:19:c2:ff:af:8b:66:b8:b2:44:92: 8d:18:1c:ab:38:e1:37:5f:38:6b:48:d5:a7:ad:77:10:28:b1: 7c:67:e5:23:34:b6:d7:c2:51:05:bf:12:76:0b:82:60:e4:b8: b3:b8:18:97:07:33:85:c5:8f:3a:1d:8b:81:18:e3:cd:1e:f2: 27:ad:7f:91:96:4a:45:4a:1a:08:89:6f:4a:d8:9b:39:9a:5a: 99:42:be:dd:8d:33:f2:45:a0:db:3e:de:1f:6b:1b:ee:6a:31: 9f:08:85:c1:3c:58:c6:ac:e7:2f:26:c0:73:f7:a7:b1:11:fb: 32:a0:a0:c9:b4:84:59:16:e1:d1:75:9d:20:19:a2:42:4e:50: f5:3c:f3:51:5f:2b:56:c3:81:80:b4:81:bb:ef:3f:45:36:74: ef:52:2e:4f:bc:a2:9a:8c:83:8e:90:23:90:9d:3e:06:16:0b: fa:42:e8:2d:90:bc:1e:16:a0:65:1d:03:39:19:e8:74:e1:a4: 86:08:00:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1VuIetrtwvFn/tM2uewTVlEuMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUx NTk1MEFFQzAeFw0yNTA0MjcwMDI1NDVaFw0yNTA0MzAxMDMxNDVaMDMxMTAvBgNV BAMTKDk2NEE1RjVCNTJFOUU1RjFDNjA4RDM3NTUzNTBGRDRBMTBERDJGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+uNhGWoL1NCfX7aQCwOi2B9z VYY6Z+mYzK/PKjdKc3n6BtgWXVoRqRFJh0m890hYeX878XUJs0rT4zjIMjf7ZHBX KMb1JwvA03RlsTArg4USXpd7Y0H4O2rrKptDa2mjzR9KSX1xe3Q09l8eDEbz9O3Z jnkVxsnZehbyed1jyR2LmySj7l9GNb+cB38ZJ/Wez4ttIE5GGS1eTyQDld6uioPs Lu1wnbRXKkg8d/Q2vK0BJRV9fgH5O7k1Xdambid7wdyYOyUC2b2cxe8wrSpFMBGI 7HQs5nG36YOSw0aOGXOxRLaYUNgZfGCzF+bmCQuz9bXNK2bmFCkiBjIBjSQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkpfW1Lp5fHGCNN1U1D9ShDdL5kwHwYDVR0j BBgwFoAUGXXwsvJ95K/0PMJGBYornhWVCuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDMzNjJlMi05NzY1LTQyYmQtYjU5Yi02OGQ0M2NhZGViNWMvMC8xOTc1RjBCMkYy N0RFNEFGRjQzQ0MyNDYwNThBMkI5RTE1OTUwQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUxNTk1 MEFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJC OUUxNTk1MEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsiAShrRALk/h0JSbvh70nwfAGESD2eURta dklmOPP6ym1hxZ2e7bjGGo9dT2HVBLwC+ZgINytpv0hpI1rvGcL/r4tmuLJEko0Y HKs44TdfOGtI1aetdxAosXxn5SM0ttfCUQW/EnYLgmDkuLO4GJcHM4XFjzodi4EY 480e8ietf5GWSkVKGgiJb0rYmzmaWplCvt2NM/JFoNs+3h9rG+5qMZ8IhcE8WMas 5y8mwHP3p7ER+zKgoMm0hFkW4dF1nSAZokJOUPU881FfK1bDgYC0gbvvP0U2dO9S Lk+8opqMg46QI5CdPgYWC/pC6C2QvB4WoGUdAzkZ6HThpIYIAOw= -----END CERTIFICATE-----Generated at Tue Apr 29 08:16:30 2025 by rpki-client