$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: wXL5y6N9V6LOrbHilO7W9MXmca12XiSJ4ihHuG90hBk= Subject key identifier: 1B:AF:47:59:94:8F:A0:A2:A5:E7:13:81:AA:69:46:DC:30:EE:33:D6 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 0D93B1D3A3775E33E0BCA5393D6899D413EB70B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01B1 Signing time: Mon 28 Apr 2025 14:40:34 +0000 Manifest this update: Mon 28 Apr 2025 14:35:34 +0000 Manifest next update: Thu 01 May 2025 18:44:34 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: EgXFWCsi2DSxac+68rKRt/Y36Erzou88jNkm+BZlILw=) 2: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: AmWWpRlPqPi7RckPB+mQtbz7JLatZBym5Jc+om4tBP0=) 3: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: FcF8duvYIXOvc3WqSyocBSQypEigGKGbtBz9pQSGDto=) 4: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: qxcWc4qD+3ccJIfeVzJ32RA5fRp0E0sMsxodgShxi+o=) 5: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:93:b1:d3:a3:77:5e:33:e0:bc:a5:39:3d:68:99:d4:13:eb:70:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Apr 28 14:35:34 2025 GMT Not After : May 1 18:44:34 2025 GMT Subject: CN=1BAF4759948FA0A2A5E71381AA6946DC30EE33D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:d9:be:81:4f:1c:ee:38:85:01:87:47:e3: 96:a1:df:36:76:a3:eb:c3:74:b3:68:d5:6b:92:e9: 40:81:b0:93:20:b1:8d:98:3f:15:45:9d:98:5c:ba: 37:79:ca:24:fc:2f:61:9f:de:2a:7f:09:8f:53:09: 16:d8:6e:4f:80:30:9d:0b:82:c0:af:e8:1d:96:d3: ad:f1:f5:79:c0:e5:fa:3e:a9:38:00:60:77:7a:58: f0:b1:f2:75:93:64:79:76:1c:ad:20:87:f5:2f:58: 70:33:4d:0c:c7:c5:94:60:d2:57:3e:3f:3d:a0:8a: 60:70:7b:ff:b9:7d:34:aa:b6:8d:ca:f8:01:2a:52: 1f:1b:b8:cb:ca:b2:18:b6:d7:66:3c:a9:ab:a3:a5: 21:4e:c0:6e:56:a0:e0:4b:a3:d7:de:ea:85:c9:a4: 1f:5b:a1:5e:7b:4a:42:55:42:ef:bc:18:d7:80:20: fe:ef:2d:23:fe:80:0b:08:3b:05:10:da:e3:ff:be: a9:29:d8:ae:b0:b6:9d:e4:68:ac:00:94:cf:44:57: a5:b4:fe:0c:47:06:ee:0d:13:87:c9:49:e8:86:db: 54:0e:6a:f8:6c:0e:3e:38:fe:e7:4f:73:6a:c9:75: ca:c5:b3:e4:30:d6:cd:e8:2c:37:77:0c:99:60:bf: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AF:47:59:94:8F:A0:A2:A5:E7:13:81:AA:69:46:DC:30:EE:33:D6 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1c:fe:ac:19:44:ed:e0:2d:7d:f5:54:17:49:a6:06:8f:9c: 64:4e:fc:e4:65:cb:d1:9b:e0:46:c1:6d:5e:ee:f0:71:18:27: 1a:95:e6:b0:a6:b0:b4:a4:d7:40:3e:58:15:1a:82:74:05:36: bf:17:f0:6b:46:50:15:23:2f:8f:85:5b:22:a5:19:28:42:38: ec:c1:c0:71:41:13:f9:36:48:eb:fb:18:c4:eb:3a:ad:5a:26: 2c:2b:77:e2:48:7c:99:37:d7:e3:69:4a:fb:bf:94:09:dc:6b: 14:4b:5c:b2:3f:83:19:7d:07:4a:56:e4:25:ac:12:8d:95:52: b1:9e:b2:9f:aa:c3:0e:1b:54:4a:5e:31:fe:92:08:aa:e7:6d: f3:70:ed:36:c9:4f:83:a8:7c:18:fc:84:e6:a7:f2:38:e7:0c: ab:d2:57:c8:11:99:04:a1:54:47:69:c2:9c:b9:d6:a1:e2:ab: d0:cc:5a:5b:2f:b2:89:56:f8:f1:12:f3:0f:bb:13:60:89:ac: 5e:ae:fd:24:47:fa:80:e4:63:ed:a5:d3:d8:3f:c0:0e:6d:54: c5:78:4f:d1:10:8d:44:7b:03:1a:c6:02:0d:b7:81:0e:84:2d: e2:0e:87:39:19:4a:87:45:29:26:9b:94:79:26:a4:77:15:4f: ac:a3:47:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZOx06N3XjPgvKU5PWiZ1BPrcLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTA0MjgxNDM1MzRaFw0yNTA1MDExODQ0MzRaMDMxMTAvBgNV BAMTKDFCQUY0NzU5OTQ4RkEwQTJBNUU3MTM4MUFBNjk0NkRDMzBFRTMzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeodm+gU8c7jiFAYdH45ah3zZ2 o+vDdLNo1WuS6UCBsJMgsY2YPxVFnZhcujd5yiT8L2Gf3ip/CY9TCRbYbk+AMJ0L gsCv6B2W063x9XnA5fo+qTgAYHd6WPCx8nWTZHl2HK0gh/UvWHAzTQzHxZRg0lc+ Pz2gimBwe/+5fTSqto3K+AEqUh8buMvKshi212Y8qaujpSFOwG5WoOBLo9fe6oXJ pB9boV57SkJVQu+8GNeAIP7vLSP+gAsIOwUQ2uP/vqkp2K6wtp3kaKwAlM9EV6W0 /gxHBu4NE4fJSeiG21QOavhsDj44/udPc2rJdcrFs+Qw1s3oLDd3DJlgv7CdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG69HWZSPoKKl5xOBqmlG3DDuM9YwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcc/qwZRO3gLX31VBdJpgaPnGRO/ORly9Gb 4EbBbV7u8HEYJxqV5rCmsLSk10A+WBUagnQFNr8X8GtGUBUjL4+FWyKlGShCOOzB wHFBE/k2SOv7GMTrOq1aJiwrd+JIfJk31+NpSvu/lAncaxRLXLI/gxl9B0pW5CWs Eo2VUrGesp+qww4bVEpeMf6SCKrnbfNw7TbJT4OofBj8hOan8jjnDKvSV8gRmQSh VEdpwpy51qHiq9DMWlsvsolW+PES8w+7E2CJrF6u/SRH+oDkY+2l09g/wA5tVMV4 T9EQjUR7AxrGAg23gQ6ELeIOhzkZSodFKSablHkmpHcVT6yjR2E= -----END CERTIFICATE-----Generated at Tue Apr 29 22:18:02 2025 by rpki-client