$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: WCAAP6XRfyH3edv6h9ZLyzTt+OK68okaXg0vmZL/Yr0= Subject key identifier: 7D:8F:93:E7:AA:74:EE:F7:A8:48:10:2A:26:5B:2E:F4:8E:92:2C:DE Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 52CCDBD25735BEDF6F7EBA74853BE4FBA261233F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 0467 Signing time: Thu 01 May 2025 05:11:02 +0000 Manifest this update: Thu 01 May 2025 05:06:02 +0000 Manifest next update: Sun 04 May 2025 15:11:02 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: r4bbE3J74imEfGNc3Yq/RkOZJXcnua5imBb7qm1BGas=) 2: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: T2dV9ECct1Ud7fOAgoF7v8UJVDJx36l7KpwFXhp6Z8U=) 3: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: GzZ7iHSVhRszfvwPJVKagbWdWdN9VP65zgpJ7no86J0=) 4: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=) 5: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 15:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cc:db:d2:57:35:be:df:6f:7e:ba:74:85:3b:e4:fb:a2:61:23:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: May 1 05:06:02 2025 GMT Not After : May 4 15:11:02 2025 GMT Subject: CN=7D8F93E7AA74EEF7A848102A265B2EF48E922CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:50:fc:6f:a9:6a:d9:37:05:56:15:83:09: 31:f1:4d:6e:2e:45:c9:e3:9a:ac:c3:f8:82:57:2d: d4:8b:e4:0a:53:01:e4:99:f8:08:61:bd:fc:d2:28: 01:01:83:aa:c9:fb:65:0d:1d:8b:05:b9:89:2d:92: 54:40:96:18:73:c7:4d:61:05:83:8f:3e:6a:1c:cf: 6d:aa:f2:f8:44:80:f7:68:f4:76:03:d1:40:31:06: fd:2b:09:6a:4c:8a:51:de:3d:dd:86:fd:22:57:a5: 5b:11:a8:57:02:f7:5e:2f:13:9d:22:60:e9:89:77: 0d:c1:73:35:2b:4f:12:22:b4:b1:98:0e:58:a4:1b: 2b:92:81:61:d1:cd:21:3d:03:ef:0a:fb:d8:eb:35: d2:25:40:e2:2b:e8:03:42:b3:42:45:84:7a:b1:9d: 40:ae:fc:ff:6d:5e:1b:e7:6d:ec:bd:fb:03:a4:b3: 8a:ef:11:79:c2:d3:65:51:04:29:31:6b:49:46:73: 44:4a:27:9b:80:1c:b4:4d:a8:9d:61:1b:17:d7:42: 03:47:c8:3a:a1:88:f7:80:4c:88:1c:b2:f6:13:38: 41:04:78:bd:17:60:18:a8:74:5a:0a:3c:d2:f6:9f: 67:5c:10:d4:29:e5:17:7d:8d:0c:33:9b:20:6d:46: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8F:93:E7:AA:74:EE:F7:A8:48:10:2A:26:5B:2E:F4:8E:92:2C:DE X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:14:58:85:aa:4f:13:44:99:03:b4:45:e6:55:1b:6c:09:90: 65:e2:8b:30:f1:a2:96:60:9f:02:f0:f1:fb:c3:86:4b:48:d0: c3:a1:33:3c:f4:11:91:3f:8d:75:2c:4b:1e:38:9a:ce:3f:c6: 36:a8:00:e4:5b:53:47:44:49:ba:6b:70:ea:3b:c6:37:f5:9e: ac:8d:9e:5a:5b:5b:42:11:43:00:78:53:a3:b3:2e:d3:39:20: 85:ed:a0:54:25:ff:16:01:3b:89:d4:6d:87:79:70:87:58:7d: da:c2:fc:7e:f7:3e:85:e9:82:5f:8a:d5:88:39:c2:53:80:cb: 8d:4d:0e:91:54:d1:57:63:07:8f:80:4d:c8:50:9c:ca:44:6e: 50:d9:36:a6:5f:a0:eb:9d:b4:b7:b1:26:41:2c:78:96:b3:8d: 6e:02:5a:fb:13:b4:c1:74:2e:5e:57:38:81:0d:cc:4c:94:87: 43:95:bd:aa:fa:aa:a2:60:3d:7c:b0:77:00:a1:d0:3d:8a:19: 8c:ba:b4:e7:ad:51:88:7f:e5:69:ba:66:c8:10:f9:90:7e:ce: 5e:df:94:07:e8:f6:8d:0e:28:78:db:35:54:27:16:d1:77:a0: 31:70:96:85:d6:f1:09:7b:ff:d4:a1:f0:a3:4f:d3:65:90:2e: 8e:c0:1d:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUszb0lc1vt9vfrp0hTvk+6JhIz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA1MDEwNTA2MDJaFw0yNTA1MDQxNTExMDJaMDMxMTAvBgNV BAMTKDdEOEY5M0U3QUE3NEVFRjdBODQ4MTAyQTI2NUIyRUY0OEU5MjJDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/N1D8b6lq2TcFVhWDCTHxTW4u RcnjmqzD+IJXLdSL5ApTAeSZ+AhhvfzSKAEBg6rJ+2UNHYsFuYktklRAlhhzx01h BYOPPmocz22q8vhEgPdo9HYD0UAxBv0rCWpMilHePd2G/SJXpVsRqFcC914vE50i YOmJdw3BczUrTxIitLGYDlikGyuSgWHRzSE9A+8K+9jrNdIlQOIr6ANCs0JFhHqx nUCu/P9tXhvnbey9+wOks4rvEXnC02VRBCkxa0lGc0RKJ5uAHLRNqJ1hGxfXQgNH yDqhiPeATIgcsvYTOEEEeL0XYBiodFoKPNL2n2dcENQp5Rd9jQwzmyBtRvDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfY+T56p07veoSBAqJlsu9I6SLN4wHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAUWIWqTxNEmQO0ReZVG2wJkGXiizDxopZg nwLw8fvDhktI0MOhMzz0EZE/jXUsSx44ms4/xjaoAORbU0dESbprcOo7xjf1nqyN nlpbW0IRQwB4U6OzLtM5IIXtoFQl/xYBO4nUbYd5cIdYfdrC/H73PoXpgl+K1Yg5 wlOAy41NDpFU0VdjB4+ATchQnMpEblDZNqZfoOudtLexJkEseJazjW4CWvsTtMF0 Ll5XOIENzEyUh0OVvar6qqJgPXywdwCh0D2KGYy6tOetUYh/5Wm6ZsgQ+ZB+zl7f lAfo9o0OKHjbNVQnFtF3oDFwloXW8Ql7/9Sh8KNP02WQLo7AHR8= -----END CERTIFICATE-----Generated at Fri May 2 06:14:32 2025 by rpki-client