$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: 3Fa/2xkimSsekfAgaS2Gr/CVgRKf+UjNgJ83s/7hNu8= Subject key identifier: 67:57:1F:07:A6:EB:83:2E:17:F9:FC:F7:6B:6D:7C:5B:51:09:E7:35 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 416563421B15A841194ED05C2105F1B83EAC041C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01B7 Signing time: Sun 27 Apr 2025 22:31:34 +0000 Manifest this update: Sun 27 Apr 2025 22:26:34 +0000 Manifest next update: Thu 01 May 2025 08:52:34 +0000 Files and hashes: 1: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: SB+BR8Vm/XmC7vS20IHXgh9VearPQSRavBTDlsBw9UU=) 2: 3130332e3139312e3132362e302f32332d3233203d3e203233393534.roa (hash: l2uiHKJBa35V6k/v9zIecJuuUvb5XaymDek7y3LkDOI=) 3: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: aJ6yeaFWCFa2B4qpJ9r50sKAMri4AwJSN6yvdprUaXc=) 4: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: IGI3ClctmWaFL0gfdzUyLJyt5YIqDflj0CAxtPruJMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:65:63:42:1b:15:a8:41:19:4e:d0:5c:21:05:f1:b8:3e:ac:04:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Apr 27 22:26:34 2025 GMT Not After : May 1 08:52:34 2025 GMT Subject: CN=67571F07A6EB832E17F9FCF76B6D7C5B5109E735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:b7:24:b9:02:42:d9:b1:2e:6a:93:d0:c3: 12:cc:38:59:96:f1:d1:f1:18:e8:8f:c0:26:6a:88: dc:e2:20:43:b8:f0:4e:dd:32:3b:58:62:85:6f:86: 68:5c:bf:50:b5:c7:c9:bc:cf:30:3d:a2:52:ef:a0: bc:ef:bb:88:f0:02:c0:fa:95:dd:7d:e9:67:da:28: d4:12:c1:a1:9d:83:96:31:28:c5:f8:74:96:79:e1: 93:38:93:0a:d9:81:2f:af:c6:55:ad:17:17:8b:1e: e4:2e:87:a0:49:be:1e:f7:ec:8c:10:ec:57:ca:e7: aa:f9:ca:ba:73:d1:46:2c:1c:0c:3c:fc:c5:9c:31: 7e:24:25:b3:f2:df:72:6f:d9:50:87:6a:eb:a6:11: a6:a3:b2:ac:6a:4a:1c:0a:dd:90:c1:30:16:e9:fd: 63:f8:07:55:2b:da:37:0c:a5:21:73:d5:e9:ad:9e: c7:c6:54:33:95:5d:15:1d:f5:6f:76:6a:85:a3:a3: b4:e5:61:53:8e:2f:d6:59:01:c1:87:42:ce:ab:0e: 1b:d1:08:58:4a:c0:3f:eb:05:03:4d:5f:9a:7c:81: 8d:63:66:55:14:11:a2:66:27:a5:8e:ab:27:e2:48: c5:0f:15:20:13:68:79:84:eb:5f:a1:97:31:a4:01: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:1F:07:A6:EB:83:2E:17:F9:FC:F7:6B:6D:7C:5B:51:09:E7:35 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:cb:b8:75:3c:0f:91:1c:08:eb:30:5a:8b:99:e4:6a:52:5e: 75:21:48:2d:72:e0:51:52:c0:a4:c3:5e:7a:2f:67:34:c6:12: f4:77:bb:d0:17:9a:e6:80:42:e2:b1:e0:e7:89:0d:ce:0a:8d: 15:ee:0a:88:2a:9d:a1:8b:c0:68:dd:4b:05:95:75:01:ac:17: 70:c3:f1:6e:1c:83:0e:73:91:ee:e5:e6:ea:a9:16:10:a3:9a: 16:d8:cd:be:5e:ae:95:fc:48:17:c1:79:97:10:3f:a4:64:8b: 53:c9:67:ad:b0:7e:d8:36:a9:3f:f4:0f:0a:88:e6:e9:59:5e: ff:05:d2:95:05:81:1f:2c:ea:bb:4d:34:ee:89:46:cc:e5:a0: 95:f0:35:20:a0:da:6a:f2:03:df:1f:f1:bb:8a:d9:22:d4:24: cb:6d:77:5b:d9:0e:a2:ec:00:92:86:99:f8:89:e3:7b:29:32: 26:91:b4:59:2a:c2:06:5d:28:35:66:f2:15:44:b2:1e:4b:b1: ca:7e:e6:4d:7b:97:23:ad:12:0f:29:5d:62:3a:6e:64:6d:bb: 47:ee:93:5b:f6:5a:45:fa:06:73:1e:ca:75:3f:e3:2b:42:9f: 01:a0:f1:17:8c:b3:e8:d6:ac:70:bb:73:40:35:1e:c6:6a:e6: 76:87:fc:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWVjQhsVqEEZTtBcIQXxuD6sBBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA0MjcyMjI2MzRaFw0yNTA1MDEwODUyMzRaMDMxMTAvBgNV BAMTKDY3NTcxRjA3QTZFQjgzMkUxN0Y5RkNGNzZCNkQ3QzVCNTEwOUU3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaObckuQJC2bEuapPQwxLMOFmW 8dHxGOiPwCZqiNziIEO48E7dMjtYYoVvhmhcv1C1x8m8zzA9olLvoLzvu4jwAsD6 ld196WfaKNQSwaGdg5YxKMX4dJZ54ZM4kwrZgS+vxlWtFxeLHuQuh6BJvh737IwQ 7FfK56r5yrpz0UYsHAw8/MWcMX4kJbPy33Jv2VCHauumEaajsqxqShwK3ZDBMBbp /WP4B1Ur2jcMpSFz1emtnsfGVDOVXRUd9W92aoWjo7TlYVOOL9ZZAcGHQs6rDhvR CFhKwD/rBQNNX5p8gY1jZlUUEaJmJ6WOqyfiSMUPFSATaHmE61+hlzGkAcZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ1cfB6brgy4X+fz3a218W1EJ5zUwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfLuHU8D5EcCOswWouZ5GpSXnUhSC1y4FFS wKTDXnovZzTGEvR3u9AXmuaAQuKx4OeJDc4KjRXuCogqnaGLwGjdSwWVdQGsF3DD 8W4cgw5zke7l5uqpFhCjmhbYzb5erpX8SBfBeZcQP6Rki1PJZ62wftg2qT/0DwqI 5ulZXv8F0pUFgR8s6rtNNO6JRszloJXwNSCg2mryA98f8buK2SLUJMttd1vZDqLs AJKGmfiJ43spMiaRtFkqwgZdKDVm8hVEsh5Lscp+5k17lyOtEg8pXWI6bmRtu0fu k1v2WkX6BnMeynU/4ytCnwGg8ReMs+jWrHC7c0A1HsZq5naH/OA= -----END CERTIFICATE-----Generated at Tue Apr 29 06:28:27 2025 by rpki-client