$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: eG/cwVs38No36rnKlSn3zZGkSLEI2ZGkvfg43GKbfc8= Subject key identifier: 4E:F1:66:30:59:48:F0:D3:DD:D7:86:01:DE:55:8E:99:C8:E2:5B:AB Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 022BF9FEF060B15AC3A0DB70D0536023BB25C39D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 0143 Signing time: Mon 12 May 2025 23:10:44 +0000 Manifest this update: Mon 12 May 2025 23:05:44 +0000 Manifest next update: Fri 16 May 2025 08:16:44 +0000 Files and hashes: 1: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: J4wZHT+nDYlVviFlUfg/cQ2bsPO1nPYjl8FnfLyOBXc=) 2: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 08:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2b:f9:fe:f0:60:b1:5a:c3:a0:db:70:d0:53:60:23:bb:25:c3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: May 12 23:05:44 2025 GMT Not After : May 16 08:16:44 2025 GMT Subject: CN=4EF166305948F0D3DDD78601DE558E99C8E25BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:5a:f2:50:52:1e:f0:ad:49:b7:84:2b:31: 7a:84:8c:0e:42:21:b6:f6:53:ad:a2:dd:5b:f7:1f: 9e:1d:22:72:05:82:f8:dd:b5:4d:89:a9:47:4e:ff: 5b:59:4f:b3:8f:b5:1a:c4:78:f2:a4:63:37:cf:78: 35:2e:2a:c6:f5:59:a3:d1:53:b7:b6:55:30:7d:b8: 67:6c:e0:b2:78:9d:d6:40:ec:bd:11:e4:38:11:90: c8:a9:cb:8a:e1:e6:a3:7d:7f:66:cf:4f:7d:0a:78: 74:23:d1:cb:bc:3e:4b:d5:ba:d6:44:f9:d6:0b:2f: e1:06:22:6b:c6:7e:1e:9a:2a:67:57:00:00:cc:6e: 2a:dd:9e:ad:6b:3d:9e:bb:d9:4e:c8:1b:d1:8b:b0: 24:ec:1f:aa:e4:b4:94:d4:ff:a6:53:b3:d6:b6:95: 1e:21:66:20:bc:0a:ae:cc:29:12:f1:de:70:82:d0: 0b:ae:8e:3a:62:a5:0c:84:85:23:21:c0:ef:45:30: 85:e6:22:84:e6:e1:f1:51:37:8a:06:26:d9:41:ef: a3:61:aa:29:62:08:fe:8a:16:14:0c:fb:f7:3f:da: a9:8e:39:71:72:f9:a2:c8:fc:d3:3f:02:aa:2f:8f: 49:8f:a8:e7:81:7e:da:9c:a3:a0:31:95:a2:ee:b5: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F1:66:30:59:48:F0:D3:DD:D7:86:01:DE:55:8E:99:C8:E2:5B:AB X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:11:55:d3:11:b7:c1:f9:8b:c2:7d:d1:05:2b:77:ef:19:61: 0f:6f:90:87:b0:e5:11:89:50:0a:57:35:81:4d:bb:fc:61:33: d8:7c:c9:88:25:64:79:67:b9:1e:7b:0d:7c:51:62:f4:da:61: 1e:08:49:4c:f7:0f:b4:3c:cd:a4:99:e8:14:7d:c5:f1:08:e4: a7:00:a4:57:c2:0b:78:af:be:ce:1f:f2:ef:d7:a5:e2:f0:ae: 67:84:6d:f7:5d:c8:3c:78:51:db:44:cb:a2:5d:82:bc:19:5e: 09:59:b8:e3:f8:4b:c9:50:75:c0:23:45:38:36:77:29:de:54: 5a:87:e1:b4:97:35:76:5f:ad:5a:90:1e:dc:d7:dd:89:4c:fd: e5:7a:40:c5:ba:f9:e4:e8:82:0f:2a:d4:65:aa:92:a8:8f:dc: eb:8e:ae:7e:8a:f4:bc:73:a8:8a:87:0f:b2:0b:45:e8:95:a2: 5e:54:e1:79:c1:4f:29:69:cc:32:f7:e6:a9:6b:ad:cb:aa:57: a2:7a:dc:41:15:45:a6:be:65:51:62:36:d7:de:59:2f:af:c0: a2:67:ae:df:75:c5:89:a4:a5:b8:88:29:e5:f2:0c:86:16:98: d5:4e:da:f1:02:49:74:fa:2d:51:8a:30:b8:81:c4:5b:cb:0f: c2:fb:5f:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAiv5/vBgsVrDoNtw0FNgI7slw50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTA1MTIyMzA1NDRaFw0yNTA1MTYwODE2NDRaMDMxMTAvBgNV BAMTKDRFRjE2NjMwNTk0OEYwRDNEREQ3ODYwMURFNTU4RTk5QzhFMjVCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdVryUFIe8K1Jt4QrMXqEjA5C Ibb2U62i3Vv3H54dInIFgvjdtU2JqUdO/1tZT7OPtRrEePKkYzfPeDUuKsb1WaPR U7e2VTB9uGds4LJ4ndZA7L0R5DgRkMipy4rh5qN9f2bPT30KeHQj0cu8PkvVutZE +dYLL+EGImvGfh6aKmdXAADMbirdnq1rPZ672U7IG9GLsCTsH6rktJTU/6ZTs9a2 lR4hZiC8Cq7MKRLx3nCC0AuujjpipQyEhSMhwO9FMIXmIoTm4fFRN4oGJtlB76Nh qiliCP6KFhQM+/c/2qmOOXFy+aLI/NM/Aqovj0mPqOeBftqco6AxlaLutTP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTvFmMFlI8NPd14YB3lWOmcjiW6swHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQRVdMRt8H5i8J90QUrd+8ZYQ9vkIew5RGJ UApXNYFNu/xhM9h8yYglZHlnuR57DXxRYvTaYR4ISUz3D7Q8zaSZ6BR9xfEI5KcA pFfCC3ivvs4f8u/XpeLwrmeEbfddyDx4UdtEy6JdgrwZXglZuOP4S8lQdcAjRTg2 dyneVFqH4bSXNXZfrVqQHtzX3YlM/eV6QMW6+eTogg8q1GWqkqiP3OuOrn6K9Lxz qIqHD7ILReiVol5U4XnBTylpzDL35qlrrcuqV6J63EEVRaa+ZVFiNtfeWS+vwKJn rt91xYmkpbiIKeXyDIYWmNVO2vECSXT6LVGKMLiBxFvLD8L7X3c= -----END CERTIFICATE-----Generated at Tue May 13 06:41:54 2025 by rpki-client