$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: gLBToZhKH5tt7gve1nt+fDyLe1wqjoq94/KI2QvZCCA= Subject key identifier: E9:14:17:24:77:7B:C9:F0:A4:25:47:36:82:8A:41:02:CB:F0:4B:66 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 4667FC23C4B34DF5CF4B1510CCDAF853224A4448 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 04D0 Signing time: Thu 08 May 2025 01:00:03 +0000 Manifest this update: Thu 08 May 2025 00:55:03 +0000 Manifest next update: Sun 11 May 2025 08:18:03 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) 2: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: SWzgz+0QiqeCzNUJq/lVsqLmqTw4T/IbdOC9g9qU2V8=) 3: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: DNR89S5Jc0hpquIi4qAohR6c/7whqgkbqncTcS5MoXg=) 4: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: jPEdG1cLq2gj/WNKOIPtFa6M4hu2Ul5X/bflKXX2AsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 08:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:67:fc:23:c4:b3:4d:f5:cf:4b:15:10:cc:da:f8:53:22:4a:44:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: May 8 00:55:03 2025 GMT Not After : May 11 08:18:03 2025 GMT Subject: CN=E9141724777BC9F0A4254736828A4102CBF04B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d2:51:d6:45:fa:12:95:53:88:c0:0e:de:fe: 31:2c:37:b8:86:bd:a2:8a:03:4d:68:b2:fe:f8:b4: ca:8a:5e:11:4c:f4:db:21:3c:fc:66:43:c0:c0:08: 31:5d:87:6d:bc:e4:65:f6:aa:ae:a1:be:fe:31:f4: ec:e1:2d:57:64:0e:4f:38:a6:ab:82:5b:5b:fd:d8: b7:8f:5c:a5:a6:48:f1:39:a9:17:ac:a3:01:86:91: ea:1b:78:13:b4:cc:86:d2:88:8f:c4:ab:f4:d9:a1: b2:04:23:d0:80:9a:59:9a:43:7d:9f:63:47:13:56: 8d:6f:34:56:89:6d:26:64:a1:cc:4b:3a:4b:16:07: e5:c5:46:53:c6:4f:92:4d:05:46:73:89:ec:d0:fb: b4:3c:24:84:d2:b4:13:f6:e6:b5:02:01:10:95:8b: da:a8:ba:f1:61:e8:99:ef:42:51:9b:10:c0:3c:d0: f4:14:d3:79:26:7c:d9:f6:88:75:dc:fb:f5:cd:fa: 38:09:ae:f9:5f:a2:e3:46:9b:cb:b6:b9:dd:1a:5d: 47:a8:6d:48:b9:37:56:69:d5:21:ae:4d:9e:fa:10: 9c:8b:19:de:a9:22:fb:d4:76:07:d5:d7:c9:f1:53: 08:3b:34:78:a3:6e:bc:32:b8:dd:d7:7b:8f:4e:20: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:14:17:24:77:7B:C9:F0:A4:25:47:36:82:8A:41:02:CB:F0:4B:66 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:51:2e:66:f6:ab:86:c8:99:19:ee:1e:9d:db:5a:94:16:aa: 10:b5:d1:bd:03:c6:98:80:d9:10:eb:6d:a9:34:c0:6b:5f:c3: 83:c9:ea:ea:fb:83:72:d3:8b:28:8c:a1:82:bc:84:80:e1:d1: 27:69:b9:c5:0b:cc:e1:72:75:11:44:b3:4d:7b:21:16:04:6c: 2d:3f:1c:cf:53:37:80:f6:9b:10:ce:41:a5:be:2d:64:10:ee: d9:2b:0e:fe:ef:c4:18:06:ab:2a:31:e3:f2:ad:4c:90:99:0e: 79:18:17:c0:4f:bb:e2:bf:13:1e:35:99:b1:5c:f4:5a:69:59: 18:98:e2:5a:95:42:6b:65:5d:de:8d:ac:97:04:17:8e:0f:84: d5:c6:a6:77:49:73:c4:84:18:1c:df:c8:b8:15:ff:e2:66:a8: df:c1:ba:69:66:16:79:a7:a6:b3:16:5f:27:f4:fd:1a:9c:3d: bb:ce:dd:ed:9d:c9:84:1a:b2:34:73:c4:1b:b0:b0:ce:5f:28: 60:c7:ec:b9:e9:58:4b:69:ef:29:51:12:3d:67:7d:dc:47:74: 7a:41:af:07:69:5a:0f:31:e3:52:75:2a:fb:a5:3c:1d:f1:d2: fa:34:98:ef:73:93:9d:3f:24:9e:fa:5e:5d:1d:33:ca:db:13: e5:fd:ac:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmf8I8SzTfXPSxUQzNr4UyJKREgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTA1MDgwMDU1MDNaFw0yNTA1MTEwODE4MDNaMDMxMTAvBgNV BAMTKEU5MTQxNzI0Nzc3QkM5RjBBNDI1NDczNjgyOEE0MTAyQ0JGMDRCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0lHWRfoSlVOIwA7e/jEsN7iG vaKKA01osv74tMqKXhFM9NshPPxmQ8DACDFdh2285GX2qq6hvv4x9OzhLVdkDk84 pquCW1v92LePXKWmSPE5qResowGGkeobeBO0zIbSiI/Eq/TZobIEI9CAmlmaQ32f Y0cTVo1vNFaJbSZkocxLOksWB+XFRlPGT5JNBUZziezQ+7Q8JITStBP25rUCARCV i9qouvFh6JnvQlGbEMA80PQU03kmfNn2iHXc+/XN+jgJrvlfouNGm8u2ud0aXUeo bUi5N1Zp1SGuTZ76EJyLGd6pIvvUdgfV18nxUwg7NHijbrwyuN3Xe49OIHH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RQXJHd7yfCkJUc2gopBAsvwS2YwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1RLmb2q4bImRnuHp3bWpQWqhC10b0DxpiA 2RDrbak0wGtfw4PJ6ur7g3LTiyiMoYK8hIDh0SdpucULzOFydRFEs017IRYEbC0/ HM9TN4D2mxDOQaW+LWQQ7tkrDv7vxBgGqyox4/KtTJCZDnkYF8BPu+K/Ex41mbFc 9FppWRiY4lqVQmtlXd6NrJcEF44PhNXGpndJc8SEGBzfyLgV/+JmqN/BumlmFnmn prMWXyf0/RqcPbvO3e2dyYQasjRzxBuwsM5fKGDH7LnpWEtp7ylREj1nfdxHdHpB rwdpWg8x41J1KvulPB3x0vo0mO9zk50/JJ76Xl0dM8rbE+X9rLk= -----END CERTIFICATE-----Generated at Fri May 9 22:02:26 2025 by rpki-client