$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: hBeWlzPrz2LasF3PPbxnxzowi+7EFQH6mwXda1QqCpM= Subject key identifier: E0:94:48:24:BE:88:5B:F8:1F:16:78:BB:1B:22:62:ED:E5:07:04:0E Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 0DAD6471A09D96B67E5CF0AE3DE694202BA0094F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 01DC Signing time: Sun 11 May 2025 00:50:47 +0000 Manifest this update: Sun 11 May 2025 00:45:47 +0000 Manifest next update: Wed 14 May 2025 06:13:47 +0000 Files and hashes: 1: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: mCO1aXe6iGglZ+fQn38bDKIoh5RMgGW4mPncJyq6m3g=) 2: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: L2EmD81aMJH/5FIYqmAaBN4dVwGTSb3agMBVp5kZ0Sc=) 3: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: dHpN7ub4KrmBCyTXelnoFJDCLhoYO0X3bUz4MMj77nQ=) 4: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: u8WfQ7ViwC8c62RjjiP6fTb34ki+LT2D/raqeIObUTI=) 5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 0BWjl5P155m35iG6z4d5ofVWD1KwIdM4uWlxy+LGQA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 06:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ad:64:71:a0:9d:96:b6:7e:5c:f0:ae:3d:e6:94:20:2b:a0:09:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: May 11 00:45:47 2025 GMT Not After : May 14 06:13:47 2025 GMT Subject: CN=E0944824BE885BF81F1678BB1B2262EDE507040E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fa:ec:16:44:f7:b1:37:cd:9c:d3:c7:8c:ac: 80:59:44:f9:21:b3:d0:67:2c:87:f6:f6:f7:76:ac: a0:dc:e3:5e:59:80:63:6a:d2:0a:fa:14:bb:9f:4c: b4:e4:b6:4c:f6:38:36:99:81:68:b2:91:9f:6b:dd: c4:db:19:07:6f:65:69:50:db:36:69:41:da:92:3c: 45:c6:d8:71:08:4e:c8:a3:56:29:70:48:b8:c9:da: f1:a5:0e:ee:a5:da:1a:4d:bf:b8:2b:e4:67:64:a1: 20:79:13:a3:61:2d:d3:9c:c7:5b:3f:44:40:fb:49: 1d:b1:cb:6d:d3:db:ae:20:b3:0e:e5:4e:eb:03:9a: be:e0:83:28:87:1c:75:f5:23:a9:02:04:2c:01:06: 80:fd:fe:a9:d7:10:71:b4:3f:12:6d:c7:66:9a:25: 16:b3:c0:dd:48:b9:e5:d3:10:79:c7:2b:b5:e5:36: ef:b0:c0:2f:34:2a:e5:f5:d8:cf:61:a7:72:aa:7e: 94:0f:4a:35:63:8d:5c:8d:e3:00:1a:8b:d7:9e:77: 3e:09:9d:a7:73:81:a7:c0:da:da:e2:d8:6c:ef:cd: 27:cd:a0:96:42:df:61:9c:fa:c3:1a:46:91:23:b3: ad:d2:e0:63:19:bd:ae:26:c7:14:25:52:de:e8:76: 66:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:94:48:24:BE:88:5B:F8:1F:16:78:BB:1B:22:62:ED:E5:07:04:0E X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5b:e4:bf:24:68:d7:06:f6:18:fd:e8:38:57:24:66:04:08: 90:d0:2d:a2:30:7f:3c:29:a7:d7:26:48:10:35:67:c6:48:38: 3f:1f:07:2b:f4:49:94:d9:4b:5b:f9:a7:25:ad:c0:72:9f:96: f0:da:ae:73:5d:aa:8a:f2:5e:44:5f:d6:f8:b8:0a:4a:dc:5a: e7:5c:65:0c:9b:17:af:3f:eb:53:0c:96:e1:90:2a:62:ad:1a: 55:5d:f8:12:d1:87:a1:d3:b2:22:b6:0b:41:e3:98:62:b3:45: 4b:b7:01:d0:93:ad:9b:19:b1:57:29:1e:8b:98:f6:e6:b7:fc: 77:ad:3a:6f:31:5b:a7:07:24:e7:8c:ea:cd:af:b2:cd:90:fb: bf:57:7e:7e:fa:08:13:3e:d5:55:72:ea:30:4a:01:96:18:b1: c0:31:6d:2e:b4:11:04:2b:78:ef:0f:fb:91:8e:ef:43:c7:36: 67:8e:2e:4c:49:f2:35:b2:bf:96:84:e4:b4:cc:7a:6e:11:6b: b1:19:e8:9c:ed:0a:02:e4:87:32:4e:6e:5a:77:2b:31:eb:f3: 04:8e:da:12:8e:ad:9f:62:87:1a:dd:3c:b3:d9:09:5c:d3:37: 51:41:03:2a:ec:17:03:41:43:aa:62:1f:73:09:7c:e3:a7:7b: 84:21:2c:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDa1kcaCdlrZ+XPCuPeaUICugCU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA1MTEwMDQ1NDdaFw0yNTA1MTQwNjEzNDdaMDMxMTAvBgNV BAMTKEUwOTQ0ODI0QkU4ODVCRjgxRjE2NzhCQjFCMjI2MkVERTUwNzA0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+uwWRPexN82c08eMrIBZRPkh s9BnLIf29vd2rKDc415ZgGNq0gr6FLufTLTktkz2ODaZgWiykZ9r3cTbGQdvZWlQ 2zZpQdqSPEXG2HEITsijVilwSLjJ2vGlDu6l2hpNv7gr5GdkoSB5E6NhLdOcx1s/ RED7SR2xy23T264gsw7lTusDmr7ggyiHHHX1I6kCBCwBBoD9/qnXEHG0PxJtx2aa JRazwN1IueXTEHnHK7XlNu+wwC80KuX12M9hp3KqfpQPSjVjjVyN4wAai9eedz4J nadzgafA2tri2GzvzSfNoJZC32Gc+sMaRpEjs63S4GMZva4mxxQlUt7odmZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4JRIJL6IW/gfFni7GyJi7eUHBA4wHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRb5L8kaNcG9hj96DhXJGYECJDQLaIwfzwp p9cmSBA1Z8ZIOD8fByv0SZTZS1v5pyWtwHKflvDarnNdqoryXkRf1vi4CkrcWudc ZQybF68/61MMluGQKmKtGlVd+BLRh6HTsiK2C0HjmGKzRUu3AdCTrZsZsVcpHouY 9ua3/HetOm8xW6cHJOeM6s2vss2Q+79Xfn76CBM+1VVy6jBKAZYYscAxbS60EQQr eO8P+5GO70PHNmeOLkxJ8jWyv5aE5LTMem4Ra7EZ6JztCgLkhzJOblp3KzHr8wSO 2hKOrZ9ihxrdPLPZCVzTN1FBAyrsFwNBQ6piH3MJfOOne4QhLFM= -----END CERTIFICATE-----Generated at Mon May 12 04:05:33 2025 by rpki-client