$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: /JQSYy/agE9oArFRl9p7JrIKBOf2gsg/V1NBuYZ0pPQ= Subject key identifier: 85:C2:1E:F8:59:40:68:C8:13:0C:4B:31:68:A0:FC:D9:3B:E8:3B:A9 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 0399F53B01B7CDD3F916A82CABAF8950C4A9C590 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: 44 Signing time: Sun 04 May 2025 09:11:43 +0000 Manifest this update: Sun 04 May 2025 09:06:43 +0000 Manifest next update: Wed 07 May 2025 12:05:43 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: 8wNjEN3PCQpJfAYYKPhTXsTs5zYwamZqRf/4K++2zEk=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 12:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:99:f5:3b:01:b7:cd:d3:f9:16:a8:2c:ab:af:89:50:c4:a9:c5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: May 4 09:06:43 2025 GMT Not After : May 7 12:05:43 2025 GMT Subject: CN=85C21EF8594068C8130C4B3168A0FCD93BE83BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:10:1a:ae:17:89:a1:13:59:a6:64:f8:03: d1:37:1d:48:bd:7e:a8:32:e1:3e:d2:64:41:be:87: a4:47:21:c8:32:40:b8:aa:a0:4e:d3:b0:66:c8:f3: 59:cc:05:d4:7f:1a:d9:8b:64:7c:6e:30:e0:ac:44: b2:1f:7f:16:4c:1e:26:1d:cd:4a:df:8e:47:ae:ef: d4:2f:82:73:4d:98:82:56:3c:6f:06:62:13:25:e4: ec:b2:70:e3:03:13:34:7e:65:53:6a:21:60:86:e1: 08:2e:12:29:38:d9:37:53:44:8e:34:ea:b6:37:fe: 4c:fa:5f:49:c0:2e:61:95:6e:3c:90:60:ad:f2:57: 35:03:8c:1b:f1:21:f2:9d:4e:60:73:43:29:a6:30: da:46:2d:a3:39:5a:b0:1f:d4:7b:75:e8:b2:51:eb: 73:a1:cc:b5:3a:41:0a:41:58:40:fd:8e:0e:ca:27: ff:47:41:3d:70:a1:2d:b8:09:11:6b:f6:e6:be:9a: e3:4f:7e:71:aa:fa:53:83:73:0e:3a:2a:8a:6f:15: 62:4c:ac:f0:9c:70:1f:9c:a5:74:54:0a:71:8f:d5: db:32:7c:5a:cc:fc:02:6c:0a:cf:9f:91:7a:b8:01: 36:ca:9f:61:f5:e4:7f:7a:17:e3:cc:86:03:12:f0: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C2:1E:F8:59:40:68:C8:13:0C:4B:31:68:A0:FC:D9:3B:E8:3B:A9 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:73:97:ed:d1:db:52:e6:a9:4c:a9:de:52:fd:a9:29:f3:8c: 57:8d:26:46:33:59:f0:19:d2:34:6e:62:9c:78:bf:c8:6a:32: 85:e9:ba:01:bc:dd:55:4c:11:7c:3d:83:78:30:09:a4:f5:34: 4f:3e:95:b1:d5:a2:cc:63:6a:31:58:fe:7d:e2:e3:dd:a6:60: 23:c4:db:20:1e:be:41:a6:2e:07:45:eb:5c:87:76:9a:fa:1b: 1a:55:6a:03:22:65:24:08:72:7b:fb:0d:80:36:46:d8:d3:6d: 25:38:e4:75:f5:c2:2d:f1:99:d4:96:17:26:04:f1:dc:09:f9: c4:1a:e6:2d:5a:d8:7c:fb:20:dd:06:6f:42:8a:b9:56:74:d0: 9b:95:4a:c2:0d:b2:d5:5d:df:ae:6d:45:2a:bc:14:9b:98:cb: b3:b2:da:df:18:29:8a:e4:26:ff:5e:d9:e2:c1:dd:a3:40:91: db:af:5f:0e:76:01:02:ce:49:35:8e:30:bd:63:eb:f8:52:b9: 39:0a:da:09:30:ee:77:3d:be:65:9f:47:03:78:af:b8:ec:79: 3b:7e:37:1c:04:9f:29:a8:d3:f7:69:78:aa:88:10:5e:c1:cc: 6e:2d:f6:5b:a1:67:6b:9e:40:32:7b:12:4d:c4:e8:b5:bd:e5: 64:55:8e:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5n1OwG3zdP5Fqgsq6+JUMSpxZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTA1MDQwOTA2NDNaFw0yNTA1MDcxMjA1NDNaMDMxMTAvBgNV BAMTKDg1QzIxRUY4NTk0MDY4QzgxMzBDNEIzMTY4QTBGQ0Q5M0JFODNCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33BAarheJoRNZpmT4A9E3HUi9 fqgy4T7SZEG+h6RHIcgyQLiqoE7TsGbI81nMBdR/GtmLZHxuMOCsRLIffxZMHiYd zUrfjkeu79QvgnNNmIJWPG8GYhMl5OyycOMDEzR+ZVNqIWCG4QguEik42TdTRI40 6rY3/kz6X0nALmGVbjyQYK3yVzUDjBvxIfKdTmBzQymmMNpGLaM5WrAf1Ht16LJR 63OhzLU6QQpBWED9jg7KJ/9HQT1woS24CRFr9ua+muNPfnGq+lODcw46KopvFWJM rPCccB+cpXRUCnGP1dsyfFrM/AJsCs+fkXq4ATbKn2H15H96F+PMhgMS8CKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhcIe+FlAaMgTDEsxaKD82TvoO6kwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpzl+3R21LmqUyp3lL9qSnzjFeNJkYzWfAZ 0jRuYpx4v8hqMoXpugG83VVMEXw9g3gwCaT1NE8+lbHVosxjajFY/n3i492mYCPE 2yAevkGmLgdF61yHdpr6GxpVagMiZSQIcnv7DYA2RtjTbSU45HX1wi3xmdSWFyYE 8dwJ+cQa5i1a2Hz7IN0Gb0KKuVZ00JuVSsINstVd365tRSq8FJuYy7Oy2t8YKYrk Jv9e2eLB3aNAkduvXw52AQLOSTWOML1j6/hSuTkK2gkw7nc9vmWfRwN4r7jseTt+ NxwEnymo0/dpeKqIEF7BzG4t9luhZ2ueQDJ7Ek3E6LW95WRVjko= -----END CERTIFICATE-----Generated at Tue May 6 09:43:27 2025 by rpki-client