$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: eP8BeTdhQ1YAaPI/xsKYuEd9MdexpnJQqYD7LIXqNEA= Subject key identifier: 2C:5F:5E:14:05:64:3F:AC:40:0B:FF:68:53:77:17:72:1A:4F:F1:0F Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 473115C21496A0A38A2C1B9945EE8D38E18AECC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 01D9 Signing time: Sun 11 May 2025 00:50:38 +0000 Manifest this update: Sun 11 May 2025 00:45:38 +0000 Manifest next update: Wed 14 May 2025 03:22:38 +0000 Files and hashes: 1: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: w12N/uYx27kZZwmhbBAPGCXLuSyR2+QhhurllIrq3Bc=) 2: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: UeRCOjo57wOeUyYDJJ1YZ67dLYbNF8SefWTH/DR2yv8=) 3: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: nbEpopwiojWgYGehW+g9TqMlbT1/tFwqFVAFzwn9bm8=) 4: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: 5AeJ1FgArOUdlnT2tNZrGbi1j2yFt6oFLnbcnNdiMfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 03:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:31:15:c2:14:96:a0:a3:8a:2c:1b:99:45:ee:8d:38:e1:8a:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: May 11 00:45:38 2025 GMT Not After : May 14 03:22:38 2025 GMT Subject: CN=2C5F5E1405643FAC400BFF68537717721A4FF10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:c2:af:3b:46:53:5a:56:ea:0f:52:e2:80: 63:df:44:d6:49:9a:29:5b:86:6a:f2:1f:a2:75:21: e2:04:27:a2:6e:6d:c3:9c:05:ff:06:fd:ee:58:a8: 24:6f:59:7e:93:30:df:3d:90:8f:42:de:6e:1d:cc: 0f:ec:41:d6:eb:0a:aa:f9:68:ca:ca:6f:e1:30:a4: 32:85:67:4e:5e:ab:34:93:fe:de:06:90:7e:06:c6: d9:c7:15:8d:67:32:eb:68:5b:80:ee:9f:f0:96:18: 00:73:56:51:ad:b9:fa:ff:d5:f4:54:f9:a2:d6:c8: 67:18:c5:1f:71:6e:d2:38:ba:0d:86:af:26:37:16: c0:05:4b:41:77:e1:4c:9f:12:da:52:1f:c9:b6:5e: 84:a6:55:cd:ef:9c:1f:6c:39:7f:6c:07:d7:61:38: 67:5e:fb:5f:63:bc:8e:1f:9f:42:43:cb:89:16:f6: 53:cc:a8:44:54:30:e5:02:59:67:62:54:6e:11:4b: ed:78:4f:60:1f:09:cc:4b:6c:99:4b:96:61:61:49: a6:ae:9c:a2:15:7a:f3:cd:12:a4:f1:55:7b:78:66: 42:cb:ee:d4:2d:f7:3c:a4:df:56:1b:c1:5b:a9:cc: 8b:85:86:d0:5e:54:9f:15:c2:1e:df:af:85:91:9f: 7c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:5E:14:05:64:3F:AC:40:0B:FF:68:53:77:17:72:1A:4F:F1:0F X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:33:82:0c:a9:d2:5d:bb:b9:ef:18:4a:c3:dc:7d:09:be:90: 72:e2:7a:c2:5d:7d:57:79:0e:3b:3b:d8:1a:e0:62:0f:af:84: 71:bd:c7:f6:73:f2:56:49:84:52:64:05:8e:ec:8a:7e:64:59: 30:d4:72:d1:74:71:d4:d0:31:7c:c8:af:ec:12:25:1c:5f:9e: 30:ad:3d:3d:23:f2:0e:c1:88:8b:39:ff:6f:f7:f7:19:97:bc: 63:d6:68:73:71:a5:07:1f:97:3a:be:7a:61:c2:57:f7:f3:b9: 8f:eb:ec:fb:69:11:3a:36:9d:3c:1d:b6:09:f3:c0:49:7c:00: e2:bf:bd:77:7b:17:29:86:cc:7f:9b:8a:d5:50:5f:98:99:29: ce:53:2b:9c:ea:ae:b0:ea:6f:8d:31:92:8e:e0:7e:ee:27:90: d8:37:28:0b:15:ce:47:30:dc:00:08:ca:b3:1f:2c:88:62:2d: bc:d8:9a:e8:9f:d1:5b:48:c1:63:75:45:18:84:b6:38:0e:17: a9:4e:83:9a:a7:08:72:89:ac:59:a6:e7:d6:a3:a4:04:47:ed: 3f:46:4f:06:e5:aa:58:23:6d:92:12:d9:11:be:65:89:e7:c0: a2:35:5f:23:b8:4c:d8:ee:40:4c:ba:95:3d:51:8d:0f:39:c0: 20:85:d2:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzEVwhSWoKOKLBuZRe6NOOGK7MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTA1MTEwMDQ1MzhaFw0yNTA1MTQwMzIyMzhaMDMxMTAvBgNV BAMTKDJDNUY1RTE0MDU2NDNGQUM0MDBCRkY2ODUzNzcxNzcyMUE0RkYxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSsKvO0ZTWlbqD1LigGPfRNZJ milbhmryH6J1IeIEJ6JubcOcBf8G/e5YqCRvWX6TMN89kI9C3m4dzA/sQdbrCqr5 aMrKb+EwpDKFZ05eqzST/t4GkH4GxtnHFY1nMutoW4Dun/CWGABzVlGtufr/1fRU +aLWyGcYxR9xbtI4ug2GryY3FsAFS0F34UyfEtpSH8m2XoSmVc3vnB9sOX9sB9dh OGde+19jvI4fn0JDy4kW9lPMqERUMOUCWWdiVG4RS+14T2AfCcxLbJlLlmFhSaau nKIVevPNEqTxVXt4ZkLL7tQt9zyk31YbwVupzIuFhtBeVJ8Vwh7fr4WRn3wpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULF9eFAVkP6xAC/9oU3cXchpP8Q8wHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAzggyp0l27ue8YSsPcfQm+kHLiesJdfVd5 Djs72BrgYg+vhHG9x/Zz8lZJhFJkBY7sin5kWTDUctF0cdTQMXzIr+wSJRxfnjCt PT0j8g7BiIs5/2/39xmXvGPWaHNxpQcflzq+emHCV/fzuY/r7PtpETo2nTwdtgnz wEl8AOK/vXd7FymGzH+bitVQX5iZKc5TK5zqrrDqb40xko7gfu4nkNg3KAsVzkcw 3AAIyrMfLIhiLbzYmuif0VtIwWN1RRiEtjgOF6lOg5qnCHKJrFmm59ajpARH7T9G TwblqlgjbZIS2RG+ZYnnwKI1XyO4TNjuQEy6lT1RjQ85wCCF0iE= -----END CERTIFICATE-----Generated at Sun May 11 22:57:26 2025 by rpki-client