$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json) Hash identifier: usvB5AglyeEdrPU2ZDrDbGg+F7QqOGtOfEs35pjs2jw= Subject key identifier: 44:47:F3:1D:25:3A:11:F9:0B:51:5E:26:0E:50:38:9C:EA:30:B6:E9 Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 1CDCC7C2381828425A7C0F15015FA5FF797FCE88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft Manifest number: 04CE Signing time: Sat 10 May 2025 02:40:34 +0000 Manifest this update: Sat 10 May 2025 02:35:34 +0000 Manifest next update: Tue 13 May 2025 05:02:34 +0000 Files and hashes: 1: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: OsXuery+dqrXtWPBKclCMRfHJTDgT5E1V7vyLlK5GAQ=) 2: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: EwnUpJ+hrnNzjHt/M8pl1J7fZlqVSXitpUOEVZ0YU1E=) 3: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: 0gzYY7cjTPjY2yjhcF04nMrJdj9Xu6B9UNr2O7vO1co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dc:c7:c2:38:18:28:42:5a:7c:0f:15:01:5f:a5:ff:79:7f:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: May 10 02:35:34 2025 GMT Not After : May 13 05:02:34 2025 GMT Subject: CN=4447F31D253A11F90B515E260E50389CEA30B6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:69:d5:ce:f6:2e:4b:3e:52:43:5e:ef:5a: 98:58:7c:fa:00:f7:51:4a:a4:45:36:21:de:fb:3f: 07:ed:2b:23:25:be:0e:4f:3b:57:d1:c3:7a:9c:97: 92:83:08:19:b6:38:17:07:c9:95:29:f2:b8:72:03: 0b:08:37:d3:03:89:10:bf:2e:59:0e:3c:fe:bf:3e: f2:ed:23:3a:15:13:a6:7b:c4:a5:22:99:f0:0c:c7: 7d:83:01:4d:16:2e:d0:56:1a:19:6b:12:af:43:c8: 4b:e7:04:82:22:0f:67:aa:e5:9e:2c:7c:d1:4b:b2: cb:29:e4:4c:1d:b7:85:19:6c:00:81:48:09:db:92: ec:c2:e7:1e:42:5a:e6:1d:0e:e8:77:7f:f6:4f:94: df:07:8e:62:2d:07:62:90:61:c2:a8:f7:1e:f8:bd: 8b:6e:e4:42:ba:8c:45:d4:cb:1a:e6:45:62:e8:a0: e4:cc:b7:5b:2e:d3:7e:db:80:4b:e9:9b:6d:a4:14: ec:13:3c:e7:13:9c:a7:f6:db:1e:0e:ec:06:81:53: d3:91:b7:1f:e7:e0:96:6d:a7:1a:f3:c2:b3:1f:9d: a8:cc:69:2d:8f:d8:72:f2:f6:fd:58:81:7c:5f:40: 42:ca:93:0e:e1:f2:c3:21:6c:c5:2f:e7:0d:b7:d5: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:F3:1D:25:3A:11:F9:0B:51:5E:26:0E:50:38:9C:EA:30:B6:E9 X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f6:b8:e4:46:78:d6:c1:b0:f9:11:05:22:7b:71:f1:1d:90: ac:8b:f5:3c:d5:5a:cb:26:a6:2c:33:df:34:49:75:ff:2e:88: f2:0f:dc:d0:4e:5b:84:96:b8:e3:73:e1:42:fb:98:a7:35:e6: b8:38:f8:7d:32:70:54:07:6d:43:a9:48:f2:ff:56:7b:a7:1a: f1:12:1d:19:23:0a:06:5b:31:1c:b9:8b:40:93:aa:f7:7d:bf: d4:3b:7c:25:7f:bb:b5:b6:4e:1e:1b:da:9f:0d:6a:b4:86:5f: a0:b4:69:64:e9:68:96:c4:91:4d:89:03:be:81:e0:2a:80:aa: 5f:06:61:df:94:2c:af:b3:92:20:65:d8:4b:30:4b:61:03:38: 3a:d4:94:6d:62:0d:b0:86:1d:3e:b9:4d:da:1c:40:85:2b:71: dd:23:40:94:62:ce:6c:d7:b9:1f:60:38:21:e7:80:6b:19:1d: 3c:ac:4c:83:af:53:0a:86:43:44:1b:55:f3:fc:bf:9e:33:b6: 66:fc:a6:0c:41:fc:6a:e6:c0:cb:a9:f6:ce:5c:f8:fb:65:26: 68:3a:18:e2:d6:36:a6:91:4c:ef:37:b5:0d:6b:5d:0d:0b:db: 75:0b:cb:ab:50:4c:15:f9:7f:7f:dd:51:3b:28:8f:3e:4b:9c: 3d:33:6d:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNzHwjgYKEJafA8VAV+l/3l/zogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTA1MTAwMjM1MzRaFw0yNTA1MTMwNTAyMzRaMDMxMTAvBgNV BAMTKDQ0NDdGMzFEMjUzQTExRjkwQjUxNUUyNjBFNTAzODlDRUEzMEI2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iGnVzvYuSz5SQ17vWphYfPoA 91FKpEU2Id77PwftKyMlvg5PO1fRw3qcl5KDCBm2OBcHyZUp8rhyAwsIN9MDiRC/ LlkOPP6/PvLtIzoVE6Z7xKUimfAMx32DAU0WLtBWGhlrEq9DyEvnBIIiD2eq5Z4s fNFLsssp5Ewdt4UZbACBSAnbkuzC5x5CWuYdDuh3f/ZPlN8HjmItB2KQYcKo9x74 vYtu5EK6jEXUyxrmRWLooOTMt1su037bgEvpm22kFOwTPOcTnKf22x4O7AaBU9OR tx/n4JZtpxrzwrMfnajMaS2P2HLy9v1YgXxfQELKkw7h8sMhbMUv5w231aarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUREfzHSU6EfkLUV4mDlA4nOowtukwHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VD MEMzMkY3NTk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKr2uORGeNbBsPkRBSJ7cfEdkKyL9TzVWssm piwz3zRJdf8uiPIP3NBOW4SWuONz4UL7mKc15rg4+H0ycFQHbUOpSPL/VnunGvES HRkjCgZbMRy5i0CTqvd9v9Q7fCV/u7W2Th4b2p8NarSGX6C0aWTpaJbEkU2JA76B 4CqAql8GYd+ULK+zkiBl2EswS2EDODrUlG1iDbCGHT65TdocQIUrcd0jQJRizmzX uR9gOCHngGsZHTysTIOvUwqGQ0QbVfP8v54ztmb8pgxB/GrmwMup9s5c+PtlJmg6 GOLWNqaRTO83tQ1rXQ0L23ULy6tQTBX5f3/dUTsojz5LnD0zbdg= -----END CERTIFICATE-----Generated at Sat May 10 08:30:24 2025 by rpki-client