$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: yDe4UcX9tBbbvplYcwKV6/aXitavCPuBu4PqVFqrazY= Subject key identifier: 80:30:B8:23:B6:69:80:E0:36:1C:16:75:A3:A6:5E:0D:25:E6:EE:60 Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 1B52FF40ED67558457118A9CFE806DD5CFE7C1DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 01C7 Signing time: Fri 09 May 2025 09:21:16 +0000 Manifest this update: Fri 09 May 2025 09:16:16 +0000 Manifest next update: Mon 12 May 2025 15:39:16 +0000 Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) 2: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: kse42mgWN0LdjtL3LHY05cz7A7R46H9yIG5/OZPTB88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:52:ff:40:ed:67:55:84:57:11:8a:9c:fe:80:6d:d5:cf:e7:c1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: May 9 09:16:16 2025 GMT Not After : May 12 15:39:16 2025 GMT Subject: CN=8030B823B66980E0361C1675A3A65E0D25E6EE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:79:b1:55:e5:96:92:5c:d7:b9:84:13:f8: 9f:66:31:ea:2c:58:4a:4e:98:f8:81:a7:e0:ff:1b: 45:8a:4a:8c:df:fe:98:ca:40:2e:47:33:11:75:d0: 4b:c7:88:05:9d:81:bf:bf:aa:ce:5b:6b:e1:49:7c: bf:98:76:3b:0e:35:fa:8f:3d:ed:65:0a:03:7b:98: 57:fc:e2:54:3d:80:81:19:18:9e:96:50:8e:b4:18: aa:b0:89:2e:ba:64:a2:2b:ab:ff:0d:1d:95:5c:30: 9f:96:ad:18:f0:de:d1:c9:68:1b:1a:60:b4:5e:af: 00:aa:57:74:90:45:11:44:35:5a:b6:fc:42:78:94: 13:cd:0c:8b:dc:b0:6a:b0:ae:41:d4:2f:e0:b7:7e: 23:9a:5d:fc:80:35:6b:0d:32:f9:c5:54:af:44:35: f1:d9:2f:3b:eb:9b:4d:35:2c:66:d6:95:d8:93:cf: a0:d2:7b:01:db:db:7d:6f:c1:12:2f:a5:f1:2b:0b: 41:fc:c1:6a:52:dd:77:7f:f5:98:e5:58:2d:fb:81: e4:e5:11:46:0c:09:21:11:55:2d:e1:a0:49:78:5a: ef:83:75:87:ca:3e:00:40:6a:64:0c:5a:a9:8e:6c: 6f:8b:f4:33:9b:75:36:df:5b:44:cc:ec:68:46:91: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:30:B8:23:B6:69:80:E0:36:1C:16:75:A3:A6:5E:0D:25:E6:EE:60 X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:07:c8:dc:d7:33:4e:b3:f0:fc:b0:f0:83:54:20:75:f5:72: e9:ef:22:3b:23:d9:9d:e2:ef:a2:d0:2d:e9:d1:70:ff:f4:9c: 7a:51:64:bb:47:01:7b:fe:d1:9e:76:d4:c6:aa:c8:c9:27:73: 68:c0:82:4d:29:31:33:53:ce:f6:f8:03:ef:28:3b:73:ad:b2: 70:1f:1b:e9:9e:09:dd:cd:17:2d:8e:f0:b4:7b:a7:8f:1f:61: 3e:c8:e6:ac:b3:64:98:10:43:77:0d:2b:1e:27:d7:93:15:4a: 00:b3:01:53:12:85:9b:ae:2f:ab:f8:a1:6c:a8:47:31:fe:37: 89:f3:01:24:e5:a5:57:08:4e:94:d6:e4:a1:56:55:25:30:83: 76:23:58:06:65:46:0d:ac:52:25:24:c5:0a:85:27:21:87:25: 59:2e:61:ac:d8:66:dd:a3:10:50:12:27:7a:74:29:db:4f:a6: 26:23:58:78:f6:bd:c4:25:76:c0:94:c6:ab:b1:5e:7b:ad:fb: 54:40:f3:ae:a8:fb:37:31:55:7b:87:b7:8f:62:1e:d6:d6:13: a4:73:cc:f6:dc:2c:21:9d:75:52:c8:55:76:80:c6:3c:d2:0f: 26:88:99:e0:8b:70:5d:f9:c3:bd:ac:0f:f8:4f:84:ab:da:9c: 0a:00:03:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1L/QO1nVYRXEYqc/oBt1c/nwd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNTA1MDkwOTE2MTZaFw0yNTA1MTIxNTM5MTZaMDMxMTAvBgNV BAMTKDgwMzBCODIzQjY2OTgwRTAzNjFDMTY3NUEzQTY1RTBEMjVFNkVFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaXmxVeWWklzXuYQT+J9mMeos WEpOmPiBp+D/G0WKSozf/pjKQC5HMxF10EvHiAWdgb+/qs5ba+FJfL+YdjsONfqP Pe1lCgN7mFf84lQ9gIEZGJ6WUI60GKqwiS66ZKIrq/8NHZVcMJ+WrRjw3tHJaBsa YLRerwCqV3SQRRFENVq2/EJ4lBPNDIvcsGqwrkHUL+C3fiOaXfyANWsNMvnFVK9E NfHZLzvrm001LGbWldiTz6DSewHb231vwRIvpfErC0H8wWpS3Xd/9ZjlWC37geTl EUYMCSERVS3hoEl4Wu+DdYfKPgBAamQMWqmObG+L9DObdTbfW0TM7GhGkbp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDC4I7ZpgOA2HBZ1o6ZeDSXm7mAwHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIHyNzXM06z8Pyw8INUIHX1cunvIjsj2Z3i 76LQLenRcP/0nHpRZLtHAXv+0Z521MaqyMknc2jAgk0pMTNTzvb4A+8oO3OtsnAf G+meCd3NFy2O8LR7p48fYT7I5qyzZJgQQ3cNKx4n15MVSgCzAVMShZuuL6v4oWyo RzH+N4nzASTlpVcITpTW5KFWVSUwg3YjWAZlRg2sUiUkxQqFJyGHJVkuYazYZt2j EFASJ3p0KdtPpiYjWHj2vcQldsCUxquxXnut+1RA866o+zcxVXuHt49iHtbWE6Rz zPbcLCGddVLIVXaAxjzSDyaImeCLcF35w72sD/hPhKvanAoAAx4= -----END CERTIFICATE-----Generated at Sat May 10 03:35:58 2025 by rpki-client