$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: TrhMjVmtYNEBs+2EkbticM2C8pzVENj3W44wyrzl0Bw= Subject key identifier: AD:7D:B3:29:C3:50:0C:ED:8F:07:47:BE:58:80:94:FB:4C:58:0A:5F Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 141677F7C711983A72A4725B476C1162C011CE54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 0154 Signing time: Sat 10 May 2025 16:30:34 +0000 Manifest this update: Sat 10 May 2025 16:25:34 +0000 Manifest next update: Tue 13 May 2025 20:49:34 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 2: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 3: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: YIGNoefCNvUbc9P+OjEdgu8LLyhRCHR/w2KTU1blX1c=) 4: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: BdihZDS/tzCmUBevlIu9UDvRioqzeTxPODGMUovQZWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:16:77:f7:c7:11:98:3a:72:a4:72:5b:47:6c:11:62:c0:11:ce:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: May 10 16:25:34 2025 GMT Not After : May 13 20:49:34 2025 GMT Subject: CN=AD7DB329C3500CED8F0747BE588094FB4C580A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f2:8b:ef:f8:8b:c2:cf:45:83:01:d6:a0:31: c2:d4:d1:4d:13:6c:26:04:32:dd:e5:b9:f2:ea:53: c5:0a:bb:c5:b2:a6:a2:fc:1b:84:5c:a0:bd:26:c5: 99:8b:7e:ad:6a:ab:ff:d8:cf:9e:a6:fe:0e:13:50: 45:05:0d:04:2c:4f:68:a3:16:ad:18:95:a2:fb:31: 95:54:b8:13:19:94:5e:07:e6:e9:df:7b:5a:3e:ba: 28:9b:cd:d6:79:cb:ff:cf:08:24:d3:cd:4f:83:2a: 5d:8e:2a:c6:76:af:20:26:6b:1d:73:1e:52:f3:f3: c9:5a:ef:43:f3:30:c6:30:99:8f:82:b7:2e:ba:a3: 57:88:6e:5c:75:8c:6b:96:bf:48:9a:bd:aa:0a:1d: 9e:39:43:70:ab:18:2d:1b:7a:16:20:5b:59:11:35: 6c:10:41:fa:fa:8a:fe:d4:0d:da:3c:dc:ee:a3:ac: ec:6a:63:28:ea:ac:fe:26:f2:e5:36:7e:69:43:4b: 07:21:50:f9:25:bd:da:ff:0b:6a:90:56:aa:56:87: da:fe:46:17:a8:ba:85:20:6f:28:2b:26:1f:4d:3a: b5:b5:9a:25:11:f9:85:4f:7b:f0:b4:21:54:82:f1: 6d:9c:46:7b:50:89:49:6f:52:81:94:a8:78:fd:bd: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7D:B3:29:C3:50:0C:ED:8F:07:47:BE:58:80:94:FB:4C:58:0A:5F X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ba:76:c5:64:22:c8:0a:6a:eb:03:83:e7:a4:79:38:eb:e9: dd:6e:d8:5c:45:aa:4f:28:d9:0d:5b:fa:ac:ca:18:69:7f:d2: 1a:c3:52:a9:c4:19:3b:d0:9c:ec:a6:2a:c2:d7:1a:a1:3e:7f: 96:a9:03:8e:78:fc:06:2a:e1:0b:29:55:30:66:f1:bb:07:b2: 7c:16:18:e4:1a:bb:58:37:b5:c9:0c:1a:b6:1d:d1:80:3d:6b: a6:08:3f:90:bd:5c:28:c5:cf:8a:84:fe:8b:25:e3:4b:70:2f: a1:d6:21:88:ae:00:66:1a:bb:04:35:a1:92:dd:cb:e0:93:e4: 03:e1:ca:75:91:41:dc:69:10:86:ec:17:15:6b:0d:db:31:6b: 90:7c:7a:82:33:6c:0d:60:14:a3:f3:08:e3:51:3e:60:da:22: a0:39:b8:34:b9:a9:ce:34:57:9b:c5:1e:84:26:52:80:2a:f6: 4e:1f:28:70:3c:de:da:de:92:26:8f:b1:c4:d0:89:55:1b:f9: 5b:2f:e9:2e:2d:32:bb:33:a0:d8:84:39:cf:a6:a9:d5:0e:38: 62:2a:c9:18:f3:29:9d:58:f6:b7:fb:7d:3b:09:10:ee:68:14: 1b:3b:d4:bb:53:1f:b3:46:10:0d:ab:40:3b:a2:2a:dc:e9:d1: b5:c8:b5:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBZ398cRmDpypHJbR2wRYsARzlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTA1MTAxNjI1MzRaFw0yNTA1MTMyMDQ5MzRaMDMxMTAvBgNV BAMTKEFEN0RCMzI5QzM1MDBDRUQ4RjA3NDdCRTU4ODA5NEZCNEM1ODBBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq8ovv+IvCz0WDAdagMcLU0U0T bCYEMt3lufLqU8UKu8WypqL8G4RcoL0mxZmLfq1qq//Yz56m/g4TUEUFDQQsT2ij Fq0YlaL7MZVUuBMZlF4H5unfe1o+uiibzdZ5y//PCCTTzU+DKl2OKsZ2ryAmax1z HlLz88la70PzMMYwmY+Cty66o1eIblx1jGuWv0iavaoKHZ45Q3CrGC0behYgW1kR NWwQQfr6iv7UDdo83O6jrOxqYyjqrP4m8uU2fmlDSwchUPklvdr/C2qQVqpWh9r+ RheouoUgbygrJh9NOrW1miUR+YVPe/C0IVSC8W2cRntQiUlvUoGUqHj9vWzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrX2zKcNQDO2PB0e+WICU+0xYCl8wHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm6dsVkIsgKausDg+ekeTjr6d1u2FxFqk8o 2Q1b+qzKGGl/0hrDUqnEGTvQnOymKsLXGqE+f5apA454/AYq4QspVTBm8bsHsnwW GOQau1g3tckMGrYd0YA9a6YIP5C9XCjFz4qE/osl40twL6HWIYiuAGYauwQ1oZLd y+CT5APhynWRQdxpEIbsFxVrDdsxa5B8eoIzbA1gFKPzCONRPmDaIqA5uDS5qc40 V5vFHoQmUoAq9k4fKHA83trekiaPscTQiVUb+Vsv6S4tMrszoNiEOc+mqdUOOGIq yRjzKZ1Y9rf7fTsJEO5oFBs71LtTH7NGEA2rQDuiKtzp0bXItQ8= -----END CERTIFICATE-----Generated at Sat May 10 23:04:21 2025 by rpki-client