$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: gzOibPNorCt2vdobGvJyyiC80L7KlvtybYrr0xFv6rA= Subject key identifier: 7E:9D:9D:95:66:74:2D:23:89:D8:C6:B0:62:BE:E2:CA:70:73:4B:4B Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 1C651C07B49A949376B8BE023F737549D042BB57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 01BC Signing time: Sat 10 May 2025 00:42:07 +0000 Manifest this update: Sat 10 May 2025 00:37:07 +0000 Manifest next update: Tue 13 May 2025 04:42:07 +0000 Files and hashes: 1: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: h9awrx3C6TDyeuNDDZBZThVY6u04Zw2V21BuVfS6W0Y=) 2: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: ySmHccwgVUo/Xec9y8NyZzFaqBKw2yi8gAIwJ6BUXGE=) 3: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: NhZqh71RhAyyaL85a5NqQtcsTCZyguqgipdJCV3D8nU=) 4: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: 4GQdf+VZs7PPph0HlbP83daxKZbSIzab61P6GJVbBqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 04:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:65:1c:07:b4:9a:94:93:76:b8:be:02:3f:73:75:49:d0:42:bb:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: May 10 00:37:07 2025 GMT Not After : May 13 04:42:07 2025 GMT Subject: CN=7E9D9D9566742D2389D8C6B062BEE2CA70734B4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:d7:92:ec:78:10:4b:d0:af:87:37:1f:0e: 91:83:52:fe:95:53:d7:52:d4:12:87:c8:fb:ec:43: 2e:9d:71:51:14:03:83:7c:6b:7c:e7:90:d4:47:23: 77:25:54:19:c3:fd:03:00:e5:3b:dd:89:d3:4e:da: b5:88:77:92:5d:30:63:22:d5:3a:34:40:c4:cd:ba: 59:23:74:8b:69:44:11:45:40:97:28:23:f1:18:b3: 24:c4:9f:dc:94:28:1d:ef:41:ec:7b:ae:ea:66:9d: 15:e2:61:2f:a6:d6:fc:e7:8d:c9:a8:b3:f4:75:a1: 34:55:02:55:ff:58:a2:d3:1a:be:06:a2:f7:7c:36: 6c:ce:0c:e1:bb:47:5b:2c:8f:70:c3:33:90:c3:bb: 17:91:ef:f1:98:49:f9:c4:08:99:ed:f2:a0:30:b1: 23:63:f5:fa:57:1e:f4:fa:15:38:86:59:3b:47:2f: 2a:ae:73:6d:2d:6e:27:3a:75:8f:7b:9e:c3:bb:ab: 10:9f:e6:de:e3:5b:41:34:b9:e6:9f:ae:e5:9e:1f: 92:40:17:11:db:dd:c6:7b:d4:71:e5:7d:df:51:2c: ba:0f:ba:b3:de:92:1e:00:a2:24:3c:c2:0c:e6:c9: 0c:73:68:15:e0:d6:1c:2f:63:7b:66:0c:8f:d8:0e: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9D:9D:95:66:74:2D:23:89:D8:C6:B0:62:BE:E2:CA:70:73:4B:4B X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:2b:13:c9:0f:9b:1d:b3:2a:60:a0:de:2b:5c:2a:6e:64:77: ce:e0:ba:0e:ce:b8:82:b8:07:68:75:03:00:04:0d:94:d1:92: 15:39:77:8e:a0:19:e3:58:cc:82:07:74:42:38:92:9a:8a:71: 60:9d:8c:be:d5:97:e5:7d:0a:76:4b:42:20:1d:80:46:70:94: c2:9f:a6:e0:66:40:90:af:8a:0c:2a:16:91:83:87:fc:8a:f8: e2:c3:23:73:7d:52:50:35:a7:e5:f9:14:d7:76:4d:9c:41:b5: dd:4b:80:b8:2d:be:93:7c:db:9a:a0:37:86:75:c8:5c:d5:6e: 34:44:2b:d0:0c:56:82:3f:be:6b:c4:6c:9d:cc:e2:20:e9:2b: 09:ae:97:e8:ad:0e:55:4e:e9:71:31:be:57:d7:7e:7e:4c:76: 5e:5a:c5:f5:a8:37:9b:19:ba:7e:3f:a1:8f:dd:63:b9:a6:93: e3:78:1f:e5:12:6f:1b:05:d9:17:a2:c7:07:11:f9:de:3d:b5: 0a:fa:8a:6d:74:5d:dd:66:94:c7:30:d9:97:75:f8:08:e7:9c: db:5e:a5:a6:ec:8d:86:3a:9b:74:32:d0:b4:b0:d3:b3:81:20: bc:de:9c:64:e3:6c:99:9d:52:4d:28:be:c1:d4:a4:2c:83:e6: 3f:62:cb:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGUcB7SalJN2uL4CP3N1SdBCu1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTA1MTAwMDM3MDdaFw0yNTA1MTMwNDQyMDdaMDMxMTAvBgNV BAMTKDdFOUQ5RDk1NjY3NDJEMjM4OUQ4QzZCMDYyQkVFMkNBNzA3MzRCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRNeS7HgQS9CvhzcfDpGDUv6V U9dS1BKHyPvsQy6dcVEUA4N8a3znkNRHI3clVBnD/QMA5TvdidNO2rWId5JdMGMi 1To0QMTNulkjdItpRBFFQJcoI/EYsyTEn9yUKB3vQex7rupmnRXiYS+m1vznjcmo s/R1oTRVAlX/WKLTGr4Govd8NmzODOG7R1ssj3DDM5DDuxeR7/GYSfnECJnt8qAw sSNj9fpXHvT6FTiGWTtHLyquc20tbic6dY97nsO7qxCf5t7jW0E0ueafruWeH5JA FxHb3cZ71HHlfd9RLLoPurPekh4AoiQ8wgzmyQxzaBXg1hwvY3tmDI/YDmxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfp2dlWZ0LSOJ2MawYr7iynBzS0swHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANkrE8kPmx2zKmCg3itcKm5kd87gug7OuIK4 B2h1AwAEDZTRkhU5d46gGeNYzIIHdEI4kpqKcWCdjL7Vl+V9CnZLQiAdgEZwlMKf puBmQJCvigwqFpGDh/yK+OLDI3N9UlA1p+X5FNd2TZxBtd1LgLgtvpN825qgN4Z1 yFzVbjREK9AMVoI/vmvEbJ3M4iDpKwmul+itDlVO6XExvlfXfn5Mdl5axfWoN5sZ un4/oY/dY7mmk+N4H+USbxsF2ReixwcR+d49tQr6im10Xd1mlMcw2Zd1+AjnnNte pabsjYY6m3Qy0LSw07OBILzenGTjbJmdUk0ovsHUpCyD5j9iy5k= -----END CERTIFICATE-----Generated at Sun May 11 05:38:38 2025 by rpki-client