$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: 8PEOpkB79L6pS41JJ7yM+PNuhY+40r3uwSNcu9Qqn0M= Subject key identifier: 52:73:B6:FB:5C:C6:E0:D2:2C:54:B5:85:EB:40:CC:CF:C8:9E:B7:19 Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 467E1544FDC37B159671A1982CD8B8EE204D0C48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: D2 Signing time: Fri 09 May 2025 17:11:33 +0000 Manifest this update: Fri 09 May 2025 17:06:33 +0000 Manifest next update: Tue 13 May 2025 04:25:33 +0000 Files and hashes: 1: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: xItOFZc/qp8xORuhSJ+S3eW533JcEQS2P63aMgnzoLU=) 2: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) 3: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 04:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7e:15:44:fd:c3:7b:15:96:71:a1:98:2c:d8:b8:ee:20:4d:0c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: May 9 17:06:33 2025 GMT Not After : May 13 04:25:33 2025 GMT Subject: CN=5273B6FB5CC6E0D22C54B585EB40CCCFC89EB719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:5e:4b:eb:99:84:f3:27:75:33:02:87:32: 63:9e:4a:d5:6f:ec:c1:b3:37:9c:99:0a:d6:a1:bb: c1:e4:43:68:cb:b2:aa:9b:d7:46:4e:81:91:37:3c: fa:ad:e5:df:74:ce:63:8e:a8:c6:65:2d:43:a3:7a: 6c:91:b7:38:32:c0:9a:6e:02:c5:9d:11:1c:d1:77: ff:97:fc:0a:7f:23:16:fa:ab:1d:93:8e:2d:c9:c8: 1c:c3:21:5c:d0:60:61:33:42:1e:47:5e:ff:0d:75: f8:e2:f4:94:4f:b5:d1:68:41:cb:5f:12:7e:1c:37: b4:ec:7d:05:e1:d0:7d:d1:a8:2a:ac:28:39:5d:fe: 42:05:1f:29:8a:04:ca:e8:34:02:b6:ba:1e:76:f5: d2:8c:78:bc:ba:d0:25:01:62:60:ab:d5:c8:86:1c: 8a:41:79:82:c9:b0:0d:10:60:7a:0a:77:08:df:04: eb:db:bc:b8:95:18:be:c3:fb:3f:66:30:67:ac:8d: 93:18:4b:84:bd:00:27:ad:9d:a4:23:bc:c0:7f:8a: 00:c7:7a:36:b8:c0:e5:ad:c6:5d:90:15:ba:6f:19: 2a:f3:22:ac:7e:6b:e4:4b:1b:a0:2a:2b:48:34:6e: 1d:b0:b8:68:80:69:a6:be:32:1a:fb:fe:e2:46:51: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:B6:FB:5C:C6:E0:D2:2C:54:B5:85:EB:40:CC:CF:C8:9E:B7:19 X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5c:7d:2f:87:f8:c8:ff:a0:2f:0d:d6:d2:f6:44:23:80:f3: 3a:d6:3e:24:65:fd:8e:ea:7c:ab:b6:2a:a1:1e:13:c2:06:79: 69:b9:96:ed:d1:7b:5f:8c:52:8b:e8:d6:fd:37:cd:9a:53:df: 73:89:7a:ea:69:0b:7c:ab:f3:cc:71:f6:b7:3d:70:f7:d0:d7: b3:31:94:82:45:55:0e:e7:70:32:99:fc:a7:c2:84:5e:7e:96: 5c:e6:b4:74:03:45:d5:00:3d:fb:d0:b2:dd:f8:8c:0e:af:6b: f5:8c:9f:fe:b4:ae:db:34:c2:a7:12:d9:46:24:ee:dc:1a:45: 93:a8:ce:71:88:27:1f:1a:53:f8:13:80:9b:3f:00:d1:e9:e8: 8d:69:5a:3a:45:16:9f:52:28:80:6e:e5:c9:c7:d5:9b:6f:6d: d4:41:e9:aa:95:8f:18:08:31:1f:54:2c:7a:1d:2f:59:44:35: f8:c5:a2:57:11:a2:ec:ea:95:11:d4:d8:38:90:3a:65:79:15: b2:a2:d0:39:99:de:76:76:22:91:c8:06:25:48:4e:3c:b2:aa: e7:15:9d:1f:7e:62:0f:c7:52:1e:cf:80:db:39:1e:31:e0:b1: 53:80:13:70:1e:ef:21:38:3a:89:ff:5e:5c:e7:3d:97:74:70: 8f:f4:87:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURn4VRP3DexWWcaGYLNi47iBNDEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTA1MDkxNzA2MzNaFw0yNTA1MTMwNDI1MzNaMDMxMTAvBgNV BAMTKDUyNzNCNkZCNUNDNkUwRDIyQzU0QjU4NUVCNDBDQ0NGQzg5RUI3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VV5L65mE8yd1MwKHMmOeStVv 7MGzN5yZCtahu8HkQ2jLsqqb10ZOgZE3PPqt5d90zmOOqMZlLUOjemyRtzgywJpu AsWdERzRd/+X/Ap/Ixb6qx2Tji3JyBzDIVzQYGEzQh5HXv8Ndfji9JRPtdFoQctf En4cN7TsfQXh0H3RqCqsKDld/kIFHymKBMroNAK2uh529dKMeLy60CUBYmCr1ciG HIpBeYLJsA0QYHoKdwjfBOvbvLiVGL7D+z9mMGesjZMYS4S9ACetnaQjvMB/igDH eja4wOWtxl2QFbpvGSrzIqx+a+RLG6AqK0g0bh2wuGiAaaa+Mhr7/uJGUXGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUnO2+1zG4NIsVLWF60DMz8ietxkwHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1cfS+H+Mj/oC8N1tL2RCOA8zrWPiRl/Y7q fKu2KqEeE8IGeWm5lu3Re1+MUovo1v03zZpT33OJeuppC3yr88xx9rc9cPfQ17Mx lIJFVQ7ncDKZ/KfChF5+llzmtHQDRdUAPfvQst34jA6va/WMn/60rts0wqcS2UYk 7twaRZOoznGIJx8aU/gTgJs/ANHp6I1pWjpFFp9SKIBu5cnH1ZtvbdRB6aqVjxgI MR9ULHodL1lENfjFolcRouzqlRHU2DiQOmV5FbKi0DmZ3nZ2IpHIBiVITjyyqucV nR9+Yg/HUh7PgNs5HjHgsVOAE3Ae7yE4Oon/XlznPZd0cI/0hzw= -----END CERTIFICATE-----Generated at Sat May 10 14:52:22 2025 by rpki-client