$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: TJFQvDcXuKUPWVIQ/rYfjGh7RAJrBw57vAMRUgVf3+4= Subject key identifier: EB:8C:C3:F0:38:BE:F4:B3:B6:18:86:E6:D6:9E:E6:8A:38:79:A5:33 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 7ED46D514247A5CBADC92032321629BFC316A7D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 0163 Signing time: Mon 05 May 2025 02:12:07 +0000 Manifest this update: Mon 05 May 2025 02:07:07 +0000 Manifest next update: Thu 08 May 2025 02:17:07 +0000 Files and hashes: 1: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: ++mDgcc+W80oWTihxiMrU0HHCtRzC+6VYVR75+x8zoI=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d4:6d:51:42:47:a5:cb:ad:c9:20:32:32:16:29:bf:c3:16:a7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: May 5 02:07:07 2025 GMT Not After : May 8 02:17:07 2025 GMT Subject: CN=EB8CC3F038BEF4B3B61886E6D69EE68A3879A533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:bb:e8:fb:d1:ee:57:30:9a:e6:ca:46:98: 78:d1:3d:bd:d3:d2:eb:7d:37:66:08:c4:da:62:c9: 07:c9:51:90:91:08:d3:63:49:65:3c:dc:4d:f1:43: 1e:db:60:3f:2d:74:f5:7f:40:36:a7:53:7e:a6:fe: bc:e5:2f:ee:45:2a:47:2a:5f:4a:1b:2e:dd:36:d8: fa:fe:65:b8:99:db:8e:21:d7:46:3d:06:6c:f4:89: 73:91:a1:22:6c:b8:c3:12:0e:b7:e4:8f:89:1b:42: 8d:0b:e8:4a:f7:48:53:af:a5:cd:95:99:f6:19:06: 87:7e:99:72:ae:6f:d3:bc:73:e2:4d:e4:b4:67:45: 37:a8:e3:c2:81:25:c7:26:a5:09:30:69:46:d5:02: db:e2:1d:3b:f9:37:8b:19:5e:09:cf:ae:77:0e:1f: b7:09:2d:42:b5:18:14:ab:8d:73:db:d4:54:5a:33: e5:7b:b3:48:36:80:6c:de:e4:72:5f:74:08:31:74: 7e:d8:06:f0:2b:eb:9c:28:20:76:43:f5:fc:41:bc: 9e:1d:f8:7c:88:4c:62:07:5b:f7:58:05:2d:a7:34: 8e:c3:71:64:da:0a:ff:10:05:d9:1a:15:58:53:41: 15:87:73:8f:fd:a3:88:a1:1f:d1:05:9c:0d:01:2b: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8C:C3:F0:38:BE:F4:B3:B6:18:86:E6:D6:9E:E6:8A:38:79:A5:33 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4d:7f:cc:de:01:7c:a8:c3:b2:ad:0c:97:72:43:72:97:7e: a6:f8:ab:dd:81:41:e1:98:3b:dd:9c:2c:69:fb:12:1a:8f:a6: 26:f3:3d:b1:43:c8:1a:b3:55:ad:a2:9c:ca:d3:cf:b7:f1:4e: 95:70:a7:6e:19:fc:fe:2b:5d:58:27:94:81:31:95:08:57:98: 6d:09:4d:27:ac:55:93:01:a4:e1:96:be:7e:72:90:2b:30:b3: 39:27:65:ec:c9:4d:83:11:07:34:6b:ae:f2:18:e1:99:c9:b0: 0b:36:8d:e6:c9:17:a4:ec:ba:b0:c2:16:6d:8e:24:ec:97:b8: 45:8e:05:a5:f6:15:0f:c7:14:de:68:d2:78:68:68:1e:62:c8: f8:a0:7d:9c:b6:f9:50:fc:e5:82:4d:9e:2b:28:a7:fd:e8:7a: 2b:d2:15:b6:2e:e9:b0:8b:f1:33:dc:d2:5c:62:54:82:92:f5: b8:f7:9d:5a:85:e9:4c:bd:70:f9:aa:71:93:ae:61:df:2e:f6: 58:79:4d:9e:51:42:d2:e1:73:3c:9a:8a:66:8b:5e:40:35:98: b9:c4:57:16:4f:61:77:88:87:d9:36:7e:b5:cd:0a:1e:0d:e8: 35:43:12:54:aa:58:f1:f8:00:a2:69:14:a6:e8:b7:76:ff:89: c4:b7:a0:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftRtUUJHpcutySAyMhYpv8MWp9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTA1MDUwMjA3MDdaFw0yNTA1MDgwMjE3MDdaMDMxMTAvBgNV BAMTKEVCOENDM0YwMzhCRUY0QjNCNjE4ODZFNkQ2OUVFNjhBMzg3OUE1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIrvo+9HuVzCa5spGmHjRPb3T 0ut9N2YIxNpiyQfJUZCRCNNjSWU83E3xQx7bYD8tdPV/QDanU36m/rzlL+5FKkcq X0obLt022Pr+ZbiZ244h10Y9Bmz0iXORoSJsuMMSDrfkj4kbQo0L6Er3SFOvpc2V mfYZBod+mXKub9O8c+JN5LRnRTeo48KBJccmpQkwaUbVAtviHTv5N4sZXgnPrncO H7cJLUK1GBSrjXPb1FRaM+V7s0g2gGze5HJfdAgxdH7YBvAr65woIHZD9fxBvJ4d +HyITGIHW/dYBS2nNI7DcWTaCv8QBdkaFVhTQRWHc4/9o4ihH9EFnA0BK70VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64zD8Di+9LO2GIbm1p7mijh5pTMwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1Nf8zeAXyow7KtDJdyQ3KXfqb4q92BQeGY O92cLGn7EhqPpibzPbFDyBqzVa2inMrTz7fxTpVwp24Z/P4rXVgnlIExlQhXmG0J TSesVZMBpOGWvn5ykCswszknZezJTYMRBzRrrvIY4ZnJsAs2jebJF6TsurDCFm2O JOyXuEWOBaX2FQ/HFN5o0nhoaB5iyPigfZy2+VD85YJNnisop/3oeivSFbYu6bCL 8TPc0lxiVIKS9bj3nVqF6Uy9cPmqcZOuYd8u9lh5TZ5RQtLhczyaimaLXkA1mLnE VxZPYXeIh9k2frXNCh4N6DVDElSqWPH4AKJpFKbot3b/icS3oLY= -----END CERTIFICATE-----Generated at Wed May 7 05:22:05 2025 by rpki-client