$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: nNpi2nJbLSv84S9LLmckP5utMcA1sMwwk6BRPfgELoo= Subject key identifier: 24:BC:B0:98:45:7C:54:6F:47:20:32:7E:47:B1:9C:BD:B1:A3:7C:16 Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 05404B1E68DAA89B6ECE0211C4579BEA660F604C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: 89 Signing time: Wed 07 May 2025 08:20:02 +0000 Manifest this update: Wed 07 May 2025 08:15:02 +0000 Manifest next update: Sat 10 May 2025 17:12:02 +0000 Files and hashes: 1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: 0nm8+wg97E8X0p8UXEGrmZEjRdWW322tQB5S1kkGNIo=) 2: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: yks7nJcsDo9XtgYxk9DnHK0wG2/vAHkj81nLw0hV720=) 3: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: PLH7Zraw0Gzx/pKWAaber+y87mgSUM/ZqPCfVHXvOCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 17:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:40:4b:1e:68:da:a8:9b:6e:ce:02:11:c4:57:9b:ea:66:0f:60:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: May 7 08:15:02 2025 GMT Not After : May 10 17:12:02 2025 GMT Subject: CN=24BCB098457C546F4720327E47B19CBDB1A37C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:ec:ed:9f:73:0f:61:3d:37:f9:71:3d:d4: 2a:2b:8f:35:9f:ea:8b:c1:6f:7a:d9:c2:d4:a4:ba: e3:de:a8:fd:f5:3b:dd:00:bf:91:b3:86:85:9c:be: 2a:11:53:ae:80:6f:5d:37:9a:06:51:47:a2:b6:ed: 39:ba:b8:9c:e8:1c:f2:65:6e:ac:5e:73:2b:d1:1e: 74:6b:c1:ec:00:6e:ca:81:11:3c:72:fc:44:8d:8e: 85:a2:9d:7e:9b:7e:c4:52:fe:ed:a1:77:08:a3:fe: 52:66:ab:64:e2:b2:19:bf:e1:db:fa:28:e6:10:ca: 48:a3:c7:e3:b8:ee:37:12:7e:50:2c:fc:da:28:3c: 4b:b7:26:c4:aa:2e:55:bc:96:85:74:22:72:6d:13: 0b:8d:b9:33:de:cb:80:02:a8:77:ac:f7:aa:58:4a: 31:77:e7:7d:2d:1f:2e:fb:e8:ec:0a:e1:3a:3c:21: e8:1b:be:b6:cb:9d:d0:9b:0d:50:0b:68:42:6b:42: 4b:56:9d:94:3c:09:4c:44:a8:4d:a2:66:62:24:23: ad:a1:ed:8d:c7:06:68:c7:e8:ed:5d:fb:aa:97:62: d0:40:16:87:c6:3d:be:aa:0a:8a:a0:1a:80:b4:d5: 2f:28:cb:c7:a0:1f:84:a0:b9:cd:3d:1a:ca:c1:4b: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BC:B0:98:45:7C:54:6F:47:20:32:7E:47:B1:9C:BD:B1:A3:7C:16 X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:64:16:0a:02:b3:47:b1:41:f7:c6:b2:da:7c:07:be:39:10: 92:4e:c1:31:ca:63:34:3d:fd:fa:91:2c:71:ef:ca:a6:7b:53: 05:78:7c:0f:de:0b:63:9e:0a:06:4b:78:48:ae:92:55:6b:b4: d0:53:2b:8c:1b:ce:9e:b1:39:54:0c:3b:1e:83:35:57:92:08: 8e:19:39:58:f6:8b:62:96:11:9e:18:13:16:a5:1f:0a:d3:c6: 50:56:29:de:a5:6b:38:36:29:56:d3:66:35:c5:cd:ae:d4:11: e3:98:b6:01:eb:d0:89:c6:0f:a9:da:3c:69:4b:31:0f:91:b2: df:b9:94:40:51:fd:e4:90:99:13:48:c9:45:e2:df:08:1a:37: 41:78:d3:0c:7a:e0:e5:ca:0e:07:c1:8b:1a:69:ee:dc:66:da: c5:4f:f1:06:35:ce:f6:25:18:d2:d0:2b:6b:0a:ec:41:29:eb: 90:e9:98:27:6a:0f:e0:1c:fc:42:4b:83:54:9c:2b:de:28:3a: 38:9b:1f:7e:7f:b8:08:0d:0b:82:56:79:15:63:34:c1:4a:95: 1c:6d:f4:54:92:27:65:62:39:db:2b:22:6c:0e:a2:bc:b4:ec: 29:0a:41:f5:b6:8f:8b:15:0e:ea:92:8d:00:83:37:2b:32:29: 9f:b3:37:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUBLHmjaqJtuzgIRxFeb6mYPYEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNTA1MDcwODE1MDJaFw0yNTA1MTAxNzEyMDJaMDMxMTAvBgNV BAMTKDI0QkNCMDk4NDU3QzU0NkY0NzIwMzI3RTQ3QjE5Q0JEQjFBMzdDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dOztn3MPYT03+XE91CorjzWf 6ovBb3rZwtSkuuPeqP31O90Av5GzhoWcvioRU66Ab103mgZRR6K27Tm6uJzoHPJl bqxecyvRHnRrwewAbsqBETxy/ESNjoWinX6bfsRS/u2hdwij/lJmq2Tishm/4dv6 KOYQykijx+O47jcSflAs/NooPEu3JsSqLlW8loV0InJtEwuNuTPey4ACqHes96pY SjF3530tHy776OwK4To8IegbvrbLndCbDVALaEJrQktWnZQ8CUxEqE2iZmIkI62h 7Y3HBmjH6O1d+6qXYtBAFofGPb6qCoqgGoC01S8oy8egH4Sguc09GsrBSzxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJLywmEV8VG9HIDJ+R7GcvbGjfBYwHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElkFgoCs0exQffGstp8B745EJJOwTHKYzQ9 /fqRLHHvyqZ7UwV4fA/eC2OeCgZLeEiuklVrtNBTK4wbzp6xOVQMOx6DNVeSCI4Z OVj2i2KWEZ4YExalHwrTxlBWKd6lazg2KVbTZjXFza7UEeOYtgHr0InGD6naPGlL MQ+Rst+5lEBR/eSQmRNIyUXi3wgaN0F40wx64OXKDgfBixpp7txm2sVP8QY1zvYl GNLQK2sK7EEp65DpmCdqD+Ac/EJLg1ScK94oOjibH35/uAgNC4JWeRVjNMFKlRxt 9FSSJ2ViOdsrImwOory07CkKQfW2j4sVDuqSjQCDNysyKZ+zN1I= -----END CERTIFICATE-----Generated at Thu May 8 20:00:29 2025 by rpki-client