$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: G5CNkLnkOYnDP/BJ0gJ9VLpHABW9AvjA4Nv7mdBj90w= Subject key identifier: 48:25:4B:03:4E:EF:D1:1A:B1:2D:02:CD:2C:8D:FB:5A:25:BD:07:28 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 06628F501933D6A25E1D3A505798B5C0133EE772 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 02F1 Signing time: Tue 13 May 2025 15:51:19 +0000 Manifest this update: Tue 13 May 2025 15:46:19 +0000 Manifest next update: Fri 16 May 2025 23:52:19 +0000 Files and hashes: 1: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 2: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 3: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: oSH8oQToIbUL9osc2IlonspfNHn2wfdt+533hhOwQ6M=) 4: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 23:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:62:8f:50:19:33:d6:a2:5e:1d:3a:50:57:98:b5:c0:13:3e:e7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: May 13 15:46:19 2025 GMT Not After : May 16 23:52:19 2025 GMT Subject: CN=48254B034EEFD11AB12D02CD2C8DFB5A25BD0728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:61:1b:8d:af:d2:2b:02:b4:c5:cc:db:d0: cb:01:09:83:6d:d0:1a:db:15:15:6d:ae:af:dd:a8: 04:ad:b6:66:08:fe:ef:3c:1b:22:59:7a:ec:d5:cd: 82:fd:f4:92:ff:4c:c7:98:8e:00:02:27:5f:0f:ce: 3d:1b:6e:b9:0d:ea:a7:78:d3:06:72:f2:b7:d1:c8: 10:1c:59:fa:f4:3c:7c:04:e3:06:0f:57:c6:e6:7d: 08:a6:9d:d5:81:32:bc:8d:1e:be:a9:da:d3:a0:03: e8:bd:47:53:e5:d6:df:8b:17:5f:d1:3b:58:43:f8: 32:21:e2:b0:4e:9d:a3:c9:98:79:d5:e4:e1:5f:c6: 8f:19:e2:fe:3c:9e:6f:93:66:03:45:4b:a0:df:3b: 1a:d7:ef:b7:b9:a8:90:4f:86:58:a7:6b:64:be:55: 63:4c:13:cc:e1:33:55:10:1f:05:f5:7d:f3:87:78: d1:84:3e:a0:86:9e:1f:c7:f5:d9:39:34:b8:d6:cb: 6a:99:57:52:86:89:f0:aa:7d:62:94:23:64:00:ec: 13:97:dd:ec:e5:ef:aa:d4:93:83:18:db:8e:b8:fc: b7:53:83:79:13:c3:0c:2b:b3:3c:2c:85:08:5b:11: 27:42:82:11:5d:88:f8:ac:f3:e5:d3:4e:bc:72:05: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:25:4B:03:4E:EF:D1:1A:B1:2D:02:CD:2C:8D:FB:5A:25:BD:07:28 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:39:92:a0:be:99:bb:49:d8:98:4a:8f:e3:fe:9d:c9:c5:47: d7:df:90:60:f9:47:ac:96:bb:b1:21:7b:a3:6b:d8:40:cc:88: b0:4e:35:39:f2:16:7a:8d:f2:7e:69:29:f3:ea:b0:ee:d0:76: 0f:8e:f6:34:ad:2a:60:73:1a:df:3c:fd:ef:f2:28:5a:65:d4: 3a:a2:6a:65:fc:71:db:bd:57:05:f0:c2:d6:f7:e7:8a:b2:0f: d6:22:11:45:94:67:43:02:ae:88:3a:8f:9c:e9:d4:61:8c:e7: ee:1c:12:fe:06:a4:ea:fc:d4:6b:75:44:c9:ef:cc:ca:27:22: a9:4a:50:d1:51:ec:d4:9f:07:e6:a4:d3:f9:b6:4d:51:42:6a: 13:05:d4:2f:ee:45:9a:fa:f6:5a:16:00:30:58:a5:07:b6:88: 88:c5:45:3f:e8:d2:0d:d9:7e:9f:ce:20:0c:61:c5:ec:c1:e5: 0e:33:4c:35:6d:74:0d:43:f3:74:fa:09:55:45:b5:e5:b4:48: be:7b:10:40:0a:f8:37:79:85:3b:0b:23:35:9b:ab:53:43:2b: 54:3e:73:70:04:f4:c0:d4:78:f4:8d:f5:ce:f0:dd:42:05:0c: 2c:83:f5:b3:05:b9:64:cd:dc:c1:98:80:f0:03:99:bd:a8:75: 10:07:7f:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmKPUBkz1qJeHTpQV5i1wBM+53IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA1MTMxNTQ2MTlaFw0yNTA1MTYyMzUyMTlaMDMxMTAvBgNV BAMTKDQ4MjU0QjAzNEVFRkQxMUFCMTJEMDJDRDJDOERGQjVBMjVCRDA3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14mEbja/SKwK0xczb0MsBCYNt 0BrbFRVtrq/dqASttmYI/u88GyJZeuzVzYL99JL/TMeYjgACJ18Pzj0bbrkN6qd4 0wZy8rfRyBAcWfr0PHwE4wYPV8bmfQimndWBMryNHr6p2tOgA+i9R1Pl1t+LF1/R O1hD+DIh4rBOnaPJmHnV5OFfxo8Z4v48nm+TZgNFS6DfOxrX77e5qJBPhlina2S+ VWNME8zhM1UQHwX1ffOHeNGEPqCGnh/H9dk5NLjWy2qZV1KGifCqfWKUI2QA7BOX 3ezl76rUk4MY2464/LdTg3kTwwwrszwshQhbESdCghFdiPis8+XTTrxyBZ6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSCVLA07v0RqxLQLNLI37WiW9BygwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGE5kqC+mbtJ2JhKj+P+ncnFR9ffkGD5R6yW u7Ehe6Nr2EDMiLBONTnyFnqN8n5pKfPqsO7Qdg+O9jStKmBzGt88/e/yKFpl1Dqi amX8cdu9VwXwwtb354qyD9YiEUWUZ0MCrog6j5zp1GGM5+4cEv4GpOr81Gt1RMnv zMonIqlKUNFR7NSfB+ak0/m2TVFCahMF1C/uRZr69loWADBYpQe2iIjFRT/o0g3Z fp/OIAxhxezB5Q4zTDVtdA1D83T6CVVFteW0SL57EEAK+Dd5hTsLIzWbq1NDK1Q+ c3AE9MDUePSN9c7w3UIFDCyD9bMFuWTN3MGYgPADmb2odRAHf9o= -----END CERTIFICATE-----Generated at Wed May 14 19:57:34 2025 by rpki-client