$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: Mg/mH+mPiAqtdvUWPFPyMMBCiB+XIyp9GENPtYJGX6U= Subject key identifier: 86:52:B2:10:E0:BF:6E:25:AD:49:4C:1E:D7:21:B6:F6:8F:D3:60:26 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 1812718742446F9AAECD819EF9C64F02F7D2A031 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 72 Signing time: Sun 04 May 2025 16:01:06 +0000 Manifest this update: Sun 04 May 2025 15:56:06 +0000 Manifest next update: Thu 08 May 2025 01:53:06 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: F1taUE/f3oC6wZzgBGZn638anBhTT6LOids/lc7HlmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:12:71:87:42:44:6f:9a:ae:cd:81:9e:f9:c6:4f:02:f7:d2:a0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: May 4 15:56:06 2025 GMT Not After : May 8 01:53:06 2025 GMT Subject: CN=8652B210E0BF6E25AD494C1ED721B6F68FD36026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:a3:9a:bd:a0:a6:79:28:0f:21:95:8c:7b: fa:b5:55:d6:d4:67:75:a4:b8:78:7f:25:ac:f8:41: 87:40:5c:f9:99:3d:8d:69:39:c2:67:f7:42:ec:8e: a0:27:eb:00:45:c7:e4:8d:4f:30:a1:ff:2b:13:a3: 1f:88:c1:f6:1e:22:c3:a6:91:c7:cd:ae:47:06:9b: fb:28:00:37:1e:cd:69:f3:f4:56:02:e2:93:8a:4c: cf:4e:6a:9c:5c:db:62:c1:98:50:33:79:7a:af:52: 98:9c:ac:72:d9:d4:93:1b:6f:cf:06:df:f4:f6:4c: b4:1e:68:6a:8b:26:16:b6:dd:09:28:77:e1:52:38: ad:e5:11:2b:00:da:08:74:dd:d5:6d:c1:06:3e:a2: c2:26:16:47:d7:f6:c2:5f:0d:21:03:4e:84:69:0d: bc:8b:78:a1:32:3e:77:97:0c:0a:09:33:fc:81:03: e1:9d:c5:99:48:15:a2:49:bd:60:80:67:de:f3:bf: 08:c3:06:cb:69:f4:69:e7:9d:55:9d:a7:8a:34:da: 4e:7b:55:a6:90:4a:e9:57:0d:56:3c:e0:13:d9:1f: 10:af:d9:94:10:cd:b3:2d:2d:2d:02:5e:17:fa:08: 47:79:84:af:7b:bc:95:a6:f8:1f:f3:a5:8c:5f:3b: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:52:B2:10:E0:BF:6E:25:AD:49:4C:1E:D7:21:B6:F6:8F:D3:60:26 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ca:2b:4e:52:6b:6a:b8:09:6e:0d:6e:64:5c:9f:54:44:b4: 6c:38:10:4b:15:cc:04:06:28:8d:ac:36:ba:9f:be:ca:7c:7f: 74:48:29:67:e9:df:f0:cb:4a:f3:58:c0:0a:82:4e:0c:89:fb: 71:e3:b3:af:ae:6c:02:b6:f2:da:bf:26:63:e2:36:45:d9:be: 4b:fc:2d:ab:6f:c4:4f:df:24:95:88:96:2b:3a:8a:59:1b:5b: dc:09:cc:b2:ef:8b:09:e9:9e:9b:a6:c6:37:52:69:dd:00:04: c1:41:9b:7a:5d:86:ae:6f:b5:d3:5c:20:d4:8d:df:7d:f2:31: 4d:54:85:7b:59:52:5b:9c:23:dd:93:e9:90:66:57:7e:43:d6: fd:38:37:87:6c:75:95:25:c2:07:d1:50:64:e9:d1:e3:f6:bd: 8b:8e:6a:06:bd:cf:b4:78:18:a7:96:d4:fb:1f:84:d3:9d:d2: 67:79:43:bf:98:e1:05:6b:f3:c6:4f:84:0e:b4:cb:5a:0c:d4: f4:91:13:01:b0:b9:7c:5f:30:75:57:3d:91:01:7e:c3:35:d5: 30:94:81:de:57:51:db:db:58:34:3a:76:04:8b:15:35:6e:f0: d4:3c:67:bc:2a:75:48:25:19:cb:12:ac:00:0b:ca:5c:0d:a3: df:d6:28:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBJxh0JEb5quzYGe+cZPAvfSoDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA1MDQxNTU2MDZaFw0yNTA1MDgwMTUzMDZaMDMxMTAvBgNV BAMTKDg2NTJCMjEwRTBCRjZFMjVBRDQ5NEMxRUQ3MjFCNkY2OEZEMzYwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFB6OavaCmeSgPIZWMe/q1VdbU Z3WkuHh/Jaz4QYdAXPmZPY1pOcJn90LsjqAn6wBFx+SNTzCh/ysTox+IwfYeIsOm kcfNrkcGm/soADcezWnz9FYC4pOKTM9Oapxc22LBmFAzeXqvUpicrHLZ1JMbb88G 3/T2TLQeaGqLJha23Qkod+FSOK3lESsA2gh03dVtwQY+osImFkfX9sJfDSEDToRp DbyLeKEyPneXDAoJM/yBA+GdxZlIFaJJvWCAZ97zvwjDBstp9GnnnVWdp4o02k57 VaaQSulXDVY84BPZHxCv2ZQQzbMtLS0CXhf6CEd5hK97vJWm+B/zpYxfOxJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlKyEOC/biWtSUwe1yG29o/TYCYwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLKK05Sa2q4CW4NbmRcn1REtGw4EEsVzAQG KI2sNrqfvsp8f3RIKWfp3/DLSvNYwAqCTgyJ+3Hjs6+ubAK28tq/JmPiNkXZvkv8 LatvxE/fJJWIlis6ilkbW9wJzLLviwnpnpumxjdSad0ABMFBm3pdhq5vtdNcINSN 333yMU1UhXtZUlucI92T6ZBmV35D1v04N4dsdZUlwgfRUGTp0eP2vYuOaga9z7R4 GKeW1PsfhNOd0md5Q7+Y4QVr88ZPhA60y1oM1PSREwGwuXxfMHVXPZEBfsM11TCU gd5XUdvbWDQ6dgSLFTVu8NQ8Z7wqdUglGcsSrAALylwNo9/WKEE= -----END CERTIFICATE-----Generated at Tue May 6 04:25:51 2025 by rpki-client