$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: CsfqgxyWGxsMeITGGJ+e9tZuHSIjw+JBZ0gmiXh08sE= Subject key identifier: A2:2C:08:81:29:5D:3F:07:B7:84:12:FB:0A:32:4F:C7:9C:57:57:55 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 45FF2AD359609FC72AB298C53676EDA4360AC172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: E4 Signing time: Fri 09 May 2025 17:41:01 +0000 Manifest this update: Fri 09 May 2025 17:36:01 +0000 Manifest next update: Tue 13 May 2025 00:10:01 +0000 Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) 2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: Wh9MEVM0xSLXlserVTARvTYgedIph+KI/6BPK6r21rY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 00:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ff:2a:d3:59:60:9f:c7:2a:b2:98:c5:36:76:ed:a4:36:0a:c1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: May 9 17:36:01 2025 GMT Not After : May 13 00:10:01 2025 GMT Subject: CN=A22C0881295D3F07B78412FB0A324FC79C575755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:61:1c:a0:42:b2:4b:ba:67:a1:cd:1c:92: 1c:b8:94:5c:1b:3e:0b:86:93:6e:5d:09:2c:b3:65: 45:9b:50:c9:57:ba:be:3a:01:d4:0b:10:c2:f3:3d: 2c:62:ed:50:5f:e4:d1:bb:38:5c:0c:a5:46:75:40: bb:ff:dd:ff:65:ff:37:4a:07:ed:20:1c:2f:0d:0f: c1:79:ad:6a:39:35:ef:f4:18:4f:ca:c1:9f:1d:c7: 93:02:08:12:ad:14:5e:ad:ee:81:81:a8:61:8b:db: 55:bc:f5:e8:88:50:b1:26:d7:f9:7b:a9:dc:a3:62: a1:8d:92:ed:41:eb:97:c6:79:91:dc:56:b7:dd:63: 7a:ce:f6:a5:6d:d0:b8:80:ba:e9:7c:23:25:d6:aa: 9f:54:17:8f:1b:69:9c:61:b5:44:dd:83:f7:38:74: 2e:01:43:2b:c6:29:72:91:85:b5:ff:e1:0b:ca:d0: d0:56:de:dc:2c:52:d4:1c:c6:b6:ef:7c:13:fc:9f: a4:6a:4e:c6:5f:3b:71:c3:70:d2:a1:9b:26:a9:fc: fd:0d:2f:6d:b2:f1:06:e8:6b:6d:31:f0:55:c9:8c: 5f:5d:d4:25:46:3b:1b:3f:59:7c:d8:dc:85:73:76: 09:7a:22:cb:9d:53:0d:79:83:8b:f6:56:da:68:5c: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2C:08:81:29:5D:3F:07:B7:84:12:FB:0A:32:4F:C7:9C:57:57:55 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e5:3c:80:0c:ec:57:1a:10:a4:ab:10:93:3b:02:c3:61:73: d2:66:4e:17:3d:62:a1:a1:ca:47:0a:1d:97:c9:f0:7c:83:c7: e5:aa:f1:44:7e:15:df:f1:61:ef:90:83:49:95:8f:77:d5:5b: 22:a9:1e:26:29:df:3c:c4:9d:fa:71:9d:5c:ef:24:82:6a:4e: f8:43:b8:a4:f6:cb:ab:4f:5a:fd:2e:62:ef:1d:57:cc:c6:ea: ea:8c:29:b6:bf:99:56:08:97:bb:ae:6e:05:f3:bb:2e:43:54: e7:e2:e2:17:4c:55:c3:40:75:bc:9d:3e:81:ae:37:15:e3:b6: bd:e5:9b:d9:27:d8:4c:2f:58:7f:49:af:05:f7:b8:60:47:2e: 69:e8:6e:35:f9:ad:f2:eb:9d:9d:2f:3b:f7:69:85:9e:11:cb: 28:09:8d:b1:35:bf:03:ce:06:ac:a4:d0:d0:5a:6a:23:c8:e1: ea:d5:81:8e:da:ca:39:2c:37:22:eb:be:d6:83:7f:d5:89:73: 56:26:4f:8e:cd:9b:25:d8:2d:28:b2:fd:4c:7d:7f:8e:5f:ec: 10:bd:1a:14:2b:f5:91:31:2d:a5:24:c2:78:be:4d:8e:52:e3: df:99:d4:4c:14:88:4f:9f:77:e6:8a:9d:07:b2:01:1a:fe:09: f9:80:ad:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURf8q01lgn8cqspjFNnbtpDYKwXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTA1MDkxNzM2MDFaFw0yNTA1MTMwMDEwMDFaMDMxMTAvBgNV BAMTKEEyMkMwODgxMjk1RDNGMDdCNzg0MTJGQjBBMzI0RkM3OUM1NzU3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cmEcoEKyS7pnoc0ckhy4lFwb PguGk25dCSyzZUWbUMlXur46AdQLEMLzPSxi7VBf5NG7OFwMpUZ1QLv/3f9l/zdK B+0gHC8ND8F5rWo5Ne/0GE/KwZ8dx5MCCBKtFF6t7oGBqGGL21W89eiIULEm1/l7 qdyjYqGNku1B65fGeZHcVrfdY3rO9qVt0LiAuul8IyXWqp9UF48baZxhtUTdg/c4 dC4BQyvGKXKRhbX/4QvK0NBW3twsUtQcxrbvfBP8n6RqTsZfO3HDcNKhmyap/P0N L22y8Qboa20x8FXJjF9d1CVGOxs/WXzY3IVzdgl6IsudUw15g4v2VtpoXIw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoiwIgSldPwe3hBL7CjJPx5xXV1UwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjlPIAM7FcaEKSrEJM7AsNhc9JmThc9YqGh ykcKHZfJ8HyDx+Wq8UR+Fd/xYe+Qg0mVj3fVWyKpHiYp3zzEnfpxnVzvJIJqTvhD uKT2y6tPWv0uYu8dV8zG6uqMKba/mVYIl7uubgXzuy5DVOfi4hdMVcNAdbydPoGu NxXjtr3lm9kn2EwvWH9JrwX3uGBHLmnobjX5rfLrnZ0vO/dphZ4RyygJjbE1vwPO Bqyk0NBaaiPI4erVgY7ayjksNyLrvtaDf9WJc1YmT47NmyXYLSiy/Ux9f45f7BC9 GhQr9ZExLaUkwni+TY5S49+Z1EwUiE+fd+aKnQeyARr+CfmArZk= -----END CERTIFICATE-----Generated at Sat May 10 00:35:23 2025 by rpki-client