$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: 3lq+cT0KNFeorhsWbpf2EXuQVpA5xUXcoI2Un/Vyg+Q= Subject key identifier: 23:C6:B8:70:1F:26:C3:B1:8B:C9:43:71:3A:95:74:48:40:66:41:E5 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 3122A81CA5065F8ADB1BCB236CDB82F26873CE3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 01AA Signing time: Sat 10 May 2025 14:51:19 +0000 Manifest this update: Sat 10 May 2025 14:46:19 +0000 Manifest next update: Tue 13 May 2025 16:40:19 +0000 Files and hashes: 1: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: b+zfjkrERGYnXwoOZUNETNZEkAf7ipdMDLBu+wVxHt0=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: Ptr+JvySIfz8ycST/SMYabIssLMqgPRW1YZ6dUpcr0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:22:a8:1c:a5:06:5f:8a:db:1b:cb:23:6c:db:82:f2:68:73:ce:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: May 10 14:46:19 2025 GMT Not After : May 13 16:40:19 2025 GMT Subject: CN=23C6B8701F26C3B18BC943713A957448406641E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:0f:06:8c:54:67:1c:f3:dc:e2:38:33:79: fd:47:e6:0d:28:4c:63:24:6b:0a:04:6e:16:5f:f2: 5d:99:a2:5f:1e:d7:02:21:9a:5b:2c:a6:42:73:e4: af:bb:89:29:3d:ef:bd:9b:74:1c:0e:b2:0d:e0:ea: 00:e5:48:d3:48:90:60:90:e7:c6:3a:66:23:a0:e3: b9:bb:95:6e:34:c8:7e:4d:e2:56:48:e5:19:60:48: 1d:e5:72:04:d2:82:9b:a9:c3:d7:51:c8:35:5b:79: 48:56:f0:06:94:0e:45:90:7e:ae:88:4e:6e:56:4c: 47:c5:70:c3:eb:03:f0:8d:7e:fc:19:ac:8b:70:4b: 07:6a:a4:22:a3:ad:9f:4b:ac:d5:29:cb:e0:d3:45: 26:bf:4b:3b:b9:bb:ca:4d:bd:9d:ec:49:16:ef:58: 08:22:89:73:e8:bf:03:48:4d:44:dc:b1:67:b1:cc: 53:b5:cb:88:bb:f9:03:af:06:e3:74:84:16:ea:12: aa:c5:aa:bb:1e:4c:a1:4f:2a:e3:0d:ec:0e:6b:a3: 1f:0d:55:e2:68:53:98:ac:a6:35:47:06:e9:d9:af: b4:09:c5:a1:7b:9f:14:52:cd:60:3e:7a:88:6f:cd: 37:e6:18:05:9d:e5:b3:11:44:03:44:2e:7f:08:b2: 81:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C6:B8:70:1F:26:C3:B1:8B:C9:43:71:3A:95:74:48:40:66:41:E5 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0e:9d:ce:b4:ed:e9:dd:fb:62:08:5a:fe:5c:5a:53:ca:52: 8d:46:a8:0b:61:6d:f0:f9:0c:08:f6:64:71:53:d0:e3:03:a6: 19:63:e6:ea:b6:6e:ae:33:06:3c:66:85:f0:80:89:85:54:1b: ee:58:96:f7:76:e2:ca:18:5b:ac:ee:f3:18:2a:95:6b:dc:4f: ff:13:bd:89:90:65:ff:5a:66:1b:c5:4c:f9:f5:0e:2c:4b:ec: ee:57:31:ef:f5:ba:5c:e2:ce:6b:cb:18:aa:71:39:0f:5d:32: 3c:76:a3:79:77:d5:6f:c2:9c:4f:83:d3:f0:9b:3d:e4:fc:2b: 78:63:c8:1a:f7:3a:91:11:50:33:47:52:10:51:0e:01:92:8d: 24:d2:71:cf:cc:09:4a:3d:18:1d:e2:2e:50:95:40:c7:9a:6d: 86:cc:ff:6a:0f:a0:18:03:5f:60:70:a5:98:82:df:ff:61:93: 41:a4:cd:61:34:6d:6c:6e:3f:3c:ab:de:b2:2f:86:9e:66:96: 86:ca:92:0d:c8:89:b5:40:37:c2:0f:28:c4:26:fc:f6:ec:81: 0e:fe:cd:40:f2:94:02:21:45:c2:15:fc:a0:8d:c7:b0:82:2b: 3d:3a:ac:23:70:69:00:1f:b0:48:6f:50:c0:17:04:66:5c:36: 3c:35:c5:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSKoHKUGX4rbG8sjbNuC8mhzzjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNTA1MTAxNDQ2MTlaFw0yNTA1MTMxNjQwMTlaMDMxMTAvBgNV BAMTKDIzQzZCODcwMUYyNkMzQjE4QkM5NDM3MTNBOTU3NDQ4NDA2NjQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrw8GjFRnHPPc4jgzef1H5g0o TGMkawoEbhZf8l2Zol8e1wIhmlsspkJz5K+7iSk9772bdBwOsg3g6gDlSNNIkGCQ 58Y6ZiOg47m7lW40yH5N4lZI5RlgSB3lcgTSgpupw9dRyDVbeUhW8AaUDkWQfq6I Tm5WTEfFcMPrA/CNfvwZrItwSwdqpCKjrZ9LrNUpy+DTRSa/Szu5u8pNvZ3sSRbv WAgiiXPovwNITUTcsWexzFO1y4i7+QOvBuN0hBbqEqrFqrseTKFPKuMN7A5rox8N VeJoU5ispjVHBunZr7QJxaF7nxRSzWA+eohvzTfmGAWd5bMRRANELn8IsoETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8a4cB8mw7GLyUNxOpV0SEBmQeUwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgOnc607end+2IIWv5cWlPKUo1GqAthbfD5 DAj2ZHFT0OMDphlj5uq2bq4zBjxmhfCAiYVUG+5Ylvd24soYW6zu8xgqlWvcT/8T vYmQZf9aZhvFTPn1DixL7O5XMe/1ulzizmvLGKpxOQ9dMjx2o3l31W/CnE+D0/Cb PeT8K3hjyBr3OpERUDNHUhBRDgGSjSTScc/MCUo9GB3iLlCVQMeabYbM/2oPoBgD X2BwpZiC3/9hk0GkzWE0bWxuPzyr3rIvhp5mlobKkg3IibVAN8IPKMQm/PbsgQ7+ zUDylAIhRcIV/KCNx7CCKz06rCNwaQAfsEhvUMAXBGZcNjw1xas= -----END CERTIFICATE-----Generated at Sun May 11 06:42:04 2025 by rpki-client