$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: YVOqv3lg14heUuLP0BeUouE9i/YL/Aa7i73I8uLMGZ8= Subject key identifier: FD:A5:46:54:24:70:1A:78:32:CB:96:67:3E:6E:C5:2D:97:51:2C:68 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 233FCADA2CD37CFFFC2CB6045CB27DBE13A23557 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 0343 Signing time: Sun 11 May 2025 17:42:12 +0000 Manifest this update: Sun 11 May 2025 17:37:12 +0000 Manifest next update: Wed 14 May 2025 22:28:12 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) 2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: XRrKSL7X6W1Z4t3Vs80GwALzQDnxZPs2Jj1s+g8y7c0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 22:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3f:ca:da:2c:d3:7c:ff:fc:2c:b6:04:5c:b2:7d:be:13:a2:35:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: May 11 17:37:12 2025 GMT Not After : May 14 22:28:12 2025 GMT Subject: CN=FDA5465424701A7832CB96673E6EC52D97512C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:ac:0d:a5:73:92:5d:79:13:ec:60:6a:b9: 4b:7f:9e:df:b9:37:a6:90:17:fa:a1:4f:bd:39:8e: e0:d5:84:d2:c4:0f:66:22:5a:b0:97:1c:87:eb:de: 7d:3e:1e:f9:39:b4:52:67:77:ff:b6:c3:4d:05:c6: 42:8d:74:70:0c:39:14:85:dc:04:de:7f:9c:68:aa: 71:00:03:d3:5d:87:57:08:66:56:00:06:09:a1:45: ca:8d:ff:25:1e:61:09:23:d6:45:39:43:75:27:a8: f5:1f:37:69:00:c1:42:f5:b7:54:b5:d0:dd:16:7b: 2c:9e:57:42:5b:77:51:3e:e0:40:b7:c4:e9:46:75: 37:00:5f:b1:bb:53:27:ec:fd:d3:aa:5f:41:29:68: 69:87:84:0c:c6:22:2b:b6:14:02:85:44:32:78:56: 10:de:ee:73:88:52:66:9d:7b:2a:2a:1e:b5:08:da: 8b:49:37:b1:01:31:5d:8c:8f:9c:7b:89:b7:bf:21: b5:8a:76:98:ba:38:c2:9e:c0:df:d0:2c:44:5f:62: e9:e8:50:e5:80:e3:d2:aa:03:5e:ee:e8:42:20:2e: 83:ac:d3:b2:cf:67:a2:9d:13:7f:8d:a7:68:16:a5: 61:49:8c:eb:82:e6:69:80:ed:2f:0f:39:da:ad:8a: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:46:54:24:70:1A:78:32:CB:96:67:3E:6E:C5:2D:97:51:2C:68 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3c:89:20:31:5a:06:0a:00:7c:fd:e3:7d:62:cd:1d:81:b0: 6c:a0:d5:70:52:07:5c:58:25:bb:f3:0a:fe:04:44:0f:e9:ce: 64:f0:50:63:8c:5d:13:a3:d9:ed:52:6f:1b:4b:b8:71:e3:4b: 53:02:bc:9a:52:85:05:21:df:44:9b:49:8d:32:70:fb:73:9b: ed:91:9d:7c:24:a8:9a:7a:c1:fb:0f:89:01:d6:6d:79:e2:1c: da:58:a2:57:56:79:c8:46:18:2f:95:02:4c:99:07:a7:6f:79: a7:62:a6:b6:9f:82:48:81:3c:59:77:82:40:ed:8d:a0:d9:4c: 41:0a:95:b4:35:08:69:cf:66:95:de:2a:a1:4c:42:9c:d8:cc: 12:ca:3b:d4:e8:8c:64:e5:9f:b9:49:43:d2:4b:fa:51:14:fe: 6b:f7:74:61:60:96:2c:7e:e7:7f:91:ec:b6:ab:f3:1a:80:d8: 3c:69:16:f3:41:93:8e:a6:ce:02:e1:2e:83:25:2d:d3:c1:8a: 16:56:89:f1:21:bb:7a:8a:7b:f2:bb:8d:c0:cd:37:c2:f5:64: 14:b7:55:c5:ad:12:0d:41:98:1d:b3:17:29:e2:1d:17:f7:a1: 23:41:2c:2b:0f:79:2d:18:2d:b2:de:ab:f5:5f:83:7a:52:0e: 9e:30:df:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIz/K2izTfP/8LLYEXLJ9vhOiNVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTA1MTExNzM3MTJaFw0yNTA1MTQyMjI4MTJaMDMxMTAvBgNV BAMTKEZEQTU0NjU0MjQ3MDFBNzgzMkNCOTY2NzNFNkVDNTJEOTc1MTJDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6KwNpXOSXXkT7GBquUt/nt+5 N6aQF/qhT705juDVhNLED2YiWrCXHIfr3n0+Hvk5tFJnd/+2w00FxkKNdHAMORSF 3ATef5xoqnEAA9Ndh1cIZlYABgmhRcqN/yUeYQkj1kU5Q3UnqPUfN2kAwUL1t1S1 0N0WeyyeV0Jbd1E+4EC3xOlGdTcAX7G7Uyfs/dOqX0EpaGmHhAzGIiu2FAKFRDJ4 VhDe7nOIUmadeyoqHrUI2otJN7EBMV2Mj5x7ibe/IbWKdpi6OMKewN/QLERfYuno UOWA49KqA17u6EIgLoOs07LPZ6KdE3+Np2gWpWFJjOuC5mmA7S8POdqtikKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/aVGVCRwGngyy5ZnPm7FLZdRLGgwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM8iSAxWgYKAHz9431izR2BsGyg1XBSB1xY JbvzCv4ERA/pzmTwUGOMXROj2e1SbxtLuHHjS1MCvJpShQUh30SbSY0ycPtzm+2R nXwkqJp6wfsPiQHWbXniHNpYoldWechGGC+VAkyZB6dveadiprafgkiBPFl3gkDt jaDZTEEKlbQ1CGnPZpXeKqFMQpzYzBLKO9TojGTln7lJQ9JL+lEU/mv3dGFglix+ 53+R7Lar8xqA2DxpFvNBk46mzgLhLoMlLdPBihZWifEhu3qKe/K7jcDNN8L1ZBS3 VcWtEg1BmB2zFyniHRf3oSNBLCsPeS0YLbLeq/Vfg3pSDp4w3/A= -----END CERTIFICATE-----Generated at Mon May 12 14:37:54 2025 by rpki-client