$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: SrL1rYdab/BuYoFngvuALnCwidE6UBJSinqgEEcnQ3o= Subject key identifier: 5A:26:7E:3E:0E:91:FD:68:2D:DD:58:DE:27:21:B0:B8:35:CC:C0:BB Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 2D80B30DFA2296DFB7F46E2C093F15871D34A2F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: 59 Signing time: Wed 07 May 2025 06:01:14 +0000 Manifest this update: Wed 07 May 2025 05:56:14 +0000 Manifest next update: Sat 10 May 2025 06:16:14 +0000 Files and hashes: 1: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: TxTC2v3sBGuNzD/7pAwJq8+hVg6iPYD1W71+E9F+XzU=) 2: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: acW7MmyfNG3sUp37/a67TBL3VhsulHr1Ydf1eaVxfYA=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: sdFf65pWHqDguzQodheeefSyOGT0g0gjcknsFa81ar4=) 4: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: JC/4JkZVdlsaH4v3NHv9pYv71TAQ3d+1jbDCz88q1Rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:80:b3:0d:fa:22:96:df:b7:f4:6e:2c:09:3f:15:87:1d:34:a2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: May 7 05:56:14 2025 GMT Not After : May 10 06:16:14 2025 GMT Subject: CN=5A267E3E0E91FD682DDD58DE2721B0B835CCC0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:34:2d:f3:99:4b:1d:37:42:d1:db:4d:b7: 87:35:3b:f7:1f:1b:f5:ec:e4:82:53:11:2a:a8:9f: bf:f6:93:cb:b6:cc:68:78:42:ea:e6:6b:65:fa:8a: ea:0d:04:aa:44:c6:a7:a7:92:6a:7b:56:ba:dc:94: 52:ce:dc:db:6a:22:7e:38:c2:06:de:cc:b6:22:9c: 26:24:11:56:9d:53:26:9e:d9:46:fa:fa:d4:e8:89: df:ea:ee:c4:3b:04:be:74:01:2b:86:7e:1d:31:8e: c0:40:d3:2f:c2:31:14:e2:b9:33:5c:e0:16:36:8c: 66:af:55:f9:c2:aa:1a:d9:ef:10:92:57:50:f4:f1: 35:d1:d9:d8:5d:e8:d5:f2:3c:1e:8f:d5:ce:35:04: d6:2d:86:8b:18:28:c9:41:48:bb:d5:cb:a1:a3:cc: aa:3d:17:65:c3:75:4b:7d:75:ce:91:90:db:fc:60: 45:0d:94:3b:3b:9a:cb:ee:08:34:ac:3c:08:4b:4d: f8:10:f9:59:b8:ec:04:05:5f:c6:b0:ec:aa:52:d2: 48:65:f8:34:ed:b4:18:bc:40:6d:6b:96:86:8e:8b: a1:fb:7a:3b:61:37:84:5f:a7:ea:8c:e8:8f:c0:b4: a6:64:40:12:5b:06:7b:3e:89:3b:85:29:33:b9:d6: df:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:26:7E:3E:0E:91:FD:68:2D:DD:58:DE:27:21:B0:B8:35:CC:C0:BB X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5e:9b:01:65:8c:7a:a0:6f:29:cc:4f:ce:e4:dc:78:f2:4a: b5:e4:e8:73:dd:a6:26:4c:fb:12:d6:ed:b1:43:41:5d:0a:69: ca:e8:ae:34:a2:0a:c9:41:71:ab:d5:44:9f:36:19:cc:9c:46: 45:68:50:4a:5e:4d:15:4f:d4:d7:89:05:0a:ed:3f:cb:c8:cb: 87:5a:f6:81:35:82:48:bb:76:bd:40:c2:6d:96:ad:55:a0:d6: 35:83:f9:ce:4b:c1:79:7e:b9:2b:f5:6b:29:6e:d8:b6:08:34: 2e:8d:1d:75:db:70:8b:66:5b:93:7f:ed:c5:37:01:b3:c4:f2: ff:f0:66:86:6b:dc:37:ea:c9:c5:1f:34:30:22:63:ab:ee:dd: e9:34:55:b7:23:df:78:de:fd:3d:a4:58:e7:91:d1:02:11:03: 9e:fa:8f:81:52:89:38:46:d1:ff:42:93:40:bf:e3:ad:c6:04: a9:25:8c:14:87:f9:40:cb:7b:2b:48:f1:fd:66:94:4b:80:1c: 43:fb:a1:66:ca:bd:c9:a2:b0:ca:d5:be:01:10:2d:d2:ae:3a: 26:46:eb:01:94:aa:00:5b:24:51:43:d3:33:ec:93:e5:1f:44: 72:64:d4:b2:7c:44:19:aa:95:4d:8a:0d:2a:b7:fd:d4:d4:ee: 9d:fa:34:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYCzDfoilt+39G4sCT8Vhx00ovgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTA1MDcwNTU2MTRaFw0yNTA1MTAwNjE2MTRaMDMxMTAvBgNV BAMTKDVBMjY3RTNFMEU5MUZENjgyRERENThERTI3MjFCMEI4MzVDQ0MwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavDQt85lLHTdC0dtNt4c1O/cf G/Xs5IJTESqon7/2k8u2zGh4Qurma2X6iuoNBKpExqenkmp7VrrclFLO3NtqIn44 wgbezLYinCYkEVadUyae2Ub6+tToid/q7sQ7BL50ASuGfh0xjsBA0y/CMRTiuTNc 4BY2jGavVfnCqhrZ7xCSV1D08TXR2dhd6NXyPB6P1c41BNYthosYKMlBSLvVy6Gj zKo9F2XDdUt9dc6RkNv8YEUNlDs7msvuCDSsPAhLTfgQ+Vm47AQFX8aw7KpS0khl +DTttBi8QG1rloaOi6H7ejthN4Rfp+qM6I/AtKZkQBJbBns+iTuFKTO51t8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiZ+Pg6R/Wgt3VjeJyGwuDXMwLswHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1emwFljHqgbynMT87k3HjySrXk6HPdpiZM +xLW7bFDQV0KacrorjSiCslBcavVRJ82GcycRkVoUEpeTRVP1NeJBQrtP8vIy4da 9oE1gki7dr1Awm2WrVWg1jWD+c5LwXl+uSv1aylu2LYINC6NHXXbcItmW5N/7cU3 AbPE8v/wZoZr3DfqycUfNDAiY6vu3ek0Vbcj33je/T2kWOeR0QIRA576j4FSiThG 0f9Ck0C/463GBKkljBSH+UDLeytI8f1mlEuAHEP7oWbKvcmisMrVvgEQLdKuOiZG 6wGUqgBbJFFD0zPsk+UfRHJk1LJ8RBmqlU2KDSq3/dTU7p36NNY= -----END CERTIFICATE-----Generated at Thu May 8 10:38:28 2025 by rpki-client