$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json) Hash identifier: C3V5aUzfhFX86yKOlQTxyC7RVnJUqH7YWNOPSbXHQlk= Subject key identifier: B4:48:46:7B:94:BC:8C:BF:8E:E2:1D:69:29:3B:A7:C4:D1:B0:6F:6A Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Certificate serial: 2DE35F5B2AB1E472438F080CCC862B9915006F69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft Manifest number: 0168 Signing time: Mon 05 May 2025 07:51:52 +0000 Manifest this update: Mon 05 May 2025 07:46:52 +0000 Manifest next update: Thu 08 May 2025 09:52:52 +0000 Files and hashes: 1: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: f75zRmpjQOTQlksm0oHCrWWj0ikRE14F2pqLA/ei5Rg=) 2: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: tbt+hpy8ToUXUjWyR8QE4BU+KE7C2NtbzZcO6JiudhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 09:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e3:5f:5b:2a:b1:e4:72:43:8f:08:0c:cc:86:2b:99:15:00:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Validity Not Before: May 5 07:46:52 2025 GMT Not After : May 8 09:52:52 2025 GMT Subject: CN=B448467B94BC8CBF8EE21D69293BA7C4D1B06F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bb:45:a6:29:e5:73:35:ff:57:31:b7:2d:ee: c3:5c:d8:d4:6f:31:28:f3:d5:9d:28:76:42:c2:93: 74:aa:11:eb:56:57:3d:95:7d:61:3a:83:e6:7e:06: e5:6b:cb:ba:f5:ea:de:6c:4e:ef:92:9e:fb:15:54: 95:d0:d9:ec:58:50:45:4a:33:47:e7:f6:00:a1:fc: 2a:4c:fe:84:ba:a5:c1:54:ff:aa:71:b0:35:01:88: d9:a7:4d:c8:c8:21:83:1c:5e:c2:92:d5:54:99:42: 18:4b:6d:d0:bf:a0:46:58:02:d5:96:21:03:73:c5: c2:8b:a9:5b:7a:63:e2:f8:6e:17:45:b4:6f:d0:b9: eb:ca:bc:ec:39:80:53:8e:c4:76:b6:0f:fe:7d:1b: 11:44:36:c3:29:00:9a:cf:8c:4c:b8:9a:34:e8:b2: 55:58:f8:7e:84:83:40:cb:cc:34:e4:56:33:d3:13: f9:82:8c:4e:f1:71:db:21:b5:c6:fb:4b:f1:cd:ee: ae:c9:dc:06:23:2b:e5:97:27:c1:3b:b4:12:c4:79: 20:f5:92:53:ef:94:a9:cb:1a:71:9d:5e:68:74:5e: dc:f0:b9:21:f8:73:3c:e1:e4:a5:b1:7b:b7:e4:ba: e6:f1:b5:68:d2:fb:a9:95:49:81:12:3a:30:2c:90: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:46:7B:94:BC:8C:BF:8E:E2:1D:69:29:3B:A7:C4:D1:B0:6F:6A X509v3 Authority Key Identifier: keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:62:df:f4:eb:e0:69:b4:1c:aa:af:75:cb:c0:a1:ed:79: f0:fb:f9:79:7a:c6:d7:e5:da:22:01:64:4a:3b:2e:79:16:3b: bd:d1:ad:b7:d4:f1:05:b5:ec:66:8c:f0:52:98:24:ce:0b:bf: e4:43:46:55:b7:d5:64:f3:bc:6e:60:b6:b1:b5:56:8d:bc:cc: ea:c8:ee:1a:75:8b:e8:2f:f4:f5:ca:15:30:57:8b:fe:a1:38: 65:dc:bd:cf:27:00:7b:57:e3:97:64:9e:ff:58:19:df:73:1d: f1:90:bc:1f:6e:55:47:3f:bb:8f:a2:52:15:1b:7b:b5:96:92: 1c:64:ea:89:7d:90:7c:f4:02:0a:e8:c7:61:28:ef:36:4c:6e: 49:e8:ac:6a:f0:c9:a6:be:b5:47:4d:7f:f7:ec:b5:91:e1:59: c9:6e:b6:28:79:ec:4d:49:3b:6a:a5:3a:1c:f6:96:48:d4:a2: 35:d3:5b:3a:18:cc:ba:75:17:02:c9:2d:77:cf:10:b8:52:b8: 34:11:26:71:ec:d4:9e:e6:50:bb:e8:00:3d:6d:56:73:89:46: ff:14:ee:05:50:c5:8e:7d:d8:41:65:8c:46:ba:67:e7:fb:73: bd:4d:43:ad:c0:ad:b3:53:67:0d:2d:09:aa:10:fb:a2:40:b5: 44:1c:07:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeNfWyqx5HJDjwgMzIYrmRUAb2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0 Q0Y3OTFCRTAeFw0yNTA1MDUwNzQ2NTJaFw0yNTA1MDgwOTUyNTJaMDMxMTAvBgNV BAMTKEI0NDg0NjdCOTRCQzhDQkY4RUUyMUQ2OTI5M0JBN0M0RDFCMDZGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxu0WmKeVzNf9XMbct7sNc2NRv MSjz1Z0odkLCk3SqEetWVz2VfWE6g+Z+BuVry7r16t5sTu+SnvsVVJXQ2exYUEVK M0fn9gCh/CpM/oS6pcFU/6pxsDUBiNmnTcjIIYMcXsKS1VSZQhhLbdC/oEZYAtWW IQNzxcKLqVt6Y+L4bhdFtG/QuevKvOw5gFOOxHa2D/59GxFENsMpAJrPjEy4mjTo slVY+H6Eg0DLzDTkVjPTE/mCjE7xcdshtcb7S/HN7q7J3AYjK+WXJ8E7tBLEeSD1 klPvlKnLGnGdXmh0XtzwuSH4czzh5KWxe7fkuubxtWjS+6mVSYESOjAskBzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtEhGe5S8jL+O4h1pKTunxNGwb2owHwYDVR0j BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3 OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd+Yt/06+BptByqr3XLwKHtefD7+Xl6xtfl 2iIBZEo7LnkWO73RrbfU8QW17GaM8FKYJM4Lv+RDRlW31WTzvG5gtrG1Vo28zOrI 7hp1i+gv9PXKFTBXi/6hOGXcvc8nAHtX45dknv9YGd9zHfGQvB9uVUc/u4+iUhUb e7WWkhxk6ol9kHz0Agrox2Eo7zZMbknorGrwyaa+tUdNf/fstZHhWclutih57E1J O2qlOhz2lkjUojXTWzoYzLp1FwLJLXfPELhSuDQRJnHs1J7mULvoAD1tVnOJRv8U 7gVQxY592EFljEa6Z+f7c71NQ63ArbNTZw0tCaoQ+6JAtUQcB30= -----END CERTIFICATE-----Generated at Wed May 7 17:44:56 2025 by rpki-client