$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: 6AceRnxLHuuUVV+BzObH9HXj/j/pFoJiiMN30i4eOwU= Subject key identifier: 79:5B:A2:4D:AB:38:DA:25:62:53:31:A1:1F:75:8F:99:EE:19:FF:3A Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 76892128E8ED0133252FF4AED5F2332E1C73C18A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 04D0 Signing time: Tue 13 May 2025 00:50:03 +0000 Manifest this update: Tue 13 May 2025 00:45:03 +0000 Manifest next update: Fri 16 May 2025 06:34:03 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: eP9HYV3PuOgWsaNidklL7fFxAiMdSf/LVzna0rIUQhA=) 2: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: hsPXQKay+qedGG/jMzXptueav18vcMllJ1dIk7iOf1k=) 3: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: YaalKtjKWx+D1nZsyUzVkm61UQMIJWSOCk+Q6RrdAe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:89:21:28:e8:ed:01:33:25:2f:f4:ae:d5:f2:33:2e:1c:73:c1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: May 13 00:45:03 2025 GMT Not After : May 16 06:34:03 2025 GMT Subject: CN=795BA24DAB38DA25625331A11F758F99EE19FF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:52:76:cb:9a:51:68:de:7f:5e:0e:75:1c: ca:7d:e2:09:46:07:3c:4f:07:a7:9a:5d:dc:4f:c9: 17:78:eb:db:ff:23:6b:48:d8:ec:b8:ef:e3:f2:b9: 6d:ae:7f:51:5f:5c:dc:1f:ee:40:69:fd:e1:b4:d0: 38:1a:25:0c:43:98:3e:ff:d8:a2:0f:c6:0e:61:9c: 57:0c:13:e4:35:52:38:a0:ad:6d:d0:1d:cb:b3:dc: 88:c1:3f:64:3f:bc:79:f0:2a:bb:0b:2e:9b:80:59: 0f:a9:84:9b:fe:68:7d:cd:53:1d:05:ce:31:73:84: 8e:8a:7b:06:19:f3:e2:5a:d6:25:ae:60:9c:01:35: 20:9d:09:e5:05:d0:65:e6:93:a1:6d:4f:de:63:37: 05:09:2c:fa:0e:52:b0:0a:41:f6:8d:20:ec:e2:2f: ae:11:78:b2:8d:5c:61:1d:46:77:e6:6a:8c:2c:58: 6b:b1:8f:4a:e6:af:8e:b6:ec:62:65:be:44:c7:35: 86:d8:db:32:72:d5:f1:17:d0:2b:b1:8d:d6:8f:85: b9:36:13:8a:9e:f6:b1:06:a7:2c:b8:6a:31:a6:1c: 20:76:f1:72:ab:14:6e:93:fe:f9:3d:4e:c1:92:99: 66:0f:4a:fe:b4:b2:d0:1c:47:e5:d9:39:93:0b:e4: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5B:A2:4D:AB:38:DA:25:62:53:31:A1:1F:75:8F:99:EE:19:FF:3A X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f8:f8:80:1d:07:d0:b3:9d:b1:e9:de:09:fb:cc:e6:7a:a7: 14:11:58:75:5d:64:f0:1c:0d:53:c4:41:7f:76:f6:f9:47:73: 13:0d:de:ea:2f:ac:21:73:d0:96:b5:df:e6:7a:f0:31:12:69: fd:8e:1b:03:39:cb:f8:f8:65:da:ba:a0:18:0c:b4:d6:29:73: 22:27:a9:68:60:7a:0b:25:2e:91:0a:e3:c5:6d:bf:2e:93:cf: c9:99:60:01:ae:03:da:c3:f5:74:e2:db:1e:89:2f:f0:99:e4: 6a:c0:df:74:5e:07:6b:f9:8d:4f:6e:da:a7:e2:fb:96:04:bd: b5:9f:e7:45:4e:61:f3:35:69:af:a8:b8:11:6c:95:c5:a0:8a: a2:ba:f6:79:c1:6f:37:3c:d2:94:9a:b6:5d:e3:d1:1d:ba:39: 0e:94:4b:c1:f2:6a:78:37:c9:77:7d:53:96:23:fd:00:ba:76: 5d:d2:78:95:75:53:ce:31:7c:14:a6:87:11:1e:5f:33:36:47: 78:7d:db:c7:f1:e4:66:a8:2d:f5:ba:9c:41:a8:6a:f9:88:45: 27:2e:47:49:b9:29:91:ca:a9:1d:ca:04:6b:8f:0f:df:35:ea: 30:c8:69:99:c4:9f:3a:08:b8:de:9e:ff:e3:68:29:79:2e:20: 69:60:6c:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdokhKOjtATMlL/Su1fIzLhxzwYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTA1MTMwMDQ1MDNaFw0yNTA1MTYwNjM0MDNaMDMxMTAvBgNV BAMTKDc5NUJBMjREQUIzOERBMjU2MjUzMzFBMTFGNzU4Rjk5RUUxOUZGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstlJ2y5pRaN5/Xg51HMp94glG BzxPB6eaXdxPyRd469v/I2tI2Oy47+PyuW2uf1FfXNwf7kBp/eG00DgaJQxDmD7/ 2KIPxg5hnFcME+Q1UjigrW3QHcuz3IjBP2Q/vHnwKrsLLpuAWQ+phJv+aH3NUx0F zjFzhI6KewYZ8+Ja1iWuYJwBNSCdCeUF0GXmk6FtT95jNwUJLPoOUrAKQfaNIOzi L64ReLKNXGEdRnfmaowsWGuxj0rmr4627GJlvkTHNYbY2zJy1fEX0CuxjdaPhbk2 E4qe9rEGpyy4ajGmHCB28XKrFG6T/vk9TsGSmWYPSv60stAcR+XZOZML5BhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVuiTas42iViUzGhH3WPme4Z/zowHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX4+IAdB9CznbHp3gn7zOZ6pxQRWHVdZPAc DVPEQX929vlHcxMN3uovrCFz0Ja13+Z68DESaf2OGwM5y/j4Zdq6oBgMtNYpcyIn qWhgegslLpEK48Vtvy6Tz8mZYAGuA9rD9XTi2x6JL/CZ5GrA33ReB2v5jU9u2qfi +5YEvbWf50VOYfM1aa+ouBFslcWgiqK69nnBbzc80pSatl3j0R26OQ6US8Hyang3 yXd9U5Yj/QC6dl3SeJV1U84xfBSmhxEeXzM2R3h928fx5GaoLfW6nEGoavmIRScu R0m5KZHKqR3KBGuPD9816jDIaZnEnzoIuN6e/+NoKXkuIGlgbM8= -----END CERTIFICATE-----Generated at Wed May 14 02:37:42 2025 by rpki-client