$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: u+gzxaODTnGccsXaPjKMCM42KnWs4J+VBsCO9sJTdyc= Subject key identifier: 93:53:46:C8:EE:2D:C6:06:80:93:08:FA:9D:31:CE:82:9A:58:A5:2C Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 226DCB9E8E4A9F2ECDF63C6538F430E7D2862AAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 042A Signing time: Sat 10 May 2025 10:20:00 +0000 Manifest this update: Sat 10 May 2025 10:15:00 +0000 Manifest next update: Tue 13 May 2025 14:24:00 +0000 Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: qIkZtUPswOLSzAKIW4faoAC7V/pmv5To5cLrgWfUSjA=) 2: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: s3uYaDXmwT/uvrNG/KvrHs3vIqjWVXxXp+Q2STHXCLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 14:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6d:cb:9e:8e:4a:9f:2e:cd:f6:3c:65:38:f4:30:e7:d2:86:2a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: May 10 10:15:00 2025 GMT Not After : May 13 14:24:00 2025 GMT Subject: CN=935346C8EE2DC606809308FA9D31CE829A58A52C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f2:26:f5:58:50:d1:da:03:6c:13:bc:52:0d: 43:61:aa:06:da:7c:94:12:bc:64:90:bd:87:58:ca: 3b:d6:c1:27:74:38:ba:dd:25:4d:b4:15:61:bb:e1: 8e:83:48:46:72:0c:3d:57:f6:3a:18:54:e1:a9:fd: ce:fc:11:ff:d1:cd:e2:76:3c:36:c0:4a:cc:26:06: ff:2b:00:b1:51:36:4d:b7:ed:70:68:bc:ab:e8:42: 9d:b3:a8:74:6f:9f:13:72:f2:27:5a:ad:3b:df:9b: 20:ee:32:8a:bb:8c:f8:98:e6:66:ec:60:de:66:6a: 43:d4:0c:22:06:a4:eb:74:fa:a5:95:9a:45:b4:1d: bf:ff:08:6c:5c:8c:d8:9e:df:50:69:2c:a8:7a:af: d9:ab:4c:89:d6:1c:62:e3:2a:93:f2:e1:94:e7:c5: ff:d0:e7:02:a5:e9:3d:08:d6:b2:e0:02:c2:15:5f: 3f:48:b4:53:ab:f3:03:5f:5a:a5:d6:a4:11:5f:ef: ed:c0:aa:61:9d:46:5f:ff:8f:21:d6:b2:b4:c3:c5: e5:0a:62:43:c7:3d:b6:b7:7f:cf:4a:d2:88:c8:c4: 46:f5:4e:84:a8:fa:4c:51:f0:63:4c:fe:ab:8b:cb: d9:8b:e4:74:c0:68:ef:ae:c1:7b:c9:98:db:de:e7: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:53:46:C8:EE:2D:C6:06:80:93:08:FA:9D:31:CE:82:9A:58:A5:2C X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c6:f6:01:e0:7f:f7:59:36:2b:a6:6a:ca:76:59:ee:f6:09: 84:05:ad:b1:06:f7:84:34:8b:8d:9e:4d:c9:e5:ca:07:9d:5a: 9f:b3:3d:35:3a:92:48:32:85:3b:28:26:9f:de:06:d5:e6:75: c3:ea:f2:6d:15:67:2f:de:a2:8f:25:d8:b4:43:89:a2:61:2f: 07:a3:f0:f6:86:2d:c6:f7:2b:08:6e:d0:94:2d:8d:16:96:7e: cc:0d:c1:90:00:46:8a:d9:c2:01:9f:3a:e6:8d:b3:f8:87:c6: f4:e2:92:e0:fc:79:1c:2d:1b:4f:26:7f:65:f9:43:c6:f7:24: 75:7a:40:82:b8:78:92:0a:f3:45:3e:89:54:98:01:e6:f4:e8: 72:d4:5f:54:f3:3f:9f:b8:b6:ec:88:19:b7:de:a9:3d:95:c2: 2e:0f:d4:e3:69:1f:47:1c:3b:4b:f5:8f:63:7d:05:f0:c3:11: 06:3b:c4:7e:d0:fb:9b:a0:bb:35:72:a4:93:ca:78:17:2c:77: 86:ef:e9:49:1e:71:8a:35:84:ec:f6:b0:29:00:f1:c1:39:f2: d9:6d:07:3b:86:49:34:5f:8c:4c:83:56:5c:55:60:36:12:d3: 96:e4:92:1a:12:e0:6b:5f:df:cd:54:65:1a:15:d4:58:56:5c: e7:79:43:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIm3Lno5Kny7N9jxlOPQw59KGKqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTA1MTAxMDE1MDBaFw0yNTA1MTMxNDI0MDBaMDMxMTAvBgNV BAMTKDkzNTM0NkM4RUUyREM2MDY4MDkzMDhGQTlEMzFDRTgyOUE1OEE1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo8ib1WFDR2gNsE7xSDUNhqgba fJQSvGSQvYdYyjvWwSd0OLrdJU20FWG74Y6DSEZyDD1X9joYVOGp/c78Ef/RzeJ2 PDbASswmBv8rALFRNk237XBovKvoQp2zqHRvnxNy8idarTvfmyDuMoq7jPiY5mbs YN5makPUDCIGpOt0+qWVmkW0Hb//CGxcjNie31BpLKh6r9mrTInWHGLjKpPy4ZTn xf/Q5wKl6T0I1rLgAsIVXz9ItFOr8wNfWqXWpBFf7+3AqmGdRl//jyHWsrTDxeUK YkPHPba3f89K0ojIxEb1ToSo+kxR8GNM/quLy9mL5HTAaO+uwXvJmNve59wNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk1NGyO4txgaAkwj6nTHOgppYpSwwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnG9gHgf/dZNiumasp2We72CYQFrbEG94Q0 i42eTcnlygedWp+zPTU6kkgyhTsoJp/eBtXmdcPq8m0VZy/eoo8l2LRDiaJhLwej 8PaGLcb3Kwhu0JQtjRaWfswNwZAARorZwgGfOuaNs/iHxvTikuD8eRwtG08mf2X5 Q8b3JHV6QIK4eJIK80U+iVSYAeb06HLUX1TzP5+4tuyIGbfeqT2Vwi4P1ONpH0cc O0v1j2N9BfDDEQY7xH7Q+5uguzVypJPKeBcsd4bv6UkecYo1hOz2sCkA8cE58tlt BzuGSTRfjEyDVlxVYDYS05bkkhoS4Gtf381UZRoV1FhWXOd5Q2E= -----END CERTIFICATE-----Generated at Sun May 11 02:04:19 2025 by rpki-client