$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: qSe5dVIkEIMKHAWTJyD5qEwc/Kx9kfY5IWGDkVp7imk= Subject key identifier: C0:27:63:46:DE:1E:C4:AD:B5:CE:79:DA:0A:87:27:29:D1:E8:50:CD Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 3B0F66792AD63A0A057F49133629254CD97BD4C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: 84 Signing time: Sat 03 May 2025 14:41:33 +0000 Manifest this update: Sat 03 May 2025 14:36:33 +0000 Manifest next update: Tue 06 May 2025 20:47:33 +0000 Files and hashes: 1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: iwWTX/EFBujyZQDKZ9Hg7h0CZYdGO5vfAJe8qoIVz88=) 2: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: 3Hm40iWjQ2mGL/ioKg4PmFkyFgospmr9E6G7OvRGuhQ=) 3: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: fvGiCUP0GiBhQncLfnTgCF86OKgpiB1g99kgLWKorMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 20:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0f:66:79:2a:d6:3a:0a:05:7f:49:13:36:29:25:4c:d9:7b:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: May 3 14:36:33 2025 GMT Not After : May 6 20:47:33 2025 GMT Subject: CN=C0276346DE1EC4ADB5CE79DA0A872729D1E850CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:8e:64:e1:98:b1:8c:b3:46:e2:e5:a9:fe: 50:47:1c:00:59:4d:cf:fe:5b:14:e9:f8:c4:22:cf: 6c:59:e3:09:72:8b:56:22:94:22:65:70:2c:fc:46: 88:5e:96:01:2f:7f:b9:d9:5c:03:9b:c2:65:99:b4: a8:fd:f3:8b:68:58:eb:b2:d3:19:fb:72:51:35:05: 40:e2:ad:87:8c:e6:c8:0c:f6:e1:07:c5:5b:0b:9d: c0:d5:ed:b3:d2:2a:14:52:13:ad:51:82:bc:c7:9a: cb:59:61:ba:bd:a1:f5:9d:b0:6a:9b:f9:c1:93:e0: d5:40:c8:66:2c:c2:14:94:5a:89:7d:ad:aa:bc:00: 40:7c:5c:bd:db:58:fc:93:cd:99:44:01:14:86:53: 46:6a:95:81:db:48:92:8a:46:fa:da:db:10:2a:d4: fb:a9:47:1d:5b:39:16:2b:b7:ff:0d:c7:39:86:e0: e4:74:4d:38:f1:6e:f3:43:12:92:c0:4f:4e:6b:83: 51:b4:c4:c6:3b:81:a4:3f:82:93:a0:2b:a5:99:1e: d7:dc:58:93:fb:d1:a0:6c:4c:51:f3:67:09:f4:20: 21:26:70:aa:04:51:99:8f:dc:c8:f5:af:53:11:34: 9d:1e:e5:78:a6:a8:5c:af:c9:f6:59:af:8c:bc:4e: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:27:63:46:DE:1E:C4:AD:B5:CE:79:DA:0A:87:27:29:D1:E8:50:CD X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:63:31:9c:b2:26:0a:6a:2b:dd:9b:18:f7:0b:05:bf:d0:b8: e9:a8:61:77:1d:c7:c6:7c:48:47:88:cf:ae:3f:00:d7:72:d8: 56:dd:09:55:42:0b:72:15:d3:c2:82:ec:8e:23:00:88:3b:6d: 10:9f:30:75:1d:4b:24:01:5f:ef:ca:1a:80:c2:1b:d1:52:27: 99:f8:ac:ea:ae:a8:d3:be:e2:40:15:57:4b:74:0c:7b:0e:af: 86:ac:68:13:83:06:fa:f7:64:3a:8a:58:36:32:7c:dd:2c:72: 77:de:df:16:31:2a:77:12:10:6b:89:b5:18:1d:9e:c2:f4:15: 7f:02:34:d0:46:27:5c:cc:c9:a8:1d:26:c9:3f:d0:46:43:3c: 94:41:2f:c8:c6:5a:dd:44:3a:c3:07:b7:2e:e8:a3:3a:1f:c8: 74:4a:87:98:00:8f:9a:c4:65:5d:be:5b:90:57:5d:fa:af:a5: 11:07:86:75:b1:67:fb:fd:e2:c7:cf:96:f6:69:98:40:0a:36: dc:5d:7d:f0:44:ab:9e:a9:8f:b3:54:7e:1f:8b:55:49:3e:a2: e4:1c:1a:19:be:5e:90:20:34:73:75:e4:e9:a5:05:aa:f4:10: f8:be:8c:0e:34:fd:93:29:83:10:94:59:fb:3b:d2:32:f1:c0: a4:00:0b:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOw9meSrWOgoFf0kTNiklTNl71MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTA1MDMxNDM2MzNaFw0yNTA1MDYyMDQ3MzNaMDMxMTAvBgNV BAMTKEMwMjc2MzQ2REUxRUM0QURCNUNFNzlEQTBBODcyNzI5RDFFODUwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfI5k4ZixjLNG4uWp/lBHHABZ Tc/+WxTp+MQiz2xZ4wlyi1YilCJlcCz8RohelgEvf7nZXAObwmWZtKj984toWOuy 0xn7clE1BUDirYeM5sgM9uEHxVsLncDV7bPSKhRSE61RgrzHmstZYbq9ofWdsGqb +cGT4NVAyGYswhSUWol9raq8AEB8XL3bWPyTzZlEARSGU0ZqlYHbSJKKRvra2xAq 1PupRx1bORYrt/8NxzmG4OR0TTjxbvNDEpLAT05rg1G0xMY7gaQ/gpOgK6WZHtfc WJP70aBsTFHzZwn0ICEmcKoEUZmP3Mj1r1MRNJ0e5XimqFyvyfZZr4y8TnVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwCdjRt4exK21znnaCocnKdHoUM0wHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBjMZyyJgpqK92bGPcLBb/QuOmoYXcdx8Z8 SEeIz64/ANdy2FbdCVVCC3IV08KC7I4jAIg7bRCfMHUdSyQBX+/KGoDCG9FSJ5n4 rOquqNO+4kAVV0t0DHsOr4asaBODBvr3ZDqKWDYyfN0scnfe3xYxKncSEGuJtRgd nsL0FX8CNNBGJ1zMyagdJsk/0EZDPJRBL8jGWt1EOsMHty7oozofyHRKh5gAj5rE ZV2+W5BXXfqvpREHhnWxZ/v94sfPlvZpmEAKNtxdffBEq56pj7NUfh+LVUk+ouQc Ghm+XpAgNHN15OmlBar0EPi+jA40/ZMpgxCUWfs70jLxwKQACzg= -----END CERTIFICATE-----Generated at Tue May 6 04:43:31 2025 by rpki-client