$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: LDt/Fz4AutQkQgnTRnDG/TAXmQzdvyamqtrJ7x31c6Q= Subject key identifier: D0:84:CE:D2:0D:E7:48:2F:64:2D:7D:C0:2A:EC:08:4B:E3:96:0C:BF Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 1AB15086E2D2E6D61B4A5D01DF82E61D68F0F0AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 019E Signing time: Wed 07 May 2025 12:00:37 +0000 Manifest this update: Wed 07 May 2025 11:55:37 +0000 Manifest next update: Sat 10 May 2025 18:22:37 +0000 Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: +aTbg4Bqow3tKrEemUQDnquYnyKdUDg1fr/FMfpUH2g=) 2: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: 5+zXGETugAPi3HrPmviCFDgLbg2lDQPrtwA1t0d5+aI=) 3: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) 4: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: LqvfTrQWZqMT+aq6D/7PMSwIeNyxMPiwhllSvmPZ8KY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 18:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b1:50:86:e2:d2:e6:d6:1b:4a:5d:01:df:82:e6:1d:68:f0:f0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: May 7 11:55:37 2025 GMT Not After : May 10 18:22:37 2025 GMT Subject: CN=D084CED20DE7482F642D7DC02AEC084BE3960CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:92:3c:09:43:45:b4:4c:58:b6:e9:a1:74: df:a8:88:48:c0:f3:f8:29:3a:a0:94:cb:e3:1e:26: 89:1d:c5:1d:28:5c:c3:4d:2b:22:0f:da:c9:53:82: 82:10:19:73:fb:85:2a:cf:5b:48:10:57:fd:a4:a6: a1:7e:af:c5:03:83:ae:c2:4b:4c:9f:48:f7:7b:08: 05:79:4b:75:60:aa:7f:a7:86:24:8b:2c:a6:df:12: ba:81:68:2f:e2:cd:12:0c:c4:ee:1a:34:1f:d9:eb: 21:71:54:2b:11:ae:0b:69:c9:a6:74:e2:a2:4c:e9: c7:5c:9b:c8:6b:b5:8f:64:b7:d7:96:29:bf:86:b9: 9c:f3:d7:3c:33:7b:46:bd:51:71:98:42:8b:b2:14: 4a:69:fa:56:fa:74:27:60:18:26:45:ae:ea:12:55: ab:bd:48:48:af:73:aa:61:18:b9:e3:ed:d7:67:fa: 43:60:75:28:0a:59:94:c0:0c:10:95:48:5c:c0:e3: 63:ba:06:9e:bc:19:78:9d:f3:b4:48:a7:81:a8:f9: f5:8d:87:18:45:f2:08:92:ad:bf:29:ce:ae:d8:de: dc:00:7a:ca:0e:f9:65:70:9d:4d:26:36:ae:60:5e: 88:89:e5:8a:54:dc:fe:37:85:16:cb:2b:0c:35:98: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:84:CE:D2:0D:E7:48:2F:64:2D:7D:C0:2A:EC:08:4B:E3:96:0C:BF X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5b:ca:5e:71:d7:81:5d:36:4b:e2:94:fe:9f:e0:e3:91:02: 5e:45:51:1c:89:b7:e2:e8:bf:49:83:e5:c2:7c:a6:93:e1:b5: a5:fd:99:e9:23:ce:f2:bd:21:35:05:77:f1:eb:03:cd:1c:0e: 7f:f5:bc:8c:f4:86:e3:cd:bf:b0:b1:ff:4a:b4:d9:74:ab:08: 90:71:3c:e8:f3:4f:81:fa:a4:09:47:9f:a2:7a:9e:34:02:ac: 9f:5a:f1:e8:4a:66:4f:22:b6:c3:af:21:58:59:27:30:ff:50: 5e:60:37:62:0f:a1:11:86:a9:e5:2e:3d:db:c2:08:b8:6d:b7: 41:78:ae:da:bf:2b:0f:6c:9d:9a:9a:4d:d5:81:05:07:88:ba: 7c:56:71:07:64:83:ed:6f:73:f3:9f:52:4e:5a:3b:12:48:ea: ae:bd:28:fe:41:b5:6b:a2:05:2d:d8:62:60:fa:99:4c:f6:e1: a7:ac:25:9f:04:6b:cd:ee:df:bb:c8:cf:5e:dc:46:5e:f1:0f: aa:79:f4:b8:aa:ca:80:c2:6d:eb:b6:74:07:44:89:ea:a9:86: 87:38:a7:1e:71:55:a6:eb:4f:68:23:94:37:12:a2:06:fb:20: ec:aa:5e:b6:8c:f8:b3:a1:53:65:75:aa:62:2f:ad:82:85:22: eb:cc:d0:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrFQhuLS5tYbSl0B34LmHWjw8KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTA1MDcxMTU1MzdaFw0yNTA1MTAxODIyMzdaMDMxMTAvBgNV BAMTKEQwODRDRUQyMERFNzQ4MkY2NDJEN0RDMDJBRUMwODRCRTM5NjBDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk5I8CUNFtExYtumhdN+oiEjA 8/gpOqCUy+MeJokdxR0oXMNNKyIP2slTgoIQGXP7hSrPW0gQV/2kpqF+r8UDg67C S0yfSPd7CAV5S3Vgqn+nhiSLLKbfErqBaC/izRIMxO4aNB/Z6yFxVCsRrgtpyaZ0 4qJM6cdcm8hrtY9kt9eWKb+GuZzz1zwze0a9UXGYQouyFEpp+lb6dCdgGCZFruoS Vau9SEivc6phGLnj7ddn+kNgdSgKWZTADBCVSFzA42O6Bp68GXid87RIp4Go+fWN hxhF8giSrb8pzq7Y3twAesoO+WVwnU0mNq5gXoiJ5YpU3P43hRbLKww1mNWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ITO0g3nSC9kLX3AKuwIS+OWDL8wHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRbyl5x14FdNkvilP6f4OORAl5FURyJt+Lo v0mD5cJ8ppPhtaX9mekjzvK9ITUFd/HrA80cDn/1vIz0huPNv7Cx/0q02XSrCJBx POjzT4H6pAlHn6J6njQCrJ9a8ehKZk8itsOvIVhZJzD/UF5gN2IPoRGGqeUuPdvC CLhtt0F4rtq/Kw9snZqaTdWBBQeIunxWcQdkg+1vc/OfUk5aOxJI6q69KP5BtWui BS3YYmD6mUz24aesJZ8Ea83u37vIz17cRl7xD6p59LiqyoDCbeu2dAdEieqphoc4 px5xVabrT2gjlDcSogb7IOyqXraM+LOhU2V1qmIvrYKFIuvM0OA= -----END CERTIFICATE-----Generated at Fri May 9 08:25:25 2025 by rpki-client