$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: pLbhH6hBve3nzauz6DCNrpPQxHuAhT4FN+Xb11C4MEc= Subject key identifier: DD:A4:DF:13:C1:08:3B:E9:D2:2B:98:98:98:97:7C:32:4E:95:F6:6E Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 7E2D5020440B205336BC909E0DDA62D65AFBA5B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 0325 Signing time: Sat 10 May 2025 16:51:00 +0000 Manifest this update: Sat 10 May 2025 16:46:00 +0000 Manifest next update: Tue 13 May 2025 20:31:00 +0000 Files and hashes: 1: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 2: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: IG6t7nYlULhsMgBABVk9BSJ2moXKjUg9u7BBivZ69qI=) 3: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: VH49E2KyfRvmXuiwHw1IHMIFLp4eiZ6X80xjRI0Outs=) 4: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 5: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2d:50:20:44:0b:20:53:36:bc:90:9e:0d:da:62:d6:5a:fb:a5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: May 10 16:46:00 2025 GMT Not After : May 13 20:31:00 2025 GMT Subject: CN=DDA4DF13C1083BE9D22B989898977C324E95F66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:6f:86:83:41:8b:5b:2e:12:f6:46:66:20: a5:40:4a:2b:ca:16:ab:6f:78:44:15:5e:64:36:95: 94:cd:bd:cd:62:41:6a:0e:f7:f8:64:65:fd:6e:1d: 86:09:c5:28:c4:d4:88:b1:fc:7b:f1:f7:74:59:51: b7:15:18:8b:ec:52:3c:31:05:6f:08:ff:9f:e5:6f: 89:a7:e6:13:58:13:79:2b:09:70:94:08:3d:58:1f: 17:b5:79:d5:57:ad:0f:7d:1a:e1:ab:54:6e:33:f2: db:b8:a5:b3:51:ac:81:2e:f3:2c:cd:29:81:b7:7a: a8:24:c5:e7:1c:bf:19:ad:28:6b:68:db:e2:a3:c2: 99:ac:57:9e:f3:7c:cf:22:80:86:a6:12:a6:48:8b: df:d3:8d:b2:12:73:48:d5:cd:60:50:c9:d9:66:f9: cc:98:ec:a7:0b:9b:78:2d:64:cf:b5:14:33:d3:e6: 6a:67:4c:76:39:ca:e0:8d:3c:43:1f:f1:42:c8:5d: 31:e5:1f:aa:91:c7:87:df:6d:67:d6:5d:f9:6a:6c: 1a:89:8f:42:8a:bb:f2:f9:c9:21:08:fd:99:96:b9: 1e:b2:d8:cd:ed:f6:e2:2c:2e:09:46:f8:6e:52:45: e2:f0:ce:18:11:41:79:64:57:5d:b5:63:85:5c:ff: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:DF:13:C1:08:3B:E9:D2:2B:98:98:98:97:7C:32:4E:95:F6:6E X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4c:ca:f2:19:65:80:8e:5f:c7:1c:30:77:b2:af:54:f4:89: ec:77:da:c4:14:55:f9:b1:ae:a7:11:08:a1:4f:8d:3c:51:6e: 01:f2:21:4b:94:6a:1d:50:4b:1a:a4:9f:01:4c:e2:0d:d3:05: 10:e6:4d:6c:7e:34:92:60:02:b9:a7:4f:fb:99:85:ed:72:ba: d4:26:81:29:d1:c4:30:44:bd:c2:8a:fa:1f:96:8f:61:db:23: 24:55:ab:83:bc:db:56:bb:39:ed:fe:ba:ed:77:14:33:62:9e: c5:65:56:f2:75:12:18:ed:c9:72:49:76:16:47:94:0a:19:32: 94:9f:69:5c:da:26:74:5b:f0:7c:f6:42:0f:44:1c:fd:5d:bf: 97:28:90:2b:dc:ee:03:33:fc:48:9c:4f:13:a2:42:b0:29:a7: 51:59:6d:91:23:41:69:b2:3a:21:02:11:d9:fb:82:c9:11:e9: 02:7f:90:98:42:83:2c:5c:56:dd:93:01:50:07:96:5a:a0:e8: 08:aa:3a:b3:3e:38:3d:70:0e:ed:44:f9:7c:4e:9c:ce:cc:99: c2:00:d9:b1:8e:df:52:92:8f:59:b2:f6:08:92:13:95:e0:08: 04:19:b4:25:02:a5:29:4f:05:16:c0:4c:40:15:23:37:8f:95: 2e:f8:75:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfi1QIEQLIFM2vJCeDdpi1lr7pbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA1MTAxNjQ2MDBaFw0yNTA1MTMyMDMxMDBaMDMxMTAvBgNV BAMTKEREQTRERjEzQzEwODNCRTlEMjJCOTg5ODk4OTc3QzMyNEU5NUY2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgh2+Gg0GLWy4S9kZmIKVASivK FqtveEQVXmQ2lZTNvc1iQWoO9/hkZf1uHYYJxSjE1Iix/Hvx93RZUbcVGIvsUjwx BW8I/5/lb4mn5hNYE3krCXCUCD1YHxe1edVXrQ99GuGrVG4z8tu4pbNRrIEu8yzN KYG3eqgkxeccvxmtKGto2+KjwpmsV57zfM8igIamEqZIi9/TjbISc0jVzWBQydlm +cyY7KcLm3gtZM+1FDPT5mpnTHY5yuCNPEMf8ULIXTHlH6qRx4ffbWfWXflqbBqJ j0KKu/L5ySEI/ZmWuR6y2M3t9uIsLglG+G5SReLwzhgRQXlkV121Y4Vc/2BvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3aTfE8EIO+nSK5iYmJd8Mk6V9m4wHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1MyvIZZYCOX8ccMHeyr1T0iex32sQUVfmx rqcRCKFPjTxRbgHyIUuUah1QSxqknwFM4g3TBRDmTWx+NJJgArmnT/uZhe1yutQm gSnRxDBEvcKK+h+Wj2HbIyRVq4O821a7Oe3+uu13FDNinsVlVvJ1EhjtyXJJdhZH lAoZMpSfaVzaJnRb8Hz2Qg9EHP1dv5cokCvc7gMz/EicTxOiQrApp1FZbZEjQWmy OiECEdn7gskR6QJ/kJhCgyxcVt2TAVAHllqg6AiqOrM+OD1wDu1E+XxOnM7MmcIA 2bGO31KSj1my9giSE5XgCAQZtCUCpSlPBRbATEAVIzePlS74dUw= -----END CERTIFICATE-----Generated at Sun May 11 04:24:18 2025 by rpki-client