$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json) Hash identifier: 2SjaMjPI9onInJBTgVRHCSMihzLa7fVOtDwGwOCbhTo= Subject key identifier: BA:56:A5:2A:E9:99:D3:FB:8C:AB:7D:1E:67:83:BB:73:60:12:87:7D Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 7C5A12BEA7337828B49DE641400B82354106AA7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft Manifest number: BB Signing time: Sun 11 May 2025 14:32:07 +0000 Manifest this update: Sun 11 May 2025 14:27:07 +0000 Manifest next update: Wed 14 May 2025 20:06:07 +0000 Files and hashes: 1: 3135372e32302e39322e302f32332d3234203d3e20313532343037.roa (hash: dOMygz5zltbqlA4IY/6P2zi8X+0Vf9OQi3HjL4HaSVo=) 2: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: B58P6kAL/sNs1ddIdUVZJbSZEOwMxzPzC3dhf5eN0ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5a:12:be:a7:33:78:28:b4:9d:e6:41:40:0b:82:35:41:06:aa:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: May 11 14:27:07 2025 GMT Not After : May 14 20:06:07 2025 GMT Subject: CN=BA56A52AE999D3FB8CAB7D1E6783BB736012877D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:e8:d6:c5:4f:57:b4:63:d1:86:fb:9b:24: 52:40:ed:af:2f:cb:95:19:ab:a9:77:9c:0a:5c:d1: 9c:9b:34:ac:26:3e:a5:de:4e:a7:3d:be:ef:34:2a: 1e:4d:cc:84:64:88:f8:bc:f4:d2:71:e3:63:22:af: ef:2b:d8:33:cd:68:41:94:aa:11:fb:a5:24:90:ad: ce:f0:47:2c:f0:40:06:58:ea:92:c8:d3:20:88:1f: 0c:da:79:cc:53:77:e1:20:1c:32:95:29:41:10:b2: 74:97:24:06:91:03:24:6c:f8:cd:05:43:4f:0e:62: 7f:21:f5:52:27:57:a7:15:25:3e:12:5b:85:ed:d5: 4c:4e:9f:e1:f4:80:46:49:08:08:da:bd:c0:19:93: bb:c7:70:c3:65:48:9e:7a:30:15:0b:54:92:c4:d0: 4b:51:9a:03:5f:1e:8f:31:13:1f:a2:77:41:46:9c: 53:ad:29:6d:c7:f7:72:05:1c:f4:70:ae:33:0e:4b: a7:25:78:49:c7:6e:d7:74:55:9c:ff:a6:6e:8f:93: 60:90:e0:d6:cf:6c:45:77:4b:bd:12:92:8c:e4:80: 40:9f:24:64:90:23:d6:36:6e:a4:04:be:3f:78:e7: c3:b0:d8:ef:58:f7:6f:9e:e3:93:52:ad:02:89:11: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:A5:2A:E9:99:D3:FB:8C:AB:7D:1E:67:83:BB:73:60:12:87:7D X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:9a:b3:7d:bf:5a:0a:81:b5:96:76:a7:cb:38:11:e3:62:bd: 24:26:0e:50:09:77:f3:e2:08:1e:17:6f:1a:06:72:4b:b6:65: 1b:ac:dd:7b:f2:74:21:10:ea:25:81:9d:90:de:af:59:64:3a: f1:9b:c1:40:9f:67:ad:da:ae:51:29:95:33:ab:17:da:54:37: a3:66:67:ad:b2:e9:02:12:c0:72:4e:5c:5b:a0:a6:61:7a:64: 40:d4:be:6f:ef:e1:6f:b1:01:76:b5:6b:b3:d5:83:00:b6:9b: 6f:57:3f:c4:9b:3f:20:94:c0:30:d0:0f:55:9f:c4:22:54:c7: 6c:86:03:08:1e:ac:8f:7b:02:36:52:57:1a:e9:b2:e7:40:80: df:2a:6e:e9:21:f4:81:0f:67:3b:81:4d:1f:f8:71:74:4a:f6: f6:96:0f:53:63:51:98:25:4f:51:5f:3a:dd:b9:54:43:04:cd: e1:94:02:71:ae:bc:cb:7f:3b:4e:fa:f4:22:aa:77:b8:49:cc: 73:fc:01:17:93:be:0a:1d:57:4d:54:f3:1c:51:b0:8a:2a:bf: 7d:ec:aa:2e:2c:9c:28:a1:71:c4:6d:6b:4f:6b:40:02:88:39: 1f:4e:e0:f6:3b:16:2d:1d:19:e9:e8:f6:e5:e0:67:0d:dc:88: fd:40:34:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFoSvqczeCi0neZBQAuCNUEGqnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNTA1MTExNDI3MDdaFw0yNTA1MTQyMDA2MDdaMDMxMTAvBgNV BAMTKEJBNTZBNTJBRTk5OUQzRkI4Q0FCN0QxRTY3ODNCQjczNjAxMjg3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpOjWxU9XtGPRhvubJFJA7a8v y5UZq6l3nApc0ZybNKwmPqXeTqc9vu80Kh5NzIRkiPi89NJx42Mir+8r2DPNaEGU qhH7pSSQrc7wRyzwQAZY6pLI0yCIHwzaecxTd+EgHDKVKUEQsnSXJAaRAyRs+M0F Q08OYn8h9VInV6cVJT4SW4Xt1UxOn+H0gEZJCAjavcAZk7vHcMNlSJ56MBULVJLE 0EtRmgNfHo8xEx+id0FGnFOtKW3H93IFHPRwrjMOS6cleEnHbtd0VZz/pm6Pk2CQ 4NbPbEV3S70SkozkgECfJGSQI9Y2bqQEvj9458Ow2O9Y92+e45NSrQKJEQ2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulalKumZ0/uMq30eZ4O7c2ASh30wHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2 MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOSas32/WgqBtZZ2p8s4EeNivSQmDlAJd/Pi CB4XbxoGcku2ZRus3XvydCEQ6iWBnZDer1lkOvGbwUCfZ63arlEplTOrF9pUN6Nm Z62y6QISwHJOXFugpmF6ZEDUvm/v4W+xAXa1a7PVgwC2m29XP8SbPyCUwDDQD1Wf xCJUx2yGAwgerI97AjZSVxrpsudAgN8qbukh9IEPZzuBTR/4cXRK9vaWD1NjUZgl T1FfOt25VEMEzeGUAnGuvMt/O0769CKqd7hJzHP8AReTvgodV01U8xxRsIoqv33s qi4snCihccRta09rQAKIOR9O4PY7Fi0dGeno9uXgZw3ciP1ANIo= -----END CERTIFICATE-----Generated at Sun May 11 23:16:25 2025 by rpki-client