$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: kGDya0DkaPIK9oc10Uy+r9ZiA/fh+JZQlYwa37cnuLo= Subject key identifier: 5C:33:7E:EC:7A:6D:57:AE:08:E0:32:C5:5B:81:DE:1D:AF:97:5C:F7 Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 5FE9663B7F91CC72CC5D3313D600B5B0BF46ADFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 04CD Signing time: Fri 09 May 2025 14:20:39 +0000 Manifest this update: Fri 09 May 2025 14:15:39 +0000 Manifest next update: Mon 12 May 2025 14:51:39 +0000 Files and hashes: 1: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: 5eXhITZlYuhZVk2pT9DX3T/F6towUEYkoak1BNeVRAE=) 2: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: PBS24O+Ag988ovNHdwwWEYP3U+1tu1CqBmIH18hjG6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e9:66:3b:7f:91:cc:72:cc:5d:33:13:d6:00:b5:b0:bf:46:ad:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: May 9 14:15:39 2025 GMT Not After : May 12 14:51:39 2025 GMT Subject: CN=5C337EEC7A6D57AE08E032C55B81DE1DAF975CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fb:cf:7e:93:87:af:4d:65:6a:3c:cc:35:ee: bc:5f:c4:39:5a:b8:44:a7:d5:18:40:f5:5c:fd:42: 80:d5:f9:01:cf:e9:f1:84:79:23:4f:15:2a:f7:85: 26:7e:d3:32:03:ab:5e:1e:ec:e9:56:97:d3:53:fe: b2:d5:6a:9f:c7:13:d4:e2:26:74:54:13:9a:5e:92: 4c:44:db:8c:bd:c7:fd:d8:cb:e3:43:80:70:8d:04: f8:1f:30:ea:71:b1:6f:d6:0a:c4:c4:17:b5:1c:ec: e5:50:a7:28:ae:cf:e2:31:3c:cd:77:24:a2:83:ef: 51:df:9c:67:31:1d:96:25:46:f3:b2:39:24:81:86: 4e:d4:dd:47:f8:89:15:5e:42:7b:4f:c3:8e:e6:62: bf:81:a5:68:22:4e:84:0b:85:9f:c2:18:6b:2e:20: 61:a4:80:91:d5:af:a1:34:47:14:2e:2c:41:ec:28: f1:36:44:69:f7:98:12:25:f0:3a:4a:b8:17:a4:66: 3b:b6:d9:1b:11:49:e5:13:7c:92:18:32:9b:45:22: 37:15:19:e1:5f:df:c5:33:17:29:35:b7:a0:c9:1d: 9b:d1:3f:a2:bc:67:6d:65:a5:54:2f:1b:3d:8e:d8: d6:bb:3a:9b:44:9c:cc:73:3d:b4:80:6a:d9:88:87: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:33:7E:EC:7A:6D:57:AE:08:E0:32:C5:5B:81:DE:1D:AF:97:5C:F7 X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:de:c4:ba:93:48:47:c0:77:93:81:81:a6:a8:d1:da:39:7f: 26:92:f4:ef:55:ba:77:20:ab:94:c8:16:41:93:86:59:d0:cd: 5f:b1:01:65:4b:36:23:bf:46:cc:0e:36:52:28:e0:2c:a1:37: a1:d1:22:11:15:78:32:d3:5b:7e:aa:08:21:f5:30:e9:5b:83: 82:ee:87:66:60:45:32:0a:fa:a7:b2:77:45:78:38:4b:c9:db: a0:f4:59:95:d6:2b:ac:79:f2:6e:82:17:7d:ca:78:4e:95:c5: c4:f2:b1:10:5b:84:cb:f1:1b:a1:e3:60:d9:9d:0d:77:6a:06: 3f:d3:4c:9e:2a:a0:1f:a0:49:b2:c0:34:00:ee:9f:9c:bd:c5: 6f:a0:68:57:14:28:77:ef:b0:c6:d7:fc:e1:78:7c:35:d6:de: ca:a6:22:b0:e6:de:3e:60:f6:64:6e:a2:10:99:2c:72:25:cc: 3c:6c:10:68:14:cd:d6:28:07:84:dc:13:76:b4:13:58:f6:40: 9a:a5:5b:79:9f:53:17:c4:8e:20:06:8e:fd:ad:dd:91:a6:ab: 9f:c6:a3:09:a5:87:3b:50:32:bf:a1:6c:10:1e:22:72:2a:1d: 4f:28:65:d1:cc:e7:57:77:09:01:a6:70:23:76:e5:ed:8c:fb: c9:63:f8:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+lmO3+RzHLMXTMT1gC1sL9GrfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUw MkEzQTAxODAeFw0yNTA1MDkxNDE1MzlaFw0yNTA1MTIxNDUxMzlaMDMxMTAvBgNV BAMTKDVDMzM3RUVDN0E2RDU3QUUwOEUwMzJDNTVCODFERTFEQUY5NzVDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2+89+k4evTWVqPMw17rxfxDla uESn1RhA9Vz9QoDV+QHP6fGEeSNPFSr3hSZ+0zIDq14e7OlWl9NT/rLVap/HE9Ti JnRUE5pekkxE24y9x/3Yy+NDgHCNBPgfMOpxsW/WCsTEF7Uc7OVQpyiuz+IxPM13 JKKD71HfnGcxHZYlRvOyOSSBhk7U3Uf4iRVeQntPw47mYr+BpWgiToQLhZ/CGGsu IGGkgJHVr6E0RxQuLEHsKPE2RGn3mBIl8DpKuBekZju22RsRSeUTfJIYMptFIjcV GeFf38UzFyk1t6DJHZvRP6K8Z21lpVQvGz2O2Na7OptEnMxzPbSAatmIh+jBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDN+7HptV64I4DLFW4HeHa+XXPcwHwYDVR0j BBgwFoAUkZtg5NfhFxtmJPMYraG3RQKjoBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3 RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNBMDE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUwMkEz QTAxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3 NDUwMkEzQTAxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfexLqTSEfAd5OBgaao0do5fyaS9O9Vuncg q5TIFkGThlnQzV+xAWVLNiO/RswONlIo4CyhN6HRIhEVeDLTW36qCCH1MOlbg4Lu h2ZgRTIK+qeyd0V4OEvJ26D0WZXWK6x58m6CF33KeE6VxcTysRBbhMvxG6HjYNmd DXdqBj/TTJ4qoB+gSbLANADun5y9xW+gaFcUKHfvsMbX/OF4fDXW3sqmIrDm3j5g 9mRuohCZLHIlzDxsEGgUzdYoB4TcE3a0E1j2QJqlW3mfUxfEjiAGjv2t3ZGmq5/G owmlhztQMr+hbBAeInIqHU8oZdHM51d3CQGmcCN25e2M+8lj+Lg= -----END CERTIFICATE-----Generated at Sun May 11 07:48:41 2025 by rpki-client