$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: Lm+HMVqwBMwhwy8QUdIjVyE8LmxtBk/Ka56Y3kMQu8k= Subject key identifier: 55:31:35:65:A3:C0:86:36:88:03:01:20:64:1F:29:E5:B7:B8:5F:7A Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 28AA1B0DADD2AEE366892D741A32061095B35262 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 01EF Signing time: Tue 06 May 2025 13:31:20 +0000 Manifest this update: Tue 06 May 2025 13:26:20 +0000 Manifest next update: Sat 10 May 2025 00:07:20 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: xSl5S79BfyBgOXzpCa2+vFeAMzKVXM9pSMn5k0NLon8=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: vPvAVnO1ZgE4ypncn0GtkjUqbauYxbAsE8tXCjUR4Us=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 00:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:1b:0d:ad:d2:ae:e3:66:89:2d:74:1a:32:06:10:95:b3:52:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: May 6 13:26:20 2025 GMT Not After : May 10 00:07:20 2025 GMT Subject: CN=55313565A3C0863688030120641F29E5B7B85F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:1f:01:1d:a6:03:75:fb:94:f8:43:f1:2e: 37:f5:18:d6:0b:90:41:b5:fa:5e:1d:01:1a:c0:7b: 19:b2:14:8e:3a:ee:fb:43:e9:e2:01:e7:13:86:68: 97:2a:26:22:00:13:7e:32:1a:d4:26:c7:7d:39:28: 43:ce:df:c9:44:73:76:9e:f6:f5:6f:0f:aa:f8:ba: db:26:7c:4d:b4:13:58:9b:89:f2:75:94:29:8b:2e: 71:0a:9f:09:93:0b:fa:87:76:5f:87:25:cc:2c:99: 0c:8e:4c:63:18:db:60:12:ba:d9:87:73:e6:ce:13: 01:ad:52:f6:4e:26:ea:c2:af:e2:94:b2:8c:ac:8e: 2f:77:a2:bb:1c:61:2d:2a:08:38:85:31:4c:db:5d: bf:7f:e8:8a:99:32:72:82:4e:f6:81:7a:7e:05:18: ab:a9:da:9f:94:88:90:2c:2b:9c:b7:e6:0a:61:c7: ad:b1:24:d1:ab:b0:7f:42:c9:26:76:84:57:f6:9f: 42:34:d6:5d:60:8d:8d:d0:b2:3f:f9:0b:38:4a:6a: 16:12:65:cf:d1:54:0c:c8:93:89:12:d4:04:a4:86: 78:c6:83:a8:21:0b:99:cf:e6:0d:89:65:b4:1a:19: 27:95:ff:19:a6:e5:09:72:56:e2:86:39:77:52:8f: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:31:35:65:A3:C0:86:36:88:03:01:20:64:1F:29:E5:B7:B8:5F:7A X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a5:96:04:0a:9b:4a:eb:15:2e:13:8f:36:c1:ee:60:1c:cf: 8d:f9:50:78:26:1a:47:57:19:a8:fd:8f:70:6e:46:88:cb:9b: e1:e9:a5:17:bd:e6:14:7a:d9:94:d1:13:90:6d:66:46:5c:40: 7b:21:5c:13:93:95:84:c6:9b:24:19:0c:b8:5c:92:d1:a4:5c: a5:bc:94:28:b3:19:e5:d3:72:ac:7d:c6:df:50:0b:c6:78:ba: 57:85:ca:37:4b:1d:a2:d9:ba:6a:de:00:33:9c:63:7e:40:f2: c9:56:ed:1b:33:f6:5f:3d:9e:f4:f2:3b:64:9b:30:77:ec:19: a5:c7:79:9e:89:df:fa:b3:21:8f:c2:eb:25:29:bf:84:b8:fb: ac:57:ae:0e:eb:f1:92:a7:f6:05:b7:7d:60:89:01:5e:d3:48: 28:1e:0b:d3:bd:75:32:6b:f6:2b:95:d4:9a:1f:f7:48:88:2a: 9c:7b:82:9b:ac:e5:c6:1d:0a:85:b9:7c:e7:10:35:a1:06:e6: 0d:68:eb:52:bc:15:e4:2c:33:b2:27:b0:35:c6:75:76:ba:b4: 5f:e7:b8:6f:4a:e5:c5:c1:f2:4b:a2:ba:09:8c:c5:3c:e0:eb: bf:b5:34:3a:41:6a:e3:29:fb:e1:40:32:f7:1e:4a:e7:93:34: 80:01:8f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKobDa3SruNmiS10GjIGEJWzUmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA1MDYxMzI2MjBaFw0yNTA1MTAwMDA3MjBaMDMxMTAvBgNV BAMTKDU1MzEzNTY1QTNDMDg2MzY4ODAzMDEyMDY0MUYyOUU1QjdCODVGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uh8BHaYDdfuU+EPxLjf1GNYL kEG1+l4dARrAexmyFI467vtD6eIB5xOGaJcqJiIAE34yGtQmx305KEPO38lEc3ae 9vVvD6r4utsmfE20E1ibifJ1lCmLLnEKnwmTC/qHdl+HJcwsmQyOTGMY22ASutmH c+bOEwGtUvZOJurCr+KUsoysji93orscYS0qCDiFMUzbXb9/6IqZMnKCTvaBen4F GKup2p+UiJAsK5y35gphx62xJNGrsH9CySZ2hFf2n0I01l1gjY3Qsj/5CzhKahYS Zc/RVAzIk4kS1ASkhnjGg6ghC5nP5g2JZbQaGSeV/xmm5QlyVuKGOXdSj+YVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVTE1ZaPAhjaIAwEgZB8p5be4X3owHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABellgQKm0rrFS4TjzbB7mAcz435UHgmGkdX Gaj9j3BuRojLm+HppRe95hR62ZTRE5BtZkZcQHshXBOTlYTGmyQZDLhcktGkXKW8 lCizGeXTcqx9xt9QC8Z4uleFyjdLHaLZumreADOcY35A8slW7Rsz9l89nvTyO2Sb MHfsGaXHeZ6J3/qzIY/C6yUpv4S4+6xXrg7r8ZKn9gW3fWCJAV7TSCgeC9O9dTJr 9iuV1Jof90iIKpx7gpus5cYdCoW5fOcQNaEG5g1o61K8FeQsM7InsDXGdXa6tF/n uG9K5cXB8kuiugmMxTzg67+1NDpBauMp++FAMvceSueTNIABj+w= -----END CERTIFICATE-----Generated at Wed May 7 16:51:53 2025 by rpki-client