$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft File: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json) Hash identifier: 5/ACUIFZIHOKuxf4OKhyWHWWh81B+VT3dOgJX9GNqoI= Subject key identifier: 1B:72:B6:4A:27:01:A6:7B:D0:79:CD:34:AC:51:FA:3E:91:5C:08:29 Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 Certificate issuer: /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Certificate serial: 56B4EA6559808C82D8AF1D829D424B0C12ED61C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft Manifest number: 042C Signing time: Sat 03 May 2025 13:12:10 +0000 Manifest this update: Sat 03 May 2025 13:07:10 +0000 Manifest next update: Tue 06 May 2025 21:53:10 +0000 Files and hashes: 1: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: +gwVsXFy8SrbJNr8BrGK6/i8VpLC/b5HGjUVbbD4BWs=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: 06ISKC2CwbxxyFrx3ByMaV4Lra2B5W5rP3yiIdrne3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 21:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b4:ea:65:59:80:8c:82:d8:af:1d:82:9d:42:4b:0c:12:ed:61:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Validity Not Before: May 3 13:07:10 2025 GMT Not After : May 6 21:53:10 2025 GMT Subject: CN=1B72B64A2701A67BD079CD34AC51FA3E915C0829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c0:b0:4d:62:93:86:30:3d:03:ea:ab:ea:05: 30:b1:13:d3:2b:62:67:d0:bc:87:77:4b:2c:7d:b9: 8f:56:9a:40:42:3b:47:35:6a:de:de:91:41:49:94: 2f:1a:eb:62:e1:ea:6d:35:1b:04:2d:91:5b:b3:2d: 05:33:fe:f1:10:ad:84:08:a8:33:d3:09:76:db:08: 41:db:a0:6d:60:5f:0e:ee:a6:18:93:4a:86:8a:e5: 49:1f:75:56:44:2a:7c:9d:fe:59:a7:80:b9:af:50: da:c6:ea:a8:c8:67:7a:70:f5:43:7e:8f:b5:2c:92: d2:e1:b1:94:80:c7:f7:bf:eb:ff:20:4f:5c:c4:1e: 9b:6c:81:b7:c0:04:fe:c9:76:7b:c0:c3:50:e2:54: d7:0b:46:32:45:53:60:e1:2f:7d:ac:6f:bc:34:bf: f5:e5:59:82:b3:e2:8c:8f:17:62:3e:79:6a:07:1b: f2:1f:b8:5a:14:98:d3:26:38:cc:35:29:4c:59:72: 95:d1:9d:b1:73:50:15:80:6c:85:f5:00:25:e6:f0: 29:c1:5d:30:80:9d:2b:55:4c:98:6e:00:fa:43:ed: 22:2e:38:71:96:b6:c7:ec:22:68:6c:af:c7:4a:16: 47:8d:36:49:4e:c2:cf:e7:e9:57:3e:f3:0d:9f:6a: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:72:B6:4A:27:01:A6:7B:D0:79:CD:34:AC:51:FA:3E:91:5C:08:29 X509v3 Authority Key Identifier: keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5d:b9:02:99:3b:41:0c:7c:f5:58:d1:d9:34:d3:e1:8b:63: 73:4c:43:29:49:18:35:56:8d:fb:98:7e:fe:14:51:0b:45:89: 08:e3:c1:09:9c:a8:19:c1:56:ac:76:44:a2:fc:69:5a:74:c4: 20:76:a7:95:20:8e:c0:56:f1:c7:95:9d:43:71:20:1c:f6:c2: 6d:3f:1f:f1:67:f4:19:3f:3e:39:b5:e3:3b:35:1f:bd:e2:c7: 8d:63:f0:f1:9c:91:d5:24:aa:58:77:b5:82:7b:11:66:24:db: a5:ff:cb:c1:a2:48:16:6f:c3:79:7c:21:8c:72:21:de:52:c3: 70:4b:20:09:6c:92:23:59:c6:d2:4a:d4:b7:dc:80:6d:a1:f4: 59:3f:a9:28:2d:41:f0:e7:ac:96:c7:2e:4e:7b:c3:7b:a9:47: db:65:e3:54:79:24:9c:7e:21:81:6e:1d:4b:dd:66:71:40:be: 10:38:27:ab:2d:36:62:9b:19:83:8e:77:91:b0:b0:46:9c:1e: 6d:30:2b:b3:d4:1e:30:97:7b:48:e5:4e:37:64:71:60:80:cc: da:04:e1:ae:a1:cb:12:55:60:0c:f2:77:2d:0d:76:9a:30:e8: 57:d5:27:01:69:85:fc:0d:f5:7a:69:7d:9c:0a:db:a2:d1:6e: 35:6c:57:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrTqZVmAjILYrx2CnUJLDBLtYcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE NkI4QzY5MDAeFw0yNTA1MDMxMzA3MTBaFw0yNTA1MDYyMTUzMTBaMDMxMTAvBgNV BAMTKDFCNzJCNjRBMjcwMUE2N0JEMDc5Q0QzNEFDNTFGQTNFOTE1QzA4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpwLBNYpOGMD0D6qvqBTCxE9Mr YmfQvId3Syx9uY9WmkBCO0c1at7ekUFJlC8a62Lh6m01GwQtkVuzLQUz/vEQrYQI qDPTCXbbCEHboG1gXw7uphiTSoaK5UkfdVZEKnyd/lmngLmvUNrG6qjIZ3pw9UN+ j7UsktLhsZSAx/e/6/8gT1zEHptsgbfABP7JdnvAw1DiVNcLRjJFU2DhL32sb7w0 v/XlWYKz4oyPF2I+eWoHG/IfuFoUmNMmOMw1KUxZcpXRnbFzUBWAbIX1ACXm8CnB XTCAnStVTJhuAPpD7SIuOHGWtsfsImhsr8dKFkeNNklOws/n6Vc+8w2fanl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG3K2SicBpnvQec00rFH6PpFcCCkwHwYDVR0j BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4 QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1duQKZO0EMfPVY0dk00+GLY3NMQylJGDVW jfuYfv4UUQtFiQjjwQmcqBnBVqx2RKL8aVp0xCB2p5UgjsBW8ceVnUNxIBz2wm0/ H/Fn9Bk/Pjm14zs1H73ix41j8PGckdUkqlh3tYJ7EWYk26X/y8GiSBZvw3l8IYxy Id5Sw3BLIAlskiNZxtJK1LfcgG2h9Fk/qSgtQfDnrJbHLk57w3upR9tl41R5JJx+ IYFuHUvdZnFAvhA4J6stNmKbGYOOd5GwsEacHm0wK7PUHjCXe0jlTjdkcWCAzNoE 4a6hyxJVYAzydy0Ndpow6FfVJwFphfwN9XppfZwK26LRbjVsV/4= -----END CERTIFICATE-----Generated at Mon May 5 18:40:53 2025 by rpki-client