$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: x4cMpra3NzI+MnYPifJ6eUaW0ezYWyVxpbhsSnQC9ew= Subject key identifier: 40:68:1C:19:03:0A:37:35:60:D6:72:3E:A4:99:1D:95:FE:4B:17:A2 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 691FEFABBE71CE3AB0044F0F6E5029CBD3A0E6CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 0451 Signing time: Fri 09 May 2025 09:11:04 +0000 Manifest this update: Fri 09 May 2025 09:06:04 +0000 Manifest next update: Mon 12 May 2025 20:23:04 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 6: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: /Bml3M7v35sTczDjg72TZmWDGJF/La5BhX8kKn57C/8=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1f:ef:ab:be:71:ce:3a:b0:04:4f:0f:6e:50:29:cb:d3:a0:e6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: May 9 09:06:04 2025 GMT Not After : May 12 20:23:04 2025 GMT Subject: CN=40681C19030A373560D6723EA4991D95FE4B17A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:37:fb:b8:7b:fb:52:8f:d1:ff:d6:c7:8d:9d: 9a:c5:03:6e:fa:04:30:b2:c7:07:44:86:b7:67:bc: 7a:31:f6:f5:70:96:43:d0:12:c0:39:21:05:65:f9: a0:6a:c0:5c:7c:fb:8e:0f:e8:cc:f7:3e:24:a8:bf: 19:2a:09:c7:3a:56:bc:88:f0:63:b9:2e:e5:fb:c5: 20:8b:9d:27:d7:d6:e3:24:10:91:85:e8:96:4e:7a: 24:2b:91:83:44:4b:79:e5:a4:cf:8d:37:ce:d0:b8: 23:c1:4a:eb:b2:7d:87:7d:16:f2:b0:b0:ba:69:f6: 75:84:48:3c:b8:f8:86:03:51:ce:9a:42:e4:87:b8: bb:4a:cb:de:c5:a3:5d:bd:7e:32:ad:5a:6b:61:2b: 15:d4:54:7c:03:d1:5c:01:fc:bd:58:d7:91:9a:95: bd:7e:43:14:2c:f3:23:e5:b6:33:1b:4f:78:8e:19: 71:fe:6e:3f:7b:ca:70:89:6e:26:fe:a3:90:5e:3f: 6e:49:09:58:03:e5:c2:76:26:23:4f:24:d1:c9:97: c8:ef:5b:4d:74:1e:5d:c6:52:59:c5:81:fc:ed:62: fe:18:58:bb:a1:21:d0:3c:5d:48:8d:d7:db:b2:bf: 07:b7:70:1e:34:78:4c:9a:bf:45:95:14:ae:de:5d: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:1C:19:03:0A:37:35:60:D6:72:3E:A4:99:1D:95:FE:4B:17:A2 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:28:b3:ca:bc:42:0e:5b:02:df:bb:c2:8f:43:8c:8b:5a:5d: 22:4b:b6:05:d0:32:e3:88:eb:a8:80:3a:5f:cc:b7:03:98:22: 30:26:a1:48:f9:6d:b1:60:ea:e4:4d:0c:d8:43:4a:61:82:32: a1:d0:e0:48:1c:ae:3a:28:12:db:bc:0a:16:9c:c7:52:0c:8b: 5f:4e:84:a6:e9:0e:fd:cd:35:5d:fe:01:5c:fa:46:04:a3:08: 49:51:2f:37:73:b5:01:62:b1:ad:34:65:5c:a2:9c:4d:a3:e3: 04:5c:25:ca:ed:05:99:24:76:30:65:12:82:6a:eb:ce:a9:55: 23:82:65:15:85:21:d4:cf:f8:1a:01:64:d6:01:8e:a1:78:83: bb:30:c2:7d:41:93:24:98:94:dd:5c:73:44:ee:59:76:85:be: d7:91:20:d7:23:9e:b3:a7:83:9e:52:62:a8:8e:a9:34:fc:35: eb:16:4d:d6:f8:d9:f2:84:90:89:6e:ec:6e:e2:50:34:79:75: 39:4c:58:dd:2e:3b:f6:4b:70:02:95:f0:46:df:2e:65:89:42: a7:c4:f5:5d:38:a3:85:6c:d6:d4:d8:d4:95:b6:0b:c9:1a:d2: 86:65:18:93:d3:d7:68:f1:cc:27:bf:e5:d3:58:1f:2c:40:ec: c7:fe:e2:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaR/vq75xzjqwBE8PblApy9Og5s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA1MDkwOTA2MDRaFw0yNTA1MTIyMDIzMDRaMDMxMTAvBgNV BAMTKDQwNjgxQzE5MDMwQTM3MzU2MEQ2NzIzRUE0OTkxRDk1RkU0QjE3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyN/u4e/tSj9H/1seNnZrFA276 BDCyxwdEhrdnvHox9vVwlkPQEsA5IQVl+aBqwFx8+44P6Mz3PiSovxkqCcc6VryI 8GO5LuX7xSCLnSfX1uMkEJGF6JZOeiQrkYNES3nlpM+NN87QuCPBSuuyfYd9FvKw sLpp9nWESDy4+IYDUc6aQuSHuLtKy97Fo129fjKtWmthKxXUVHwD0VwB/L1Y15Ga lb1+QxQs8yPltjMbT3iOGXH+bj97ynCJbib+o5BeP25JCVgD5cJ2JiNPJNHJl8jv W010Hl3GUlnFgfztYv4YWLuhIdA8XUiN19uyvwe3cB40eEyav0WVFK7eXdZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGgcGQMKNzVg1nI+pJkdlf5LF6IwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsos8q8Qg5bAt+7wo9DjItaXSJLtgXQMuOI 66iAOl/MtwOYIjAmoUj5bbFg6uRNDNhDSmGCMqHQ4EgcrjooEtu8Chacx1IMi19O hKbpDv3NNV3+AVz6RgSjCElRLzdztQFisa00ZVyinE2j4wRcJcrtBZkkdjBlEoJq 686pVSOCZRWFIdTP+BoBZNYBjqF4g7swwn1BkySYlN1cc0TuWXaFvteRINcjnrOn g55SYqiOqTT8NesWTdb42fKEkIlu7G7iUDR5dTlMWN0uO/ZLcAKV8EbfLmWJQqfE 9V04o4Vs1tTY1JW2C8ka0oZlGJPT12jxzCe/5dNYHyxA7Mf+4uM= -----END CERTIFICATE-----Generated at Sun May 11 06:16:18 2025 by rpki-client