$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json) Hash identifier: cMT/Ewzvyv2Bn7RvEJE9uhA6aNCWR5Y5Yv1XnhsR9f0= Subject key identifier: C4:7B:C4:25:9D:CE:4B:C4:94:80:B0:A1:D5:09:0D:7C:46:1A:DB:AD Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 57235C1C866E4F2430E209B2D79E0660F2D72A3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft Manifest number: 0153 Signing time: Sun 04 May 2025 17:51:00 +0000 Manifest this update: Sun 04 May 2025 17:46:00 +0000 Manifest next update: Thu 08 May 2025 02:08:00 +0000 Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 7QwG3sKKh+mYjg4jS1AeFszBYeNEnM56jws/Z3GCGMM=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: g1Ka7yfyJPbCamNmlkRkAf0k4fb7xbeQ8IZXUzIAW64=) 3: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: o/xFJ7bTquDM5Y22heMtOfpJUK7ZAIHGrwgNsL+Z3KY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:23:5c:1c:86:6e:4f:24:30:e2:09:b2:d7:9e:06:60:f2:d7:2a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: May 4 17:46:00 2025 GMT Not After : May 8 02:08:00 2025 GMT Subject: CN=C47BC4259DCE4BC49480B0A1D5090D7C461ADBAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:f3:35:27:7e:7d:44:92:f0:a9:1d:c1:ae: 24:87:d2:06:67:c5:36:c5:16:fa:a0:ab:b6:99:5a: 39:86:0a:e7:91:60:84:69:30:7c:3b:05:23:ad:4b: 17:5e:af:d8:2d:14:09:28:1d:e8:cc:00:a0:cc:ad: a6:de:3b:18:87:9f:90:91:a7:c9:7b:04:2e:5c:ee: 49:be:e1:38:f9:da:09:51:e2:2c:bc:a2:9d:f8:12: 86:f4:fa:22:31:46:9e:c0:7e:6b:5a:7d:08:f2:0e: 15:b1:33:3b:94:67:3f:1c:21:0e:ca:81:b5:48:64: c0:09:85:8c:80:2f:b4:5c:6a:f8:9d:f7:2c:dc:78: 6b:cd:ef:03:45:9e:ab:a6:5b:40:ee:a5:81:b7:1f: 79:f0:53:d5:35:60:34:4b:5a:ce:3a:59:24:03:9f: be:92:66:b6:7e:d8:ce:6a:03:20:b2:39:d1:59:62: bb:c4:53:86:7c:1e:7a:da:48:b9:07:8b:52:45:17: 7b:d1:29:22:56:d0:79:64:ad:87:b9:ce:5c:2d:bc: ca:3a:ff:1f:c6:20:ca:ec:66:7d:ec:0e:0a:13:63: 30:61:46:17:2b:7d:b7:b3:60:52:53:cd:f6:fb:c8: fe:32:f7:40:56:2b:47:65:3d:33:87:3f:29:4e:38: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7B:C4:25:9D:CE:4B:C4:94:80:B0:A1:D5:09:0D:7C:46:1A:DB:AD X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:36:6b:ef:df:76:53:67:00:a8:d3:f3:ec:c1:37:4a:39:8b: 41:39:79:8d:5a:00:dd:c5:a9:93:6e:db:00:ee:2a:7b:dd:b4: c3:f5:44:b1:6a:d7:d8:b4:90:c0:58:31:04:73:e2:4b:13:77: 34:e4:f7:5c:35:e5:0f:27:ba:28:dd:24:e8:0f:6c:04:40:7e: 7f:d2:09:31:bb:42:90:f5:21:02:41:b3:a8:34:a5:d2:79:a0: 41:a0:d0:ec:dd:93:e7:77:65:5a:68:43:09:36:ab:a2:96:ed: 9e:c3:90:37:30:44:7d:d5:53:fc:b8:4d:72:94:3e:fd:81:6a: 47:8a:8e:14:bd:a7:15:64:b1:ba:18:fe:90:b9:f5:16:0b:f6: 1e:79:c3:d0:b6:9f:6b:27:2d:01:91:22:06:3a:e8:7b:16:c2: 35:a4:14:5e:7e:9d:c4:ae:fd:7a:72:2e:c6:3f:a4:af:b4:95: 70:fb:b4:0e:b9:6a:ac:4b:72:74:62:f4:80:25:78:d9:fc:0f: 3b:a9:4c:01:64:db:61:f4:23:f7:15:2d:62:d0:44:9a:5f:57: 29:41:69:50:00:65:bf:53:23:ff:ef:7d:b8:40:59:41:29:b9: 1d:6b:32:16:fa:11:4a:d0:f7:f9:28:73:97:56:e0:2e:7d:d3: 95:86:9f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyNcHIZuTyQw4gmy154GYPLXKj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yNTA1MDQxNzQ2MDBaFw0yNTA1MDgwMjA4MDBaMDMxMTAvBgNV BAMTKEM0N0JDNDI1OURDRTRCQzQ5NDgwQjBBMUQ1MDkwRDdDNDYxQURCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWPM1J359RJLwqR3BriSH0gZn xTbFFvqgq7aZWjmGCueRYIRpMHw7BSOtSxder9gtFAkoHejMAKDMrabeOxiHn5CR p8l7BC5c7km+4Tj52glR4iy8op34Eob0+iIxRp7AfmtafQjyDhWxMzuUZz8cIQ7K gbVIZMAJhYyAL7Rcavid9yzceGvN7wNFnqumW0DupYG3H3nwU9U1YDRLWs46WSQD n76SZrZ+2M5qAyCyOdFZYrvEU4Z8HnraSLkHi1JFF3vRKSJW0HlkrYe5zlwtvMo6 /x/GIMrsZn3sDgoTYzBhRhcrfbezYFJTzfb7yP4y90BWK0dlPTOHPylOOD6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHvEJZ3OS8SUgLCh1QkNfEYa260wHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIw QTAxQURFREE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU2a+/fdlNnAKjT8+zBN0o5i0E5eY1aAN3F qZNu2wDuKnvdtMP1RLFq19i0kMBYMQRz4ksTdzTk91w15Q8nuijdJOgPbARAfn/S CTG7QpD1IQJBs6g0pdJ5oEGg0Ozdk+d3ZVpoQwk2q6KW7Z7DkDcwRH3VU/y4TXKU Pv2BakeKjhS9pxVksboY/pC59RYL9h55w9C2n2snLQGRIgY66HsWwjWkFF5+ncSu /XpyLsY/pK+0lXD7tA65aqxLcnRi9IAleNn8DzupTAFk22H0I/cVLWLQRJpfVylB aVAAZb9TI//vfbhAWUEpuR1rMhb6EUrQ9/koc5dW4C5905WGn2g= -----END CERTIFICATE-----Generated at Wed May 7 01:10:35 2025 by rpki-client