$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: AaJtaoNP42+tuTCJ1uZ5BRwCkCFgcJEo0KdIT42Zz0I= Subject key identifier: 71:17:26:01:B8:3C:53:03:94:7D:E9:CA:47:0A:A1:D7:62:C7:A6:5B Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 58FCBB8C245A2B0D24D1F30078872191F9BBB000 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 0160 Signing time: Fri 09 May 2025 22:50:42 +0000 Manifest this update: Fri 09 May 2025 22:45:42 +0000 Manifest next update: Tue 13 May 2025 03:52:42 +0000 Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: WC5veu4yaTQoTEqfk4Lq4MRFnGTPy6VnuXWNWz+IFAI=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fc:bb:8c:24:5a:2b:0d:24:d1:f3:00:78:87:21:91:f9:bb:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: May 9 22:45:42 2025 GMT Not After : May 13 03:52:42 2025 GMT Subject: CN=71172601B83C5303947DE9CA470AA1D762C7A65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:6f:99:01:9e:94:f3:7d:d0:f8:4f:9a:10: c1:f3:ec:67:10:ae:ad:01:ee:ac:d9:28:bb:f0:4b: 0f:9a:b0:9d:b8:a9:eb:67:f0:a5:eb:b7:6e:ef:7b: 97:ca:44:59:6f:fd:aa:4d:d0:58:ce:19:30:ae:e8: fa:24:32:79:8f:15:24:2b:76:f1:5b:be:46:3b:2b: 7c:d4:62:23:18:e8:e0:8d:31:82:78:4f:39:14:13: c1:55:aa:09:87:f0:ce:0b:34:62:ea:65:e2:0d:8a: d2:39:30:de:19:f4:84:c7:21:a4:1d:c4:e3:2a:f6: c0:ed:b2:c0:c8:d4:ab:c8:d6:ae:12:75:2d:36:4c: 54:28:8c:1c:e0:d8:b0:fd:9a:3e:8a:e9:45:45:c3: e3:87:f9:b9:e0:96:b6:7d:a8:be:33:76:7d:01:71: b9:d7:dd:29:bb:c4:71:67:75:18:76:3e:df:e3:46: 86:92:49:1c:13:0c:c8:5e:fd:cd:68:8a:49:c4:ab: f4:a0:b6:61:0d:d8:08:0e:7a:54:42:c0:6e:7a:88: 00:d4:b8:71:49:69:19:43:57:9a:a8:04:51:f4:1f: d0:55:42:3c:31:e7:77:e0:12:ff:09:51:85:69:1a: 52:2e:60:a5:bc:cf:16:9c:ed:eb:84:bb:ea:dd:e2: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:17:26:01:B8:3C:53:03:94:7D:E9:CA:47:0A:A1:D7:62:C7:A6:5B X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5f:b8:85:d7:a2:8c:5c:3a:3f:b2:87:9f:32:d8:82:1e:1d: 92:e8:29:41:d0:1f:c4:e6:0c:0c:91:d7:03:72:15:17:7d:32: 71:a2:5b:52:f1:a9:02:0c:45:da:c3:a5:42:8e:5b:8e:2a:47: 49:0e:a9:31:c7:f9:a3:e7:d1:16:2d:73:35:fc:ee:31:32:aa: 46:dd:39:ae:f0:0a:a2:3a:cd:4f:31:2c:d9:4d:33:ac:0e:7e: 70:b3:19:ed:22:d8:5e:26:9d:5b:34:60:34:25:27:ca:18:42: 0e:cb:1e:00:b6:20:32:b8:af:07:3a:6c:a4:f9:2d:d8:70:0a: bd:ef:75:f3:71:f2:1b:34:0b:52:f3:f4:6a:c3:5c:3f:45:4b: 07:ae:28:58:72:00:ff:80:77:b8:e3:0c:01:9f:e3:22:97:2d: 85:93:57:72:34:3b:a8:28:7b:48:6c:6d:f1:ec:34:e2:88:0c: 34:19:0e:ec:27:10:ff:27:5e:db:ef:9c:5e:25:e1:5b:94:2b: f1:40:87:ad:d5:63:83:d5:8c:2e:70:8a:36:6c:8c:5d:fc:96: 37:cc:ff:0a:dd:25:0c:ee:eb:67:af:84:a4:ed:2f:a0:1c:8f: f3:11:ce:13:df:56:2b:b3:ae:d2:1e:9b:69:a3:99:0d:ab:4f: 62:5b:ea:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPy7jCRaKw0k0fMAeIchkfm7sAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTA1MDkyMjQ1NDJaFw0yNTA1MTMwMzUyNDJaMDMxMTAvBgNV BAMTKDcxMTcyNjAxQjgzQzUzMDM5NDdERTlDQTQ3MEFBMUQ3NjJDN0E2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEW+ZAZ6U833Q+E+aEMHz7GcQ rq0B7qzZKLvwSw+asJ24qetn8KXrt27ve5fKRFlv/apN0FjOGTCu6PokMnmPFSQr dvFbvkY7K3zUYiMY6OCNMYJ4TzkUE8FVqgmH8M4LNGLqZeINitI5MN4Z9ITHIaQd xOMq9sDtssDI1KvI1q4SdS02TFQojBzg2LD9mj6K6UVFw+OH+bnglrZ9qL4zdn0B cbnX3Sm7xHFndRh2Pt/jRoaSSRwTDMhe/c1oiknEq/SgtmEN2AgOelRCwG56iADU uHFJaRlDV5qoBFH0H9BVQjwx53fgEv8JUYVpGlIuYKW8zxac7euEu+rd4qtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcRcmAbg8UwOUfenKRwqh12LHplswHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtfuIXXooxcOj+yh58y2IIeHZLoKUHQH8Tm DAyR1wNyFRd9MnGiW1LxqQIMRdrDpUKOW44qR0kOqTHH+aPn0RYtczX87jEyqkbd Oa7wCqI6zU8xLNlNM6wOfnCzGe0i2F4mnVs0YDQlJ8oYQg7LHgC2IDK4rwc6bKT5 LdhwCr3vdfNx8hs0C1Lz9GrDXD9FSweuKFhyAP+Ad7jjDAGf4yKXLYWTV3I0O6go e0hsbfHsNOKIDDQZDuwnEP8nXtvvnF4l4VuUK/FAh63VY4PVjC5wijZsjF38ljfM /wrdJQzu62evhKTtL6Acj/MRzhPfViuzrtIem2mjmQ2rT2Jb6tY= -----END CERTIFICATE-----Generated at Sat May 10 00:33:47 2025 by rpki-client