$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft File: 129285A478A166EE0B54DBCDA60771DA54C4F65F.mft (raw, json) Hash identifier: s+xv1b1PaoDbD2xOQhbBtvu6EnaDmUAFo5u57C7wZO4= Subject key identifier: 67:DA:59:06:1B:C2:C3:E0:2D:9F:A0:20:D2:6F:45:64:20:B9:60:D9 Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Certificate serial: 0627DD86FAC989C4D221A0738480A0E5009B5803 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft Manifest number: 04DB Signing time: Tue 06 May 2025 21:50:34 +0000 Manifest this update: Tue 06 May 2025 21:45:34 +0000 Manifest next update: Sat 10 May 2025 05:32:34 +0000 Files and hashes: 1: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: Yjlkkc0qEXfgrDlzvTciB2VHeHjekmf/H9byxQIVCPg=) 2: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: 6PZ9AuCCelWL7xkgwqQYp7n5rkYf6qrJ0gviPmFHZso=) 3: 129285A478A166EE0B54DBCDA60771DA54C4F65F.crl (hash: 63sl8s4UN+IcJlMTYt1sdl/VQ/iZw2lW+mzRvJfXg6A=) 4: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: Bb/OkwwJmJHe8/z9Qp5PTG+7pV0l1ZMHq6rEYToHVas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:27:dd:86:fa:c9:89:c4:d2:21:a0:73:84:80:a0:e5:00:9b:58:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Validity Not Before: May 6 21:45:34 2025 GMT Not After : May 10 05:32:34 2025 GMT Subject: CN=67DA59061BC2C3E02D9FA020D26F456420B960D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:19:45:a8:81:eb:4f:59:9d:46:73:d0:56: f1:fe:2b:b2:33:62:39:03:e4:81:df:10:9a:bb:c9: 24:48:08:2e:a7:59:d3:55:95:d8:8d:d8:1e:06:e4: 79:05:70:e5:63:9d:5a:27:54:54:91:8c:d4:a7:06: a5:96:ba:17:82:23:29:fc:6a:b2:d0:aa:bb:c3:03: a9:30:db:08:98:3d:0f:76:4c:38:84:20:63:2d:26: 8e:38:44:dd:b7:53:02:bb:11:47:fb:c8:a3:b6:d4: b6:bc:3f:88:f4:51:60:b8:99:1e:00:53:72:61:5d: 22:38:4e:5b:ec:72:0e:07:dd:14:2d:68:14:21:52: 78:f2:54:0d:90:a0:f4:bb:4c:5d:a3:32:7e:11:1e: 5f:59:b0:9e:69:f5:e7:07:a4:fc:a6:57:eb:75:9d: 86:17:7e:9d:ec:b6:77:3f:f5:bf:55:e0:eb:98:d8: c5:a8:e4:3c:7a:f4:91:8d:c3:49:ed:d8:50:c1:e8: af:c2:55:1b:ba:72:3d:57:35:4d:4d:2e:1f:f3:99: f8:d3:a0:5f:fa:a3:b3:0a:e9:34:7e:33:26:29:e8: 8a:4a:42:9d:88:80:a5:2b:e6:88:29:2d:d5:9f:4a: fb:c4:ba:44:e9:d9:ea:a5:1b:41:92:9c:b5:8c:07: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:59:06:1B:C2:C3:E0:2D:9F:A0:20:D2:6F:45:64:20:B9:60:D9 X509v3 Authority Key Identifier: keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:75:1e:2d:94:f7:b3:00:8c:d1:ee:57:ff:a1:4b:4e:f7:59: ae:e3:6d:eb:62:55:b3:b8:99:ed:4e:22:c1:ba:32:9b:68:0b: a7:da:16:a8:95:73:e6:f1:2d:23:e9:ae:76:be:df:11:20:53: 98:cc:f9:f9:e8:2b:a9:f1:68:ee:00:c3:13:d8:91:44:2a:3a: 19:70:a0:96:09:be:db:97:9b:9c:a7:68:c9:f0:b4:3b:70:b3: 21:25:e8:0c:d5:05:87:b8:ac:1e:1a:9f:97:52:f9:a4:55:16: b4:94:41:4a:ae:c8:96:de:a8:d0:1c:03:7a:d2:20:77:8d:95: ee:3e:b5:70:4a:4d:74:cd:92:8e:8b:a1:4e:ae:a1:ac:65:ef: fc:51:dc:fe:35:9d:6f:78:5d:3c:ec:82:3b:c6:2f:31:53:28: 6a:0f:82:c4:e1:96:bb:b8:52:eb:0e:d5:b9:3e:11:c9:d5:bf: 08:f8:f4:ef:fe:72:80:ab:0d:cc:dd:df:81:85:54:8a:cf:20: 2c:c1:89:06:ff:a3:c1:8d:66:44:34:dd:79:32:75:f3:2b:2f: 85:21:ce:d7:48:65:f3:c9:20:57:4f:f4:13:7a:fd:82:2f:a5: 22:ab:22:31:15:4a:77:96:fc:93:65:ac:49:9a:32:63:e6:7c: ba:2c:19:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBifdhvrJicTSIaBzhICg5QCbWAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1 NEM0RjY1RjAeFw0yNTA1MDYyMTQ1MzRaFw0yNTA1MTAwNTMyMzRaMDMxMTAvBgNV BAMTKDY3REE1OTA2MUJDMkMzRTAyRDlGQTAyMEQyNkY0NTY0MjBCOTYwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoBlFqIHrT1mdRnPQVvH+K7Iz YjkD5IHfEJq7ySRICC6nWdNVldiN2B4G5HkFcOVjnVonVFSRjNSnBqWWuheCIyn8 arLQqrvDA6kw2wiYPQ92TDiEIGMtJo44RN23UwK7EUf7yKO21La8P4j0UWC4mR4A U3JhXSI4Tlvscg4H3RQtaBQhUnjyVA2QoPS7TF2jMn4RHl9ZsJ5p9ecHpPymV+t1 nYYXfp3stnc/9b9V4OuY2MWo5Dx69JGNw0nt2FDB6K/CVRu6cj1XNU1NLh/zmfjT oF/6o7MK6TR+MyYp6IpKQp2IgKUr5ogpLdWfSvvEukTp2eqlG0GSnLWMB3r/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ9pZBhvCw+Atn6Ag0m9FZCC5YNkwHwYDVR0j BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4 QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0 RjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcx REE1NEM0RjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV1Hi2U97MAjNHuV/+hS073Wa7jbetiVbO4 me1OIsG6MptoC6faFqiVc+bxLSPprna+3xEgU5jM+fnoK6nxaO4AwxPYkUQqOhlw oJYJvtuXm5ynaMnwtDtwsyEl6AzVBYe4rB4an5dS+aRVFrSUQUquyJbeqNAcA3rS IHeNle4+tXBKTXTNko6LoU6uoaxl7/xR3P41nW94XTzsgjvGLzFTKGoPgsThlru4 UusO1bk+EcnVvwj49O/+coCrDczd34GFVIrPICzBiQb/o8GNZkQ03XkydfMrL4Uh ztdIZfPJIFdP9BN6/YIvpSKrIjEVSneW/JNlrEmaMmPmfLosGX4= -----END CERTIFICATE-----Generated at Thu May 8 06:26:01 2025 by rpki-client