$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: Lx4lWwW/vU/1jsi2kHktxU+QoYO7kizovvigMzMcP2o= Subject key identifier: 14:4E:57:3E:A4:4B:A5:AF:5D:74:B5:6E:6E:79:C2:63:E9:9F:3D:E9 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 5A036A221D5DAD7D1770F588BE28291B16D39C7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0209 Signing time: Fri 16 May 2025 23:41:13 +0000 Manifest this update: Fri 16 May 2025 23:36:13 +0000 Manifest next update: Tue 20 May 2025 07:59:13 +0000 Files and hashes: 1: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 2: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 3: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 4: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) 5: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: zfORzZJ6TXqEbIczRn/U2YRRMX4H4/hbCIDNedC54ns=) 6: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:03:6a:22:1d:5d:ad:7d:17:70:f5:88:be:28:29:1b:16:d3:9c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: May 16 23:36:13 2025 GMT Not After : May 20 07:59:13 2025 GMT Subject: CN=144E573EA44BA5AF5D74B56E6E79C263E99F3DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:0b:e9:6a:20:40:a0:44:e2:23:88:98:02: 73:fc:3a:c3:dd:21:00:66:75:da:e9:e2:18:c3:5c: 96:89:c4:fa:1d:7b:0c:18:ca:84:45:e6:d1:51:0a: db:68:8a:cc:2c:6d:1c:0c:9b:79:10:11:ac:67:0a: 9f:97:4a:c0:94:7f:78:ae:72:1d:92:72:f0:5f:df: 35:35:c4:2b:29:43:86:b2:99:d1:9c:28:98:cf:54: ae:e0:fa:bb:97:9e:02:39:98:ea:b4:64:32:37:7c: 3c:8f:44:d0:b1:91:db:0c:c7:6d:ae:39:5d:5c:f8: 73:1b:53:fc:c9:bd:66:e7:3f:00:41:0a:77:67:ff: 15:62:42:49:35:00:3d:25:7d:16:99:00:3f:17:ac: ac:d1:02:d9:00:8f:e6:0d:99:20:39:24:18:8f:fe: 64:a0:9d:74:99:08:9d:b9:1b:df:19:a4:5d:61:0a: ca:f9:f1:6b:b4:37:20:56:c5:12:7a:ec:fe:6d:3b: d3:d9:04:10:64:83:4b:15:ae:41:08:3c:eb:dd:98: 8a:30:77:3a:92:14:66:d0:dd:00:c0:95:7c:5c:a3: c0:7d:49:15:22:bd:76:c7:8c:aa:6d:0c:f5:63:0d: b9:54:ea:c0:50:73:dc:90:0d:f0:ea:b2:2f:c6:ac: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4E:57:3E:A4:4B:A5:AF:5D:74:B5:6E:6E:79:C2:63:E9:9F:3D:E9 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:86:73:9b:03:11:55:12:c5:3b:59:88:01:5e:a2:27:a6:7c: cc:1a:b9:bb:66:4f:8a:1f:a5:6e:a9:7a:2d:b9:2d:f2:36:cd: bd:fd:a5:1f:36:2d:71:18:03:19:3c:81:e0:59:af:6b:00:10: 34:aa:4d:89:66:85:d9:cc:10:85:b8:5d:4b:48:90:50:f3:e7: 0d:16:bc:8f:9a:98:67:34:78:6c:04:3f:ca:d6:33:d0:8c:af: 91:f8:e8:e2:d7:76:9e:c0:a7:b8:84:06:98:cc:d0:c7:ad:b2: 8c:32:2e:0f:fc:23:7c:49:e3:af:76:0d:e0:b0:e9:88:66:21: 33:7f:02:5c:ba:d4:24:f9:c3:81:41:30:30:13:d1:6a:a9:08: 4e:42:da:34:7e:dc:96:41:79:6c:95:92:95:64:5b:ad:3b:de: 0a:9a:e1:7c:b0:97:40:9d:0b:da:a0:bd:47:2c:65:2d:a6:bf: 06:50:90:49:57:d7:33:96:be:33:e3:5f:00:8c:ca:9d:a6:21: cb:38:11:c7:b3:af:6e:ff:bf:a2:d1:81:01:9b:0b:b3:8c:f5: 28:27:bc:55:01:ac:4a:e3:1b:64:1b:b2:33:f2:1e:90:6e:31: 92:e1:fc:24:6e:3a:42:9c:38:39:76:1d:8e:90:4c:3f:d9:4c: 29:8a:da:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgNqIh1drX0XcPWIvigpGxbTnHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTA1MTYyMzM2MTNaFw0yNTA1MjAwNzU5MTNaMDMxMTAvBgNV BAMTKDE0NEU1NzNFQTQ0QkE1QUY1RDc0QjU2RTZFNzlDMjYzRTk5RjNERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWQvpaiBAoETiI4iYAnP8OsPd IQBmddrp4hjDXJaJxPodewwYyoRF5tFRCttoiswsbRwMm3kQEaxnCp+XSsCUf3iu ch2ScvBf3zU1xCspQ4aymdGcKJjPVK7g+ruXngI5mOq0ZDI3fDyPRNCxkdsMx22u OV1c+HMbU/zJvWbnPwBBCndn/xViQkk1AD0lfRaZAD8XrKzRAtkAj+YNmSA5JBiP /mSgnXSZCJ25G98ZpF1hCsr58Wu0NyBWxRJ67P5tO9PZBBBkg0sVrkEIPOvdmIow dzqSFGbQ3QDAlXxco8B9SRUivXbHjKptDPVjDblU6sBQc9yQDfDqsi/GrJW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFE5XPqRLpa9ddLVubnnCY+mfPekwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+Gc5sDEVUSxTtZiAFeoiemfMwaubtmT4of pW6pei25LfI2zb39pR82LXEYAxk8geBZr2sAEDSqTYlmhdnMEIW4XUtIkFDz5w0W vI+amGc0eGwEP8rWM9CMr5H46OLXdp7Ap7iEBpjM0MetsowyLg/8I3xJ4692DeCw 6YhmITN/Aly61CT5w4FBMDAT0WqpCE5C2jR+3JZBeWyVkpVkW6073gqa4Xywl0Cd C9qgvUcsZS2mvwZQkElX1zOWvjPjXwCMyp2mIcs4Ecezr27/v6LRgQGbC7OM9Sgn vFUBrErjG2QbsjPyHpBuMZLh/CRuOkKcODl2HY6QTD/ZTCmK2gY= -----END CERTIFICATE-----Generated at Sat May 17 02:37:19 2025 by rpki-client