$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: qKoIlNsKAjliddkrFqkuOFXjojNOWjeBzVB1L+y2HKg= Subject key identifier: D6:31:6F:44:87:16:86:F6:22:B2:16:F4:EA:6F:02:69:4C:E3:B9:6E Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 4DFAFBB14A88481AB6931ABD1D0E6294C9F764BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 037E Signing time: Fri 09 May 2025 16:21:08 +0000 Manifest this update: Fri 09 May 2025 16:16:08 +0000 Manifest next update: Tue 13 May 2025 02:43:08 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: Pi5/+zMiiR6kifMeJWVbp6baVKb/2dX/gAjWpXHdiN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fa:fb:b1:4a:88:48:1a:b6:93:1a:bd:1d:0e:62:94:c9:f7:64:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: May 9 16:16:08 2025 GMT Not After : May 13 02:43:08 2025 GMT Subject: CN=D6316F44871686F622B216F4EA6F02694CE3B96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:c0:f1:87:00:a7:aa:ab:75:3f:54:7a:2e: cb:7a:c0:d6:91:09:d3:4e:c5:36:14:c6:d4:d0:30: a5:fa:42:7d:dd:5d:0d:9e:f5:2b:0b:7c:3b:59:7a: 1b:1c:44:52:c8:c3:ce:12:87:fe:84:8d:b6:80:bf: c8:5b:69:16:c0:fc:dc:5a:9a:7b:f6:59:ab:49:02: 0c:7d:f0:4d:77:d7:52:34:4b:fc:fe:d4:93:32:08: a4:a1:44:13:73:fd:2f:3d:4a:c7:b8:13:3e:f8:8b: 06:14:a0:0f:96:b3:44:2a:f5:09:ed:9f:e7:b6:5c: 96:e3:db:1f:17:b8:d2:05:9e:a9:55:0f:ac:fd:54: ca:26:fb:f7:db:df:c5:a8:bd:b2:cd:00:57:62:06: 63:ca:1e:78:4c:39:d4:31:26:32:33:61:c3:05:78: cf:07:1a:2b:bb:58:0f:ae:a8:bf:ca:dc:c7:d2:03: b1:9b:66:de:f5:74:2e:80:c3:90:df:d3:7e:94:73: a5:72:25:20:81:c8:f0:6f:13:a9:26:45:e3:bd:be: a7:96:17:3f:df:36:8b:eb:86:dc:48:42:d4:09:1c: 79:00:c0:45:fb:51:88:0d:41:ca:17:88:bf:a1:f4: 7e:e5:cb:23:df:23:06:59:28:48:d7:48:77:7d:97: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:31:6F:44:87:16:86:F6:22:B2:16:F4:EA:6F:02:69:4C:E3:B9:6E X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4f:68:7e:6a:64:6d:11:f6:b0:4b:ad:ab:e0:e1:40:8d:77: 31:f1:6c:24:f5:7a:50:7d:24:9d:97:b0:d2:33:11:5a:a6:59: 83:6e:bb:b7:86:29:b1:cc:a0:74:15:b5:ba:89:35:8a:f3:83: 39:e3:6d:79:45:83:63:04:65:97:a3:e8:75:55:77:84:bb:16: 59:fc:64:c4:52:77:6e:be:81:63:d9:53:49:d1:cd:87:2f:aa: 6b:23:cf:7d:d5:65:0c:ff:1a:3b:16:7c:9c:15:5b:cc:62:90: 80:60:50:e9:64:8c:8b:78:0f:80:10:40:21:5a:46:80:ab:91: c4:e8:08:38:bb:65:a4:ad:c5:47:4c:c5:59:47:c3:5a:87:c9: 3d:9b:98:09:d9:89:2e:31:56:34:ec:25:97:77:b9:09:13:d4: 5c:89:92:b1:7b:6d:65:57:a8:26:db:fd:a3:99:22:b4:af:46: 69:fc:66:1e:5c:c3:ea:3c:39:71:56:ca:fe:c4:f5:b7:49:c1: 5b:e1:4e:12:ec:44:f6:47:7b:84:4d:a8:42:28:87:df:19:ac: b4:37:f1:07:2a:0a:e5:93:84:1d:4e:37:a6:e8:47:e9:9d:87: 08:f8:3c:5a:b9:73:b1:f4:92:75:91:90:0b:59:f0:f4:3f:75: d8:7e:6b:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfr7sUqISBq2kxq9HQ5ilMn3ZL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTA1MDkxNjE2MDhaFw0yNTA1MTMwMjQzMDhaMDMxMTAvBgNV BAMTKEQ2MzE2RjQ0ODcxNjg2RjYyMkIyMTZGNEVBNkYwMjY5NENFM0I5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxMDxhwCnqqt1P1R6Lst6wNaR CdNOxTYUxtTQMKX6Qn3dXQ2e9SsLfDtZehscRFLIw84Sh/6EjbaAv8hbaRbA/Nxa mnv2WatJAgx98E1311I0S/z+1JMyCKShRBNz/S89Sse4Ez74iwYUoA+Ws0Qq9Qnt n+e2XJbj2x8XuNIFnqlVD6z9VMom+/fb38WovbLNAFdiBmPKHnhMOdQxJjIzYcMF eM8HGiu7WA+uqL/K3MfSA7GbZt71dC6Aw5Df036Uc6VyJSCByPBvE6kmReO9vqeW Fz/fNovrhtxIQtQJHHkAwEX7UYgNQcoXiL+h9H7lyyPfIwZZKEjXSHd9l9zPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jFvRIcWhvYishb06m8CaUzjuW4wHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhPaH5qZG0R9rBLravg4UCNdzHxbCT1elB9 JJ2XsNIzEVqmWYNuu7eGKbHMoHQVtbqJNYrzgznjbXlFg2MEZZej6HVVd4S7Fln8 ZMRSd26+gWPZU0nRzYcvqmsjz33VZQz/GjsWfJwVW8xikIBgUOlkjIt4D4AQQCFa RoCrkcToCDi7ZaStxUdMxVlHw1qHyT2bmAnZiS4xVjTsJZd3uQkT1FyJkrF7bWVX qCbb/aOZIrSvRmn8Zh5cw+o8OXFWyv7E9bdJwVvhThLsRPZHe4RNqEIoh98ZrLQ3 8QcqCuWThB1ON6boR+mdhwj4PFq5c7H0knWRkAtZ8PQ/ddh+a1E= -----END CERTIFICATE-----Generated at Sun May 11 02:24:01 2025 by rpki-client