$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: L+sJS7p375w0u235p7nsFjElB7wpxNR4w/z9GhDqsiM= Subject key identifier: 12:B4:3B:47:5F:F3:AC:22:9A:FC:11:78:27:70:1C:0C:C8:E1:A8:B9 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 0B8C8A1CC0E554A59816A36F9176783480F05F33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: 88 Signing time: Thu 08 May 2025 21:40:39 +0000 Manifest this update: Thu 08 May 2025 21:35:39 +0000 Manifest next update: Sun 11 May 2025 23:09:39 +0000 Files and hashes: 1: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: dIklSAhTd1QkYpzQrRNxPi4OuuOcSwctGkAy0Q3T1ls=) 2: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: CdodYaeouhxo66OsYBDwI7YrRvnwEzM+cR8FhNFjPKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8c:8a:1c:c0:e5:54:a5:98:16:a3:6f:91:76:78:34:80:f0:5f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: May 8 21:35:39 2025 GMT Not After : May 11 23:09:39 2025 GMT Subject: CN=12B43B475FF3AC229AFC117827701C0CC8E1A8B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:55:71:93:ab:b4:76:d7:d3:4d:e5:58:23: 02:62:f8:d4:e1:7f:85:b2:b4:77:d0:5e:54:86:67: a4:4a:9a:65:06:98:db:4a:67:97:b2:b3:8b:60:ac: 00:76:b3:55:62:4a:8d:a2:a9:61:f5:69:65:ea:31: 06:1e:26:a6:db:aa:78:95:2d:2d:da:53:fa:c9:e9: 2b:12:23:cf:78:f6:56:b6:8e:ef:ae:d1:49:f9:94: 24:84:1a:49:c7:91:43:0c:19:de:1d:94:12:54:14: 85:21:a2:cd:b7:52:8c:e2:cd:16:37:59:4f:32:c9: f5:78:1a:e4:e4:98:7f:16:43:99:93:51:2f:bb:db: 64:cf:be:ee:b8:ad:81:c8:d4:16:5b:f0:80:61:28: 2e:c4:15:4d:b5:64:7c:50:6e:35:38:f4:e4:1e:c6: 65:2d:ce:12:bf:32:dd:46:5a:fc:8c:b4:63:a7:d2: b1:76:db:8e:34:01:df:5c:d6:ab:3e:a2:17:9f:b8: d5:97:d7:27:aa:f2:ab:c2:63:55:d3:15:dd:7b:f1: cf:35:47:25:ef:f4:54:0e:74:5d:fb:a9:5e:68:09: b0:8b:f3:5d:8b:61:7f:e6:e7:f0:6f:83:9d:80:50: c7:18:ca:44:4d:5a:75:02:99:a8:af:05:3c:f0:69: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B4:3B:47:5F:F3:AC:22:9A:FC:11:78:27:70:1C:0C:C8:E1:A8:B9 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:58:b1:f5:81:21:e0:83:5d:3c:69:e5:da:4b:b1:36:ba:92: e3:e3:1e:e3:82:6b:39:88:fa:bf:94:5d:43:24:bc:88:3f:42: 41:6c:f8:96:f1:9d:99:60:62:da:53:09:45:a9:d4:ca:3b:41: ee:15:63:33:02:28:49:1f:c4:54:62:12:dc:ba:15:bc:91:63: 29:c0:af:dd:f3:eb:64:9b:15:9d:de:f2:bd:e2:b6:b3:05:5f: d1:18:a7:90:ea:0c:cd:96:04:7c:09:e6:ae:aa:22:4b:e4:03: 7d:70:bd:23:ff:55:4e:6f:3b:6d:74:07:26:06:2d:1e:76:df: dd:89:ce:cd:d4:8e:0b:88:ab:64:52:90:a8:ab:ba:bf:70:5b: 47:9c:e3:22:08:0c:64:4e:25:13:89:11:66:75:24:fd:13:6a: ab:85:55:49:ac:76:18:bb:b4:7c:31:fd:ee:43:4d:1c:fa:5f: b7:2a:97:81:ad:92:51:52:3e:da:3f:c9:cd:4f:87:67:98:b1: bf:19:b4:de:b5:42:55:b7:59:05:1c:d1:b4:99:96:2c:b2:9c: b7:99:d7:c8:a0:fa:26:46:90:85:76:97:43:34:69:ea:13:b9: 3f:7a:c0:80:b6:05:73:e4:34:de:f1:49:37:4f:60:6c:08:ae: e6:1f:e6:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4yKHMDlVKWYFqNvkXZ4NIDwXzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTA1MDgyMTM1MzlaFw0yNTA1MTEyMzA5MzlaMDMxMTAvBgNV BAMTKDEyQjQzQjQ3NUZGM0FDMjI5QUZDMTE3ODI3NzAxQzBDQzhFMUE4QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYlVxk6u0dtfTTeVYIwJi+NTh f4WytHfQXlSGZ6RKmmUGmNtKZ5eys4tgrAB2s1ViSo2iqWH1aWXqMQYeJqbbqniV LS3aU/rJ6SsSI8949la2ju+u0Un5lCSEGknHkUMMGd4dlBJUFIUhos23UozizRY3 WU8yyfV4GuTkmH8WQ5mTUS+722TPvu64rYHI1BZb8IBhKC7EFU21ZHxQbjU49OQe xmUtzhK/Mt1GWvyMtGOn0rF22440Ad9c1qs+ohefuNWX1yeq8qvCY1XTFd178c81 RyXv9FQOdF37qV5oCbCL812LYX/m5/Bvg52AUMcYykRNWnUCmaivBTzwaS/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUErQ7R1/zrCKa/BF4J3AcDMjhqLkwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9YsfWBIeCDXTxp5dpLsTa6kuPjHuOCazmI +r+UXUMkvIg/QkFs+JbxnZlgYtpTCUWp1Mo7Qe4VYzMCKEkfxFRiEty6FbyRYynA r93z62SbFZ3e8r3itrMFX9EYp5DqDM2WBHwJ5q6qIkvkA31wvSP/VU5vO210ByYG LR52392Jzs3UjguIq2RSkKirur9wW0ec4yIIDGROJROJEWZ1JP0TaquFVUmsdhi7 tHwx/e5DTRz6X7cql4GtklFSPto/yc1Ph2eYsb8ZtN61QlW3WQUc0bSZliyynLeZ 18ig+iZGkIV2l0M0aeoTuT96wIC2BXPkNN7xSTdPYGwIruYf5s4= -----END CERTIFICATE-----Generated at Sat May 10 05:13:42 2025 by rpki-client