$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: oC78zzMMMA5rtp/1/2OCb9rQ6VjQnY/HhI9qOCy+3oc= Subject key identifier: 52:51:3F:BA:5C:86:AC:EE:52:1F:85:64:07:35:7A:CD:38:E3:26:AA Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 139FC8819FBE40EB4E70FBF6A284963D51E9C511 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 04D2 Signing time: Tue 06 May 2025 12:10:40 +0000 Manifest this update: Tue 06 May 2025 12:05:40 +0000 Manifest next update: Fri 09 May 2025 15:14:40 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 2: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: +2iIBKPqxi3ITGgsrY9PgXx230T1r0owkzHTREjnaJo=) 3: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) 4: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 5: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: jCGLKdJpeGR6pkKW0fpx8/dYRl6ktwkLjljEGQjLdas=) 6: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: aBaXrY9Ll+l6kmyDnJxBGG3OusTyC5H42thpgN1QrVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 15:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9f:c8:81:9f:be:40:eb:4e:70:fb:f6:a2:84:96:3d:51:e9:c5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: May 6 12:05:40 2025 GMT Not After : May 9 15:14:40 2025 GMT Subject: CN=52513FBA5C86ACEE521F856407357ACD38E326AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:e7:f3:03:0f:25:f8:fd:c2:fe:45:1c:12: ed:be:dc:dd:03:e7:b7:73:41:cf:9c:ad:8e:6c:5d: c6:6d:2c:6c:fe:df:8b:6b:5d:26:40:03:1b:74:de: c5:e1:78:0d:3b:7c:48:9e:05:93:41:4d:5c:b8:40: 01:93:33:dd:49:f8:49:c8:ad:06:4d:5b:58:bc:d1: fc:4d:9e:67:eb:f2:6f:ba:70:55:5a:f3:c7:a7:55: 70:53:0d:d8:7f:d0:c2:3a:06:68:3c:d4:3b:2e:73: e6:ba:e8:5a:72:9e:c2:17:33:b5:0a:a6:cd:9c:ff: cc:97:dd:05:13:91:af:61:4e:3a:d6:80:c8:70:ea: 13:c8:1c:61:2b:dd:2e:fb:2b:fd:69:2e:fb:e7:aa: be:d8:b5:69:2f:d2:6e:10:23:0b:23:41:25:cf:8e: 1b:36:f3:0b:1d:61:15:3b:9e:e4:6a:f8:09:46:ae: 83:6f:a9:1d:0e:d4:e5:da:bd:92:40:52:b9:96:30: b4:bf:dc:74:d3:17:ad:da:56:bb:91:34:c9:b5:63: 13:59:62:12:c3:8b:b1:6f:04:2d:7d:0a:07:23:5e: 6b:1d:eb:f1:f7:b8:42:27:72:7f:29:61:71:8d:4c: 2f:74:de:bc:3b:5e:ed:3b:5a:c3:29:7a:a7:0c:81: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:51:3F:BA:5C:86:AC:EE:52:1F:85:64:07:35:7A:CD:38:E3:26:AA X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:8e:ab:c1:b7:f0:37:2c:b1:57:59:e4:a4:48:74:6e:99:15: 30:f9:91:f6:09:3c:f7:49:42:26:95:d5:4c:9d:38:49:30:24: c7:d4:9b:0c:47:d6:0c:16:2c:80:f6:e7:39:7e:3f:eb:c7:9f: 2f:43:8d:fe:75:3f:98:43:0a:6a:b5:32:c6:2b:5f:83:6c:1a: 08:b5:5d:bf:d8:27:0a:9f:b5:72:71:24:b0:c7:b4:13:09:98: e9:da:2e:85:29:46:b4:c1:32:ed:14:dc:a8:b4:3a:e4:cd:a2: d0:75:c2:ca:a5:86:c3:26:14:0e:7d:38:30:4e:1a:87:37:a9: a3:02:61:5f:d3:a0:b2:da:96:f1:13:13:e9:2b:aa:33:9a:e7: ca:aa:42:14:34:d3:1d:3d:61:4a:3a:a6:65:11:84:96:f2:36: d1:91:2a:65:b2:ca:81:d4:2f:0d:2e:44:b2:94:00:24:ce:d2: 6a:f2:ea:6a:41:87:65:88:4d:41:3e:b1:d9:02:94:f4:8d:38: 3c:65:fb:67:b2:a4:17:bb:a6:e7:8f:b8:78:f5:dc:e6:24:e1: cf:30:ba:78:67:9b:5a:c8:aa:49:f8:9c:81:7b:8b:4e:cb:80: 75:8e:e2:4f:b8:f8:27:3c:43:df:e5:ab:e3:36:ee:70:48:d7: 8c:e8:09:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5/IgZ++QOtOcPv2ooSWPVHpxREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTA1MDYxMjA1NDBaFw0yNTA1MDkxNTE0NDBaMDMxMTAvBgNV BAMTKDUyNTEzRkJBNUM4NkFDRUU1MjFGODU2NDA3MzU3QUNEMzhFMzI2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdefzAw8l+P3C/kUcEu2+3N0D 57dzQc+crY5sXcZtLGz+34trXSZAAxt03sXheA07fEieBZNBTVy4QAGTM91J+EnI rQZNW1i80fxNnmfr8m+6cFVa88enVXBTDdh/0MI6Bmg81Dsuc+a66FpynsIXM7UK ps2c/8yX3QUTka9hTjrWgMhw6hPIHGEr3S77K/1pLvvnqr7YtWkv0m4QIwsjQSXP jhs28wsdYRU7nuRq+AlGroNvqR0O1OXavZJAUrmWMLS/3HTTF63aVruRNMm1YxNZ YhLDi7FvBC19CgcjXmsd6/H3uEIncn8pYXGNTC903rw7Xu07WsMpeqcMgR0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUlE/ulyGrO5SH4VkBzV6zTjjJqowHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyOq8G38DcssVdZ5KRIdG6ZFTD5kfYJPPdJ QiaV1UydOEkwJMfUmwxH1gwWLID25zl+P+vHny9Djf51P5hDCmq1MsYrX4NsGgi1 Xb/YJwqftXJxJLDHtBMJmOnaLoUpRrTBMu0U3Ki0OuTNotB1wsqlhsMmFA59ODBO Goc3qaMCYV/ToLLalvETE+krqjOa58qqQhQ00x09YUo6pmURhJbyNtGRKmWyyoHU Lw0uRLKUACTO0mry6mpBh2WITUE+sdkClPSNODxl+2eypBe7puePuHj13OYk4c8w unhnm1rIqkn4nIF7i07LgHWO4k+4+Cc8Q9/lq+M27nBI14zoCQI= -----END CERTIFICATE-----Generated at Thu May 8 15:18:00 2025 by rpki-client