$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: 5ZTuWLsB3oTV/TvbXULsaOlZzFko0Ha2BA/jbOYHUw8= Subject key identifier: F0:67:E8:45:B3:FE:93:F4:3B:AB:C8:62:A7:C8:DF:5E:59:F0:30:79 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 617AE6DBCFF4252584A003B8B10308314FC3904A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 04CC Signing time: Fri 09 May 2025 22:11:24 +0000 Manifest this update: Fri 09 May 2025 22:06:24 +0000 Manifest next update: Tue 13 May 2025 06:27:24 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: JS0a7Ksc89wpL7cdbAooBFrEkG5f6zqJNniBGGUrU4A=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: k8P5AhT4s12SuVIrOLY9OUPcVfTVNiJQc/ut89s+Rrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7a:e6:db:cf:f4:25:25:84:a0:03:b8:b1:03:08:31:4f:c3:90:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: May 9 22:06:24 2025 GMT Not After : May 13 06:27:24 2025 GMT Subject: CN=F067E845B3FE93F43BABC862A7C8DF5E59F03079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:1c:a7:40:a6:22:26:eb:55:16:2e:c0:fe: 56:6f:10:57:3a:cf:7b:ca:2c:96:d5:19:7f:e1:c1: 48:35:7c:6c:c1:9c:a7:8b:72:2f:6e:33:b7:31:6b: c7:1c:fe:41:3d:e9:5a:d7:dc:30:73:b2:85:ba:81: d1:2c:94:2d:0b:a9:c4:e5:32:10:ec:74:f9:88:69: 72:6a:c2:21:55:b8:24:46:d3:c1:c0:43:a7:50:08: 28:45:ac:b7:5c:06:93:30:2b:c5:ff:92:be:93:1d: 9f:4b:36:f5:19:03:3d:be:ca:a1:96:5c:75:74:43: 16:8c:27:10:aa:de:d6:5f:fb:7b:d3:11:1c:53:80: 7c:bc:77:7f:14:f2:0f:83:83:c6:09:62:8a:22:1d: 49:f0:8f:4f:cf:40:07:f4:8c:d2:a7:cd:d2:4a:6f: 83:f8:a3:21:6d:9e:bd:9d:97:74:a1:79:b0:2d:bd: db:c4:df:36:6b:73:4a:2e:7c:f3:92:a3:5b:8d:f9: 6c:53:95:eb:a1:c2:fd:1d:d8:86:1d:5d:27:b2:76: fc:e0:00:76:71:ff:18:fb:c8:54:f9:16:51:58:d4: df:48:f1:e2:8e:56:9e:91:18:9d:c7:be:be:a2:9f: d3:64:0d:bf:de:a6:38:af:a0:9b:bc:49:10:13:24: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:E8:45:B3:FE:93:F4:3B:AB:C8:62:A7:C8:DF:5E:59:F0:30:79 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5f:ab:46:87:7d:c5:6b:3e:07:8a:e2:09:63:5e:0a:79:78: 7b:7e:75:67:8e:c6:4e:72:15:d1:89:6a:4d:5e:d4:f6:6f:9e: d4:99:86:5e:f6:14:d8:ea:83:20:41:c7:60:95:1e:2c:e9:4c: 5a:79:98:bf:49:6b:06:b5:0c:6a:e3:1a:00:64:db:c6:3b:94: 38:37:73:89:57:fa:88:16:12:c3:5a:04:80:bb:92:0a:c0:31: 83:91:42:41:61:a3:bf:be:ab:2e:fd:91:8d:43:ba:b4:8f:64: d9:f5:ab:b4:0a:43:26:9a:a7:5b:04:b9:e4:c7:f2:d4:96:da: 28:21:51:61:02:1c:87:64:54:99:03:c5:b3:34:0a:14:ef:0a: 71:a3:98:06:56:36:09:94:c4:a3:ca:71:ef:f0:19:7e:9a:60: ee:85:2d:8d:18:dc:a7:8f:43:b7:a4:58:6e:29:9e:da:82:3b: c6:a9:bd:66:4f:5c:b0:06:88:25:a1:cd:96:90:39:aa:b0:40: 13:ac:7b:2c:d0:1f:92:9b:ac:88:8b:79:cd:4b:9e:5f:d7:79: bb:7f:cd:ae:bd:84:a9:35:df:ea:85:df:be:f8:d6:ea:05:42: d9:21:cc:1d:6b:a7:d6:9f:25:3e:f7:fc:64:a4:6c:c0:5e:e1: 2d:75:55:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXrm28/0JSWEoAO4sQMIMU/DkEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTA1MDkyMjA2MjRaFw0yNTA1MTMwNjI3MjRaMDMxMTAvBgNV BAMTKEYwNjdFODQ1QjNGRTkzRjQzQkFCQzg2MkE3QzhERjVFNTlGMDMwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrRynQKYiJutVFi7A/lZvEFc6 z3vKLJbVGX/hwUg1fGzBnKeLci9uM7cxa8cc/kE96VrX3DBzsoW6gdEslC0LqcTl MhDsdPmIaXJqwiFVuCRG08HAQ6dQCChFrLdcBpMwK8X/kr6THZ9LNvUZAz2+yqGW XHV0QxaMJxCq3tZf+3vTERxTgHy8d38U8g+Dg8YJYooiHUnwj0/PQAf0jNKnzdJK b4P4oyFtnr2dl3ShebAtvdvE3zZrc0oufPOSo1uN+WxTleuhwv0d2IYdXSeydvzg AHZx/xj7yFT5FlFY1N9I8eKOVp6RGJ3Hvr6in9NkDb/epjivoJu8SRATJJilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8GfoRbP+k/Q7q8hip8jfXlnwMHkwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRfq0aHfcVrPgeK4gljXgp5eHt+dWeOxk5y FdGJak1e1PZvntSZhl72FNjqgyBBx2CVHizpTFp5mL9Jawa1DGrjGgBk28Y7lDg3 c4lX+ogWEsNaBIC7kgrAMYORQkFho7++qy79kY1DurSPZNn1q7QKQyaap1sEueTH 8tSW2ighUWECHIdkVJkDxbM0ChTvCnGjmAZWNgmUxKPKce/wGX6aYO6FLY0Y3KeP Q7ekWG4pntqCO8apvWZPXLAGiCWhzZaQOaqwQBOseyzQH5KbrIiLec1Lnl/Xebt/ za69hKk13+qF37741uoFQtkhzB1rp9afJT73/GSkbMBe4S11VVk= -----END CERTIFICATE-----Generated at Sat May 10 05:29:42 2025 by rpki-client