$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: Q7plmPSNEIFCWBaPEwSjgI75of2bJQTgv/iNiYjfyzs= Subject key identifier: 7C:78:08:0B:C8:B4:0B:92:F1:75:61:0A:1F:F0:E8:70:59:0C:CE:7F Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 6BE3141CBD1084FEB3E7AD3E8FF5A014D464B420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 98 Signing time: Thu 08 May 2025 07:02:48 +0000 Manifest this update: Thu 08 May 2025 06:57:48 +0000 Manifest next update: Sun 11 May 2025 10:10:48 +0000 Files and hashes: 1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) 2: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: 70OUWmpuFYO0yYmMYwFXfZSB2zQSzvJt4kQ5NyzGYus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 10:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e3:14:1c:bd:10:84:fe:b3:e7:ad:3e:8f:f5:a0:14:d4:64:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: May 8 06:57:48 2025 GMT Not After : May 11 10:10:48 2025 GMT Subject: CN=7C78080BC8B40B92F175610A1FF0E870590CCE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:90:cc:a5:ec:ac:63:f7:dd:b6:81:49:9e: 83:91:5c:b1:c7:23:ce:d6:d9:eb:79:4a:f9:24:1d: 36:26:45:9c:83:08:fc:c7:73:05:c0:60:f0:58:62: 50:11:1c:89:7a:cb:45:68:3d:1f:98:00:b6:09:7a: b4:fe:46:54:44:2f:97:a2:d9:7e:70:34:d0:d7:83: 0f:37:ec:d7:a9:a8:0c:a9:ee:56:64:2d:8c:45:e0: ec:0c:d4:3b:6b:99:c2:61:15:45:6a:75:eb:77:e0: 00:37:79:35:3d:6c:99:eb:87:89:df:76:46:89:8e: f2:77:1a:af:73:fb:fa:fd:fd:8c:76:c0:0f:64:91: 34:49:f5:3c:26:79:11:b1:71:c9:fc:a1:4b:b7:d0: a9:04:10:93:ed:ce:4c:07:65:b9:a9:9e:e8:ae:cd: 25:7b:af:f5:ca:a0:be:b9:d4:ad:56:10:08:46:5b: 61:d9:4e:c1:b5:86:e6:70:5c:8d:6a:2b:55:2a:d6: b3:3d:56:10:77:c3:90:58:d3:09:9d:f8:af:7b:5b: 72:a6:5a:06:1b:0d:d7:24:f4:8d:c5:cc:e9:89:14: 2f:d8:c2:86:34:2b:14:2b:a4:0e:1d:9f:84:0e:9c: c8:35:47:61:4c:9d:65:ea:6e:85:3b:f9:5a:06:88: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:08:0B:C8:B4:0B:92:F1:75:61:0A:1F:F0:E8:70:59:0C:CE:7F X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ed:03:90:4b:af:9e:fd:10:b4:65:bc:36:b2:83:2f:b7:09: d8:29:41:81:41:5b:ba:ec:2f:09:31:06:8c:7b:7a:7a:a3:d1: 95:16:c3:30:83:b4:fb:7f:7b:70:55:ce:40:61:e7:1c:24:35: 1e:19:d0:ae:e8:2e:a7:87:38:13:f3:2b:d5:7b:e7:bb:9f:af: 76:fc:91:61:9a:69:da:9e:09:b0:ec:7f:8b:3e:5a:46:27:71: 58:66:e1:8d:c5:7d:b3:7e:65:ab:75:d8:5e:57:7e:c9:2a:63: 08:5c:13:28:26:21:70:e9:22:36:3e:2d:ed:ee:2b:96:f6:f6: 60:64:ee:e0:17:5c:80:0b:02:4b:fe:c1:21:7d:8e:9c:23:d2: c0:f7:f0:9a:f2:58:96:04:f3:07:16:2e:7b:4d:1f:19:12:6b: e9:5e:2f:21:82:90:cc:55:8d:79:8a:93:90:0d:c6:5f:ba:83: eb:5d:a3:d5:3b:c8:63:14:44:3a:1f:ea:45:08:dc:14:12:a6: 94:e6:1a:f6:5e:6a:90:d8:b6:5c:7e:da:f1:cd:e6:7c:cf:71: 16:c1:3b:8c:c5:b7:be:5d:78:22:d0:56:bf:de:ac:61:d6:cf: c4:85:87:10:aa:39:da:ef:a3:4e:39:75:ed:87:95:92:7c:d1: 59:11:63:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+MUHL0QhP6z560+j/WgFNRktCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTA1MDgwNjU3NDhaFw0yNTA1MTExMDEwNDhaMDMxMTAvBgNV BAMTKDdDNzgwODBCQzhCNDBCOTJGMTc1NjEwQTFGRjBFODcwNTkwQ0NFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6q5DMpeysY/fdtoFJnoORXLHH I87W2et5SvkkHTYmRZyDCPzHcwXAYPBYYlARHIl6y0VoPR+YALYJerT+RlREL5ei 2X5wNNDXgw837NepqAyp7lZkLYxF4OwM1DtrmcJhFUVqdet34AA3eTU9bJnrh4nf dkaJjvJ3Gq9z+/r9/Yx2wA9kkTRJ9TwmeRGxccn8oUu30KkEEJPtzkwHZbmpnuiu zSV7r/XKoL651K1WEAhGW2HZTsG1huZwXI1qK1Uq1rM9VhB3w5BY0wmd+K97W3Km WgYbDdck9I3FzOmJFC/YwoY0KxQrpA4dn4QOnMg1R2FMnWXqboU7+VoGiBJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHgIC8i0C5LxdWEKH/DocFkMzn8wHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjtA5BLr579ELRlvDaygy+3CdgpQYFBW7rs LwkxBox7enqj0ZUWwzCDtPt/e3BVzkBh5xwkNR4Z0K7oLqeHOBPzK9V757ufr3b8 kWGaadqeCbDsf4s+WkYncVhm4Y3FfbN+Zat12F5XfskqYwhcEygmIXDpIjY+Le3u K5b29mBk7uAXXIALAkv+wSF9jpwj0sD38JryWJYE8wcWLntNHxkSa+leLyGCkMxV jXmKk5ANxl+6g+tdo9U7yGMURDof6kUI3BQSppTmGvZeapDYtlx+2vHN5nzPcRbB O4zFt75deCLQVr/erGHWz8SFhxCqOdrvo045de2HlZJ80VkRY8U= -----END CERTIFICATE-----Generated at Thu May 8 18:00:36 2025 by rpki-client