$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: wWTeYu6EVWbhwdzN/1KYbyrpkb8x0Oy5kmh5iuxf+dA= Subject key identifier: 0F:1C:C0:25:05:A4:C9:95:C4:3F:8D:64:71:14:19:A9:44:92:94:37 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 0B9055CEBCBE6BFB8D39ED68081D4E3186EC5B5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 01E2 Signing time: Sun 11 May 2025 10:22:04 +0000 Manifest this update: Sun 11 May 2025 10:17:04 +0000 Manifest next update: Wed 14 May 2025 15:14:04 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: OZYtkKe97kGmdZfxbuYOEv1Gi5xTSgC+wlSvnKjRH9o=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: Kg+qUGiJOCWlU9CEF9sF6UHMuGBLyiUY1zk9iK+p//c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:90:55:ce:bc:be:6b:fb:8d:39:ed:68:08:1d:4e:31:86:ec:5b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: May 11 10:17:04 2025 GMT Not After : May 14 15:14:04 2025 GMT Subject: CN=0F1CC02505A4C995C43F8D64711419A944929437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:62:d7:49:7a:aa:6c:24:2b:dd:13:96:89: 7e:b1:5a:5d:48:1b:6c:39:8d:74:52:e7:da:52:39: 74:ae:43:8f:56:c5:fc:b5:03:df:4c:46:6e:b1:d8: fa:7f:68:00:32:0f:8c:59:73:c9:2c:22:bc:f6:52: 42:ea:5b:70:f5:6a:27:e1:7d:da:b0:51:95:0b:88: c4:8b:bc:16:42:0d:fa:42:66:a5:64:36:c0:74:e1: 47:8d:2a:14:66:9d:2e:aa:61:96:21:97:1a:c3:da: 81:28:89:63:90:07:c7:0c:d7:50:50:49:31:78:0a: ae:69:5f:6d:80:59:f4:5d:f7:5b:8e:25:28:48:a7: c1:3d:f5:7d:19:9d:c5:bb:5c:76:c8:d7:38:21:95: 3d:e2:27:7e:cf:90:86:e9:61:28:2e:7e:c0:89:01: 4f:02:d9:c1:51:17:df:42:08:2c:63:0d:a4:2b:ac: 89:1d:52:1b:90:e3:04:bb:8f:e6:a3:38:c2:e2:05: d5:0c:5c:b8:d4:04:15:80:65:0c:6f:14:e9:58:49: 8b:d7:0b:9f:33:0b:70:21:aa:72:39:d6:d7:e2:ba: f4:dd:cd:4a:02:1e:16:ac:c8:e4:99:f5:12:39:d4: fa:e7:36:ce:6a:04:34:12:c1:2b:19:93:f5:64:61: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1C:C0:25:05:A4:C9:95:C4:3F:8D:64:71:14:19:A9:44:92:94:37 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3d:ee:93:9f:c1:d3:9f:e3:8d:0a:65:d3:fc:64:ad:ff:85: ed:55:44:47:b2:11:4e:8a:18:cb:5f:71:09:2d:f4:77:c5:e5: 11:97:49:0c:27:c6:ae:29:51:18:a9:35:f0:81:ee:0f:9a:75: 89:85:ff:a7:0c:1b:5e:55:26:93:45:70:d6:6c:0d:11:0b:48: 08:e3:1a:58:9d:88:d8:5e:b0:dc:b4:d7:89:cb:5b:32:a7:01: c3:fc:53:4f:91:9c:c5:59:e4:3b:f3:46:d3:1a:32:07:5c:e9: 6a:65:50:5c:dc:44:3e:61:c3:3c:bd:bb:47:be:8c:e0:4f:de: da:ca:82:49:72:ce:c6:e7:1a:06:84:29:03:bd:13:b0:58:e1: 85:ef:8a:02:cd:23:48:e8:7e:3e:eb:e2:ae:69:a2:98:6a:9d: 1f:ed:e2:45:94:53:d1:4b:c0:3a:25:2c:4b:ed:96:ad:a4:77: e6:33:56:81:f8:89:0b:4f:6d:c4:fe:7c:ae:90:79:e0:1a:23: 30:1c:b1:f5:7a:d4:7a:bf:41:d0:ab:7d:df:d7:f9:3d:0c:be: f8:25:ee:2b:ff:7e:96:dc:df:ea:c1:d6:22:4f:2a:52:c0:e3: ea:40:e8:9a:81:99:ed:4b:3d:49:bd:9c:1a:26:39:76:bd:66: 46:23:56:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5BVzry+a/uNOe1oCB1OMYbsW18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA1MTExMDE3MDRaFw0yNTA1MTQxNTE0MDRaMDMxMTAvBgNV BAMTKDBGMUNDMDI1MDVBNEM5OTVDNDNGOEQ2NDcxMTQxOUE5NDQ5Mjk0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SGLXSXqqbCQr3ROWiX6xWl1I G2w5jXRS59pSOXSuQ49Wxfy1A99MRm6x2Pp/aAAyD4xZc8ksIrz2UkLqW3D1aifh fdqwUZULiMSLvBZCDfpCZqVkNsB04UeNKhRmnS6qYZYhlxrD2oEoiWOQB8cM11BQ STF4Cq5pX22AWfRd91uOJShIp8E99X0ZncW7XHbI1zghlT3iJ37PkIbpYSgufsCJ AU8C2cFRF99CCCxjDaQrrIkdUhuQ4wS7j+ajOMLiBdUMXLjUBBWAZQxvFOlYSYvX C58zC3AhqnI51tfiuvTdzUoCHhasyOSZ9RI51PrnNs5qBDQSwSsZk/VkYfwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDxzAJQWkyZXEP41kcRQZqUSSlDcwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI97pOfwdOf440KZdP8ZK3/he1VREeyEU6K GMtfcQkt9HfF5RGXSQwnxq4pURipNfCB7g+adYmF/6cMG15VJpNFcNZsDRELSAjj GlidiNhesNy014nLWzKnAcP8U0+RnMVZ5DvzRtMaMgdc6WplUFzcRD5hwzy9u0e+ jOBP3trKgklyzsbnGgaEKQO9E7BY4YXvigLNI0jofj7r4q5pophqnR/t4kWUU9FL wDolLEvtlq2kd+YzVoH4iQtPbcT+fK6QeeAaIzAcsfV61Hq/QdCrfd/X+T0Mvvgl 7iv/fpbc3+rB1iJPKlLA4+pA6JqBme1LPUm9nBomOXa9ZkYjVkA= -----END CERTIFICATE-----Generated at Sun May 11 13:48:04 2025 by rpki-client