$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: DeWE0Gk6sMc934e0mCdWUnhnkNb9ost1BZ/idGNtE9E= Subject key identifier: 56:2F:0A:C7:26:B8:DC:45:48:89:D6:B3:23:DC:9D:13:E1:E8:95:FC Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 121684E753C10988E4C6B917EACBA53529753CAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 0174 Signing time: Wed 07 May 2025 14:23:45 +0000 Manifest this update: Wed 07 May 2025 14:18:45 +0000 Manifest next update: Sat 10 May 2025 22:40:45 +0000 Files and hashes: 1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: VjQDDASlLiPwUPZ2Rk6Sj8OpzPpuTXjTGaHPB3wTExM=) 2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 22:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:16:84:e7:53:c1:09:88:e4:c6:b9:17:ea:cb:a5:35:29:75:3c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: May 7 14:18:45 2025 GMT Not After : May 10 22:40:45 2025 GMT Subject: CN=562F0AC726B8DC454889D6B323DC9D13E1E895FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:11:1b:50:08:f7:bb:94:b4:3f:60:9b:3e: 44:cb:8b:85:14:dd:41:e6:bd:d3:af:54:b2:6e:e4: 10:14:30:0f:42:ed:e7:e7:1a:86:4b:5a:e0:da:bb: bd:54:6e:0b:b1:c8:22:f4:61:24:65:fb:f1:52:b2: 06:9e:13:90:2a:6b:24:cf:56:a1:1b:de:60:47:7e: ba:19:b2:03:6e:94:94:a1:aa:00:b8:e9:e7:c6:5c: 37:0e:94:7b:65:e5:50:c6:90:27:61:c1:1c:cc:9f: 51:34:f4:81:43:1b:b4:ed:0a:67:9f:68:31:f8:1a: 30:41:b1:99:39:0c:8a:e0:d8:c1:61:48:c0:35:32: ec:0b:e9:a8:ba:6c:60:a8:cd:34:10:61:a5:28:e7: cf:11:82:10:67:04:bb:28:f5:dc:6c:65:dd:e6:65: ce:b4:1c:5e:86:85:74:97:f7:02:09:63:5a:ad:0a: 34:7f:9e:cd:1b:38:8c:db:8f:5f:e6:d9:bb:96:32: bf:58:ba:38:b1:e0:69:a5:41:89:06:f4:f6:11:4f: e3:0e:6c:b4:ba:1f:58:12:03:3b:21:01:d3:c6:de: 16:bc:b9:40:83:a9:8e:f6:43:a9:27:c4:8b:1e:66: 6c:b1:9f:65:86:51:6b:0a:94:ca:92:34:0c:5c:c4: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2F:0A:C7:26:B8:DC:45:48:89:D6:B3:23:DC:9D:13:E1:E8:95:FC X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8d:b2:f9:09:1c:90:17:fa:33:da:1c:37:46:2d:22:a8:f6: e4:7a:e7:bf:5b:f2:79:68:8d:fa:7d:6f:a3:79:64:42:92:f9: 06:ae:60:7a:8a:8a:44:03:fc:3e:09:04:d8:18:f5:20:95:93: cf:c6:00:99:3a:cf:b0:6f:a6:37:6e:36:61:88:51:1a:c6:af: e4:af:5c:75:64:ae:93:93:3b:56:64:09:73:39:b0:d4:3a:31: d5:04:87:3e:eb:17:86:fa:9f:48:45:95:a8:bd:08:8b:da:b5: 6f:fb:7e:1d:ab:8a:54:b6:7b:81:11:7b:07:65:8d:20:67:cd: ca:b8:f6:60:de:33:d1:23:c1:c8:8b:f6:db:26:1d:3a:27:45: e4:ad:e9:11:86:c1:1a:e8:9f:5c:01:61:4d:15:52:c9:55:d4: dc:32:af:fd:05:c5:b7:81:a3:e3:b2:ba:38:a8:1e:2e:28:63: 90:69:f8:3c:8d:54:7a:6e:25:65:8f:f4:fd:8a:63:89:94:3a: fe:ff:de:bd:24:c7:39:0d:4f:c2:2b:90:35:5c:3a:79:c8:4d: 62:35:15:e8:d9:e2:36:85:dc:6a:4c:cc:ce:84:16:7c:e4:c1: 96:46:0a:fc:fe:7c:20:ae:da:73:27:77:63:75:96:74:7d:09: 93:54:b0:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhaE51PBCYjkxrkX6sulNSl1PK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNTA1MDcxNDE4NDVaFw0yNTA1MTAyMjQwNDVaMDMxMTAvBgNV BAMTKDU2MkYwQUM3MjZCOERDNDU0ODg5RDZCMzIzREM5RDEzRTFFODk1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIhEbUAj3u5S0P2CbPkTLi4UU 3UHmvdOvVLJu5BAUMA9C7efnGoZLWuDau71UbguxyCL0YSRl+/FSsgaeE5AqayTP VqEb3mBHfroZsgNulJShqgC46efGXDcOlHtl5VDGkCdhwRzMn1E09IFDG7TtCmef aDH4GjBBsZk5DIrg2MFhSMA1MuwL6ai6bGCozTQQYaUo588RghBnBLso9dxsZd3m Zc60HF6GhXSX9wIJY1qtCjR/ns0bOIzbj1/m2buWMr9Yujix4GmlQYkG9PYRT+MO bLS6H1gSAzshAdPG3ha8uUCDqY72Q6knxIseZmyxn2WGUWsKlMqSNAxcxAsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVi8Kxya43EVIidazI9ydE+HolfwwHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2NsvkJHJAX+jPaHDdGLSKo9uR6579b8nlo jfp9b6N5ZEKS+QauYHqKikQD/D4JBNgY9SCVk8/GAJk6z7BvpjduNmGIURrGr+Sv XHVkrpOTO1ZkCXM5sNQ6MdUEhz7rF4b6n0hFlai9CIvatW/7fh2rilS2e4ERewdl jSBnzcq49mDeM9EjwciL9tsmHTonReSt6RGGwRron1wBYU0VUslV1Nwyr/0FxbeB o+OyujioHi4oY5Bp+DyNVHpuJWWP9P2KY4mUOv7/3r0kxzkNT8IrkDVcOnnITWI1 FejZ4jaF3GpMzM6EFnzkwZZGCvz+fCCu2nMnd2N1lnR9CZNUsO8= -----END CERTIFICATE-----Generated at Fri May 9 18:36:25 2025 by rpki-client