$ rpki-client -vvf repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft File: A794160F8781ADF0A63CEECE52275B19F08F18D8.mft (raw, json) Hash identifier: OlYS0tEd0knHaO7QtehTW+EnFC0ObMARvDnALk9QWdw= Subject key identifier: D9:25:DA:47:EE:B8:1D:C6:23:8F:D1:9E:D4:5B:DA:22:BF:D7:3B:2C Authority key identifier: A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8 Certificate issuer: /CN=A794160F8781ADF0A63CEECE52275B19F08F18D8 Certificate serial: 4920E3C3C85E0BA6931480FC7AC840CAF29996B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft Manifest number: 0100 Signing time: Sun 04 May 2025 23:10:59 +0000 Manifest this update: Sun 04 May 2025 23:05:59 +0000 Manifest next update: Thu 08 May 2025 00:09:59 +0000 Files and hashes: 1: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: 8wbQikoaFVPcz3EhuJ2rjIc0e+XKhv89AMBb8aRt064=) 2: A794160F8781ADF0A63CEECE52275B19F08F18D8.crl (hash: Ct2DoF+jTB5rP1kcLEIzt2eVwHVPYqYV2oMbwMMP+8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:20:e3:c3:c8:5e:0b:a6:93:14:80:fc:7a:c8:40:ca:f2:99:96:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A794160F8781ADF0A63CEECE52275B19F08F18D8 Validity Not Before: May 4 23:05:59 2025 GMT Not After : May 8 00:09:59 2025 GMT Subject: CN=D925DA47EEB81DC6238FD19ED45BDA22BFD73B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:0f:84:83:e3:21:41:65:64:6a:a7:ab:9d: d5:20:1e:bb:0e:ac:df:30:25:0a:4d:9e:51:9c:de: 77:20:88:ac:aa:1b:43:95:37:da:de:77:4b:4c:b0: ce:ae:82:f0:22:30:9a:c2:9f:28:04:4b:47:22:3e: 1d:16:c1:31:57:a2:c1:e0:a1:c9:dd:e4:33:a7:8c: 01:e5:6a:3c:fc:2c:c4:9d:da:4d:9d:3b:0c:6c:8a: 4d:61:74:3c:12:c3:1c:ec:4e:e6:f4:66:0f:a0:6e: bb:63:6f:09:96:94:f0:51:58:e6:ee:dc:ed:72:fc: f7:9c:81:fd:37:a1:80:5e:d4:9f:61:68:0a:34:82: 08:ba:bd:53:17:d6:cc:09:7d:56:37:6d:97:7c:7c: 98:24:f8:98:34:ae:c2:db:8b:d3:a5:7f:61:11:db: 7f:42:84:20:6c:0b:1c:53:03:34:3e:2a:9e:07:71: 20:25:5d:4b:07:c9:52:f4:ad:a1:f7:33:4c:f0:1d: c5:1c:81:73:c0:8f:83:dd:bb:dd:ab:2e:ff:c3:f8: 45:07:7b:59:27:23:b2:a8:58:89:60:e5:92:87:78: 1c:60:57:11:5b:c4:da:37:38:f6:28:0e:b3:da:55: 58:f0:d5:8c:a6:94:1f:fb:85:b8:fd:46:6b:35:9e: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:25:DA:47:EE:B8:1D:C6:23:8F:D1:9E:D4:5B:DA:22:BF:D7:3B:2C X509v3 Authority Key Identifier: keyid:A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ea:c1:f2:e7:76:e3:61:14:70:ef:34:3e:f0:2f:0a:f8:56: 49:e4:69:71:bc:b0:2d:00:a1:b3:53:8b:bf:5b:d4:5b:94:ef: 84:92:d1:c5:36:65:f3:03:91:20:dd:a6:b4:26:dd:c5:83:90: df:5e:d9:40:e8:59:73:b0:0f:90:ef:4a:a8:9a:4c:54:1b:9f: a9:f2:f7:35:73:14:c6:ec:08:e8:f3:62:c8:89:c7:0e:61:b1: 50:06:9e:7a:cd:58:d0:bb:46:0b:7a:03:3f:db:c0:8c:3a:7e: 47:53:0c:23:59:8d:b8:e4:8b:f3:54:b4:06:7b:34:7f:64:c3: a0:6e:7e:05:35:97:c3:6f:88:0f:15:9c:3a:a0:ed:c7:3a:78: 0f:06:0f:80:5e:6b:20:c7:27:8a:ce:7c:f9:7a:70:77:6a:2d: 60:91:83:46:32:1b:5a:76:f0:94:c7:b5:b1:58:99:6c:d4:63: 5c:8e:15:4e:59:d0:23:96:9d:37:e9:f4:87:19:5d:46:d2:3d: 5d:c3:44:6c:d0:d0:13:42:f8:b6:53:33:9b:5c:c5:e2:78:1a: 13:7d:2b:07:7a:9e:4c:9c:20:79:cf:64:aa:91:e6:30:dd:32: 8a:9f:a7:5e:0a:58:83:5b:ed:47:8d:dd:53:4c:71:38:2d:48: 25:6d:78:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSDjw8heC6aTFID8eshAyvKZlrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVCMTlG MDhGMThEODAeFw0yNTA1MDQyMzA1NTlaFw0yNTA1MDgwMDA5NTlaMDMxMTAvBgNV BAMTKEQ5MjVEQTQ3RUVCODFEQzYyMzhGRDE5RUQ0NUJEQTIyQkZENzNCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Iw+Eg+MhQWVkaqerndUgHrsO rN8wJQpNnlGc3ncgiKyqG0OVN9red0tMsM6ugvAiMJrCnygES0ciPh0WwTFXosHg ocnd5DOnjAHlajz8LMSd2k2dOwxsik1hdDwSwxzsTub0Zg+gbrtjbwmWlPBRWObu 3O1y/Pecgf03oYBe1J9haAo0ggi6vVMX1swJfVY3bZd8fJgk+Jg0rsLbi9Olf2ER 239ChCBsCxxTAzQ+Kp4HcSAlXUsHyVL0raH3M0zwHcUcgXPAj4Pdu92rLv/D+EUH e1knI7KoWIlg5ZKHeBxgVxFbxNo3OPYoDrPaVVjw1YymlB/7hbj9Rms1nobzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2SXaR+64HcYjj9Ge1FvaIr/XOywwHwYDVR0j BBgwFoAUp5QWD4eBrfCmPO7OUidbGfCPGNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGVhNTA1Ni0wZmJjLTQwMzItODY4MC0zZmE1NDQxZTRkNTUvMC9BNzk0MTYwRjg3 ODFBREYwQTYzQ0VFQ0U1MjI3NUIxOUYwOEYxOEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVCMTlGMDhG MThEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVC MTlGMDhGMThEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPqwfLnduNhFHDvND7wLwr4VknkaXG8sC0A obNTi79b1FuU74SS0cU2ZfMDkSDdprQm3cWDkN9e2UDoWXOwD5DvSqiaTFQbn6ny 9zVzFMbsCOjzYsiJxw5hsVAGnnrNWNC7Rgt6Az/bwIw6fkdTDCNZjbjki/NUtAZ7 NH9kw6BufgU1l8NviA8VnDqg7cc6eA8GD4BeayDHJ4rOfPl6cHdqLWCRg0YyG1p2 8JTHtbFYmWzUY1yOFU5Z0COWnTfp9IcZXUbSPV3DRGzQ0BNC+LZTM5tcxeJ4GhN9 Kwd6nkycIHnPZKqR5jDdMoqfp14KWINb7UeN3VNMcTgtSCVteFc= -----END CERTIFICATE-----Generated at Tue May 6 13:05:34 2025 by rpki-client