$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: I9bdXWBBF0cVoYJG/hH+Ah3Ii/AGivIO5S107GJk640= Subject key identifier: D6:96:57:8F:29:97:81:86:D0:00:AF:98:EF:43:44:78:1D:AD:AA:CC Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 097BAB41A52414A924892A5FDBA527C4225418C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 02CB Signing time: Wed 07 May 2025 14:20:48 +0000 Manifest this update: Wed 07 May 2025 14:15:48 +0000 Manifest next update: Sat 10 May 2025 22:24:48 +0000 Files and hashes: 1: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 8WaehvbTOcF3pzR4s59v/gds3hIUxmrMCC7s3FSug0w=) 2: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: XbIXaBlgITySOhG/uspxxWnRxeiDl4kKWER/oYyIcJ4=) 3: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: hDB00TLneDpVkLNbe7aAfk3b6UUvF3I8dBjAf/SLFFI=) 4: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: xGtojE5xQ38ofrHeox7psZGSkp6l9QQja9HVSx7iji8=) 5: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: bzGV+kpDCg8kq3ViXUiVgtOTQKf6E3wLE3u8C7ZhWdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 22:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7b:ab:41:a5:24:14:a9:24:89:2a:5f:db:a5:27:c4:22:54:18:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: May 7 14:15:48 2025 GMT Not After : May 10 22:24:48 2025 GMT Subject: CN=D696578F29978186D000AF98EF4344781DADAACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:45:6d:fc:c4:81:1c:34:58:01:c7:56:a2: f0:5b:fd:4c:f0:22:ce:7a:dc:9f:8b:d8:2d:7b:64: 56:a0:bf:cc:dd:ae:b8:35:e5:f7:3a:d7:f8:44:28: c1:03:55:81:7a:91:46:bd:33:61:cd:c7:24:83:28: 04:d5:2f:f3:98:0a:dd:6c:98:c9:d3:29:7a:1b:dc: 73:9d:80:2e:75:7c:74:c5:3f:f6:0e:a2:40:f6:00: d9:b4:5c:4b:9c:d7:c3:e7:1d:14:a0:84:e3:0c:7f: 15:91:3e:97:0a:8a:c9:a1:63:37:ce:65:c7:28:98: b4:4d:30:c0:4c:e6:a1:32:56:f8:c1:84:7a:33:29: de:c8:8f:22:b9:7b:dc:35:a4:e7:76:c3:cc:e8:f5: 3d:8f:25:f1:a1:f8:0c:39:b1:ba:af:37:d1:04:da: a5:0a:57:45:1f:90:dd:62:6c:79:ca:55:b9:22:f6: 9a:5a:4f:d7:bf:f3:24:c4:ac:12:ac:f1:3f:4b:53: c1:79:04:93:f5:2f:d2:40:6c:1a:ec:9c:4d:e5:fb: 53:22:21:78:b5:ff:7e:68:dc:79:ac:aa:28:9a:bd: 76:c6:dd:f8:05:f1:ea:9b:d3:6b:3a:15:5f:53:3e: 5a:7c:dd:16:b2:ae:35:71:a0:48:50:cc:c2:94:f3: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:96:57:8F:29:97:81:86:D0:00:AF:98:EF:43:44:78:1D:AD:AA:CC X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2a:74:cc:3b:ef:dd:f2:1d:bf:dd:13:f8:cf:bd:ce:1e:ca: 41:69:ce:ab:59:08:81:4c:d8:f3:14:04:17:89:9c:f9:73:44: fc:88:67:f8:7e:1f:74:4a:b4:59:cf:28:df:b5:83:5f:2b:46: 5a:5d:ed:81:77:50:cf:aa:c6:65:42:16:d5:3e:dd:bd:80:58: 2b:cf:ac:5b:6a:4f:fa:bc:17:20:20:35:e2:5d:e5:70:57:fd: 56:3c:20:3f:1b:f3:82:48:20:bd:41:c6:af:3b:ba:89:8c:d6: fb:c6:68:70:73:86:91:e9:fa:44:fe:f4:b9:1d:07:55:bd:31: fc:e6:5c:da:3f:ef:97:28:bf:6d:3d:ec:dd:2b:65:2a:25:60: c9:a9:a2:50:8b:a0:c7:4e:91:27:c4:0c:04:0d:44:df:14:a7: 2b:43:90:a5:5c:c8:b9:1b:bb:d5:37:e9:10:d4:28:8b:cf:ac: 4c:41:68:f7:dc:72:27:9b:cc:78:4f:e6:b3:d7:93:0f:c3:16: 78:0b:6a:11:9d:6c:0d:a1:2a:b9:81:f4:69:74:29:9b:fe:90: 87:3a:97:ea:40:5e:62:ab:96:6d:93:be:a1:a6:98:02:01:0b: 26:68:5c:fb:61:77:92:cb:5a:c4:7e:dd:8b:18:f5:87:e8:6f: ab:84:16:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCXurQaUkFKkkiSpf26UnxCJUGMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTA1MDcxNDE1NDhaFw0yNTA1MTAyMjI0NDhaMDMxMTAvBgNV BAMTKEQ2OTY1NzhGMjk5NzgxODZEMDAwQUY5OEVGNDM0NDc4MURBREFBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCni0Vt/MSBHDRYAcdWovBb/Uzw Is563J+L2C17ZFagv8zdrrg15fc61/hEKMEDVYF6kUa9M2HNxySDKATVL/OYCt1s mMnTKXob3HOdgC51fHTFP/YOokD2ANm0XEuc18PnHRSghOMMfxWRPpcKismhYzfO ZccomLRNMMBM5qEyVvjBhHozKd7IjyK5e9w1pOd2w8zo9T2PJfGh+Aw5sbqvN9EE 2qUKV0UfkN1ibHnKVbki9ppaT9e/8yTErBKs8T9LU8F5BJP1L9JAbBrsnE3l+1Mi IXi1/35o3HmsqiiavXbG3fgF8eqb02s6FV9TPlp83RayrjVxoEhQzMKU8+zLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1pZXjymXgYbQAK+Y70NEeB2tqswwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMqdMw7793yHb/dE/jPvc4eykFpzqtZCIFM 2PMUBBeJnPlzRPyIZ/h+H3RKtFnPKN+1g18rRlpd7YF3UM+qxmVCFtU+3b2AWCvP rFtqT/q8FyAgNeJd5XBX/VY8ID8b84JIIL1Bxq87uomM1vvGaHBzhpHp+kT+9Lkd B1W9MfzmXNo/75cov2097N0rZSolYMmpolCLoMdOkSfEDAQNRN8UpytDkKVcyLkb u9U36RDUKIvPrExBaPfcciebzHhP5rPXkw/DFngLahGdbA2hKrmB9Gl0KZv+kIc6 l+pAXmKrlm2TvqGmmAIBCyZoXPthd5LLWsR+3YsY9Yfob6uEFsU= -----END CERTIFICATE-----Generated at Fri May 9 21:37:36 2025 by rpki-client