$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: CiYra1x0svG0Ran40GYLrwwmVupjKlXvDdxDXUjImHA= Subject key identifier: 6C:FC:D4:92:CA:AD:D5:F9:20:BA:DF:FE:5C:F5:79:BD:D9:6E:56:36 Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 7F16C1D94A199A75AF92E3A9F709A8831192A5BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 014D Signing time: Thu 08 May 2025 09:40:58 +0000 Manifest this update: Thu 08 May 2025 09:35:58 +0000 Manifest next update: Sun 11 May 2025 15:37:58 +0000 Files and hashes: 1: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: +WwLEprTOb0LFOeRgRx6PA0BpZwz/s885q1Wl3+U3+A=) 2: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) 3: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 4: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 5: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:16:c1:d9:4a:19:9a:75:af:92:e3:a9:f7:09:a8:83:11:92:a5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: May 8 09:35:58 2025 GMT Not After : May 11 15:37:58 2025 GMT Subject: CN=6CFCD492CAADD5F920BADFFE5CF579BDD96E5636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:8c:61:ed:7b:83:e0:54:a6:df:53:53:98: af:4a:09:8b:ad:8b:fc:ad:b1:35:6b:5a:e6:d2:36: 3f:81:bb:bf:50:dc:a9:24:58:62:ac:53:f5:57:98: 8e:c6:a5:53:68:42:7b:f3:4e:6d:ac:e9:c1:8c:fe: 05:64:09:43:c6:08:a3:38:53:6c:7b:09:df:ba:5f: 83:62:20:86:72:1a:0f:ad:87:78:c6:53:d0:ca:93: 0d:72:1a:61:e0:a8:0a:4d:f7:a0:16:eb:bd:05:57: 15:5d:05:bb:fc:d0:c9:44:55:aa:a6:9a:70:88:d7: 03:d8:ca:12:7f:6a:bb:7c:d0:42:7a:0f:b4:3d:97: 27:cc:77:c7:b6:15:e4:07:f1:01:67:ff:9d:d5:3d: 82:95:e4:eb:a6:65:d0:f8:91:29:1c:b7:a6:71:d9: 72:4d:25:5a:dd:dd:3d:cf:c6:ac:17:ac:93:9b:70: d2:8f:de:8d:52:97:fb:63:9b:7b:2b:d5:28:2d:4e: c0:17:b2:41:b9:72:97:0e:9b:1f:d0:b5:c3:d6:b2: e8:45:33:53:f1:03:a3:c3:9e:73:bd:9b:3d:49:d0: c0:fb:66:9d:a0:a8:1e:a7:de:6c:44:0e:c7:ce:d0: e9:47:07:74:d9:10:41:ef:39:a8:f4:f3:3b:29:4a: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FC:D4:92:CA:AD:D5:F9:20:BA:DF:FE:5C:F5:79:BD:D9:6E:56:36 X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:28:dd:33:f1:2e:07:20:91:74:11:f9:08:0b:1a:8e:f1:d6: 29:df:ff:3b:57:1a:10:46:36:66:f5:86:06:2b:7e:33:8a:d3: d8:b7:29:44:a5:ca:a8:f9:0b:89:f3:a3:97:d2:cc:a6:fa:f0: 3e:9d:95:2b:00:2f:df:e1:8b:7b:82:bb:b4:21:27:3e:90:aa: 3f:e7:fc:26:43:93:c2:54:9c:47:50:67:ba:be:3e:ea:83:e3: 91:14:1c:48:44:a7:89:a8:73:90:73:69:48:fc:9d:4c:e5:5b: fb:17:ec:e5:00:17:81:d6:d9:29:9b:24:aa:a2:69:79:6a:62: e6:59:ab:4d:34:5a:68:f2:6e:fc:29:79:bc:61:bc:a8:1a:55: 3a:3a:3e:f8:c2:b5:08:e4:55:33:ff:c8:32:ff:07:c4:b5:b9: 5d:ac:88:64:c1:0c:7d:0d:5d:11:ca:ad:d5:92:49:cc:8c:68: 3f:d2:46:bc:e8:aa:e8:e6:28:99:ca:0a:7c:95:d1:55:a7:57: 76:76:54:74:21:8f:d6:65:db:f8:2c:3e:d2:ed:52:d1:e1:2c: 19:0b:47:c7:b9:67:47:88:c0:80:da:46:6b:31:88:4a:5d:85: cc:8b:c3:2a:a9:56:30:eb:70:e6:a9:4e:77:95:8b:6e:15:f4: 57:5b:93:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxbB2UoZmnWvkuOp9wmogxGSpbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTA1MDgwOTM1NThaFw0yNTA1MTExNTM3NThaMDMxMTAvBgNV BAMTKDZDRkNENDkyQ0FBREQ1RjkyMEJBREZGRTVDRjU3OUJERDk2RTU2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8Ixh7XuD4FSm31NTmK9KCYut i/ytsTVrWubSNj+Bu79Q3KkkWGKsU/VXmI7GpVNoQnvzTm2s6cGM/gVkCUPGCKM4 U2x7Cd+6X4NiIIZyGg+th3jGU9DKkw1yGmHgqApN96AW670FVxVdBbv80MlEVaqm mnCI1wPYyhJ/art80EJ6D7Q9lyfMd8e2FeQH8QFn/53VPYKV5OumZdD4kSkct6Zx 2XJNJVrd3T3PxqwXrJObcNKP3o1Sl/tjm3sr1SgtTsAXskG5cpcOmx/QtcPWsuhF M1PxA6PDnnO9mz1J0MD7Zp2gqB6n3mxEDsfO0OlHB3TZEEHvOaj08zspSqjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbPzUksqt1fkgut/+XPV5vdluVjYwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0o3TPxLgcgkXQR+QgLGo7x1inf/ztXGhBG Nmb1hgYrfjOK09i3KUSlyqj5C4nzo5fSzKb68D6dlSsAL9/hi3uCu7QhJz6Qqj/n /CZDk8JUnEdQZ7q+PuqD45EUHEhEp4moc5BzaUj8nUzlW/sX7OUAF4HW2SmbJKqi aXlqYuZZq000WmjybvwpebxhvKgaVTo6PvjCtQjkVTP/yDL/B8S1uV2siGTBDH0N XRHKrdWSScyMaD/SRrzoqujmKJnKCnyV0VWnV3Z2VHQhj9Zl2/gsPtLtUtHhLBkL R8e5Z0eIwIDaRmsxiEpdhcyLwyqpVjDrcOapTneVi24V9Fdbk0k= -----END CERTIFICATE-----Generated at Thu May 8 13:27:22 2025 by rpki-client