$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: 13tMT/yzq5QC7U0e/iVJI23rOUDfF+/uLWJAvXssk1I= Subject key identifier: 87:FC:D1:F0:A8:0B:39:B7:A2:3E:FD:3B:05:37:70:21:D2:41:CA:CE Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 0FFCD8F3F0E1C49CAAE9E123480F13CF77275E42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: F2 Signing time: Sat 10 May 2025 04:32:14 +0000 Manifest this update: Sat 10 May 2025 04:27:14 +0000 Manifest next update: Tue 13 May 2025 09:54:14 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: cHItTC0a1HdevL5GM21VSDKVW0QVwvqhZPYzEqAwtRk=) 2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: MIsakVPJKKybr8kvil5MarMwWNi8D90ZO2L5L+WyIS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 09:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fc:d8:f3:f0:e1:c4:9c:aa:e9:e1:23:48:0f:13:cf:77:27:5e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: May 10 04:27:14 2025 GMT Not After : May 13 09:54:14 2025 GMT Subject: CN=87FCD1F0A80B39B7A23EFD3B05377021D241CACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:76:1d:2e:47:dd:c0:6c:cd:2c:12:66:53: df:ef:38:cc:50:65:91:b2:37:ac:4b:16:be:a5:98: fa:c0:94:93:49:35:52:7d:1e:0d:1c:9b:8b:3a:4a: 73:fb:dc:65:d4:47:53:d8:1d:7e:ec:82:00:5e:1e: 8b:38:e2:15:c5:4e:62:36:ed:98:cb:5f:56:e7:fc: 00:81:9e:d9:ea:5a:83:ec:ff:4a:cc:fb:8d:95:db: 7b:f1:4a:04:38:28:30:23:9e:82:f3:ef:72:a7:e6: 04:f2:ad:0b:bc:18:02:a2:0f:74:44:7c:ab:fd:ac: 6c:f8:ed:18:e5:bf:f4:1d:1c:5f:29:f2:b1:28:2f: 68:f9:4e:a0:88:82:96:d5:f2:55:cd:98:64:8c:d8: 83:34:9e:2e:9b:8e:eb:ec:46:cf:70:be:c3:a5:a1: 03:cb:2c:d5:48:eb:6c:d9:b1:08:2f:35:16:9d:52: 3f:7c:fc:ac:7c:59:8d:9b:e7:42:c4:1c:e2:76:ae: 41:af:a5:a2:44:8e:d0:73:fe:ed:68:44:bb:d7:5e: c7:f1:07:8e:e3:33:74:6e:bd:08:74:28:e8:a3:f0: d8:2b:25:eb:75:b9:62:65:b0:7a:3c:8f:59:29:94: 06:19:68:4a:8a:3f:43:87:55:f4:e4:44:08:c0:33: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:D1:F0:A8:0B:39:B7:A2:3E:FD:3B:05:37:70:21:D2:41:CA:CE X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6c:9d:e5:1e:44:00:c7:1d:a6:9e:0d:fd:bb:5c:e6:83:ea: e4:1c:3c:44:0a:c3:ab:13:1b:5f:8c:4a:22:be:1b:de:b5:cc: 9c:74:20:70:73:9a:d6:0d:ca:55:32:ac:b2:3e:e7:52:d1:17: 8e:a5:05:2a:00:5b:3a:b5:b4:82:f5:1c:71:b6:99:78:6c:91: 53:4e:5a:4f:69:4e:65:07:75:01:1b:0b:7b:17:0f:ca:cf:be: 80:6a:e9:8d:1c:98:7c:27:e9:3c:7b:86:c2:bf:25:cf:89:cd: 48:e2:25:f0:9d:84:7d:fa:41:c2:2c:ba:e8:33:6a:46:5b:06: 22:67:95:5b:80:2d:37:84:a4:8e:87:27:e7:f0:81:93:61:6e: 04:2d:4e:cf:84:6b:fa:d1:e4:08:97:03:0f:50:9c:61:88:fb: 25:e1:41:17:b4:a1:b7:89:b3:0b:5c:fc:b4:3b:83:27:41:a0: a4:63:e3:c6:dc:f2:ce:99:f6:25:be:0f:0d:00:35:80:8b:65: 20:6c:ed:a3:0d:6b:35:6e:b9:f8:4f:d6:4d:0d:47:4f:2e:02: 54:28:cd:e2:5a:a5:39:8d:ef:e3:16:20:c9:d7:1c:e1:26:b0: 55:e5:b5:52:92:59:8c:14:67:f2:6f:6b:b9:8d:4c:df:0b:39: 52:d3:61:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/zY8/DhxJyq6eEjSA8Tz3cnXkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTA1MTAwNDI3MTRaFw0yNTA1MTMwOTU0MTRaMDMxMTAvBgNV BAMTKDg3RkNEMUYwQTgwQjM5QjdBMjNFRkQzQjA1Mzc3MDIxRDI0MUNBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdHYdLkfdwGzNLBJmU9/vOMxQ ZZGyN6xLFr6lmPrAlJNJNVJ9Hg0cm4s6SnP73GXUR1PYHX7sggBeHos44hXFTmI2 7ZjLX1bn/ACBntnqWoPs/0rM+42V23vxSgQ4KDAjnoLz73Kn5gTyrQu8GAKiD3RE fKv9rGz47Rjlv/QdHF8p8rEoL2j5TqCIgpbV8lXNmGSM2IM0ni6bjuvsRs9wvsOl oQPLLNVI62zZsQgvNRadUj98/Kx8WY2b50LEHOJ2rkGvpaJEjtBz/u1oRLvXXsfx B47jM3RuvQh0KOij8NgrJet1uWJlsHo8j1kplAYZaEqKP0OHVfTkRAjAM2fFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh/zR8KgLObeiPv07BTdwIdJBys4wHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRsneUeRADHHaaeDf27XOaD6uQcPEQKw6sT G1+MSiK+G961zJx0IHBzmtYNylUyrLI+51LRF46lBSoAWzq1tIL1HHG2mXhskVNO Wk9pTmUHdQEbC3sXD8rPvoBq6Y0cmHwn6Tx7hsK/Jc+JzUjiJfCdhH36QcIsuugz akZbBiJnlVuALTeEpI6HJ+fwgZNhbgQtTs+Ea/rR5AiXAw9QnGGI+yXhQRe0obeJ swtc/LQ7gydBoKRj48bc8s6Z9iW+Dw0ANYCLZSBs7aMNazVuufhP1k0NR08uAlQo zeJapTmN7+MWIMnXHOEmsFXltVKSWYwUZ/Jva7mNTN8LOVLTYVU= -----END CERTIFICATE-----Generated at Sun May 11 22:55:18 2025 by rpki-client