$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: vNlk/HJWr5wp4v57Bc96G2IwKtWGCer5kXuFmLRPnRc= Subject key identifier: F8:32:A9:B4:E5:36:A8:12:70:96:FF:7E:A8:D8:66:E1:37:DA:34:2B Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 70183A29672C23D3525FF763FAF61A0930AE312B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: F8 Signing time: Sun 11 May 2025 15:41:24 +0000 Manifest this update: Sun 11 May 2025 15:36:24 +0000 Manifest next update: Wed 14 May 2025 18:52:24 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: HqoFLqQTCKU4cORLO+ItGdYYwIE+m/xw0UJLEPlmioY=) 2: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: tzUv6ZoVBauP5SIKaVDlU1vK/lJ77kKziRyhRQRActU=) 3: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: zo6UEpboby79jX+5Xy9IA7TPL3AN5hmWNVBNi4kkzO8=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: 5Hz3DyrO7wQwpXeRffEbosBkCXLVJDhMxl5XYFRTw18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 18:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:18:3a:29:67:2c:23:d3:52:5f:f7:63:fa:f6:1a:09:30:ae:31:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: May 11 15:36:24 2025 GMT Not After : May 14 18:52:24 2025 GMT Subject: CN=F832A9B4E536A8127096FF7EA8D866E137DA342B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:61:65:50:af:f9:62:aa:08:cc:ab:96:b7: 4d:87:dd:3d:0b:1d:44:3a:50:57:85:6c:97:a3:f6: 74:b3:fd:49:06:03:ae:ff:55:7d:f9:fa:b1:e3:b5: af:17:44:e7:40:aa:9b:db:26:a5:e1:e2:36:05:ba: ca:38:5a:fe:77:23:ae:ca:36:d1:4a:a4:c0:4d:e1: 3d:83:0f:0b:cf:c6:2a:3d:40:df:ef:be:bc:46:54: 5e:95:a8:01:6d:da:04:b8:42:30:7c:0f:44:c2:1d: e1:4e:33:21:57:87:45:4d:e8:10:76:ac:d7:08:eb: cc:7e:11:b4:6d:f6:cb:39:e8:0d:6a:c5:72:55:5c: 99:78:20:50:45:e6:b7:30:5a:a6:52:b4:0c:87:82: 81:47:3a:fd:87:6f:6e:33:76:01:d8:04:53:1b:b3: f5:c4:9b:3a:87:e0:e3:98:34:f3:e6:e1:e5:8a:50: 97:a5:d2:49:c0:10:67:07:05:4b:3a:f1:77:26:99: c4:45:9d:d1:57:f3:6f:f5:a0:c9:80:e0:40:5c:0d: 4c:ab:43:f6:2b:58:87:75:8e:3c:78:5f:b6:96:51: 6b:03:e7:21:85:a1:8a:d1:17:e5:4a:cb:d0:bd:f0: f1:06:7f:0b:e0:77:75:d4:a7:94:ff:90:02:98:7a: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:32:A9:B4:E5:36:A8:12:70:96:FF:7E:A8:D8:66:E1:37:DA:34:2B X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8d:ff:68:8d:ec:55:e9:c2:5a:ee:12:f7:94:85:2c:f6:2e: f2:24:33:2c:85:13:6d:50:15:86:9b:ab:94:b3:e0:46:47:c6: f5:7a:93:aa:dc:3d:c3:55:d8:7c:07:f4:c0:ae:7c:1c:ed:37: 92:38:0e:f7:60:73:73:7c:a8:eb:21:d7:5f:47:ff:03:9b:c1: 1d:32:48:ad:d6:94:cd:78:a5:d5:f1:77:a3:42:f0:13:e4:3e: 94:a0:64:c6:de:be:5e:7c:9c:72:e1:f9:35:35:61:8a:0b:6c: c4:7f:a6:c5:b5:25:6a:86:94:f9:79:99:7e:55:f3:55:e9:62: 23:76:c8:37:5d:1d:bd:86:f2:d6:bc:e6:5a:b0:2e:e0:e5:bd: 73:cd:6a:0b:52:83:40:c6:29:2b:bc:1f:c4:97:43:eb:ac:54: 94:d4:1d:1d:0a:e9:37:c0:bd:c8:4f:33:b7:6a:c8:85:31:df: 9f:61:fd:7b:13:78:2e:86:fb:54:7f:09:eb:9f:ae:9d:46:f1: 83:53:a0:7d:b7:55:10:5e:36:40:a3:df:bb:1f:d4:54:4e:3b: 52:98:e5:f0:82:9f:d2:07:d5:69:f1:da:ab:dc:ec:f7:1f:96: 61:20:d3:d2:b4:96:12:d3:ce:88:76:49:1f:13:a8:c1:3a:bd: 9b:57:49:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBg6KWcsI9NSX/dj+vYaCTCuMSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTA1MTExNTM2MjRaFw0yNTA1MTQxODUyMjRaMDMxMTAvBgNV BAMTKEY4MzJBOUI0RTUzNkE4MTI3MDk2RkY3RUE4RDg2NkUxMzdEQTM0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGGFlUK/5YqoIzKuWt02H3T0L HUQ6UFeFbJej9nSz/UkGA67/VX35+rHjta8XROdAqpvbJqXh4jYFuso4Wv53I67K NtFKpMBN4T2DDwvPxio9QN/vvrxGVF6VqAFt2gS4QjB8D0TCHeFOMyFXh0VN6BB2 rNcI68x+EbRt9ss56A1qxXJVXJl4IFBF5rcwWqZStAyHgoFHOv2Hb24zdgHYBFMb s/XEmzqH4OOYNPPm4eWKUJel0knAEGcHBUs68XcmmcRFndFX82/1oMmA4EBcDUyr Q/YrWId1jjx4X7aWUWsD5yGFoYrRF+VKy9C98PEGfwvgd3XUp5T/kAKYes89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DKptOU2qBJwlv9+qNhm4TfaNCswHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqN/2iN7FXpwlruEveUhSz2LvIkMyyFE21Q FYabq5Sz4EZHxvV6k6rcPcNV2HwH9MCufBztN5I4Dvdgc3N8qOsh119H/wObwR0y SK3WlM14pdXxd6NC8BPkPpSgZMbevl58nHLh+TU1YYoLbMR/psW1JWqGlPl5mX5V 81XpYiN2yDddHb2G8ta85lqwLuDlvXPNagtSg0DGKSu8H8SXQ+usVJTUHR0K6TfA vchPM7dqyIUx359h/XsTeC6G+1R/Ceufrp1G8YNToH23VRBeNkCj37sf1FROO1KY 5fCCn9IH1Wnx2qvc7PcflmEg09K0lhLTzoh2SR8TqME6vZtXSdk= -----END CERTIFICATE-----Generated at Mon May 12 11:01:10 2025 by rpki-client