$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft File: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json) Hash identifier: Dr0U/zit4WXr9t53Ea0BP7jBl6GaT26YUwm5KLfT3cU= Subject key identifier: B0:99:AB:2F:AF:7B:64:05:9A:CE:8D:0C:F0:9E:D1:E5:42:4F:03:A5 Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 Certificate issuer: /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Certificate serial: 17A8F7B0B3D1C9F97457D829DE0CED1B0D43EA34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft Manifest number: 0172 Signing time: Sun 04 May 2025 14:22:02 +0000 Manifest this update: Sun 04 May 2025 14:17:02 +0000 Manifest next update: Wed 07 May 2025 21:38:02 +0000 Files and hashes: 1: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: znoG+tzolSoK4k4/3nWegkyYPSmCV03zZXbpGFh3j3Q=) 2: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: f0SGYOuYC9wlhNvu18Rx/15roii5H8mAD5EFZkRY12E=) 3: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: aWijrzlnOkQm9AVaxJX92LW/ZXbZUbJRqc/NNlD19G4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 21:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a8:f7:b0:b3:d1:c9:f9:74:57:d8:29:de:0c:ed:1b:0d:43:ea:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Validity Not Before: May 4 14:17:02 2025 GMT Not After : May 7 21:38:02 2025 GMT Subject: CN=B099AB2FAF7B64059ACE8D0CF09ED1E5424F03A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:f5:c7:01:1c:2a:c6:97:4f:7a:fa:5f:14: 60:9a:f7:2b:e2:43:75:5b:56:1c:50:80:a8:de:60: 3f:e1:30:3e:91:42:69:81:50:39:b8:5c:f1:99:9c: 59:85:51:af:e1:c6:78:a7:8c:78:36:f4:d5:c8:90: 30:66:87:eb:fe:74:be:98:44:cf:f9:0f:38:10:eb: 81:11:e0:8c:45:59:cb:07:bd:06:69:ca:21:33:eb: a7:4b:a9:f3:61:51:f8:e0:14:c9:0a:fe:44:01:52: bc:bc:88:ba:5e:be:a0:a0:b8:97:4c:7d:17:6f:16: bd:28:0a:a9:54:d1:7e:b4:a9:77:78:34:20:c9:60: 43:5c:3a:61:c0:c2:be:d9:ca:ec:93:1e:52:75:c9: f0:93:80:f7:ce:49:b6:a0:04:ff:50:04:f5:46:e4: 9c:92:8c:e5:2f:6c:39:71:03:aa:ee:80:cf:4d:84: af:f7:cd:ef:22:cb:56:56:5c:bd:b4:38:22:06:c1: 68:0e:5d:2f:2c:43:d0:e9:bf:d3:35:75:38:95:c5: 7f:5c:72:dc:8a:df:3b:f6:22:9d:dc:42:ea:db:a0: f5:8b:b4:da:b3:f4:6b:64:24:fb:ff:a3:7b:87:f7: 59:ad:60:d7:84:e1:46:b6:87:d5:42:ce:fe:6f:8e: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:AB:2F:AF:7B:64:05:9A:CE:8D:0C:F0:9E:D1:E5:42:4F:03:A5 X509v3 Authority Key Identifier: keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0a:01:fc:55:f1:bd:c6:84:e5:53:45:07:a8:62:57:e5:68: 1e:3b:62:c3:86:a0:cf:0e:5b:1e:6e:7f:91:df:52:40:c5:be: 77:59:4e:97:01:f5:10:88:9a:d2:09:62:ae:52:4c:cf:5f:db: d6:02:7f:4b:3e:e9:d9:74:0c:93:00:bb:69:92:da:be:c5:0c: e6:0b:92:bb:af:c9:59:6e:7d:80:6f:d4:62:b0:1b:c9:1d:b0: a6:84:a4:f7:cc:74:e1:6c:5c:02:ce:16:ed:3a:3c:94:48:0a: 6e:95:62:10:f0:d4:d1:98:4e:c6:e7:66:3f:f7:ef:f0:40:e0: 29:45:4b:ba:f8:af:2e:9a:93:40:02:36:3e:0d:8d:c4:bd:30: 16:fa:3e:36:a6:c7:02:56:c4:53:f0:9f:ee:64:f1:d6:ad:a3: 3f:c0:bb:9d:d6:8e:c7:0f:f6:fa:f0:1f:6b:b6:89:cf:ec:98: 33:80:fc:2f:8f:d0:e7:2c:1f:7c:1d:82:63:4f:5f:c9:06:0a: ca:84:07:64:8a:b5:a9:f6:ea:5f:cb:ef:ff:37:5a:91:5f:cc: 36:ee:e5:ad:3e:21:58:23:18:81:ef:fb:5f:46:d2:7c:18:2a: e1:d5:c1:0c:e4:e6:7d:0c:94:9a:56:12:ca:37:39:50:6f:01: 4d:19:d6:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6j3sLPRyfl0V9gp3gztGw1D6jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3 MDUwN0ZDMzAeFw0yNTA1MDQxNDE3MDJaFw0yNTA1MDcyMTM4MDJaMDMxMTAvBgNV BAMTKEIwOTlBQjJGQUY3QjY0MDU5QUNFOEQwQ0YwOUVEMUU1NDI0RjAzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEPXHARwqxpdPevpfFGCa9yvi Q3VbVhxQgKjeYD/hMD6RQmmBUDm4XPGZnFmFUa/hxninjHg29NXIkDBmh+v+dL6Y RM/5DzgQ64ER4IxFWcsHvQZpyiEz66dLqfNhUfjgFMkK/kQBUry8iLpevqCguJdM fRdvFr0oCqlU0X60qXd4NCDJYENcOmHAwr7ZyuyTHlJ1yfCTgPfOSbagBP9QBPVG 5JySjOUvbDlxA6rugM9NhK/3ze8iy1ZWXL20OCIGwWgOXS8sQ9Dpv9M1dTiVxX9c ctyK3zv2Ip3cQurboPWLtNqz9GtkJPv/o3uH91mtYNeE4Ua2h9VCzv5vjhyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJmrL697ZAWazo0M8J7R5UJPA6UwHwYDVR0j BBgwFoAUgZrQQ6ei+EJKvJ5s/ZxRhnBQf8MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzhkNGVlMi01NDllLTQxNjAtOGQ2Zi04NzczMGU4YWU1ZTIvMC84MTlBRDA0M0E3 QTJGODQyNEFCQzlFNkNGRDlDNTE4NjcwNTA3RkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3MDUw N0ZDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUx ODY3MDUwN0ZDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsKAfxV8b3GhOVTRQeoYlflaB47YsOGoM8O Wx5uf5HfUkDFvndZTpcB9RCImtIJYq5STM9f29YCf0s+6dl0DJMAu2mS2r7FDOYL kruvyVlufYBv1GKwG8kdsKaEpPfMdOFsXALOFu06PJRICm6VYhDw1NGYTsbnZj/3 7/BA4ClFS7r4ry6ak0ACNj4NjcS9MBb6PjamxwJWxFPwn+5k8datoz/Au53WjscP 9vrwH2u2ic/smDOA/C+P0OcsH3wdgmNPX8kGCsqEB2SKtan26l/L7/83WpFfzDbu 5a0+IVgjGIHv+19G0nwYKuHVwQzk5n0MlJpWEso3OVBvAU0Z1sI= -----END CERTIFICATE-----Generated at Tue May 6 05:14:24 2025 by rpki-client