$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: //8VkLcQ/Y1IkzL1KC89JV34R8bV9gDDf+ItDTbfR4A= Subject key identifier: 9A:E2:77:CB:A1:60:9A:6F:7A:A6:EC:E8:6D:EA:FD:0C:5B:E8:09:C7 Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 3246E05F8B7EC5721CDC17CCC5A0F94DC35F78B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 049E Signing time: Fri 09 May 2025 01:02:15 +0000 Manifest this update: Fri 09 May 2025 00:57:15 +0000 Manifest next update: Mon 12 May 2025 09:38:15 +0000 Files and hashes: 1: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: eele6080uCSMV6rGLuDRkUJ038qJ8ReZR6Gl6NcQYts=) 2: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: iyuYI15kkpPbO7NUigKqskqQQ4plk9btKYZQ0Pd1YJg=) 3: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: yvEJWkP0xFq1u9XfkAxvcy195JE5QOchL8JpvPiL8B8=) 4: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: e40kdwd9RGaDzut85pUqofV0tIg/vdE6e4M9mcDTUZU=) 5: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ect2ZTg7f92BY0SZ7MDChpSHiOXgr96F/7kTPjRYg7g=) 6: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: qb/Mp/evl7jg0oYt9bdhD9XiouNQbvER0H1nFXzf/fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:46:e0:5f:8b:7e:c5:72:1c:dc:17:cc:c5:a0:f9:4d:c3:5f:78:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: May 9 00:57:15 2025 GMT Not After : May 12 09:38:15 2025 GMT Subject: CN=9AE277CBA1609A6F7AA6ECE86DEAFD0C5BE809C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:2d:a9:ef:77:32:d9:ee:25:15:0c:07:c4: 9e:b8:30:c6:4c:8a:ed:e6:f9:59:4a:ee:e6:c3:42: da:fd:69:14:0a:26:d8:2d:91:a7:20:3f:31:be:8b: 35:74:65:e2:16:d5:ba:ce:36:b5:11:91:27:ef:e4: 7e:da:c3:dd:0f:1e:bb:37:f4:db:98:8d:0a:fe:f9: 60:7d:9b:d1:c9:dc:07:8f:6f:12:63:69:a9:bb:4f: 7e:6e:15:59:74:bd:ba:aa:dd:42:28:16:78:9c:5f: a4:af:69:cc:6a:55:31:97:46:11:61:cb:fc:4b:2b: 0d:73:0e:2d:50:51:52:fb:f4:e5:0e:da:2e:8e:e2: 37:c5:f4:3d:8f:60:65:d0:3b:e7:8b:92:87:7c:19: b0:35:4e:05:d0:81:b0:1b:39:59:e0:65:98:40:9c: c3:74:07:e5:b1:60:d7:40:81:ab:3b:22:ca:82:3b: a1:c5:41:fd:ac:d9:df:fa:c9:55:24:b4:f3:37:a0: 00:2d:47:db:b3:34:6b:37:e6:d2:41:60:b2:32:0b: 73:ee:06:ad:47:34:4b:24:78:b3:9e:06:3d:89:28: 7f:34:80:69:34:3b:37:e2:56:fe:4f:7c:61:c8:2b: be:7a:32:f0:bb:c7:6c:95:b1:37:44:35:4b:ed:00: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:77:CB:A1:60:9A:6F:7A:A6:EC:E8:6D:EA:FD:0C:5B:E8:09:C7 X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:67:b8:e8:8d:41:c5:53:6c:58:a9:1a:29:95:49:f1:dd: 00:30:fa:64:ce:a4:af:4a:e6:22:f4:bd:86:2d:12:04:11:69: 36:f0:6f:29:6d:5a:5c:f5:76:8c:d7:d8:72:e5:aa:37:69:bf: 6f:2f:9e:08:f2:80:31:d4:9e:68:31:62:a1:ca:56:4f:77:b8: b3:f1:60:25:d6:fd:41:3c:33:eb:12:68:a8:78:0a:2b:f8:ae: 87:ad:a1:29:3b:60:34:43:57:58:67:aa:41:14:e8:91:67:b0: ae:9f:b0:aa:ad:3d:d8:cb:22:7a:20:7b:6b:a5:1c:77:d9:f1: db:8a:16:fa:6f:78:ad:4e:6f:a8:f4:d8:a6:78:c9:b0:ca:59: 66:ec:c1:88:b2:4b:65:ae:5b:f1:1e:29:45:ff:a4:fa:dd:1c: ec:6c:6d:69:47:5f:09:8c:3e:36:92:41:fe:7c:dc:d5:0c:c9: 57:d6:5b:1a:72:95:de:a3:52:d9:df:a5:b5:bd:9a:5e:ba:6b: 80:ea:ec:cf:78:80:9e:8d:bb:80:2f:d4:e0:13:0d:28:dc:7b: 76:93:fe:1b:16:f5:67:dc:ce:d0:3e:f6:d3:f4:73:6a:3f:4f: dd:bb:35:8b:79:fc:fa:77:e3:d2:18:67:74:3a:96:5d:13:ed: 56:a0:de:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkbgX4t+xXIc3BfMxaD5TcNfeLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTA1MDkwMDU3MTVaFw0yNTA1MTIwOTM4MTVaMDMxMTAvBgNV BAMTKDlBRTI3N0NCQTE2MDlBNkY3QUE2RUNFODZERUFGRDBDNUJFODA5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpS2p73cy2e4lFQwHxJ64MMZM iu3m+VlK7ubDQtr9aRQKJtgtkacgPzG+izV0ZeIW1brONrURkSfv5H7aw90PHrs3 9NuYjQr++WB9m9HJ3AePbxJjaam7T35uFVl0vbqq3UIoFnicX6SvacxqVTGXRhFh y/xLKw1zDi1QUVL79OUO2i6O4jfF9D2PYGXQO+eLkod8GbA1TgXQgbAbOVngZZhA nMN0B+WxYNdAgas7IsqCO6HFQf2s2d/6yVUktPM3oAAtR9uzNGs35tJBYLIyC3Pu Bq1HNEskeLOeBj2JKH80gGk0OzfiVv5PfGHIK756MvC7x2yVsTdENUvtAC0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmuJ3y6Fgmm96puzober9DFvoCccwHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDHZ7jojUHFU2xYqRoplUnx3QAw+mTOpK9K 5iL0vYYtEgQRaTbwbyltWlz1dozX2HLlqjdpv28vngjygDHUnmgxYqHKVk93uLPx YCXW/UE8M+sSaKh4Civ4roetoSk7YDRDV1hnqkEU6JFnsK6fsKqtPdjLInoge2ul HHfZ8duKFvpveK1Ob6j02KZ4ybDKWWbswYiyS2WuW/EeKUX/pPrdHOxsbWlHXwmM PjaSQf583NUMyVfWWxpyld6jUtnfpbW9ml66a4Dq7M94gJ6Nu4Av1OATDSjce3aT /hsW9WfcztA+9tP0c2o/T927NYt5/Pp349IYZ3Q6ll0T7Vag3nQ= -----END CERTIFICATE-----Generated at Sat May 10 16:57:47 2025 by rpki-client