$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: mtwAq16PWVGW3WjQ3C38bEDXv8hiqLMLt2NWKDu199U= Subject key identifier: 50:B7:96:2D:70:C3:13:07:CB:4F:D3:5A:40:2C:5E:7A:F2:0F:A3:7B Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 2A0D65226B84DB42ABC6737C2FDC32774C4221A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 034D Signing time: Tue 06 May 2025 12:22:08 +0000 Manifest this update: Tue 06 May 2025 12:17:08 +0000 Manifest next update: Fri 09 May 2025 13:02:08 +0000 Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: jbwyC5GyaxtFPdpXM2hKbGU/KTDgdza6LDID4WO8CHE=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 0C8pRCsymjTTrJFNZEJzyFd4IOGqdzBKqs9DQmpJI/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 13:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0d:65:22:6b:84:db:42:ab:c6:73:7c:2f:dc:32:77:4c:42:21:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: May 6 12:17:08 2025 GMT Not After : May 9 13:02:08 2025 GMT Subject: CN=50B7962D70C31307CB4FD35A402C5E7AF20FA37B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:96:af:45:22:d2:c6:48:2f:59:03:3f:11: a0:87:98:a7:3d:ec:ca:42:6c:30:9c:84:69:28:02: 60:c0:93:0e:be:ea:ed:c0:51:3f:55:7f:17:4c:83: 10:83:72:76:74:cb:35:cd:fa:a5:ab:90:3d:ed:f8: 49:f9:c5:1c:46:36:8c:41:c7:f5:70:1f:07:2a:93: 99:3e:ca:61:bc:e3:76:30:54:e7:57:24:2b:3f:c9: c9:6c:94:ea:55:c8:20:e9:d8:f2:b7:da:27:8e:46: 49:55:33:a7:90:b9:47:87:4d:0c:46:a3:8e:67:de: 1b:10:80:d4:e0:8a:13:20:89:66:ca:e2:8d:38:ce: e5:ac:55:6c:b6:7e:07:6b:52:f4:a5:d7:65:93:0a: 1b:dc:6d:57:af:98:3e:cc:93:14:ed:6a:b7:c4:dd: 55:43:9c:57:65:74:63:f8:b0:a8:90:d3:72:07:7a: 0d:6e:96:a5:59:c3:69:bf:f7:94:c6:31:b0:c4:7e: 19:6b:f7:61:1f:03:63:27:dd:89:68:c4:38:c7:e2: e9:3c:76:42:65:e7:82:92:d4:1a:ec:b2:e8:89:8b: 88:73:99:af:31:29:7b:c1:ec:0c:e2:78:d0:8f:1d: b8:14:ea:3e:78:a0:0a:a0:b1:f7:04:b1:a0:6d:c3: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B7:96:2D:70:C3:13:07:CB:4F:D3:5A:40:2C:5E:7A:F2:0F:A3:7B X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:99:d7:65:c3:ff:16:ce:bd:ce:e9:bd:52:52:4f:1c:26:02: 4b:eb:c0:33:aa:bd:3b:b6:ce:0a:8c:dc:85:47:47:c6:65:ef: 33:9e:f3:2d:00:1c:65:94:ce:16:ad:5e:53:8d:66:09:77:f5: 5c:e9:ae:2d:61:39:cc:c7:59:ba:2b:37:cb:a5:75:58:44:60: 01:d9:94:98:57:74:e8:6f:14:f5:5d:d5:75:7f:ed:64:17:1e: 8d:0c:6f:99:c3:a0:ed:59:9f:e0:53:40:9b:87:46:58:c6:da: 7c:62:7a:69:06:e6:11:b5:14:01:0d:e4:d5:b6:3c:c5:f0:b4: a4:8e:a7:c1:a3:89:89:d5:48:e4:0a:c9:41:04:f4:a1:d6:18: ca:96:89:9a:20:8a:f2:65:c9:7d:61:d0:a9:bc:46:d6:2e:16: 9e:86:cf:ee:49:ec:0d:32:52:a7:e5:a7:80:3f:e4:1e:88:f2: bb:43:13:f8:2a:60:a9:94:72:23:ab:90:97:9f:9b:9d:b8:31: 75:c9:d2:a5:00:a5:33:22:2b:46:22:22:cc:ba:39:6c:48:82: d9:da:2d:1a:07:aa:ae:f1:cf:82:a8:13:ab:d6:40:e3:9f:27: ed:ff:14:9b:6f:ed:89:79:c9:18:fb:09:3e:6a:35:15:4f:b1: fe:a7:55:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg1lImuE20KrxnN8L9wyd0xCIacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTA1MDYxMjE3MDhaFw0yNTA1MDkxMzAyMDhaMDMxMTAvBgNV BAMTKDUwQjc5NjJENzBDMzEzMDdDQjRGRDM1QTQwMkM1RTdBRjIwRkEzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqJavRSLSxkgvWQM/EaCHmKc9 7MpCbDCchGkoAmDAkw6+6u3AUT9VfxdMgxCDcnZ0yzXN+qWrkD3t+En5xRxGNoxB x/VwHwcqk5k+ymG843YwVOdXJCs/yclslOpVyCDp2PK32ieORklVM6eQuUeHTQxG o45n3hsQgNTgihMgiWbK4o04zuWsVWy2fgdrUvSl12WTChvcbVevmD7MkxTtarfE 3VVDnFdldGP4sKiQ03IHeg1ulqVZw2m/95TGMbDEfhlr92EfA2Mn3YloxDjH4uk8 dkJl54KS1BrssuiJi4hzma8xKXvB7AzieNCPHbgU6j54oAqgsfcEsaBtw59hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULeWLXDDEwfLT9NaQCxeevIPo3swHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWZ12XD/xbOvc7pvVJSTxwmAkvrwDOqvTu2 zgqM3IVHR8Zl7zOe8y0AHGWUzhatXlONZgl39Vzpri1hOczHWborN8uldVhEYAHZ lJhXdOhvFPVd1XV/7WQXHo0Mb5nDoO1Zn+BTQJuHRljG2nxiemkG5hG1FAEN5NW2 PMXwtKSOp8GjiYnVSOQKyUEE9KHWGMqWiZogivJlyX1h0Km8RtYuFp6Gz+5J7A0y Uqflp4A/5B6I8rtDE/gqYKmUciOrkJefm524MXXJ0qUApTMiK0YiIsy6OWxIgtna LRoHqq7xz4KoE6vWQOOfJ+3/FJtv7Yl5yRj7CT5qNRVPsf6nVcE= -----END CERTIFICATE-----Generated at Thu May 8 10:51:51 2025 by rpki-client