$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: t87KO8eXOh+Y9CDrIX47eT49qduDKEqEBmVUrIKx6J4= Subject key identifier: C8:D6:1C:F8:07:2E:D8:A3:E1:B6:98:B5:F6:93:41:C9:71:6F:C3:73 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 147701BA0B5D7B3EC8E30AF793EB8A22C1CCA3BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 04D2 Signing time: Mon 05 May 2025 12:21:34 +0000 Manifest this update: Mon 05 May 2025 12:16:33 +0000 Manifest next update: Thu 08 May 2025 23:59:33 +0000 Files and hashes: 1: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: DD9uJUzFsSph0hkHFsVHrTfnPLNShigXq5WL6TEjX1U=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: L7xlQSMRW8992zD5GKgUVfmbm2CWCHA326rlGEHghKg=) 3: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: FmFK0HCMSLt7SyGKtb9ztPHc3ssDI+Z3SQRwQMgog5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 23:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:77:01:ba:0b:5d:7b:3e:c8:e3:0a:f7:93:eb:8a:22:c1:cc:a3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: May 5 12:16:33 2025 GMT Not After : May 8 23:59:33 2025 GMT Subject: CN=C8D61CF8072ED8A3E1B698B5F69341C9716FC373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:dd:03:15:41:83:96:97:1d:b2:97:92:52: 27:02:b7:1b:b4:f9:ef:c1:58:a9:d3:e5:f0:be:69: 24:04:41:66:a3:c0:0d:cd:f6:da:b6:59:c6:5c:d9: 15:b2:51:1f:8e:83:17:12:ff:5e:55:60:d9:f6:53: 16:5d:1b:e2:20:c9:bd:d9:c3:62:0e:c7:56:e4:2e: e2:71:73:84:0a:34:31:30:05:2b:60:c4:23:01:8c: cb:da:19:8a:e4:97:de:e1:19:d6:79:2a:01:cb:17: 36:dc:ac:ce:b5:2d:41:d5:ce:77:b3:82:e6:57:d6: db:2e:fd:e7:cc:8b:0f:4f:5e:3d:7d:0e:53:fe:7d: ea:85:dc:10:77:34:f1:7f:fe:b8:49:a8:41:12:99: f9:2b:39:1f:b5:f5:4d:7c:dd:47:10:c3:c2:34:46: ce:6a:1e:2a:a6:44:4a:21:88:bc:cb:15:d3:93:30: 58:58:95:ce:9f:9f:b8:88:c4:fa:1a:d6:a8:03:c6: 0b:3c:1b:8c:36:19:53:3e:eb:e9:d5:69:18:8e:8b: 54:79:91:3d:06:56:37:5c:b9:47:dd:aa:12:a2:b8: 66:b7:de:9d:bf:10:38:19:1f:4a:37:da:9b:54:14: 05:37:fe:36:d1:a7:1e:77:2f:67:f9:5c:fd:d7:cb: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D6:1C:F8:07:2E:D8:A3:E1:B6:98:B5:F6:93:41:C9:71:6F:C3:73 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:25:1c:1d:ab:b5:7e:b0:d5:b2:ae:9b:0d:0c:e9:c8:5e:7e: e0:a1:05:d4:c1:b8:5a:df:6c:ed:a6:99:39:f2:97:63:0e:c1: e2:c7:ab:4d:02:3c:ad:f2:32:77:f0:6b:2e:79:4e:bf:01:6b: c9:a2:ff:c2:6d:ed:5d:bd:af:a2:3a:62:6f:7c:76:78:57:cf: 39:3d:96:05:90:06:b9:17:31:af:1b:1f:e4:0a:6b:d3:fa:9d: b3:3d:d7:2c:c2:68:60:b9:53:90:a1:d9:ef:8a:04:a6:a2:50: dd:51:9a:d4:01:20:66:50:8c:3b:55:71:2e:a8:dd:30:a6:3f: 62:5a:14:95:c1:c2:07:fc:d7:c2:cd:fa:91:bf:4b:5e:b0:81: e0:13:30:24:c2:1a:e1:7a:2b:c9:77:f3:87:f6:9c:6a:d5:4f: f0:41:8f:25:7a:e0:c4:20:b6:fd:c5:96:e3:91:d5:ec:bd:fd: 51:24:fe:00:b5:0d:13:92:b4:e5:76:85:22:d9:e3:31:48:95: ad:d5:92:cd:8a:52:34:56:ab:4f:31:fb:38:e7:96:9e:19:d3: 3d:11:07:c8:7e:42:4c:36:68:e3:96:7b:f0:6d:c9:2a:47:c4: c2:46:c0:ff:98:4c:5d:d0:6b:a9:16:66:51:f1:a1:15:9c:39: 60:3b:5c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHcBugtdez7I4wr3k+uKIsHMo7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTA1MDUxMjE2MzNaFw0yNTA1MDgyMzU5MzNaMDMxMTAvBgNV BAMTKEM4RDYxQ0Y4MDcyRUQ4QTNFMUI2OThCNUY2OTM0MUM5NzE2RkMzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDt0DFUGDlpcdspeSUicCtxu0 +e/BWKnT5fC+aSQEQWajwA3N9tq2WcZc2RWyUR+OgxcS/15VYNn2UxZdG+Igyb3Z w2IOx1bkLuJxc4QKNDEwBStgxCMBjMvaGYrkl97hGdZ5KgHLFzbcrM61LUHVznez guZX1tsu/efMiw9PXj19DlP+feqF3BB3NPF//rhJqEESmfkrOR+19U183UcQw8I0 Rs5qHiqmREohiLzLFdOTMFhYlc6fn7iIxPoa1qgDxgs8G4w2GVM+6+nVaRiOi1R5 kT0GVjdcuUfdqhKiuGa33p2/EDgZH0o32ptUFAU3/jbRpx53L2f5XP3Xy+rXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyNYc+Acu2KPhtpi19pNByXFvw3MwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwlHB2rtX6w1bKumw0M6chefuChBdTBuFrf bO2mmTnyl2MOweLHq00CPK3yMnfway55Tr8Ba8mi/8Jt7V29r6I6Ym98dnhXzzk9 lgWQBrkXMa8bH+QKa9P6nbM91yzCaGC5U5Ch2e+KBKaiUN1RmtQBIGZQjDtVcS6o 3TCmP2JaFJXBwgf818LN+pG/S16wgeATMCTCGuF6K8l384f2nGrVT/BBjyV64MQg tv3FluOR1ey9/VEk/gC1DROStOV2hSLZ4zFIla3Vks2KUjRWq08x+zjnlp4Z0z0R B8h+Qkw2aOOWe/BtySpHxMJGwP+YTF3Qa6kWZlHxoRWcOWA7XBg= -----END CERTIFICATE-----Generated at Thu May 8 01:12:31 2025 by rpki-client