$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: Vxq8mh2PzS6KaBv1XilIFPpVsKpqk83jEchyoRxo0CE= Subject key identifier: 34:B5:F5:B0:E3:84:59:F4:98:D6:11:12:30:97:2B:8F:04:89:A6:47 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 6E5A4D3DF133B45A8B6731253E6946145D4F676F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 0173 Signing time: Thu 08 May 2025 21:01:15 +0000 Manifest this update: Thu 08 May 2025 20:56:15 +0000 Manifest next update: Mon 12 May 2025 02:41:15 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: dald9idU/rHkiXT+Hb4ViPOAu0GAF+vadWJH9YDYXzE=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: EHlROOvXLfg8/Y7QMxus3FkZalWuW5UbLqy+Gcwy/e4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5a:4d:3d:f1:33:b4:5a:8b:67:31:25:3e:69:46:14:5d:4f:67:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: May 8 20:56:15 2025 GMT Not After : May 12 02:41:15 2025 GMT Subject: CN=34B5F5B0E38459F498D6111230972B8F0489A647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:77:64:f7:da:fb:aa:0e:5d:f3:4c:ed:66:1a: 8d:db:ae:ee:3f:e3:92:96:c6:bc:c0:40:67:e1:36: 40:d0:be:86:58:c3:41:b0:31:f5:3b:68:eb:71:ed: a9:11:1d:1c:49:d4:61:6f:66:05:05:58:32:d9:d1: 0d:77:da:84:82:2f:99:7f:ba:92:6e:d4:a0:d1:f5: 50:a9:22:c2:0d:e1:08:6e:3b:3b:81:03:6d:5a:e7: f3:e0:59:b5:5c:4c:f1:16:3d:ac:19:4d:83:bd:4c: f4:f7:69:5d:82:fb:fb:2e:4c:2c:8c:da:32:bf:ba: bd:dc:d7:8d:bd:e5:14:3d:4a:c8:8f:b9:39:c1:fc: ec:28:46:32:05:28:fc:3f:c5:88:66:13:22:d4:4c: cd:79:6f:7a:bc:f5:fd:fc:48:bf:3a:0b:cb:78:e6: a3:9f:a3:02:a6:e4:74:32:b9:14:54:0a:84:dd:de: c8:06:64:0c:44:07:9a:ec:7a:5e:a1:07:53:1f:9f: f0:12:45:2c:41:86:fe:9c:6e:44:e9:15:f9:b1:2c: 60:35:67:76:78:e9:41:aa:25:e9:c7:38:00:06:b7: 63:e4:e6:d0:58:26:75:cd:d4:4a:83:43:13:0c:bf: 8f:4d:41:e3:2f:6c:d8:01:ac:9f:a6:98:f4:bc:12: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B5:F5:B0:E3:84:59:F4:98:D6:11:12:30:97:2B:8F:04:89:A6:47 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:31:7e:e0:1b:16:3f:9d:ac:e3:d8:43:28:00:59:e5:ef:25: 60:e9:3a:9a:0a:d9:43:e0:df:a4:e3:2a:da:3f:c5:28:22:e2: cb:c7:59:33:a3:33:b6:16:a5:ce:53:18:ac:16:fa:94:42:61: a8:12:1f:c2:20:09:7b:44:d1:51:0b:c0:55:e0:12:f0:70:42: 30:7c:d7:88:d8:d0:76:bc:e6:af:64:bd:9f:9a:6f:c2:ab:d7: d6:69:df:c8:cf:35:2c:c3:c6:1a:dc:af:a5:87:e9:ca:33:40: 0f:e5:f4:1a:b8:a9:4f:97:98:08:3d:38:47:46:f4:29:0a:cb: 30:4d:07:18:f8:a8:7a:8f:06:3c:a9:03:86:2a:3c:e0:4e:00: 28:f2:e4:06:65:f1:f3:77:d9:af:4e:d2:ba:3d:7a:dd:df:b3: cd:c6:7a:36:b6:7c:f7:6a:9d:3e:ed:7d:df:05:4d:30:b6:02: 14:10:87:60:ef:f8:24:98:9c:a8:01:d7:d2:40:17:fe:f9:bb: e3:45:0f:a6:6a:ed:5e:a5:bd:a5:92:02:77:18:4a:b1:72:c3: ac:4a:d3:49:08:5e:0b:38:9f:cf:7c:2c:a3:7d:88:df:41:5b: f6:83:f1:c6:5d:05:08:e8:2f:3f:ae:ca:cd:dd:94:2b:02:13: 9c:8d:af:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUblpNPfEztFqLZzElPmlGFF1PZ28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTA1MDgyMDU2MTVaFw0yNTA1MTIwMjQxMTVaMDMxMTAvBgNV BAMTKDM0QjVGNUIwRTM4NDU5RjQ5OEQ2MTExMjMwOTcyQjhGMDQ4OUE2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUd2T32vuqDl3zTO1mGo3bru4/ 45KWxrzAQGfhNkDQvoZYw0GwMfU7aOtx7akRHRxJ1GFvZgUFWDLZ0Q132oSCL5l/ upJu1KDR9VCpIsIN4QhuOzuBA21a5/PgWbVcTPEWPawZTYO9TPT3aV2C+/suTCyM 2jK/ur3c14295RQ9SsiPuTnB/OwoRjIFKPw/xYhmEyLUTM15b3q89f38SL86C8t4 5qOfowKm5HQyuRRUCoTd3sgGZAxEB5rsel6hB1Mfn/ASRSxBhv6cbkTpFfmxLGA1 Z3Z46UGqJenHOAAGt2Pk5tBYJnXN1EqDQxMMv49NQeMvbNgBrJ+mmPS8EjiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLX1sOOEWfSY1hESMJcrjwSJpkcwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYxfuAbFj+drOPYQygAWeXvJWDpOpoK2UPg 36TjKto/xSgi4svHWTOjM7YWpc5TGKwW+pRCYagSH8IgCXtE0VELwFXgEvBwQjB8 14jY0Ha85q9kvZ+ab8Kr19Zp38jPNSzDxhrcr6WH6cozQA/l9Bq4qU+XmAg9OEdG 9CkKyzBNBxj4qHqPBjypA4YqPOBOACjy5AZl8fN32a9O0ro9et3fs83Geja2fPdq nT7tfd8FTTC2AhQQh2Dv+CSYnKgB19JAF/75u+NFD6Zq7V6lvaWSAncYSrFyw6xK 00kIXgs4n898LKN9iN9BW/aD8cZdBQjoLz+uys3dlCsCE5yNr/Y= -----END CERTIFICATE-----Generated at Sat May 10 05:25:48 2025 by rpki-client