$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: W264NWk87zSqq50yQgrWzhLeelqvsCWi6ygyZEpS+R4= Subject key identifier: 48:B5:F2:79:0E:33:30:AD:49:05:54:09:50:28:C5:BB:FB:34:11:E6 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: D14BF6708F36B67CEAA93662063D4358E3B6EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 04A4 Signing time: Fri 09 May 2025 14:00:50 +0000 Manifest this update: Fri 09 May 2025 13:55:50 +0000 Manifest next update: Mon 12 May 2025 18:20:50 +0000 Files and hashes: 1: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ZQI865FxGh10FmxCAL3EfpXRTSxcXYfsdjKIE28NGOQ=) 2: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: ZULjTp4+NYAssAp0CZz3FEnycGBYt+NoPkGuUHEyL7E=) 3: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: TNpUK4dJFrU18RMU9Zgd4YTXy5oNCmoEosozxJBeWMA=) 4: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: ls44OG0TlScZudQjWi2hOoJfckGlkJcK1X+4UZNTijw=) 5: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: y5FW1sgnfU+HeLMU5Bqbn06zuZEAtwFBXzjZotq5ERw=) 6: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: Olc0MANddPKnLRzI3iFBuZGH4Cmhpzf6ub5ABPT4Ndo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 18:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d1:4b:f6:70:8f:36:b6:7c:ea:a9:36:62:06:3d:43:58:e3:b6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: May 9 13:55:50 2025 GMT Not After : May 12 18:20:50 2025 GMT Subject: CN=48B5F2790E3330AD490554095028C5BBFB3411E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:60:b7:09:67:75:34:95:4b:0a:a2:e4:de: 56:29:cb:00:fd:b1:c7:86:c3:68:17:e9:de:5f:bb: a5:89:dc:66:08:86:64:6f:4f:12:86:b7:9d:da:c8: 41:eb:64:60:25:04:07:09:e8:d8:67:49:ef:a5:2f: 2d:c6:aa:ad:c0:05:7a:bb:dd:bb:ad:45:76:b9:06: 01:1c:6c:69:42:03:24:b0:50:68:1f:9d:14:0b:8a: 44:ae:61:06:b8:32:58:1a:c2:50:8e:3b:60:3e:e2: 9f:7d:fe:a4:9c:05:05:bf:7e:25:ac:b2:a2:60:09: ea:b8:10:6b:44:ea:be:c6:90:61:f2:93:65:2c:21: 6b:21:fa:05:89:68:01:dd:7d:c3:5b:d8:bf:f2:66: c5:3f:78:07:de:3b:d5:1d:b9:06:6a:10:7f:33:51: f6:4d:cd:10:d1:54:15:09:86:0e:a0:db:8e:90:7a: 44:19:59:77:f6:a5:33:93:b6:d7:78:a8:f6:c7:08: bf:ef:96:60:38:ad:45:0e:84:bb:80:2e:ad:63:87: ba:27:3f:75:20:ea:0a:f6:e4:8c:bb:2b:08:9f:7d: 92:33:c3:0f:e7:6d:ac:49:39:e8:c2:ff:79:ce:0b: df:3a:60:4c:c5:bf:e2:7f:3d:66:5e:c8:e6:07:37: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B5:F2:79:0E:33:30:AD:49:05:54:09:50:28:C5:BB:FB:34:11:E6 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5b:5d:a5:f8:a5:02:35:40:15:98:36:61:b6:60:66:40:f1: c9:0c:6f:f1:17:ec:c4:65:8e:c0:48:28:83:ce:2e:8e:8c:a9: d9:2a:71:bd:00:a4:2c:77:35:3c:4f:82:ca:5c:a5:81:e3:07: 2e:84:dc:1f:ac:a5:5c:8d:21:bc:4f:60:f1:65:1b:bd:4f:6b: 0f:a8:d5:34:e1:0c:68:cf:14:5e:7b:2f:51:66:d9:29:5d:1b: d9:eb:6e:96:8c:5f:76:90:29:75:97:00:2f:b7:9c:3f:8a:34: a3:87:ab:e6:ae:cb:0f:24:df:1e:62:3a:b5:c0:de:9f:92:bf: cf:31:94:b8:6a:c8:f7:23:87:82:eb:b6:76:f8:e9:ed:99:20: ce:36:fc:c1:a0:f4:fc:2a:db:28:82:50:cc:e2:4e:1a:c4:55: 94:c9:5d:98:4e:bd:5c:2b:57:37:44:f7:95:5b:00:e5:ec:5e: b5:3e:78:f1:82:ba:b3:10:18:be:e3:28:b4:eb:87:8e:2a:b4: a8:3d:a4:6a:53:12:ab:70:15:4e:ba:a9:3c:1d:05:92:ac:f4: e9:24:d4:d6:c7:52:f9:7f:57:a0:27:6e:15:84:77:9b:0d:8a: 29:59:ad:e4:35:8b:fa:5d:91:ca:a4:25:70:fb:73:56:84:11: 5b:d4:ae:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANFL9nCPNrZ86qk2YgY9Q1jjtu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA1MDkxMzU1NTBaFw0yNTA1MTIxODIwNTBaMDMxMTAvBgNV BAMTKDQ4QjVGMjc5MEUzMzMwQUQ0OTA1NTQwOTUwMjhDNUJCRkIzNDExRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6WC3CWd1NJVLCqLk3lYpywD9 sceGw2gX6d5fu6WJ3GYIhmRvTxKGt53ayEHrZGAlBAcJ6NhnSe+lLy3Gqq3ABXq7 3butRXa5BgEcbGlCAySwUGgfnRQLikSuYQa4MlgawlCOO2A+4p99/qScBQW/fiWs sqJgCeq4EGtE6r7GkGHyk2UsIWsh+gWJaAHdfcNb2L/yZsU/eAfeO9UduQZqEH8z UfZNzRDRVBUJhg6g246QekQZWXf2pTOTttd4qPbHCL/vlmA4rUUOhLuALq1jh7on P3Ug6gr25Iy7KwiffZIzww/nbaxJOejC/3nOC986YEzFv+J/PWZeyOYHN+/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSLXyeQ4zMK1JBVQJUCjFu/s0EeYwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpbXaX4pQI1QBWYNmG2YGZA8ckMb/EX7MRl jsBIKIPOLo6Mqdkqcb0ApCx3NTxPgspcpYHjBy6E3B+spVyNIbxPYPFlG71Paw+o 1TThDGjPFF57L1Fm2SldG9nrbpaMX3aQKXWXAC+3nD+KNKOHq+auyw8k3x5iOrXA 3p+Sv88xlLhqyPcjh4Lrtnb46e2ZIM42/MGg9Pwq2yiCUMziThrEVZTJXZhOvVwr VzdE95VbAOXsXrU+ePGCurMQGL7jKLTrh44qtKg9pGpTEqtwFU66qTwdBZKs9Okk 1NbHUvl/V6AnbhWEd5sNiilZreQ1i/pdkcqkJXD7c1aEEVvUroY= -----END CERTIFICATE-----Generated at Sat May 10 02:58:03 2025 by rpki-client