$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: twJecO8a30Lx9Kg+PB9CkhT8THHY7g0H8z0ree0oeLo= Subject key identifier: 2C:8C:0C:D5:5F:57:61:56:64:E8:3F:C6:80:0A:8B:B8:51:73:75:D8 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 7D2BC46104B7BE8630BFB954E154932753EDB069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0148 Signing time: Wed 07 May 2025 10:52:14 +0000 Manifest this update: Wed 07 May 2025 10:47:14 +0000 Manifest next update: Sat 10 May 2025 16:25:14 +0000 Files and hashes: 1: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 2: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) 3: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: C5Az0tulSagJRsYGAfEXEEMICnXpGBI4sH9IxuqBclY=) 4: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2b:c4:61:04:b7:be:86:30:bf:b9:54:e1:54:93:27:53:ed:b0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: May 7 10:47:14 2025 GMT Not After : May 10 16:25:14 2025 GMT Subject: CN=2C8C0CD55F57615664E83FC6800A8BB8517375D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:d1:ba:05:29:80:0d:4d:38:7c:b8:7d:6f: 22:66:99:60:38:65:e8:a5:19:0a:b3:a5:db:03:fd: d9:b0:ca:66:4d:72:d5:e6:48:46:d8:7e:f6:fc:b3: dc:ae:38:f4:bb:bf:c4:c8:4f:25:88:91:2f:ea:bf: b0:d3:84:36:ce:fa:ac:c0:81:49:7c:07:f9:a2:c2: be:52:0c:d1:70:c8:35:d4:72:ea:da:2b:4f:55:32: 76:75:3c:3f:33:da:d4:41:21:0c:4d:67:e9:03:95: 8b:39:8b:9f:08:1c:cd:46:80:40:88:75:a2:84:3b: da:30:70:b4:51:e4:27:c4:14:2c:3d:43:b0:b7:e7: a2:2e:a3:4d:bf:4a:79:2f:b8:9c:86:fc:a9:c0:31: 0b:b6:b1:70:f4:27:7c:20:b7:1f:f7:6e:6c:6e:fa: b4:23:7a:6c:ba:20:22:01:87:83:dc:c8:68:6f:87: a6:36:4a:da:3f:54:34:76:4c:58:61:e5:98:88:b3: 05:8d:22:4c:cb:7a:fe:5e:8e:22:2d:e4:e6:c9:ce: 00:ba:f9:45:90:ea:d7:bd:75:63:44:84:bf:60:60: 4c:ac:90:3d:ee:f6:6f:31:f0:3e:bd:cf:7f:6e:bc: bb:5e:d9:e2:c8:d5:57:fc:d6:64:95:be:77:3d:25: d1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8C:0C:D5:5F:57:61:56:64:E8:3F:C6:80:0A:8B:B8:51:73:75:D8 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9b:04:3f:3b:96:2b:61:68:3e:31:39:ba:86:f2:00:05:cf: 6e:48:22:10:71:7d:c5:80:73:b9:43:b0:f0:20:77:86:9b:19: ba:ad:04:0f:58:02:d8:90:54:b5:0c:3e:5b:a5:1a:eb:b0:12: 61:68:c6:86:31:82:7b:46:1d:06:a2:e8:a9:39:18:dc:0a:11: 83:ea:a8:dd:21:67:12:b0:62:30:c5:86:d0:f0:34:4f:dd:91: d8:e7:30:bf:88:12:94:49:1f:48:b9:b9:7c:7a:70:fb:0e:3a: 76:9a:d2:80:6a:0b:7d:41:dc:33:63:6d:5e:37:d2:60:d6:c1: 72:c9:a9:5b:d3:00:04:05:1e:95:bc:93:53:69:26:17:fe:ea: 6c:89:3f:30:16:82:d1:b4:0a:7a:45:90:8a:7b:43:38:c7:4f: 54:eb:88:0a:68:56:58:90:4a:2f:36:af:1a:1b:7e:0f:ce:e4: 15:1d:59:b8:eb:b4:1c:0e:9b:1c:88:02:8c:32:ea:36:e8:96: 4e:4c:80:67:2c:be:f8:29:71:78:2a:14:f8:f6:1b:8b:c0:9a: 13:ba:a5:78:1e:21:58:2b:93:99:0a:bc:51:76:e8:7b:4b:dc: 5c:44:bc:18:1a:1e:d2:69:53:8e:c7:76:c8:2e:92:56:df:ea: 9b:43:49:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSvEYQS3voYwv7lU4VSTJ1PtsGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA1MDcxMDQ3MTRaFw0yNTA1MTAxNjI1MTRaMDMxMTAvBgNV BAMTKDJDOEMwQ0Q1NUY1NzYxNTY2NEU4M0ZDNjgwMEE4QkI4NTE3Mzc1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhNG6BSmADU04fLh9byJmmWA4 ZeilGQqzpdsD/dmwymZNctXmSEbYfvb8s9yuOPS7v8TITyWIkS/qv7DThDbO+qzA gUl8B/miwr5SDNFwyDXUcuraK09VMnZ1PD8z2tRBIQxNZ+kDlYs5i58IHM1GgECI daKEO9owcLRR5CfEFCw9Q7C356Iuo02/SnkvuJyG/KnAMQu2sXD0J3wgtx/3bmxu +rQjemy6ICIBh4PcyGhvh6Y2Sto/VDR2TFhh5ZiIswWNIkzLev5ejiIt5ObJzgC6 +UWQ6te9dWNEhL9gYEyskD3u9m8x8D69z39uvLte2eLI1Vf81mSVvnc9JdEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULIwM1V9XYVZk6D/GgAqLuFFzddgwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqbBD87lithaD4xObqG8gAFz25IIhBxfcWA c7lDsPAgd4abGbqtBA9YAtiQVLUMPlulGuuwEmFoxoYxgntGHQai6Kk5GNwKEYPq qN0hZxKwYjDFhtDwNE/dkdjnML+IEpRJH0i5uXx6cPsOOnaa0oBqC31B3DNjbV43 0mDWwXLJqVvTAAQFHpW8k1NpJhf+6myJPzAWgtG0CnpFkIp7QzjHT1TriApoVliQ Si82rxobfg/O5BUdWbjrtBwOmxyIAowy6jbolk5MgGcsvvgpcXgqFPj2G4vAmhO6 pXgeIVgrk5kKvFF26HtL3FxEvBgaHtJpU47Hdsguklbf6ptDSdw= -----END CERTIFICATE-----Generated at Fri May 9 05:54:15 2025 by rpki-client