$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: DbM4UMpdU880YPbblXy0Z5EgRIWdeNCiBd67BtfKaXg= Subject key identifier: DD:87:31:C4:D5:7F:06:FF:36:37:30:FF:04:81:A3:4A:7B:50:D7:BF Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 5363DE4221744F2E81CDB5FF97361C690A8C2251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: DC Signing time: Thu 08 May 2025 13:30:00 +0000 Manifest this update: Thu 08 May 2025 13:25:00 +0000 Manifest next update: Sun 11 May 2025 17:40:00 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: LJqj41DPIYT1XUxln+g9aR89Yjdsp3hvnQJB8ehV2Z0=) 2: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: No2jhZBQBKNIs6FbtQP0ds2sPMBijrWi/o3/R9SUKlY=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: FeggXCLXcgHSF8N14AAD1IKcFyaO/k5xFgL/JhRM1c4=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 8HeVkgm+CVYOJ+iLevkSP38oQ5T0Ub4BqXq+xOD70Ck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:63:de:42:21:74:4f:2e:81:cd:b5:ff:97:36:1c:69:0a:8c:22:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: May 8 13:25:00 2025 GMT Not After : May 11 17:40:00 2025 GMT Subject: CN=DD8731C4D57F06FF363730FF0481A34A7B50D7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:91:86:0d:fb:9b:a6:78:57:b1:94:bd:f9: 9e:96:e6:a4:da:30:d9:8b:13:00:56:46:cf:59:2b: af:f6:f5:cb:cf:47:b2:83:b3:8d:e0:98:9b:fa:9c: 4e:1c:4d:73:e7:a4:26:2d:0f:45:60:5c:d2:0e:0d: 90:3c:44:d7:f0:4e:31:f3:ec:11:6f:c9:14:d5:68: fd:4c:53:c1:8c:ba:01:17:6d:dc:a5:d1:51:4c:bf: 2e:f5:be:e7:cf:11:c4:c6:92:79:e7:d9:18:7a:25: 86:0e:29:aa:1b:00:ce:21:4d:80:64:ae:11:36:05: d0:7b:58:64:f9:4f:62:1e:fd:40:ce:72:9e:b8:88: d4:bd:5b:e6:56:ca:fa:10:c4:79:db:29:d4:14:f0: 59:2e:56:aa:29:2b:23:43:46:18:65:c5:4b:71:f0: 35:50:96:78:74:f3:32:cd:c9:7f:96:e4:1c:fb:c7: 0a:25:27:9e:53:84:e2:bf:6b:b2:51:30:a1:aa:b6: 0d:14:f6:22:c5:6e:81:8d:29:9e:af:50:c2:e8:12: 7b:f8:7a:e8:6f:e0:7f:41:49:67:6f:57:b0:3c:11: 9e:8c:db:a5:51:2c:4a:8b:28:50:6b:54:e2:66:89: a5:96:d9:d5:41:ed:b6:07:71:91:d4:32:17:74:a2: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:31:C4:D5:7F:06:FF:36:37:30:FF:04:81:A3:4A:7B:50:D7:BF X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b9:98:b4:42:3e:d9:07:d3:d3:d9:ad:cf:89:15:a0:6d:5d: 48:be:25:f8:fb:1f:69:3e:5c:2e:74:98:e0:a6:ec:e5:9b:d4: 4f:5e:61:cd:90:45:0c:cd:72:e9:a3:2c:e2:b3:ce:01:77:48: 56:2b:ee:65:22:09:7b:e3:ea:6b:3d:9c:a1:6a:7b:0a:64:2f: d5:66:56:ca:f9:60:0c:3a:e2:2a:68:90:b7:7d:70:2e:32:60: c9:ea:c8:b1:01:8f:1d:80:51:82:96:16:0d:cf:c7:4d:22:74: cb:5b:1a:e5:90:62:25:56:06:c5:95:06:a0:26:46:f0:e6:e5: d0:94:dc:d9:1f:03:5c:07:34:9b:2a:3f:9d:7f:a8:dc:a8:a7: 7a:4b:49:11:d6:89:df:0e:12:e9:e1:eb:05:08:0c:ea:69:11: f8:f1:60:fa:3a:9a:6d:51:f6:71:4e:2b:7e:d5:7b:df:63:4e: f5:fc:78:4d:e2:d9:80:98:99:e2:4d:40:55:7f:b6:ef:f2:6f: c0:a3:00:98:f5:7c:9c:61:ec:9e:00:83:e9:ea:52:fc:2f:20: 40:50:dd:45:2b:59:d5:ca:53:b1:c5:fe:7d:26:1f:6c:d6:21: 6b:c1:66:63:cb:32:23:91:e9:d3:f6:f5:54:d8:d8:85:ab:ae: 6a:23:45:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2PeQiF0Ty6BzbX/lzYcaQqMIlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNTA1MDgxMzI1MDBaFw0yNTA1MTExNzQwMDBaMDMxMTAvBgNV BAMTKEREODczMUM0RDU3RjA2RkYzNjM3MzBGRjA0ODFBMzRBN0I1MEQ3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyJGGDfubpnhXsZS9+Z6W5qTa MNmLEwBWRs9ZK6/29cvPR7KDs43gmJv6nE4cTXPnpCYtD0VgXNIODZA8RNfwTjHz 7BFvyRTVaP1MU8GMugEXbdyl0VFMvy71vufPEcTGknnn2Rh6JYYOKaobAM4hTYBk rhE2BdB7WGT5T2Ie/UDOcp64iNS9W+ZWyvoQxHnbKdQU8FkuVqopKyNDRhhlxUtx 8DVQlnh08zLNyX+W5Bz7xwolJ55ThOK/a7JRMKGqtg0U9iLFboGNKZ6vUMLoEnv4 euhv4H9BSWdvV7A8EZ6M26VRLEqLKFBrVOJmiaWW2dVB7bYHcZHUMhd0ooqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YcxxNV/Bv82NzD/BIGjSntQ178wHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe5mLRCPtkH09PZrc+JFaBtXUi+Jfj7H2k+ XC50mOCm7OWb1E9eYc2QRQzNcumjLOKzzgF3SFYr7mUiCXvj6ms9nKFqewpkL9Vm Vsr5YAw64ipokLd9cC4yYMnqyLEBjx2AUYKWFg3Px00idMtbGuWQYiVWBsWVBqAm RvDm5dCU3NkfA1wHNJsqP51/qNyop3pLSRHWid8OEunh6wUIDOppEfjxYPo6mm1R 9nFOK37Ve99jTvX8eE3i2YCYmeJNQFV/tu/yb8CjAJj1fJxh7J4Ag+nqUvwvIEBQ 3UUrWdXKU7HF/n0mH2zWIWvBZmPLMiOR6dP29VTY2IWrrmojRbs= -----END CERTIFICATE-----Generated at Sat May 10 03:56:05 2025 by rpki-client