$ rpki-client -vvf repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft File: 22504F83E378CE066AD31D32EB24280CB0F6E560.mft (raw, json) Hash identifier: S5QZA43Mmr7mecrgMcGchighpSAtx1kvEexskbVUfx8= Subject key identifier: E3:AF:FC:5A:21:CC:2D:3D:4E:25:1C:4E:8F:5E:76:70:D3:3E:A4:9D Authority key identifier: 22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 Certificate issuer: /CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Certificate serial: 5F90C41D05FF352333316BFC5889BFD1E6D4DE29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft Manifest number: 0188 Signing time: Fri 09 May 2025 23:41:15 +0000 Manifest this update: Fri 09 May 2025 23:36:15 +0000 Manifest next update: Tue 13 May 2025 11:39:15 +0000 Files and hashes: 1: 22504F83E378CE066AD31D32EB24280CB0F6E560.crl (hash: BZyPbZ2fz8aZUGmOWnnmAuykN7PhrISEw5mPTNVsbxQ=) 2: 3130332e34362e3138362e302f32332d3234203d3e20313530343632.roa (hash: JQFEqRZpKjpbIh5DULGVzPqKV88EB+jfioEL78re/oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:90:c4:1d:05:ff:35:23:33:31:6b:fc:58:89:bf:d1:e6:d4:de:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Validity Not Before: May 9 23:36:15 2025 GMT Not After : May 13 11:39:15 2025 GMT Subject: CN=E3AFFC5A21CC2D3D4E251C4E8F5E7670D33EA49D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:c1:d1:da:f7:c1:09:f6:c1:d1:ac:9c:3f: 8e:dc:a4:7f:88:d8:50:0d:86:f2:93:3a:41:3f:c8: 5b:5c:c7:24:3b:66:45:b1:82:f0:6d:1f:5c:a1:32: 66:8d:56:74:34:bc:1b:34:c2:37:c4:39:5a:41:cd: eb:e9:b3:03:4c:2e:a4:82:6f:9a:01:84:3d:78:f7: 77:c1:70:e0:84:ef:b0:d7:1e:b1:e6:8b:fd:11:71: ed:f1:14:fe:fc:99:ff:d9:ce:53:2d:55:09:a6:f5: e3:8f:ae:f7:1a:4f:6e:1c:7b:61:a7:76:9b:e6:fa: 88:56:f0:7d:e9:a9:18:a3:7c:22:8e:41:9e:53:a0: d3:a8:41:f1:e6:4b:6b:cd:7e:49:74:ab:f7:43:c2: 11:4d:9e:60:96:58:cc:6b:3b:ee:4c:9a:e9:c5:89: dd:31:b9:09:17:b4:2a:28:94:c7:87:9c:0d:2b:a7: 0a:30:16:a8:55:f1:86:43:29:b7:ef:f3:00:2a:cd: 4e:ec:f0:f5:91:58:47:e7:f4:89:b0:72:ef:5b:b2: 22:68:8d:c5:07:25:be:56:1d:89:fe:e5:55:72:d5: c3:91:ef:8c:d6:66:3c:6d:d8:e1:d5:c2:32:09:c0: de:a7:37:5f:5f:07:1a:93:fa:a2:6d:1a:57:0a:e8: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:FC:5A:21:CC:2D:3D:4E:25:1C:4E:8F:5E:76:70:D3:3E:A4:9D X509v3 Authority Key Identifier: keyid:22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b5:5c:ba:39:09:12:4b:7e:f9:60:05:60:8e:a4:9f:21:8a: ef:f1:f0:3b:26:02:e4:c0:ea:36:c0:6b:72:65:c9:b0:43:72: 8f:7c:9d:6b:e7:e4:95:99:e7:4a:0d:40:52:cf:67:a9:a2:19: 5c:e1:b2:a7:17:44:2d:32:55:59:d2:46:08:b7:d0:b1:bc:7c: 2d:0f:fd:4b:55:5d:d9:2c:75:5c:bc:e1:43:f0:48:cc:f4:d1: e4:27:45:0e:ac:79:b2:64:6d:9b:a6:1a:d1:58:ff:bd:a7:a7: cf:34:69:e1:19:dd:01:63:42:50:a9:10:ca:3d:69:a3:f0:06: 25:4a:da:43:03:b2:65:51:ac:1e:55:fa:ee:5d:54:f6:6e:f5: 47:40:f2:b0:7e:34:80:78:4e:f9:8d:8d:01:25:fc:d9:91:c6: 63:fd:54:fd:f9:ac:65:c2:99:f0:49:63:a4:db:9e:84:89:22: 96:8f:25:ab:d7:48:23:75:e0:ca:33:0b:a3:48:2c:d9:c3:ca: b6:9b:23:ee:8d:26:43:49:b0:94:13:0e:aa:93:a8:30:0a:92: f9:14:f1:36:d9:64:b4:79:96:06:db:ab:a6:2a:b9:41:eb:cc: 98:dc:27:23:a3:b5:be:cb:c6:a7:4f:d1:09:8d:a0:19:e6:6f: cd:a7:67:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5DEHQX/NSMzMWv8WIm/0ebU3ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENC MEY2RTU2MDAeFw0yNTA1MDkyMzM2MTVaFw0yNTA1MTMxMTM5MTVaMDMxMTAvBgNV BAMTKEUzQUZGQzVBMjFDQzJEM0Q0RTI1MUM0RThGNUU3NjcwRDMzRUE0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CsHR2vfBCfbB0aycP47cpH+I 2FANhvKTOkE/yFtcxyQ7ZkWxgvBtH1yhMmaNVnQ0vBs0wjfEOVpBzevpswNMLqSC b5oBhD1493fBcOCE77DXHrHmi/0Rce3xFP78mf/ZzlMtVQmm9eOPrvcaT24ce2Gn dpvm+ohW8H3pqRijfCKOQZ5ToNOoQfHmS2vNfkl0q/dDwhFNnmCWWMxrO+5MmunF id0xuQkXtCoolMeHnA0rpwowFqhV8YZDKbfv8wAqzU7s8PWRWEfn9Imwcu9bsiJo jcUHJb5WHYn+5VVy1cOR74zWZjxt2OHVwjIJwN6nN19fBxqT+qJtGlcK6K8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46/8WiHMLT1OJRxOj152cNM+pJ0wHwYDVR0j BBgwFoAUIlBPg+N4zgZq0x0y6yQoDLD25WAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQzMjQxYi1jZmQxLTRjYmItOTIxOS1jN2EzNjIzN2MxNDgvMC8yMjUwNEY4M0Uz NzhDRTA2NkFEMzFEMzJFQjI0MjgwQ0IwRjZFNTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENCMEY2 RTU2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4 MENCMEY2RTU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG1XLo5CRJLfvlgBWCOpJ8hiu/x8DsmAuTA 6jbAa3JlybBDco98nWvn5JWZ50oNQFLPZ6miGVzhsqcXRC0yVVnSRgi30LG8fC0P /UtVXdksdVy84UPwSMz00eQnRQ6sebJkbZumGtFY/72np880aeEZ3QFjQlCpEMo9 aaPwBiVK2kMDsmVRrB5V+u5dVPZu9UdA8rB+NIB4TvmNjQEl/NmRxmP9VP35rGXC mfBJY6TbnoSJIpaPJavXSCN14MozC6NILNnDyrabI+6NJkNJsJQTDqqTqDAKkvkU 8TbZZLR5lgbbq6YquUHrzJjcJyOjtb7LxqdP0QmNoBnmb82nZyU= -----END CERTIFICATE-----Generated at Sat May 10 03:39:55 2025 by rpki-client