$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: PWrJSbch9qudOphTmkrpQ2XIgV+/PtrqqlVNYnvjYlU= Subject key identifier: 01:B0:8C:B7:C9:0D:C1:69:64:06:8B:70:70:DD:85:34:53:98:5C:1E Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 529FB6A8564578D32DE165A67A8D4167B5E27B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0204 Signing time: Sat 10 May 2025 02:10:35 +0000 Manifest this update: Sat 10 May 2025 02:05:35 +0000 Manifest next update: Tue 13 May 2025 02:22:35 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 2: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: 0n1GSr9TocTgmR9zqYSGt/LKeinBGXFYEM+GdKCg7JY=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 4: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9f:b6:a8:56:45:78:d3:2d:e1:65:a6:7a:8d:41:67:b5:e2:7b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: May 10 02:05:35 2025 GMT Not After : May 13 02:22:35 2025 GMT Subject: CN=01B08CB7C90DC16964068B7070DD853453985C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:0f:02:4d:0a:f9:76:a3:9c:43:5f:ef:17: 97:6e:a4:0d:60:c7:72:b8:bc:c1:90:5d:fb:77:c8: 78:14:29:8c:85:30:00:39:4b:a7:3a:c3:8b:d3:5e: 92:d2:27:d5:dc:76:76:4f:eb:b1:1f:8b:8b:41:32: 63:eb:26:52:a7:ce:dc:18:e5:ca:14:7c:58:ff:cf: 4b:82:4a:e5:cb:6f:18:7e:62:36:f4:50:83:e0:1a: 38:32:b2:2d:80:de:21:85:65:d9:e6:04:6f:7f:f4: 90:4f:82:58:de:1d:96:d5:3b:fd:62:dc:1e:46:4f: 02:c3:e3:ae:d4:d8:88:f3:ef:1d:a8:df:bc:e2:17: 81:d7:7e:3e:bf:01:26:e2:ab:ba:d8:b3:27:9e:d3: de:53:1b:68:f2:33:e3:2e:4b:64:20:a6:34:82:92: e5:0f:5f:23:96:2e:7c:1f:71:25:20:f2:d0:3b:8e: d0:7d:aa:9b:b4:e1:9a:2c:84:0d:b5:8d:f6:d9:d8: d7:77:44:a1:76:6d:7e:42:83:74:60:b4:3c:5d:2b: ba:94:8f:e5:cd:3f:70:68:37:68:c5:fd:f9:3e:b3: 85:c3:a7:7f:ce:10:61:19:c8:45:ac:36:c4:07:a3: 10:f5:ff:be:b4:bb:c9:84:b9:85:db:5e:c9:d2:ec: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:8C:B7:C9:0D:C1:69:64:06:8B:70:70:DD:85:34:53:98:5C:1E X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:7a:6a:ac:f3:dd:63:b8:6f:45:69:4d:db:9a:cc:35:46:6b: cd:97:91:9a:af:43:6c:d5:1a:32:6d:6f:5e:d7:7b:f1:1f:6e: c2:24:bb:3a:79:c4:a2:43:ca:a4:73:4a:d3:8e:80:8e:c3:42: aa:cb:8b:7c:f3:d2:00:ed:2f:47:62:b7:4b:f1:56:90:a5:b2: 81:4e:23:51:a6:a9:fd:31:e8:8c:55:73:f0:5a:cc:2f:46:34: 86:1a:98:53:ee:2b:49:f9:cd:e4:0e:29:75:0f:a4:4c:4b:22: da:08:fe:11:9e:8d:23:ea:58:b8:93:7e:cd:ad:21:9d:3d:2a: a2:14:7c:db:23:2b:36:a7:45:dd:7b:47:3f:d5:a5:18:d5:fd: 01:0e:73:6d:c2:c4:3a:6f:bb:f4:b7:63:6e:80:e7:d3:84:ef: ca:f2:6a:56:11:d1:28:a8:01:39:8b:10:e0:e7:c8:d3:51:fd: 82:ad:a3:a2:8f:2f:b2:ae:a4:a7:65:0b:dd:d3:8b:ed:a4:25: 2a:a9:52:77:04:8b:c9:a8:cf:4e:be:98:16:2a:6b:00:2b:2e: 13:47:7a:79:0f:26:7e:2b:78:f8:d8:ab:35:29:83:ca:0f:bb: 89:f2:a4:ad:e6:63:1b:95:9b:e2:21:fe:32:7c:14:dc:db:0d: e5:2f:ab:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUp+2qFZFeNMt4WWmeo1BZ7Xie38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA1MTAwMjA1MzVaFw0yNTA1MTMwMjIyMzVaMDMxMTAvBgNV BAMTKDAxQjA4Q0I3QzkwREMxNjk2NDA2OEI3MDcwREQ4NTM0NTM5ODVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKw8CTQr5dqOcQ1/vF5dupA1g x3K4vMGQXft3yHgUKYyFMAA5S6c6w4vTXpLSJ9XcdnZP67Efi4tBMmPrJlKnztwY 5coUfFj/z0uCSuXLbxh+Yjb0UIPgGjgysi2A3iGFZdnmBG9/9JBPgljeHZbVO/1i 3B5GTwLD467U2Ijz7x2o37ziF4HXfj6/ASbiq7rYsyee095TG2jyM+MuS2QgpjSC kuUPXyOWLnwfcSUg8tA7jtB9qpu04ZoshA21jfbZ2Nd3RKF2bX5Cg3RgtDxdK7qU j+XNP3BoN2jF/fk+s4XDp3/OEGEZyEWsNsQHoxD1/760u8mEuYXbXsnS7EztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAbCMt8kNwWlkBotwcN2FNFOYXB4wHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMd6aqzz3WO4b0VpTduazDVGa82XkZqvQ2zV GjJtb17Xe/EfbsIkuzp5xKJDyqRzStOOgI7DQqrLi3zz0gDtL0dit0vxVpClsoFO I1Gmqf0x6IxVc/BazC9GNIYamFPuK0n5zeQOKXUPpExLItoI/hGejSPqWLiTfs2t IZ09KqIUfNsjKzanRd17Rz/VpRjV/QEOc23CxDpvu/S3Y26A59OE78ryalYR0Sio ATmLEODnyNNR/YKto6KPL7KupKdlC93Ti+2kJSqpUncEi8moz06+mBYqawArLhNH enkPJn4rePjYqzUpg8oPu4nypK3mYxuVm+Ih/jJ8FNzbDeUvqz0= -----END CERTIFICATE-----Generated at Sat May 10 16:27:11 2025 by rpki-client