$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: kF8zWXfA7cYN6Inr0SqH+myGQNSGf6wZIaDVh+0s9H0= Subject key identifier: 21:7D:38:E0:F8:7C:B3:46:D0:FA:80:0C:B0:92:D1:BB:37:59:DF:6B Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 173C323573C6229B39424006A376AAA2191C2B6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 04D1 Signing time: Sun 11 May 2025 09:42:04 +0000 Manifest this update: Sun 11 May 2025 09:37:04 +0000 Manifest next update: Wed 14 May 2025 19:23:04 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: UZS06JVCHJquB9MDcVVKyhbpAEHHB93htblC2PYxKYk=) 2: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: Z1HM4GcTx4KcKCpM72/PPyVhWETpNnJYgpZsqohktAo=) 3: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: rITb6W7G01hB0UjOje4dPRDIBrUdz1h1YXll1fclevk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3c:32:35:73:c6:22:9b:39:42:40:06:a3:76:aa:a2:19:1c:2b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: May 11 09:37:04 2025 GMT Not After : May 14 19:23:04 2025 GMT Subject: CN=217D38E0F87CB346D0FA800CB092D1BB3759DF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:a9:95:88:60:c5:7f:c2:ad:e7:c5:b5:58: 8c:0a:d8:2a:84:f4:c5:b5:92:90:7b:74:f4:19:30: 7d:43:ef:28:f1:bb:a5:a8:75:c9:4c:05:2f:e1:00: 34:ac:8b:22:0c:71:7d:ee:58:86:ee:ad:1f:10:92: cd:6f:9d:61:a4:c3:76:68:f8:43:47:5d:aa:27:86: 57:27:9c:c9:9d:66:02:e4:25:93:c4:96:35:25:0d: 6f:1a:d5:cf:30:19:14:16:1a:7c:19:28:88:ce:e6: 44:4b:ea:a3:c3:95:04:3a:a8:ea:97:e8:db:42:94: 6a:b7:af:ad:43:e9:32:34:42:c4:d5:4f:a7:11:26: df:f7:6e:bf:aa:29:03:59:e9:6a:18:74:28:0f:fe: 2b:57:d7:ad:f0:7f:b1:14:df:8a:bb:f4:60:42:2c: cd:5b:f4:ee:64:8b:53:38:ec:0b:31:86:32:fc:41: d1:cb:e3:22:9d:02:b7:39:10:dd:39:ea:31:d7:9e: 4f:c8:32:83:84:36:4b:11:da:68:c7:3d:eb:20:46: e1:7f:87:f2:18:4d:ab:18:4b:64:46:29:55:b0:34: 7a:ba:b0:17:3b:a3:1f:e5:9e:ba:13:14:6a:d4:8a: 2f:f2:fd:5d:fb:e5:ee:0a:e5:df:24:cf:dc:0e:c2: 5f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7D:38:E0:F8:7C:B3:46:D0:FA:80:0C:B0:92:D1:BB:37:59:DF:6B X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d3:e8:02:62:9e:99:d1:9c:b9:4e:2e:69:a4:55:aa:80:79: c3:d1:e0:25:4f:8a:67:00:cc:6c:5f:0b:92:3b:7b:78:ad:d9: 0c:f4:84:6f:f2:e2:21:2f:18:67:47:33:74:c0:53:63:5d:26: b0:3a:05:26:37:92:53:08:b5:76:47:38:86:14:60:05:df:99: a7:dd:de:f0:59:15:be:67:ca:b5:0c:65:a6:3c:fc:4c:08:85: e1:d1:ea:4b:6f:ed:b2:0b:84:9d:23:59:7d:16:a1:3e:86:4a: 4b:16:df:09:dd:8d:85:05:7b:d0:f3:45:e4:7f:54:32:f0:a9: d2:ed:fb:9d:4a:e3:4f:30:a0:71:a5:e8:33:27:cd:3c:91:15: 6c:22:02:42:1c:b9:00:5b:8d:97:55:f0:d2:9a:69:f8:9e:57: ac:0e:71:65:56:9c:29:c2:65:ec:34:3a:67:38:e9:f1:5c:65: 91:e4:4f:52:08:a1:b6:65:6a:55:57:1c:c7:c8:41:ca:f4:ab: 0c:b1:2b:13:9e:06:60:92:fa:06:28:ee:67:07:0b:c6:d3:d6: ea:7a:c0:74:52:ef:d0:4c:35:fa:65:b7:c4:1b:99:b5:f3:22: 59:71:bc:aa:47:4a:92:74:32:0b:e9:2e:1b:21:53:6f:b6:c0: eb:94:f7:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzwyNXPGIps5QkAGo3aqohkcK20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTA1MTEwOTM3MDRaFw0yNTA1MTQxOTIzMDRaMDMxMTAvBgNV BAMTKDIxN0QzOEUwRjg3Q0IzNDZEMEZBODAwQ0IwOTJEMUJCMzc1OURGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC316mViGDFf8Kt58W1WIwK2CqE 9MW1kpB7dPQZMH1D7yjxu6WodclMBS/hADSsiyIMcX3uWIburR8Qks1vnWGkw3Zo +ENHXaonhlcnnMmdZgLkJZPEljUlDW8a1c8wGRQWGnwZKIjO5kRL6qPDlQQ6qOqX 6NtClGq3r61D6TI0QsTVT6cRJt/3br+qKQNZ6WoYdCgP/itX163wf7EU34q79GBC LM1b9O5ki1M47AsxhjL8QdHL4yKdArc5EN056jHXnk/IMoOENksR2mjHPesgRuF/ h/IYTasYS2RGKVWwNHq6sBc7ox/lnroTFGrUii/y/V375e4K5d8kz9wOwl8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIX044Ph8s0bQ+oAMsJLRuzdZ32swHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfT6AJinpnRnLlOLmmkVaqAecPR4CVPimcA zGxfC5I7e3it2Qz0hG/y4iEvGGdHM3TAU2NdJrA6BSY3klMItXZHOIYUYAXfmafd 3vBZFb5nyrUMZaY8/EwIheHR6ktv7bILhJ0jWX0WoT6GSksW3wndjYUFe9DzReR/ VDLwqdLt+51K408woHGl6DMnzTyRFWwiAkIcuQBbjZdV8NKaafieV6wOcWVWnCnC Zew0Omc46fFcZZHkT1IIobZlalVXHMfIQcr0qwyxKxOeBmCS+gYo7mcHC8bT1up6 wHRS79BMNfplt8QbmbXzIllxvKpHSpJ0MgvpLhshU2+2wOuU9zQ= -----END CERTIFICATE-----Generated at Sun May 11 13:33:02 2025 by rpki-client