$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: XJtOGiABq1BnllxMO5api+5bFOeU+PJUnyj9oixpN60= Subject key identifier: F4:55:84:9A:80:5B:07:69:6F:A3:AB:2F:E1:7E:8C:D5:4B:6D:A6:2D Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 68C216D5D453C6598E3FCF860FEC4C8FA214A60B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 01D2 Signing time: Tue 06 May 2025 14:40:38 +0000 Manifest this update: Tue 06 May 2025 14:35:38 +0000 Manifest next update: Sat 10 May 2025 01:38:38 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Z9jqS/MlHQNDz3+c7nvwuggXOFxbjd7WNaFGduuQIn0=) 2: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: RrKOpTzYJ3IFEMD/6iY5TFfo3HvIs5E+ZE/1N3j2zJs=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: jRvjNPw/ZxzPkFc3sQeaNLKo3ENvTo+cZERt4gNCdq0=) 4: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: V+5PAOB+3Hc2l985mj/3vaq9t84PBp2DncMnHHJEYBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 01:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c2:16:d5:d4:53:c6:59:8e:3f:cf:86:0f:ec:4c:8f:a2:14:a6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: May 6 14:35:38 2025 GMT Not After : May 10 01:38:38 2025 GMT Subject: CN=F455849A805B07696FA3AB2FE17E8CD54B6DA62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:8c:9d:b9:17:a8:bd:5c:86:e1:20:68:9e: 3e:26:f6:f6:35:2c:39:64:ce:8f:b4:83:85:74:f2: 7e:80:d3:e3:b1:e3:63:79:7e:2d:f3:a2:f5:2d:af: b2:f7:76:a7:46:ac:f0:21:b3:e7:e0:80:2d:1f:fe: 27:45:5c:7e:57:35:99:32:4a:36:d0:5c:4c:24:95: d8:50:36:10:29:90:68:97:05:4b:77:45:66:5e:1f: 32:74:3d:4c:87:fb:09:90:42:10:a7:8c:b7:b8:4a: 4a:2a:8e:c4:0d:42:e6:05:66:19:0f:4b:88:4d:cc: 1f:5b:09:ec:a8:74:ab:b6:8a:07:72:ac:1f:ab:93: bc:47:52:2d:e5:39:30:02:c9:7a:56:55:aa:7a:74: 37:e4:80:79:bb:d2:4b:92:72:2b:bd:4e:b0:77:4e: f0:79:96:04:eb:40:66:a4:62:24:f4:ca:07:d6:f3: 42:9f:62:7c:82:b8:89:81:c7:8a:d7:66:e2:22:cb: 46:9a:62:51:df:08:b2:a2:4b:6d:d8:c4:27:79:00: b2:b0:d6:66:82:a5:7b:c7:80:39:c1:55:5f:74:10: a0:70:aa:b2:f9:b7:f7:da:57:fc:33:7f:db:85:fc: 6e:52:83:da:39:50:b0:24:4c:9c:46:91:7c:49:7d: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:55:84:9A:80:5B:07:69:6F:A3:AB:2F:E1:7E:8C:D5:4B:6D:A6:2D X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e5:e7:8e:64:04:54:6c:d9:d5:c2:9c:6d:fd:86:23:8c:23: dc:ec:a8:67:1d:69:d6:33:63:dd:97:2d:18:cd:59:5e:d7:18: 37:fe:50:0f:c8:b2:d3:c3:d9:23:50:f0:75:96:af:5f:75:63: 2e:8b:31:55:19:ca:2a:0f:7e:17:ac:73:81:69:da:46:f4:80: 63:cb:38:64:5b:2b:04:92:49:38:28:8e:de:ae:c0:52:65:4e: e1:35:e2:c4:97:d1:d9:22:1a:c2:47:3d:1d:ca:ff:28:4b:fd: 78:77:6d:a9:e5:39:25:11:47:97:48:39:d2:a4:34:ac:22:42: 4a:fb:9c:7d:d5:9f:8c:b8:79:6d:fd:74:5b:56:4a:1f:45:ad: 48:c8:bc:ec:ed:35:7c:25:94:71:d3:05:b7:00:95:f1:4d:ea: c2:d9:69:e6:0b:33:39:d8:63:71:ce:1e:8a:66:8d:2b:19:b3: 33:9a:95:2a:a0:01:e0:72:55:ab:79:5a:c7:f2:7a:16:53:9d: d4:45:0c:79:58:fb:f6:9e:3c:ea:b8:86:14:c7:1e:c5:3b:2b: 64:7e:74:dc:a1:ed:e8:98:78:a9:ec:2f:20:2b:19:fd:7a:18: e1:a5:a3:32:ef:45:a9:47:c9:89:64:d0:33:c8:82:35:8f:7b: 56:8c:1b:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMIW1dRTxlmOP8+GD+xMj6IUpgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTA1MDYxNDM1MzhaFw0yNTA1MTAwMTM4MzhaMDMxMTAvBgNV BAMTKEY0NTU4NDlBODA1QjA3Njk2RkEzQUIyRkUxN0U4Q0Q1NEI2REE2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbN4yduReovVyG4SBonj4m9vY1 LDlkzo+0g4V08n6A0+Ox42N5fi3zovUtr7L3dqdGrPAhs+fggC0f/idFXH5XNZky SjbQXEwkldhQNhApkGiXBUt3RWZeHzJ0PUyH+wmQQhCnjLe4SkoqjsQNQuYFZhkP S4hNzB9bCeyodKu2igdyrB+rk7xHUi3lOTACyXpWVap6dDfkgHm70kuSciu9TrB3 TvB5lgTrQGakYiT0ygfW80KfYnyCuImBx4rXZuIiy0aaYlHfCLKiS23YxCd5ALKw 1maCpXvHgDnBVV90EKBwqrL5t/faV/wzf9uF/G5Sg9o5ULAkTJxGkXxJfeXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9FWEmoBbB2lvo6sv4X6M1Uttpi0wHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7l545kBFRs2dXCnG39hiOMI9zsqGcdadYz Y92XLRjNWV7XGDf+UA/IstPD2SNQ8HWWr191Yy6LMVUZyioPfhesc4Fp2kb0gGPL OGRbKwSSSTgojt6uwFJlTuE14sSX0dkiGsJHPR3K/yhL/Xh3banlOSURR5dIOdKk NKwiQkr7nH3Vn4y4eW39dFtWSh9FrUjIvOztNXwllHHTBbcAlfFN6sLZaeYLMznY Y3HOHopmjSsZszOalSqgAeByVat5WsfyehZTndRFDHlY+/aePOq4hhTHHsU7K2R+ dNyh7eiYeKnsLyArGf16GOGlozLvRalHyYlk0DPIgjWPe1aMG5U= -----END CERTIFICATE-----Generated at Thu May 8 02:32:36 2025 by rpki-client