$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: KX4VR7mYf1420NUErxNCwGOzkhBo+mAcIAERtzxDqOU= Subject key identifier: 8D:02:88:50:E8:57:95:E4:CE:A6:A7:13:66:86:06:AF:2A:4C:D6:9B Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 6710DD8ADF4226F0867C9D059D2E4B38323F8054 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 01A4 Signing time: Sun 04 May 2025 08:31:42 +0000 Manifest this update: Sun 04 May 2025 08:26:42 +0000 Manifest next update: Wed 07 May 2025 09:32:42 +0000 Files and hashes: 1: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: QCDJTK4Kt3CGqH2mDwzqJG3dmGMNWlaUlA9XSFMxry4=) 2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: tcjkZKrAqQ9yYmgw2ICh6qsTS+FTZ8ZlcH4lGdwpZyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 09:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:10:dd:8a:df:42:26:f0:86:7c:9d:05:9d:2e:4b:38:32:3f:80:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: May 4 08:26:42 2025 GMT Not After : May 7 09:32:42 2025 GMT Subject: CN=8D028850E85795E4CEA6A713668606AF2A4CD69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:b2:f7:6e:c8:78:3d:9a:fa:bb:c0:ff:00: e7:e8:33:72:9a:d2:88:da:6f:7e:cc:c7:08:dc:57: 48:bb:1e:65:be:82:ef:21:af:88:ed:4a:98:d0:6f: cf:2f:91:7f:8c:c5:1e:88:41:af:ad:90:a7:a5:f4: 19:52:17:11:86:0c:64:65:32:27:3b:54:ec:3e:a2: e8:22:12:b1:a3:4e:d6:fc:b7:d8:b7:9c:d2:47:38: a4:7a:7f:41:f0:d4:20:29:48:95:c5:75:79:33:ec: 55:08:69:50:6f:8f:fc:7c:63:62:46:82:ec:83:f1: ae:e1:cf:90:d3:6e:8c:2b:34:11:ff:3d:cb:75:7e: fd:c2:00:b3:19:9e:a1:f1:07:fd:f7:e4:ba:c8:ae: 18:f4:e6:2f:7a:91:f1:12:d1:aa:a9:5a:0f:28:44: 91:9b:32:85:ca:72:bc:21:e7:8e:67:83:84:72:3d: d2:6e:33:41:ac:af:51:ad:2d:1e:4b:93:5d:5d:64: 1e:5d:f8:90:a4:80:b9:a2:88:f5:cc:fd:ff:64:60: a0:4c:58:bf:ee:6e:49:62:8f:28:07:99:7c:f8:d2: 6e:eb:75:ba:95:dc:f6:21:83:56:f2:b0:ff:98:11: a1:78:52:56:8b:eb:2d:b1:f6:94:1c:55:6e:14:ae: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:02:88:50:E8:57:95:E4:CE:A6:A7:13:66:86:06:AF:2A:4C:D6:9B X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5b:97:84:91:63:38:ad:95:36:98:a0:af:cd:cb:8b:83:9b: 00:c6:52:bc:54:85:21:f9:bf:b0:55:8e:a1:67:ff:73:1f:6c: 7e:6a:94:10:75:86:77:38:4e:d2:c5:93:14:08:3d:b0:72:bc: 31:f6:1d:89:89:ee:da:20:2d:1b:c8:16:cf:80:e7:a6:ac:0c: 0e:56:12:27:22:ab:fe:d8:00:d5:20:e3:ad:8a:0d:d6:5b:17: 71:42:1c:68:7e:54:1c:75:bb:0e:97:55:db:9e:f1:fc:a8:33: 5f:9e:1e:39:ab:9f:b1:20:8c:75:c8:f8:aa:1a:00:80:2f:d9: 80:b8:e1:62:f0:df:03:2b:a3:32:46:60:e8:4f:3f:d6:06:ba: 59:35:22:4c:a0:9c:e7:29:b2:53:2a:d8:07:bb:af:d7:09:3c: b9:16:4d:57:ec:79:2a:0e:c3:af:57:98:b5:f2:d4:5e:fc:39: 9b:5d:c5:0b:48:7f:8d:56:dc:f4:3b:db:97:6a:32:79:a7:34: ce:30:0e:d2:ad:6a:39:c9:2c:1b:83:d2:50:7e:bf:d2:57:1d: 15:75:6e:6a:17:2e:c8:f4:6a:f3:b1:29:7c:ad:fb:f7:20:12: 8b:43:31:ac:ca:a7:ef:ed:6c:65:cb:05:ae:c2:26:bc:5a:12: 1a:f2:ad:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxDdit9CJvCGfJ0FnS5LODI/gFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNTA1MDQwODI2NDJaFw0yNTA1MDcwOTMyNDJaMDMxMTAvBgNV BAMTKDhEMDI4ODUwRTg1Nzk1RTRDRUE2QTcxMzY2ODYwNkFGMkE0Q0Q2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDei7L3bsh4PZr6u8D/AOfoM3Ka 0ojab37MxwjcV0i7HmW+gu8hr4jtSpjQb88vkX+MxR6IQa+tkKel9BlSFxGGDGRl Mic7VOw+ougiErGjTtb8t9i3nNJHOKR6f0Hw1CApSJXFdXkz7FUIaVBvj/x8Y2JG guyD8a7hz5DTbowrNBH/Pct1fv3CALMZnqHxB/335LrIrhj05i96kfES0aqpWg8o RJGbMoXKcrwh545ng4RyPdJuM0Gsr1GtLR5Lk11dZB5d+JCkgLmiiPXM/f9kYKBM WL/ubklijygHmXz40m7rdbqV3PYhg1bysP+YEaF4UlaL6y2x9pQcVW4UrhSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQKIUOhXleTOpqcTZoYGrypM1pswHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpbl4SRYzitlTaYoK/Ny4uDmwDGUrxUhSH5 v7BVjqFn/3MfbH5qlBB1hnc4TtLFkxQIPbByvDH2HYmJ7togLRvIFs+A56asDA5W Eiciq/7YANUg462KDdZbF3FCHGh+VBx1uw6XVdue8fyoM1+eHjmrn7EgjHXI+Koa AIAv2YC44WLw3wMrozJGYOhPP9YGulk1IkygnOcpslMq2Ae7r9cJPLkWTVfseSoO w69XmLXy1F78OZtdxQtIf41W3PQ725dqMnmnNM4wDtKtajnJLBuD0lB+v9JXHRV1 bmoXLsj0avOxKXyt+/cgEotDMazKp+/tbGXLBa7CJrxaEhryre4= -----END CERTIFICATE-----Generated at Wed May 7 05:05:46 2025 by rpki-client