$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: 2nLjYzaOwPfMBzyDhHhjxpr/bwn68liLwe5r68y7jYw= Subject key identifier: C3:43:DE:58:AB:EC:C9:87:43:7B:73:F6:D7:F3:C4:7E:80:D9:CD:06 Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 356BB6A3B3D0E1E56FCE5640837A39CDB71DAF7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: EF Signing time: Wed 07 May 2025 00:51:20 +0000 Manifest this update: Wed 07 May 2025 00:46:20 +0000 Manifest next update: Sat 10 May 2025 05:36:20 +0000 Files and hashes: 1: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: SR81LtRVOHMRH2b3ZbkUbjA2kkCUNpKgoCsrDi3/stM=) 2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: P7QsgIeBI6Jlmylg4E9bqTZzbWkEwew+La7Hoh4W7Lw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6b:b6:a3:b3:d0:e1:e5:6f:ce:56:40:83:7a:39:cd:b7:1d:af:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: May 7 00:46:20 2025 GMT Not After : May 10 05:36:20 2025 GMT Subject: CN=C343DE58ABECC987437B73F6D7F3C47E80D9CD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:3e:30:ab:96:69:3d:43:6d:46:e7:2e:60: a9:89:db:92:0c:96:cc:08:60:72:0d:34:20:57:d6: 60:c5:d9:28:4c:ff:f5:04:21:ee:b0:4e:f0:09:0e: 8e:85:af:f2:a4:95:a0:42:98:76:45:69:ad:3e:b4: dc:da:e2:2b:80:f3:3c:6a:f9:8c:bd:e6:64:c2:95: 38:63:9b:45:d6:b6:68:f4:1a:49:3c:3b:d2:dd:26: 5e:76:2b:64:46:cb:3b:9e:54:02:b0:cf:33:01:15: 4b:bf:29:bb:2e:3c:4e:40:b9:a9:e0:14:c8:b2:69: 20:d7:d5:ac:36:fe:80:52:7a:43:77:a8:0b:a1:1d: 26:3d:61:19:9f:bb:c4:2d:cd:dc:f4:81:03:9a:cb: 50:bb:32:50:a0:c1:44:aa:08:30:d4:6a:28:15:29: 80:ba:a3:77:4c:27:ce:ea:7b:dc:fb:6d:6f:98:4f: 03:9a:fd:2c:34:6c:52:fd:1e:44:1e:73:4c:b8:b1: 3e:2c:52:e6:38:97:0d:e5:49:ae:e6:f3:25:4e:1a: 06:ca:6a:e0:03:63:53:84:1e:da:36:81:63:f8:65: 67:e4:ec:c8:23:1c:15:07:68:53:ac:45:8f:ed:da: 1e:dd:ee:66:1c:65:89:e0:5c:11:a7:4a:d2:76:44: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:43:DE:58:AB:EC:C9:87:43:7B:73:F6:D7:F3:C4:7E:80:D9:CD:06 X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:0e:25:08:bd:ef:14:26:c7:a5:77:e7:ca:69:0c:e2:f8:45: d5:01:78:5d:36:6f:c4:95:e2:5c:27:e3:7d:4f:89:ff:cb:a1: 26:73:21:38:62:c0:52:1a:3b:02:bc:a5:14:9d:c2:f5:6d:c2: d2:a1:4f:3e:b1:64:63:0f:74:94:4a:2c:74:e3:95:d3:a0:7a: eb:71:06:93:8f:c3:8a:23:96:93:81:e2:ff:80:b3:5f:4a:24: 68:a2:14:68:90:66:d6:58:d8:5f:d3:d3:17:d7:dd:a9:6f:29: 11:6f:f5:06:15:7e:5f:7f:96:76:26:0f:80:31:e0:63:bd:4f: 85:f1:cc:cb:9b:3a:38:57:0b:d8:76:54:8f:6d:57:fb:d6:04: 00:15:e2:51:b8:d3:45:f2:bc:c3:cc:d3:3e:4c:9d:fe:17:99: 81:a1:53:8a:f4:e3:d5:d3:3a:a9:68:fa:fa:95:2a:70:a8:bd: d8:2d:97:79:dc:c6:f4:f9:67:6b:34:5d:1c:55:01:ab:6a:f0: 25:04:2b:f2:a8:ab:a5:90:83:70:a5:4d:6d:ff:e5:55:d2:8a: 3a:9f:4e:fa:b2:8d:5e:91:9e:52:f1:e2:4d:ca:e9:27:3e:9b: f3:de:4b:16:ec:22:c7:3a:fe:3e:df:4c:e7:1f:6f:0a:3e:f0: ae:6b:a4:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWu2o7PQ4eVvzlZAg3o5zbcdr30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNTA1MDcwMDQ2MjBaFw0yNTA1MTAwNTM2MjBaMDMxMTAvBgNV BAMTKEMzNDNERTU4QUJFQ0M5ODc0MzdCNzNGNkQ3RjNDNDdFODBEOUNEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJD4wq5ZpPUNtRucuYKmJ25IM lswIYHINNCBX1mDF2ShM//UEIe6wTvAJDo6Fr/KklaBCmHZFaa0+tNza4iuA8zxq +Yy95mTClThjm0XWtmj0Gkk8O9LdJl52K2RGyzueVAKwzzMBFUu/KbsuPE5Auang FMiyaSDX1aw2/oBSekN3qAuhHSY9YRmfu8Qtzdz0gQOay1C7MlCgwUSqCDDUaigV KYC6o3dMJ87qe9z7bW+YTwOa/Sw0bFL9HkQec0y4sT4sUuY4lw3lSa7m8yVOGgbK auADY1OEHto2gWP4ZWfk7MgjHBUHaFOsRY/t2h7d7mYcZYngXBGnStJ2RNOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw0PeWKvsyYdDe3P21/PEfoDZzQYwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN4OJQi97xQmx6V358ppDOL4RdUBeF02b8SV 4lwn431Pif/LoSZzIThiwFIaOwK8pRSdwvVtwtKhTz6xZGMPdJRKLHTjldOgeutx BpOPw4ojlpOB4v+As19KJGiiFGiQZtZY2F/T0xfX3alvKRFv9QYVfl9/lnYmD4Ax 4GO9T4XxzMubOjhXC9h2VI9tV/vWBAAV4lG400XyvMPM0z5Mnf4XmYGhU4r049XT Oqlo+vqVKnCovdgtl3ncxvT5Z2s0XRxVAatq8CUEK/Koq6WQg3ClTW3/5VXSijqf TvqyjV6RnlLx4k3K6Sc+m/PeSxbsIsc6/j7fTOcfbwo+8K5rpIY= -----END CERTIFICATE-----Generated at Thu May 8 02:53:08 2025 by rpki-client