$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: owNFMRkOcYHTqK08K4dBNAyPLx4V/hmfYw2b1fvc6XA= Subject key identifier: F7:CD:4B:39:10:98:DB:42:3C:63:A9:E6:6F:12:96:48:D5:26:47:CE Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 5BF6743BCCB00664D39A1F468201786E0742BA37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 01C9 Signing time: Sat 19 Apr 2025 05:21:11 +0000 Manifest this update: Sat 19 Apr 2025 05:16:11 +0000 Manifest next update: Tue 22 Apr 2025 12:45:11 +0000 Files and hashes: 1: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) 2: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) 3: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: qiGE1kM5Nf9NVuz2nSFFSAEG98xrqpgJqNfzU0Xzkzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 12:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f6:74:3b:cc:b0:06:64:d3:9a:1f:46:82:01:78:6e:07:42:ba:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Apr 19 05:16:11 2025 GMT Not After : Apr 22 12:45:11 2025 GMT Subject: CN=F7CD4B391098DB423C63A9E66F129648D52647CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:2f:0d:c3:0a:53:53:88:6e:0f:5e:f1:4d: 13:79:f2:19:bb:ad:6e:39:3e:c2:ea:b4:47:84:aa: 72:08:b8:f1:97:f0:2b:2c:c6:ac:69:68:3b:bf:d1: ee:63:45:04:52:11:21:37:e5:a3:13:77:33:88:31: 3d:b4:12:95:2b:58:e9:d9:da:73:6f:62:85:42:fc: 44:ca:7b:97:9d:0b:ac:66:b7:2f:8c:17:eb:61:08: e2:57:81:c2:01:0f:20:c1:31:cb:55:9b:f6:b7:97: 23:cf:4d:3a:7f:cf:ed:b1:93:32:80:99:f7:cf:89: 72:c8:a4:68:04:e4:d3:92:fe:c6:5a:4c:71:da:f2: a3:69:0f:b0:ba:58:39:41:fb:9d:0e:25:50:34:2c: 10:e9:5d:70:0d:03:46:16:32:c4:c4:d8:68:df:96: 53:08:8a:99:13:07:cb:0d:fc:6e:ed:4e:45:d9:a5: 7b:5f:30:e5:39:b6:1d:7a:d1:2e:c5:97:62:8d:33: 53:2a:be:4c:ef:60:ff:de:01:59:8d:f7:9a:16:d0: 99:16:7f:44:79:bd:da:88:e6:61:c6:1c:be:df:39: 02:ec:21:72:85:0c:d3:89:9e:bc:75:b7:81:9d:fb: 41:38:7b:5a:02:b3:ff:7c:e8:76:d3:42:27:fb:ef: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:4B:39:10:98:DB:42:3C:63:A9:E6:6F:12:96:48:D5:26:47:CE X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1a:7b:2a:dc:ae:a2:97:86:49:db:d2:2c:f3:67:7c:2a:7a: f0:4d:18:64:46:b5:a5:0b:bd:11:08:fe:e3:41:f5:02:5e:03: a4:6a:64:8d:83:96:0b:3b:14:07:97:53:92:95:c0:62:b6:91: 79:8c:92:84:5b:1d:4f:e3:a3:81:0b:5f:e8:19:1d:58:83:67: a2:2c:9f:62:ec:ec:95:b3:3f:a1:ad:ab:e0:af:13:a0:2f:76: e6:60:e2:27:38:69:b8:1a:05:21:2d:a8:db:56:a6:d3:a4:80: 15:de:e8:7c:6e:d0:d9:97:62:ed:75:bc:aa:68:1d:0c:67:dd: 1f:ab:8c:44:7e:31:17:e1:a2:f4:2e:8d:49:2d:3c:26:5c:01: 5f:13:d3:b4:2c:4f:88:5a:f5:99:a6:44:77:73:f8:2d:b2:28: 65:d7:1d:19:b2:63:c1:c2:0f:dd:3d:b6:48:03:82:84:77:c4: f4:de:7d:d9:db:1e:26:86:f1:dc:77:7a:87:e9:9b:2c:40:19: 39:00:49:46:b1:8b:58:cc:19:b2:13:6b:d9:80:76:5e:2d:58: a9:a8:10:e7:74:f2:4b:4c:f1:23:50:6c:fd:56:d1:f5:77:b9: 9a:1f:c6:7c:fc:1b:02:0a:87:53:8d:14:fa:32:c0:15:e6:1d: 67:ee:54:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/Z0O8ywBmTTmh9GggF4bgdCujcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTA0MTkwNTE2MTFaFw0yNTA0MjIxMjQ1MTFaMDMxMTAvBgNV BAMTKEY3Q0Q0QjM5MTA5OERCNDIzQzYzQTlFNjZGMTI5NjQ4RDUyNjQ3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAS8NwwpTU4huD17xTRN58hm7 rW45PsLqtEeEqnIIuPGX8CssxqxpaDu/0e5jRQRSESE35aMTdzOIMT20EpUrWOnZ 2nNvYoVC/ETKe5edC6xmty+MF+thCOJXgcIBDyDBMctVm/a3lyPPTTp/z+2xkzKA mffPiXLIpGgE5NOS/sZaTHHa8qNpD7C6WDlB+50OJVA0LBDpXXANA0YWMsTE2Gjf llMIipkTB8sN/G7tTkXZpXtfMOU5th160S7Fl2KNM1MqvkzvYP/eAVmN95oW0JkW f0R5vdqI5mHGHL7fOQLsIXKFDNOJnrx1t4Gd+0E4e1oCs/986HbTQif776gfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU981LORCY20I8Y6nmbxKWSNUmR84wHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoaeyrcrqKXhknb0izzZ3wqevBNGGRGtaUL vREI/uNB9QJeA6RqZI2Dlgs7FAeXU5KVwGK2kXmMkoRbHU/jo4ELX+gZHViDZ6Is n2Ls7JWzP6Gtq+CvE6AvduZg4ic4abgaBSEtqNtWptOkgBXe6Hxu0NmXYu11vKpo HQxn3R+rjER+MRfhovQujUktPCZcAV8T07QsT4ha9ZmmRHdz+C2yKGXXHRmyY8HC D909tkgDgoR3xPTefdnbHiaG8dx3eofpmyxAGTkASUaxi1jMGbITa9mAdl4tWKmo EOd08ktM8SNQbP1W0fV3uZofxnz8GwIKh1ONFPoywBXmHWfuVOM= -----END CERTIFICATE-----Generated at Sun Apr 20 02:05:15 2025 by rpki-client