$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: Zb5b8ZVRZgJtuVDo4A4ExRfqW1fIIt5lXQzCLqRBAsE= Subject key identifier: 05:3C:11:2D:65:32:6E:74:08:B9:12:63:13:9F:ED:24:7E:D2:A4:29 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 187AF0AD335E951530324A203B40A909DED33DBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: 37 Signing time: Fri 04 Apr 2025 08:01:43 +0000 Manifest this update: Fri 04 Apr 2025 07:56:43 +0000 Manifest next update: Mon 07 Apr 2025 09:55:43 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: z5YcVZw2UbAu6SSV+qySvpV85h8jUSYZvfbw7DJmY8U=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7a:f0:ad:33:5e:95:15:30:32:4a:20:3b:40:a9:09:de:d3:3d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Apr 4 07:56:43 2025 GMT Not After : Apr 7 09:55:43 2025 GMT Subject: CN=053C112D65326E7408B91263139FED247ED2A429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:8e:71:01:67:4d:85:48:e4:5c:17:69:3a: d8:9e:2a:b6:81:43:e0:f5:97:f8:e8:e2:4a:b5:a0: f8:f6:72:32:a1:31:f6:db:87:2f:d4:44:b7:34:0e: 99:9e:f8:3b:58:b3:8e:92:42:dc:ca:76:9f:f0:99: f3:f1:d6:14:9b:0a:74:7e:25:dc:4b:af:7d:47:43: 91:3d:46:f6:6a:67:15:a9:f2:eb:96:0a:2c:11:2b: c5:4f:a0:a9:a2:7e:5b:d5:90:12:c3:7f:4f:d3:24: 48:a2:fe:4f:ea:21:3d:91:d6:70:72:75:17:6c:d4: e0:a9:26:cb:17:c6:b4:39:d0:6a:5f:0f:a0:ad:2b: 28:35:06:56:2b:18:cf:0a:fc:67:40:1b:c5:80:6e: c0:91:72:3f:e2:3b:27:8b:db:0d:a3:2b:5d:ec:b5: fb:6b:a4:6f:56:86:54:d2:27:f9:59:fe:a1:1a:13: ee:aa:ac:5e:e1:4a:31:c3:c3:fc:09:36:0b:42:8c: 5e:08:76:d2:f0:b9:4c:4d:51:5f:ac:ab:c6:8a:14: 9c:68:80:94:c2:99:f7:8c:3d:c9:9a:53:a3:13:b0: a5:6e:5f:21:e8:48:c3:8a:48:14:46:4f:0b:0e:15: 6c:d4:f0:aa:c3:1f:7d:d0:b9:70:62:90:2b:9c:af: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3C:11:2D:65:32:6E:74:08:B9:12:63:13:9F:ED:24:7E:D2:A4:29 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:1b:0c:0b:7c:75:43:1c:61:a7:1f:78:19:94:9a:65:37:a5: 22:a2:6b:d1:3b:22:be:ce:18:72:d4:3e:48:4c:1c:bb:5b:2d: 83:5c:d0:e7:86:e2:70:1f:74:eb:1d:74:40:01:25:d8:0c:1e: c0:9e:76:85:ca:90:a5:74:8d:77:72:af:12:d8:a5:0e:f2:a2: 36:ea:18:c1:97:bf:cf:9a:aa:46:40:42:95:2b:d5:c5:f7:fc: a8:76:fb:a5:ab:87:01:df:d8:04:1a:85:8e:f4:55:49:c7:c6: a1:d2:c5:b2:07:ee:c6:9a:1b:ed:3b:6f:36:d8:ad:3b:65:fc: cc:96:5e:12:a5:12:c1:89:ae:2a:28:2e:78:86:e0:45:f1:9a: 81:31:e5:17:f8:1f:ec:80:09:3d:15:a6:e5:94:8d:89:d4:41: f4:e4:b3:fb:bf:be:f3:67:ef:78:6a:20:bd:59:8e:74:99:41: 0a:00:41:54:05:6e:cf:2e:a0:6b:4c:0d:f4:99:6d:ec:e7:a5: 09:92:11:80:82:12:fb:5e:6e:69:32:7f:5d:b1:e0:b2:98:9c: db:b2:38:18:eb:9f:01:a6:71:1a:1c:55:99:de:9a:d3:4e:98: 15:12:1a:78:d0:8e:1e:dc:84:44:36:6a:6b:aa:0e:46:43:2b: 75:b9:71:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHrwrTNelRUwMkogO0CpCd7TPb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTA0MDQwNzU2NDNaFw0yNTA0MDcwOTU1NDNaMDMxMTAvBgNV BAMTKDA1M0MxMTJENjUzMjZFNzQwOEI5MTI2MzEzOUZFRDI0N0VEMkE0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UY5xAWdNhUjkXBdpOtieKraB Q+D1l/jo4kq1oPj2cjKhMfbbhy/URLc0Dpme+DtYs46SQtzKdp/wmfPx1hSbCnR+ JdxLr31HQ5E9RvZqZxWp8uuWCiwRK8VPoKmiflvVkBLDf0/TJEii/k/qIT2R1nBy dRds1OCpJssXxrQ50GpfD6CtKyg1BlYrGM8K/GdAG8WAbsCRcj/iOyeL2w2jK13s tftrpG9WhlTSJ/lZ/qEaE+6qrF7hSjHDw/wJNgtCjF4IdtLwuUxNUV+sq8aKFJxo gJTCmfeMPcmaU6MTsKVuXyHoSMOKSBRGTwsOFWzU8KrDH33QuXBikCucr1TpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTwRLWUybnQIuRJjE5/tJH7SpCkwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4bDAt8dUMcYacfeBmUmmU3pSKia9E7Ir7O GHLUPkhMHLtbLYNc0OeG4nAfdOsddEABJdgMHsCedoXKkKV0jXdyrxLYpQ7yojbq GMGXv8+aqkZAQpUr1cX3/Kh2+6WrhwHf2AQahY70VUnHxqHSxbIH7saaG+07bzbY rTtl/MyWXhKlEsGJriooLniG4EXxmoEx5Rf4H+yACT0VpuWUjYnUQfTks/u/vvNn 73hqIL1ZjnSZQQoAQVQFbs8uoGtMDfSZbeznpQmSEYCCEvtebmkyf12x4LKYnNuy OBjrnwGmcRocVZnemtNOmBUSGnjQjh7chEQ2amuqDkZDK3W5cck= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:32 2025 by rpki-client