$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json) Hash identifier: f/g3DqdFRASGPuiWxheM0a/pQEPkw7q+oBZA3LdXexQ= Subject key identifier: 30:EC:78:5D:54:79:6E:23:31:02:7D:E1:FB:A5:7D:1E:F1:F3:6E:C1 Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 366091CC95B4314BA64CFFB5AC18EBB59A649C4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 00:30:33 +0000 Manifest this update: Sat 05 Apr 2025 00:25:33 +0000 Manifest next update: Tue 08 Apr 2025 06:08:33 +0000 Files and hashes: 1: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: +fmmEqGjIhGvN7Sy98id9pEU/HoES5drTK/61sDUswg=) 2: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: 0gzYY7cjTPjY2yjhcF04nMrJdj9Xu6B9UNr2O7vO1co=) 3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: OsXuery+dqrXtWPBKclCMRfHJTDgT5E1V7vyLlK5GAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:60:91:cc:95:b4:31:4b:a6:4c:ff:b5:ac:18:eb:b5:9a:64:9c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: Apr 5 00:25:33 2025 GMT Not After : Apr 8 06:08:33 2025 GMT Subject: CN=30EC785D54796E2331027DE1FBA57D1EF1F36EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:ce:7e:36:f5:8c:d8:59:b1:0e:b5:ef:0b: 1c:ed:7d:5a:ef:b0:3c:eb:b5:0d:ae:74:0e:da:b6: 5b:9c:97:5d:e2:26:06:f7:fa:54:56:4d:05:8d:7e: 0b:5c:f1:67:3f:a0:0a:e9:e2:84:7c:b8:8c:c9:55: 9a:2d:e5:09:ac:b9:b2:a2:a8:13:e6:e0:58:09:30: 8d:df:c4:1d:d6:8a:ba:0f:f8:75:7a:b5:7a:05:f8: b7:c7:43:f6:26:0f:40:06:d8:5e:8e:3f:6d:cd:a9: b4:01:a0:77:35:49:d9:68:ad:2d:60:2e:fd:74:d2: 8e:bc:25:fa:1b:2e:00:77:5d:ec:ef:cd:c2:6e:25: ac:ba:8b:e3:6f:45:4c:b6:50:3b:6f:06:eb:ea:5c: 95:21:85:25:52:ce:69:eb:c9:63:4d:1b:e4:4d:10: c4:86:c0:0d:2a:7a:1e:03:23:49:8f:ae:76:4b:27: e8:a6:af:71:66:97:19:76:b6:b9:ea:09:63:1e:fb: 4d:2a:d3:bf:1d:00:a7:f3:27:e7:51:1b:cc:25:23: ca:65:e8:61:51:28:d2:ea:07:73:5d:b4:e9:17:f1: 20:18:13:25:1f:0d:76:5f:be:64:0b:8e:b2:31:3d: 80:d4:8f:91:e3:de:76:20:5e:30:f0:0a:78:1b:a0: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EC:78:5D:54:79:6E:23:31:02:7D:E1:FB:A5:7D:1E:F1:F3:6E:C1 X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0f:2b:ef:e8:0d:67:9e:9d:25:36:95:ea:27:cf:56:fb:89: 84:85:6e:55:01:d2:49:bc:73:ba:1d:d6:8a:63:e3:44:49:ae: 7d:f3:3b:fb:33:8a:d2:94:70:d9:1f:83:26:81:6c:d1:71:c3: f6:20:e8:1c:f3:d1:d7:75:cc:2d:d6:34:64:98:45:0d:e8:1a: 79:48:b4:0c:e2:3c:7c:dd:4e:55:35:a9:bd:63:e3:05:4a:17: 72:d5:7a:e0:24:01:91:11:22:f9:13:09:8b:6d:5e:59:44:b6: c2:0c:38:d6:07:0e:e5:bc:4a:46:69:45:e8:4c:d2:9b:fe:ee: bb:01:53:ec:97:2b:54:af:2a:0e:ee:66:40:ff:42:37:da:1f: 53:94:76:19:bd:58:52:9b:bf:b2:e5:42:9b:92:1e:90:27:58: d7:ca:4d:34:fa:8f:3b:6e:87:08:6d:37:1b:f1:27:ca:d2:5a: 8d:d5:0d:ad:5c:c7:bd:97:74:98:9f:84:92:bf:58:68:93:92: c3:22:1b:af:83:90:fd:22:00:f1:42:2d:0c:59:2c:81:06:02: f9:2e:1d:e2:4b:68:10:ed:37:1e:fb:9d:cc:a9:74:31:66:fc: ea:5c:81:12:59:bc:db:97:fc:28:e8:37:7d:11:b7:26:7e:61: 6a:cb:24:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmCRzJW0MUumTP+1rBjrtZpknEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTA0MDUwMDI1MzNaFw0yNTA0MDgwNjA4MzNaMDMxMTAvBgNV BAMTKDMwRUM3ODVENTQ3OTZFMjMzMTAyN0RFMUZCQTU3RDFFRjFGMzZFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0os5+NvWM2FmxDrXvCxztfVrv sDzrtQ2udA7atlucl13iJgb3+lRWTQWNfgtc8Wc/oArp4oR8uIzJVZot5QmsubKi qBPm4FgJMI3fxB3WiroP+HV6tXoF+LfHQ/YmD0AG2F6OP23NqbQBoHc1SdlorS1g Lv100o68JfobLgB3XezvzcJuJay6i+NvRUy2UDtvBuvqXJUhhSVSzmnryWNNG+RN EMSGwA0qeh4DI0mPrnZLJ+imr3Fmlxl2trnqCWMe+00q078dAKfzJ+dRG8wlI8pl 6GFRKNLqB3NdtOkX8SAYEyUfDXZfvmQLjrIxPYDUj5Hj3nYgXjDwCngboIg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOx4XVR5biMxAn3h+6V9HvHzbsEwHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VD MEMzMkY3NTk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIPK+/oDWeenSU2leonz1b7iYSFblUB0km8 c7od1opj40RJrn3zO/szitKUcNkfgyaBbNFxw/Yg6Bzz0dd1zC3WNGSYRQ3oGnlI tAziPHzdTlU1qb1j4wVKF3LVeuAkAZERIvkTCYttXllEtsIMONYHDuW8SkZpRehM 0pv+7rsBU+yXK1SvKg7uZkD/QjfaH1OUdhm9WFKbv7LlQpuSHpAnWNfKTTT6jztu hwhtNxvxJ8rSWo3VDa1cx72XdJifhJK/WGiTksMiG6+DkP0iAPFCLQxZLIEGAvku HeJLaBDtNx77ncypdDFm/OpcgRJZvNuX/CjoN30RtyZ+YWrLJKw= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:06 2025 by rpki-client