$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: ES/twsgzd7bWnUPD4Zw75LpbDBdFsjHUAkU2giYulvQ= Subject key identifier: AE:51:F1:0B:39:58:A5:BF:2A:B0:54:90:A0:60:D2:5D:33:C2:54:51 Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 531E256F68083E25407AC7FD3F2F4E99B8E2FE10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 04B6 Signing time: Thu 17 Apr 2025 05:30:44 +0000 Manifest this update: Thu 17 Apr 2025 05:25:44 +0000 Manifest next update: Sun 20 Apr 2025 14:48:44 +0000 Files and hashes: 1: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: 7EctcIPxfFZPW1P5p9qAy089fiBQ6Wvhy3EiPuauiGc=) 2: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: 8RW1F1xSI+ALEs95hokLDCbMZ4myVIQPQXm9QRV9dz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 14:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1e:25:6f:68:08:3e:25:40:7a:c7:fd:3f:2f:4e:99:b8:e2:fe:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Apr 17 05:25:44 2025 GMT Not After : Apr 20 14:48:44 2025 GMT Subject: CN=AE51F10B3958A5BF2AB05490A060D25D33C25451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:33:77:8f:d8:5d:31:5e:69:72:5f:5e:dd: f3:96:c5:07:10:df:4c:bd:b7:ee:7d:34:e7:a4:5a: 0f:e2:f1:0a:75:fc:92:8e:b5:53:97:22:8a:9d:ad: 8e:4a:09:3a:45:be:be:75:9b:cf:e5:ea:0f:51:70: f4:8b:d6:7f:8b:7e:c0:88:d0:90:27:23:8e:49:d2: 79:2b:86:5c:ef:95:59:c7:93:28:97:44:c8:f7:36: 85:1e:2d:12:75:ff:69:f6:89:ef:33:d2:c4:ba:23: 69:db:7e:62:9b:db:3f:3a:f9:1c:14:39:57:e9:19: d2:e5:aa:1e:5d:46:05:fe:6b:c0:81:64:84:e6:c8: 43:46:24:41:36:2b:d0:85:21:52:dc:fa:1a:5e:b2: 02:f4:ac:61:3d:dc:bf:36:34:6d:9a:52:dd:df:35: da:94:e0:92:f9:43:50:bf:7b:66:55:7e:67:26:78: a1:49:32:7a:56:93:ce:3b:34:1a:46:86:87:03:ee: af:48:5a:66:7a:d1:dc:44:4e:1a:e9:65:fd:40:90: 79:83:45:99:24:8e:90:39:62:43:70:2c:a1:06:5e: 82:c1:96:f5:3e:a2:b6:f2:70:48:c3:1d:1f:9d:9b: 38:42:c3:90:47:85:33:25:85:af:fc:97:9d:48:1f: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:51:F1:0B:39:58:A5:BF:2A:B0:54:90:A0:60:D2:5D:33:C2:54:51 X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:64:aa:cd:73:f0:1f:5c:56:12:bc:e7:cc:65:c0:c1:47:88: 45:5e:9e:5e:53:16:6e:6e:a5:b4:82:74:ad:dc:63:4f:b4:04: 88:fb:44:fc:d1:ed:be:6c:61:fa:9d:77:16:a1:dd:36:a2:21: 05:fb:7a:5f:c0:97:d9:3a:41:83:c4:88:16:bc:d1:bc:29:29: 96:ec:3d:7c:13:57:33:1a:41:74:2e:cf:ef:80:80:0d:a7:3a: 86:f2:f3:46:52:04:1f:47:8a:a7:ae:be:3d:d5:6c:19:ba:61: 17:7d:8c:6f:30:14:9c:4d:ca:c1:13:54:ae:c5:0f:e0:1f:7e: e5:ed:54:25:12:00:60:d9:cd:2b:c1:67:26:a9:ea:43:24:96: 54:39:c9:7a:fc:c5:59:ce:0b:58:ca:38:e3:20:5d:5e:30:9f: 75:28:a3:8e:e3:ed:af:5b:b7:73:25:3e:de:c7:db:42:3e:a4: 30:c8:47:32:ba:7e:2e:d8:7c:19:fb:d7:61:95:5d:6f:08:ea: 8e:6d:4a:b7:d1:e6:ee:60:ff:88:5c:45:20:8b:9d:45:01:6a: fd:fc:2e:35:36:bf:ce:0e:4c:be:e2:3d:1a:ac:17:6b:7b:91: 8c:a3:0d:3b:e7:c7:b9:09:96:39:72:43:6e:83:50:94:88:f9: bd:80:b2:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUx4lb2gIPiVAesf9Py9Ombji/hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTA0MTcwNTI1NDRaFw0yNTA0MjAxNDQ4NDRaMDMxMTAvBgNV BAMTKEFFNTFGMTBCMzk1OEE1QkYyQUIwNTQ5MEEwNjBEMjVEMzNDMjU0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHzN3j9hdMV5pcl9e3fOWxQcQ 30y9t+59NOekWg/i8Qp1/JKOtVOXIoqdrY5KCTpFvr51m8/l6g9RcPSL1n+LfsCI 0JAnI45J0nkrhlzvlVnHkyiXRMj3NoUeLRJ1/2n2ie8z0sS6I2nbfmKb2z86+RwU OVfpGdLlqh5dRgX+a8CBZITmyENGJEE2K9CFIVLc+hpesgL0rGE93L82NG2aUt3f NdqU4JL5Q1C/e2ZVfmcmeKFJMnpWk847NBpGhocD7q9IWmZ60dxEThrpZf1AkHmD RZkkjpA5YkNwLKEGXoLBlvU+orbycEjDHR+dmzhCw5BHhTMlha/8l51IH2tfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlHxCzlYpb8qsFSQoGDSXTPCVFEwHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtkqs1z8B9cVhK858xlwMFHiEVenl5TFm5u pbSCdK3cY0+0BIj7RPzR7b5sYfqddxah3TaiIQX7el/Al9k6QYPEiBa80bwpKZbs PXwTVzMaQXQuz++AgA2nOoby80ZSBB9Hiqeuvj3VbBm6YRd9jG8wFJxNysETVK7F D+AffuXtVCUSAGDZzSvBZyap6kMkllQ5yXr8xVnOC1jKOOMgXV4wn3Uoo47j7a9b t3MlPt7H20I+pDDIRzK6fi7YfBn712GVXW8I6o5tSrfR5u5g/4hcRSCLnUUBav38 LjU2v84OTL7iPRqsF2t7kYyjDTvnx7kJljlyQ26DUJSI+b2AsoE= -----END CERTIFICATE-----Generated at Sat Apr 19 01:36:00 2025 by rpki-client