$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: tsno6YMbU1zd0mQFoC6yrNf0fOdDJ0ZFF3+jR/AW7lA= Subject key identifier: 4F:2D:E5:CE:B7:22:44:70:5B:75:D1:52:76:87:BE:36:00:D4:13:15 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 4A35D878EA5C39B05D2319B64B9A7628729F985D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 04C5 Signing time: Wed 16 Apr 2025 10:20:43 +0000 Manifest this update: Wed 16 Apr 2025 10:15:43 +0000 Manifest next update: Sat 19 Apr 2025 20:29:43 +0000 Files and hashes: 1: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: hYEhmx/zGzfkfNYOe46uHI9nm09b6UIWA4Phuhl4Bo4=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: jNblYOWXGZ9xpdk1D93yOMfg4jMrdJm4XYm7AukDLjw=) 3: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: 4nSQ/iGCwdxa7Cn3istPAWcahjYvD0wVk1MPIKQ3DRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 20:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:35:d8:78:ea:5c:39:b0:5d:23:19:b6:4b:9a:76:28:72:9f:98:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Apr 16 10:15:43 2025 GMT Not After : Apr 19 20:29:43 2025 GMT Subject: CN=4F2DE5CEB72244705B75D1527687BE3600D41315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:67:1b:4d:f5:43:c3:2e:ec:4a:b6:ef:dc: d5:4c:fd:2d:c8:fd:4f:ba:86:2c:ce:1c:fa:d9:99: ee:dc:53:60:d4:34:35:78:77:18:e7:15:34:78:77: 78:69:90:20:56:ae:5f:7d:c5:fb:d5:24:79:cd:4a: 92:19:ab:14:ec:16:a0:40:2d:dd:3d:fc:bf:7a:bf: 08:79:cd:57:15:29:f4:24:95:ba:56:59:d0:fb:52: c3:d4:51:63:3e:5e:c5:f6:76:5c:c7:b6:7d:a9:b6: dc:7f:20:b7:01:b5:28:84:a9:11:a8:40:45:1c:09: ef:24:71:d0:8b:b6:f4:4d:f9:11:b1:f7:a6:66:11: 2d:97:11:c7:88:36:5c:f5:bb:9d:a0:d6:dd:a6:62: 9b:d5:8d:c8:62:eb:8f:54:a9:b2:d2:06:79:c9:15: 18:b8:64:14:6a:09:d9:04:ff:2b:d6:bd:66:e8:d0: 80:a6:e4:57:a2:8e:b7:55:84:4b:77:16:bb:a3:77: c6:40:02:c9:a1:3e:2d:e9:ea:1c:94:6b:9a:8d:c9: a3:a5:9d:93:8b:ba:0f:51:d7:f2:6b:9c:eb:46:43: 64:a1:28:8f:b4:de:f0:5a:80:bc:ba:8a:67:ed:58: 01:cf:14:26:94:59:17:04:a8:0d:78:7f:04:d0:94: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:E5:CE:B7:22:44:70:5B:75:D1:52:76:87:BE:36:00:D4:13:15 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d9:a4:62:4e:93:bd:29:e3:c6:6f:74:11:d5:cb:84:3a:dc: 50:2e:98:5e:8d:80:d7:52:5e:60:44:82:c6:84:7c:c2:e8:9f: 5b:93:0e:34:41:9b:b6:57:7b:f5:a4:09:9a:a7:92:2e:aa:bd: 72:ba:ac:6b:bd:9e:0b:c3:44:09:23:18:5d:eb:1b:2c:d1:c3: 6a:d5:ae:11:11:ab:87:bd:66:a3:17:24:1a:69:c9:86:87:f9: 5d:4d:25:d7:fc:8f:2c:87:67:77:54:58:83:27:7c:13:1c:28: 11:5d:a1:48:ec:5f:57:e3:c5:61:ad:67:d5:c0:af:1b:32:66: f0:3e:c1:35:a3:40:22:3b:97:9a:cd:fb:18:af:7f:75:4e:6d: 29:7a:7e:ab:d5:ef:37:c2:69:0a:ff:2d:10:53:64:30:44:f0: dc:bf:ff:fd:bc:56:1c:65:d6:8b:43:54:d5:64:b3:de:fd:7b: a8:4c:fb:09:fe:0b:50:85:29:79:60:56:fa:cf:8b:fa:d4:50: 2d:2e:dd:30:79:93:7d:d3:71:98:29:68:af:9f:49:0e:81:d2: 42:2c:5f:98:c0:81:4c:1b:57:4a:1e:52:f6:df:f8:ea:df:ec: d1:63:85:b5:33:77:f5:bf:80:81:0d:c0:5b:a0:c0:d9:6d:30: 59:0a:53:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjXYeOpcObBdIxm2S5p2KHKfmF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTA0MTYxMDE1NDNaFw0yNTA0MTkyMDI5NDNaMDMxMTAvBgNV BAMTKDRGMkRFNUNFQjcyMjQ0NzA1Qjc1RDE1Mjc2ODdCRTM2MDBENDEzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtI2cbTfVDwy7sSrbv3NVM/S3I /U+6hizOHPrZme7cU2DUNDV4dxjnFTR4d3hpkCBWrl99xfvVJHnNSpIZqxTsFqBA Ld09/L96vwh5zVcVKfQklbpWWdD7UsPUUWM+XsX2dlzHtn2pttx/ILcBtSiEqRGo QEUcCe8kcdCLtvRN+RGx96ZmES2XEceINlz1u52g1t2mYpvVjchi649UqbLSBnnJ FRi4ZBRqCdkE/yvWvWbo0ICm5FeijrdVhEt3Frujd8ZAAsmhPi3p6hyUa5qNyaOl nZOLug9R1/JrnOtGQ2ShKI+03vBagLy6imftWAHPFCaUWRcEqA14fwTQlKujAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTy3lzrciRHBbddFSdoe+NgDUExUwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/ZpGJOk70p48ZvdBHVy4Q63FAumF6NgNdS XmBEgsaEfMLon1uTDjRBm7ZXe/WkCZqnki6qvXK6rGu9ngvDRAkjGF3rGyzRw2rV rhERq4e9ZqMXJBppyYaH+V1NJdf8jyyHZ3dUWIMnfBMcKBFdoUjsX1fjxWGtZ9XA rxsyZvA+wTWjQCI7l5rN+xivf3VObSl6fqvV7zfCaQr/LRBTZDBE8Ny///28Vhxl 1otDVNVks979e6hM+wn+C1CFKXlgVvrPi/rUUC0u3TB5k33TcZgpaK+fSQ6B0kIs X5jAgUwbV0oeUvbf+Orf7NFjhbUzd/W/gIENwFugwNltMFkKU6U= -----END CERTIFICATE-----Generated at Fri Apr 18 06:37:46 2025 by rpki-client