$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: x2HlKsIcS6wOjLYLT2+DqV5zO4+ceHKRhSRTS94ECeQ= Subject key identifier: 3D:25:61:B3:03:1E:5D:FC:1B:7A:59:BA:16:D9:80:98:D4:F6:80:5B Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 7A2CFAB54473122D79DFF6E2B0DF9E392E230BA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 83 Signing time: Wed 12 Mar 2025 16:41:55 +0000 Manifest this update: Wed 12 Mar 2025 16:36:55 +0000 Manifest next update: Sun 16 Mar 2025 04:33:55 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: mNyigsx6fiPTgdjz6nFdMMBq/cl8SacZCUjTw8QheXg=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: SjFy1XIdIkdC9qmtRVsxowr24fV3dJf/xhWtYdlWzbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2c:fa:b5:44:73:12:2d:79:df:f6:e2:b0:df:9e:39:2e:23:0b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Mar 12 16:36:55 2025 GMT Not After : Mar 16 04:33:55 2025 GMT Subject: CN=3D2561B3031E5DFC1B7A59BA16D98098D4F6805B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:5b:fa:da:0a:ae:9b:cc:3f:2c:e3:e6:19: 4c:5b:65:95:33:59:bc:52:f2:1a:6d:27:e6:af:02: fa:0d:b4:60:26:14:e5:34:c0:36:4a:0a:12:fa:aa: 81:03:8f:e9:2b:0a:42:f8:b1:35:2d:b6:3e:e9:4f: ba:5d:65:f0:ba:0c:e1:5e:f8:7f:6f:0f:83:a1:cb: e0:d6:9a:d6:da:5e:4f:f3:99:a0:f6:65:16:9d:ec: 79:d9:d6:2b:f0:ec:64:86:f0:71:98:35:9c:d8:0e: 46:67:ca:cb:6e:23:dc:f4:cd:9f:ff:89:08:3a:7b: 5b:88:27:81:ed:d8:6b:e8:a7:05:e2:df:2c:35:14: 4f:24:12:de:17:06:e0:3b:da:ee:5d:45:21:ef:a6: cd:05:5b:ee:0a:21:6a:67:f9:5c:34:d0:9e:27:d7: e2:d2:5a:23:0d:3b:c0:d9:c5:b2:1e:19:38:28:b8: 53:36:93:67:a7:3b:6d:78:cc:4b:de:ff:56:5d:48: 40:fa:0c:60:b5:7b:3e:5a:84:78:ed:8a:e6:c9:c9: 12:46:ee:eb:2d:8f:3d:3a:65:26:0c:a2:75:f7:9a: 88:60:35:78:3b:63:d0:2c:1c:2f:55:31:72:4c:ab: c4:42:3c:ec:57:21:7f:94:49:57:aa:00:cb:03:29: a1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:25:61:B3:03:1E:5D:FC:1B:7A:59:BA:16:D9:80:98:D4:F6:80:5B X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f0:e0:e7:16:0b:e8:ab:79:0c:01:81:90:0d:86:cd:86:5a: 36:0a:5c:6c:bb:89:ad:21:49:05:a0:f3:5b:e4:9f:30:76:ad: 00:08:3f:21:58:ee:b8:46:9b:ba:c1:d5:63:82:5f:96:29:14: 84:e0:f5:e3:5c:31:ad:00:3c:d7:99:f0:44:81:e5:2a:fa:26: 94:d7:02:5f:5d:a2:3c:3e:2a:80:d1:a5:d3:d2:cc:84:87:d9: 39:98:c2:50:48:fa:fc:97:f6:8d:52:14:5b:c9:80:15:3b:21: 1d:64:f4:fe:7e:93:ee:aa:3a:dd:13:8c:f9:52:df:2d:bf:7e: 88:a4:d0:74:32:32:fa:5c:7d:c3:15:67:b6:04:a8:7c:b2:1a: 24:23:b7:54:73:71:92:63:36:37:ba:e9:2e:fa:6e:ed:6d:ad: 87:f5:9a:b9:35:f8:fd:90:65:3d:f6:b6:a1:e6:0f:b8:73:ab: 16:55:4d:79:56:f6:94:3a:a3:3e:8f:f4:28:06:44:88:d5:0f: b7:b9:78:0f:b8:f6:44:b1:a6:2f:5e:14:96:27:b1:13:76:02: f1:a4:07:85:3c:8a:fa:cc:9d:7f:ac:9c:c0:38:82:c1:2f:24: ac:75:8d:7c:0a:40:9d:68:8c:84:33:da:a7:64:b2:d8:8e:6f: dc:72:45:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiz6tURzEi153/bisN+eOS4jC6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTAzMTIxNjM2NTVaFw0yNTAzMTYwNDMzNTVaMDMxMTAvBgNV BAMTKDNEMjU2MUIzMDMxRTVERkMxQjdBNTlCQTE2RDk4MDk4RDRGNjgwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqFv62gqum8w/LOPmGUxbZZUz WbxS8hptJ+avAvoNtGAmFOU0wDZKChL6qoEDj+krCkL4sTUttj7pT7pdZfC6DOFe +H9vD4Ohy+DWmtbaXk/zmaD2ZRad7HnZ1ivw7GSG8HGYNZzYDkZnystuI9z0zZ// iQg6e1uIJ4Ht2GvopwXi3yw1FE8kEt4XBuA72u5dRSHvps0FW+4KIWpn+Vw00J4n 1+LSWiMNO8DZxbIeGTgouFM2k2enO214zEve/1ZdSED6DGC1ez5ahHjtiubJyRJG 7ustjz06ZSYMonX3mohgNXg7Y9AsHC9VMXJMq8RCPOxXIX+USVeqAMsDKaHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSVhswMeXfwbelm6FtmAmNT2gFswHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3w4OcWC+ireQwBgZANhs2GWjYKXGy7ia0h SQWg81vknzB2rQAIPyFY7rhGm7rB1WOCX5YpFITg9eNcMa0APNeZ8ESB5Sr6JpTX Al9dojw+KoDRpdPSzISH2TmYwlBI+vyX9o1SFFvJgBU7IR1k9P5+k+6qOt0TjPlS 3y2/foik0HQyMvpcfcMVZ7YEqHyyGiQjt1RzcZJjNje66S76bu1trYf1mrk1+P2Q ZT32tqHmD7hzqxZVTXlW9pQ6oz6P9CgGRIjVD7e5eA+49kSxpi9eFJYnsRN2AvGk B4U8ivrMnX+snMA4gsEvJKx1jXwKQJ1ojIQz2qdkstiOb9xyRfg= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:57 2025 by rpki-client