$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: nIMkDiajv1+gPbIaL28hAzX2DT5kMDmtIi9YoaeHzSo= Subject key identifier: 6B:1B:A9:E7:A7:E7:95:E1:25:61:2F:32:61:AF:32:23:01:D9:8F:48 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 1F934E9B3A83D2F6BD249DA106327C9AF5FA8D57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01A0 Signing time: Wed 16 Apr 2025 01:50:36 +0000 Manifest this update: Wed 16 Apr 2025 01:45:36 +0000 Manifest next update: Sat 19 Apr 2025 11:23:36 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: BuPdz87WxFvktwV/5BmwYBDfe/Maa2ITvn8Tm6r0cfk=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: uTvbyRMa3JtSusZO5ZSoZ1ULN8brLrTNIGs82j6nGCw=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: 0nr9gPQw5gg7weyVjVjmP4Ms0ouXxZyEGyyMhhjUA3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 11:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:93:4e:9b:3a:83:d2:f6:bd:24:9d:a1:06:32:7c:9a:f5:fa:8d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Apr 16 01:45:36 2025 GMT Not After : Apr 19 11:23:36 2025 GMT Subject: CN=6B1BA9E7A7E795E125612F3261AF322301D98F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:e2:4b:17:d6:03:ae:aa:15:9f:71:db:76: 3b:f9:fd:8b:5a:86:ad:8f:af:c2:26:ca:87:7a:29: 0b:86:89:7e:1e:a7:88:af:85:6c:e6:0d:cb:59:d2: e0:43:d8:fb:08:b7:65:9d:ac:32:f9:ae:38:3e:4a: e7:ea:16:36:52:f7:67:db:25:e1:5c:7f:4e:2c:07: cb:3d:a9:36:82:88:ed:f5:d8:2c:ef:b0:69:2d:28: dc:87:fc:15:5c:b3:53:0c:2e:16:a5:46:83:40:38: 09:09:d5:75:cf:6b:76:6f:73:f7:c0:aa:a0:91:b8: 4b:d2:89:7e:be:72:f8:20:c8:01:bb:6b:49:75:a5: 6a:48:72:00:a5:e0:f3:6e:57:35:81:f5:70:98:0f: ab:83:00:62:ea:3c:ac:f0:69:8a:d2:27:b2:b7:95: ac:f8:b1:51:34:b0:eb:1f:53:59:5c:aa:d7:0e:54: 34:bb:82:0d:c1:52:30:ba:3f:60:ca:e1:9e:7e:82: 46:76:2d:ae:b3:eb:e7:0d:20:a6:7b:e8:8c:77:4c: 9a:36:71:18:3c:04:88:fd:64:60:0c:4a:24:09:f6: 92:3e:66:c9:ed:77:36:7a:2e:e1:79:ac:36:27:67: 55:0b:db:56:66:74:97:17:59:09:2a:64:da:bd:8c: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:A9:E7:A7:E7:95:E1:25:61:2F:32:61:AF:32:23:01:D9:8F:48 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:25:45:04:7e:9c:31:46:e8:75:24:35:39:66:d1:5b:73:be: 8f:9f:ef:b8:43:12:a8:18:6d:d4:2b:5d:ea:f7:45:9f:33:2b: 8a:02:81:e1:2f:f8:c1:6b:a9:f0:b4:57:05:41:e2:c4:15:2f: 33:c7:c8:b6:4a:12:2d:37:96:a2:d5:60:d3:a0:aa:59:07:69: 3e:a4:cc:bf:f7:c8:c4:69:12:3a:50:34:9c:09:d9:8b:b7:a5: 1e:b9:4d:3c:6a:a8:b2:25:3f:df:17:da:b8:3c:22:48:29:d4: de:4e:e4:17:c2:60:64:be:3a:be:0f:00:c1:ac:e5:b8:56:a6: 65:9c:26:49:4b:ca:d6:b3:dd:cc:fa:3d:ed:c7:c3:73:ed:d9: cb:6d:00:6a:8a:05:62:3a:0d:6d:ed:03:f4:26:b7:63:b3:7d: 91:cd:7f:8b:89:33:90:2e:d7:61:6d:ca:45:44:fd:a3:e5:ce: 0d:50:99:a7:50:02:a7:d6:a3:94:25:c0:e5:0f:b0:1d:53:12: 68:f0:7f:94:6e:d1:ac:63:b1:d0:99:bc:91:64:7d:c2:25:4d: 0d:06:31:08:ca:b8:4f:cb:dd:a4:04:4f:4b:8e:56:55:50:f3: b9:71:db:ad:13:b0:b5:3a:b4:40:81:31:f5:c2:43:bd:9f:1f: a2:9f:e1:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5NOmzqD0va9JJ2hBjJ8mvX6jVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTA0MTYwMTQ1MzZaFw0yNTA0MTkxMTIzMzZaMDMxMTAvBgNV BAMTKDZCMUJBOUU3QTdFNzk1RTEyNTYxMkYzMjYxQUYzMjIzMDFEOThGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqneJLF9YDrqoVn3Hbdjv5/Yta hq2Pr8Imyod6KQuGiX4ep4ivhWzmDctZ0uBD2PsIt2WdrDL5rjg+SufqFjZS92fb JeFcf04sB8s9qTaCiO312CzvsGktKNyH/BVcs1MMLhalRoNAOAkJ1XXPa3Zvc/fA qqCRuEvSiX6+cvggyAG7a0l1pWpIcgCl4PNuVzWB9XCYD6uDAGLqPKzwaYrSJ7K3 laz4sVE0sOsfU1lcqtcOVDS7gg3BUjC6P2DK4Z5+gkZ2La6z6+cNIKZ76Ix3TJo2 cRg8BIj9ZGAMSiQJ9pI+ZsntdzZ6LuF5rDYnZ1UL21ZmdJcXWQkqZNq9jDJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaxup56fnleElYS8yYa8yIwHZj0gwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN0lRQR+nDFG6HUkNTlm0Vtzvo+f77hDEqgY bdQrXer3RZ8zK4oCgeEv+MFrqfC0VwVB4sQVLzPHyLZKEi03lqLVYNOgqlkHaT6k zL/3yMRpEjpQNJwJ2Yu3pR65TTxqqLIlP98X2rg8Ikgp1N5O5BfCYGS+Or4PAMGs 5bhWpmWcJklLytaz3cz6Pe3Hw3Pt2cttAGqKBWI6DW3tA/Qmt2OzfZHNf4uJM5Au 12FtykVE/aPlzg1QmadQAqfWo5QlwOUPsB1TEmjwf5Ru0axjsdCZvJFkfcIlTQ0G MQjKuE/L3aQET0uOVlVQ87lx260TsLU6tECBMfXCQ72fH6Kf4TM= -----END CERTIFICATE-----Generated at Fri Apr 18 06:50:09 2025 by rpki-client