$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: IRweS5aJJpP36bpNqBzkIUETrlZ+IVFm3fy+5IoWBEI= Subject key identifier: 47:58:97:E4:F8:ED:1E:53:4D:E2:44:A4:2F:EE:C7:F0:72:63:F5:16 Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 1AE349CB620EB3FABE6F7FD0E57FBDADB4C703E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 01B2 Signing time: Thu 17 Apr 2025 17:22:06 +0000 Manifest this update: Thu 17 Apr 2025 17:17:06 +0000 Manifest next update: Mon 21 Apr 2025 04:16:06 +0000 Files and hashes: 1: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: ySmHccwgVUo/Xec9y8NyZzFaqBKw2yi8gAIwJ6BUXGE=) 2: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: nCwvZQZ52GeGauR1AsN18udWGWhKkjSZ8q/llg5/kC8=) 3: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: NhZqh71RhAyyaL85a5NqQtcsTCZyguqgipdJCV3D8nU=) 4: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: 4GQdf+VZs7PPph0HlbP83daxKZbSIzab61P6GJVbBqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 00:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e3:49:cb:62:0e:b3:fa:be:6f:7f:d0:e5:7f:bd:ad:b4:c7:03:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Apr 17 17:17:06 2025 GMT Not After : Apr 21 04:16:06 2025 GMT Subject: CN=475897E4F8ED1E534DE244A42FEEC7F07263F516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:51:5b:54:4b:0f:14:b5:03:33:1b:3c:99: 8d:83:5b:2a:2b:db:fe:26:9b:fd:80:c6:7e:2b:f3: 5c:85:7d:36:f0:7e:84:80:44:ab:81:de:cc:b4:c5: 61:78:99:0b:fc:91:72:27:be:d0:32:41:29:10:fb: fd:40:44:48:c8:12:c1:4c:1b:cf:1f:75:4d:f6:64: b0:15:42:c6:8a:92:a3:2d:67:06:83:ef:5d:ca:71: 61:e2:ab:f2:91:b7:76:4c:3d:95:23:ad:dc:bf:ea: a2:bb:dc:db:ae:72:46:47:ff:4e:dc:28:22:d5:64: 69:49:74:ed:ee:f8:1a:02:6c:4c:1c:29:4a:b3:5b: be:d0:81:ea:14:9c:f1:8a:17:b0:c1:fb:56:7a:17: 45:ef:d3:6c:e3:a6:ff:fb:e6:b7:93:c1:4a:78:87: f5:94:b8:b1:9f:67:6e:90:69:bc:de:81:de:87:4c: 1b:b5:c4:2c:53:ec:95:b2:4d:1f:48:af:59:c3:96: 74:2d:f9:bc:31:da:0e:cd:bc:96:7e:3f:25:2b:9b: ef:e2:92:eb:77:2e:51:a3:98:e1:6b:c8:46:c8:78: 48:9c:e6:dc:a6:9f:c9:c7:48:36:3b:c8:43:49:91: f4:14:90:5b:e3:a4:5d:c3:8b:62:90:3f:89:0e:3a: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:97:E4:F8:ED:1E:53:4D:E2:44:A4:2F:EE:C7:F0:72:63:F5:16 X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fc:66:32:13:b7:fc:e7:c0:9e:f6:ca:fc:b7:31:51:8a:7c: 11:a9:ed:61:35:76:46:a8:f3:e0:3f:34:52:61:09:80:c7:3f: aa:a0:37:d3:21:cf:03:80:b8:13:16:f6:a4:23:02:a8:12:c8: 25:c8:18:c7:cb:1e:23:fa:d4:a8:ac:14:c0:18:d0:dc:14:2e: 40:00:17:9e:bc:ae:e1:8b:a4:cf:36:3f:c0:ad:f4:20:18:ea: 03:72:26:ed:d3:29:03:30:e2:f6:d9:ef:05:74:c6:48:f1:5a: df:f4:45:69:62:14:be:c8:50:e0:31:73:7d:33:45:29:c8:04: 15:79:25:30:39:1f:51:5a:68:20:76:9d:9a:88:7c:cd:4b:56: 8f:a3:53:9d:9c:40:3d:cd:ad:83:b3:24:8f:c8:c9:56:20:47: 47:51:52:56:6d:55:37:a7:92:27:0a:15:36:0d:bd:4a:1d:47: e2:ed:24:7b:5b:25:08:7c:87:3f:55:17:8b:32:5b:d7:06:94: 19:9a:1d:a2:54:69:a3:32:af:bb:ac:7e:a6:a1:65:e0:67:ce: 9b:f1:7c:81:0d:90:33:54:e6:1c:95:fe:2f:7c:e7:6d:81:44: df:6b:61:9d:ec:c0:a2:b7:a5:c1:f8:69:bc:e9:22:84:fb:e8: 4c:be:00:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuNJy2IOs/q+b3/Q5X+9rbTHA+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTA0MTcxNzE3MDZaFw0yNTA0MjEwNDE2MDZaMDMxMTAvBgNV BAMTKDQ3NTg5N0U0RjhFRDFFNTM0REUyNDRBNDJGRUVDN0YwNzI2M0Y1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33VFbVEsPFLUDMxs8mY2DWyor 2/4mm/2Axn4r81yFfTbwfoSARKuB3sy0xWF4mQv8kXInvtAyQSkQ+/1AREjIEsFM G88fdU32ZLAVQsaKkqMtZwaD713KcWHiq/KRt3ZMPZUjrdy/6qK73NuuckZH/07c KCLVZGlJdO3u+BoCbEwcKUqzW77QgeoUnPGKF7DB+1Z6F0Xv02zjpv/75reTwUp4 h/WUuLGfZ26Qabzegd6HTBu1xCxT7JWyTR9Ir1nDlnQt+bwx2g7NvJZ+PyUrm+/i kut3LlGjmOFryEbIeEic5tymn8nHSDY7yENJkfQUkFvjpF3Di2KQP4kOOpXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1iX5PjtHlNN4kSkL+7H8HJj9RYwHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/8ZjITt/znwJ72yvy3MVGKfBGp7WE1dkao 8+A/NFJhCYDHP6qgN9MhzwOAuBMW9qQjAqgSyCXIGMfLHiP61KisFMAY0NwULkAA F568ruGLpM82P8Ct9CAY6gNyJu3TKQMw4vbZ7wV0xkjxWt/0RWliFL7IUOAxc30z RSnIBBV5JTA5H1FaaCB2nZqIfM1LVo+jU52cQD3NrYOzJI/IyVYgR0dRUlZtVTen kicKFTYNvUodR+LtJHtbJQh8hz9VF4syW9cGlBmaHaJUaaMyr7usfqahZeBnzpvx fIENkDNU5hyV/i98522BRN9rYZ3swKK3pcH4abzpIoT76Ey+AJc= -----END CERTIFICATE-----Generated at Fri Apr 18 02:30:49 2025 by rpki-client