$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: LYiD2Iha7EpqVsCZLVO4bW3cjVR9Qnwq+v5umULcpcU= Subject key identifier: 5F:27:E8:46:5C:06:C2:9A:6E:C0:32:47:C3:5A:7A:9B:79:7C:91:E9 Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 3C29B2F5C2646E29C8D01BA2BB921872EE65283A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: 8C Signing time: Tue 08 Apr 2025 15:11:12 +0000 Manifest this update: Tue 08 Apr 2025 15:06:12 +0000 Manifest next update: Fri 11 Apr 2025 18:55:12 +0000 Files and hashes: 1: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: D5DKRopBlmjjXuDhav8kag85o0g88aE545Jxzn8vnIc=) 2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: v4H6gzAwImjArSoITiUSWI8LqHh+wkzR2yjGJMXJ6g4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:29:b2:f5:c2:64:6e:29:c8:d0:1b:a2:bb:92:18:72:ee:65:28:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Apr 8 15:06:12 2025 GMT Not After : Apr 11 18:55:12 2025 GMT Subject: CN=5F27E8465C06C29A6EC03247C35A7A9B797C91E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:5c:c0:52:5d:09:a3:14:0c:4a:d5:89:03: 4c:93:3c:d4:0f:f9:ec:36:71:41:b7:a4:f5:a6:1d: 38:97:7c:aa:57:f7:7e:46:96:41:60:5b:8f:b9:37: 95:ef:4e:f3:5c:74:f9:ef:66:c1:de:fb:57:01:77: d0:01:c0:fe:6c:de:4d:7b:3f:4c:06:03:81:a1:31: 04:dd:b0:54:eb:f1:d4:0c:31:c9:33:86:0c:7d:a6: b3:eb:8e:ad:75:1d:1d:89:b0:cf:79:61:93:f2:79: e8:04:b8:4d:a6:d8:95:d6:61:a6:1b:b7:8f:5e:40: fb:c8:78:97:a4:6d:b1:b3:9f:52:19:e6:f9:29:f1: 50:1a:f8:e2:ce:44:c3:f3:17:30:3b:60:03:89:71: 3d:5e:49:53:44:13:f5:b3:e6:62:a4:35:9b:49:34: 3c:5c:91:17:f9:a1:b5:7a:2a:98:ce:57:0e:0b:24: fb:10:91:41:e9:34:be:db:3a:a6:33:a8:e1:a5:61: b6:07:77:6f:0d:c5:47:b6:cc:09:9a:f0:55:87:06: ad:c1:23:ef:9b:bb:f6:69:3c:f3:3f:d5:92:73:d0: e7:e1:ea:9c:9a:5b:fb:4a:49:20:87:6e:94:a5:8b: c6:fd:d1:2d:8e:a2:b3:67:f0:93:7a:8a:d8:4e:b3: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:27:E8:46:5C:06:C2:9A:6E:C0:32:47:C3:5A:7A:9B:79:7C:91:E9 X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0e:71:41:73:53:bd:29:87:25:17:98:89:fd:bf:40:e1:71: 1b:55:ef:c3:34:55:cb:ee:74:b7:7e:ee:b3:0d:a1:20:c2:7e: 96:61:04:34:60:1f:d8:fb:f8:21:0b:fb:7b:a9:3d:9a:8c:c4: ac:e0:ba:70:5f:a4:2d:84:83:64:ed:3b:90:dc:fe:6d:04:94: b4:96:5f:12:27:9d:8b:8a:92:0d:60:55:a5:b1:00:5b:40:18: df:4d:f6:41:5b:32:db:18:c6:0c:d2:c3:8d:9b:f8:ca:f5:eb: 20:8d:e0:84:84:96:83:19:79:ec:31:55:c4:3c:09:7d:6d:56: 87:a5:30:07:12:f7:d5:5a:d4:12:b2:59:b4:4a:77:36:76:d0: e3:bd:55:d8:01:d9:c0:cb:99:32:e1:98:a8:01:ac:b6:11:ea: 6c:9d:6c:96:36:3c:ff:df:00:88:23:b6:b1:a1:22:af:07:cc: ee:4a:e6:5b:02:75:4e:5e:06:35:5c:e8:c7:d1:58:21:fd:70: e8:0e:7e:9b:0b:79:3a:bf:80:3a:03:74:26:0d:b7:cf:50:b6: 03:05:05:18:3b:0d:75:1a:f1:b0:03:fb:02:04:aa:9d:87:16: 32:bf:19:44:ed:28:11:4f:1e:ca:47:db:0d:67:d1:0f:f3:55: 3a:6b:66:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCmy9cJkbinI0Buiu5IYcu5lKDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNTA0MDgxNTA2MTJaFw0yNTA0MTExODU1MTJaMDMxMTAvBgNV BAMTKDVGMjdFODQ2NUMwNkMyOUE2RUMwMzI0N0MzNUE3QTlCNzk3QzkxRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinlzAUl0JoxQMStWJA0yTPNQP +ew2cUG3pPWmHTiXfKpX935GlkFgW4+5N5XvTvNcdPnvZsHe+1cBd9ABwP5s3k17 P0wGA4GhMQTdsFTr8dQMMckzhgx9prPrjq11HR2JsM95YZPyeegEuE2m2JXWYaYb t49eQPvIeJekbbGzn1IZ5vkp8VAa+OLORMPzFzA7YAOJcT1eSVNEE/Wz5mKkNZtJ NDxckRf5obV6KpjOVw4LJPsQkUHpNL7bOqYzqOGlYbYHd28NxUe2zAma8FWHBq3B I++bu/ZpPPM/1ZJz0Ofh6pyaW/tKSSCHbpSli8b90S2OorNn8JN6ithOsyEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXyfoRlwGwppuwDJHw1p6m3l8kekwHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgOcUFzU70phyUXmIn9v0DhcRtV78M0Vcvu dLd+7rMNoSDCfpZhBDRgH9j7+CEL+3upPZqMxKzgunBfpC2Eg2TtO5Dc/m0ElLSW XxInnYuKkg1gVaWxAFtAGN9N9kFbMtsYxgzSw42b+Mr16yCN4ISEloMZeewxVcQ8 CX1tVoelMAcS99Va1BKyWbRKdzZ20OO9VdgB2cDLmTLhmKgBrLYR6mydbJY2PP/f AIgjtrGhIq8HzO5K5lsCdU5eBjVc6MfRWCH9cOgOfpsLeTq/gDoDdCYNt89QtgMF BRg7DXUa8bAD+wIEqp2HFjK/GUTtKBFPHspH2w1n0Q/zVTprZjE= -----END CERTIFICATE-----Generated at Wed Apr 9 17:24:57 2025 by rpki-client