$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: +xvZV8OYlNnLsYbG86dJn70YWxK0+RXLCT9jyWWhPJQ= Subject key identifier: 2A:3F:B0:6B:E2:00:97:24:E4:CD:DD:5A:B8:7D:8D:BF:2A:55:69:DB Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 2737E4F59B10737DB8E2743DFF0F64523BBB7942 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 02AC Signing time: Sun 20 Apr 2025 01:52:09 +0000 Manifest this update: Sun 20 Apr 2025 01:47:09 +0000 Manifest next update: Wed 23 Apr 2025 04:59:09 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: mzHcsRUTUCBbpQh0PF3/13tfxFdR6gl4I3cFgd8Tuk8=) 2: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: CfGKDTwzaK9/cDjPw8NSmCs5voaTVZ8iBlLH2WBXSno=) 3: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: nx/juUy7/tZki2r/tMlastEiMjYSJvx7cPICFmmbvLQ=) 4: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: V2DIQ3Y0x3Y7g/fl3qniqhqZU9ZQN2cqCY2+bfWYDTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 04:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:37:e4:f5:9b:10:73:7d:b8:e2:74:3d:ff:0f:64:52:3b:bb:79:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Apr 20 01:47:09 2025 GMT Not After : Apr 23 04:59:09 2025 GMT Subject: CN=2A3FB06BE2009724E4CDDD5AB87D8DBF2A5569DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:a9:d9:32:8b:81:a9:dc:b6:d7:29:eb:73: a8:64:b6:95:9c:29:8a:49:cc:50:93:57:ae:d0:8d: 7e:5f:f8:24:b4:4e:49:3f:a2:b1:3d:f0:53:53:93: 91:0e:cf:78:69:d0:24:ca:73:a3:45:3d:89:45:8b: ca:a7:73:59:8b:a4:42:00:3f:35:da:36:62:12:38: 2a:3e:18:5f:23:5e:ae:ff:b8:d6:1c:fb:40:f4:6f: da:bd:9a:70:3f:f9:a6:05:da:70:df:ff:23:67:53: a0:2d:d9:55:61:76:38:e3:c7:fc:56:4f:af:8c:1a: dc:dc:8f:0f:db:19:06:17:36:0f:46:c6:e6:62:fa: e2:7f:f4:5a:75:e4:17:b1:4f:07:26:d0:5e:1d:c1: 85:ab:74:81:87:fb:3f:69:14:c7:be:46:77:3f:25: b7:89:6d:17:40:20:2a:37:6b:61:9a:3a:ac:dd:eb: d8:11:d9:0f:3d:fd:a5:a0:bb:43:51:57:28:9f:23: 03:75:31:8b:db:58:c6:a1:65:46:74:53:cf:11:19: 02:fb:74:50:93:aa:69:61:e5:76:b6:89:5d:23:b5: 9a:82:bc:a1:8b:6c:1b:6e:54:92:a3:45:e6:e8:b0: bd:9d:c1:d0:3b:4f:1a:c8:e2:41:42:23:38:45:92: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3F:B0:6B:E2:00:97:24:E4:CD:DD:5A:B8:7D:8D:BF:2A:55:69:DB X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3c:61:4c:91:75:b7:25:dd:fc:5a:9d:f4:69:ce:e2:ea:79: d0:71:63:cd:ba:b1:04:14:b0:a4:69:62:25:9b:b0:00:5f:f7: 7a:02:35:ac:41:bf:f0:e2:42:7e:ae:5a:9f:68:e4:9f:8b:f7: d1:1b:77:c5:73:20:ee:c0:87:8f:93:9a:c6:b8:d4:d1:24:3b: 38:3e:66:c0:64:f5:5f:4b:e3:6c:ae:4a:cf:7e:3a:d9:d5:2d: 58:fe:8c:1c:fd:12:c6:43:33:7b:9f:14:5b:dd:c8:f0:35:50: 73:ab:7f:1d:f4:04:09:c7:2f:05:b9:0f:03:7f:b6:00:c0:fc: d9:9d:02:c1:5c:8d:d4:dc:75:51:d6:a4:7f:5c:92:e2:45:72: f5:93:ff:65:d4:ec:eb:19:c8:45:91:a6:9f:ea:aa:df:44:6b: ac:e4:8e:15:cb:b2:47:50:0b:5e:77:53:34:c3:0c:34:1b:07: 4c:9c:bc:e2:1e:ac:54:59:51:0a:b1:5c:4d:81:a2:25:c9:18: 65:7b:ad:19:0b:b2:f6:a8:2a:8f:69:37:c6:19:45:eb:87:d7: ec:c9:59:a2:cf:cb:3f:dd:a0:e4:0a:23:43:18:db:d1:5e:6e: d4:de:13:01:90:2d:5f:04:66:2e:ac:c7:0d:c4:24:92:12:24: 8f:f1:d6:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzfk9ZsQc3244nQ9/w9kUju7eUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTA0MjAwMTQ3MDlaFw0yNTA0MjMwNDU5MDlaMDMxMTAvBgNV BAMTKDJBM0ZCMDZCRTIwMDk3MjRFNENEREQ1QUI4N0Q4REJGMkE1NTY5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2KnZMouBqdy21ynrc6hktpWc KYpJzFCTV67QjX5f+CS0Tkk/orE98FNTk5EOz3hp0CTKc6NFPYlFi8qnc1mLpEIA PzXaNmISOCo+GF8jXq7/uNYc+0D0b9q9mnA/+aYF2nDf/yNnU6At2VVhdjjjx/xW T6+MGtzcjw/bGQYXNg9GxuZi+uJ/9Fp15BexTwcm0F4dwYWrdIGH+z9pFMe+Rnc/ JbeJbRdAICo3a2GaOqzd69gR2Q89/aWgu0NRVyifIwN1MYvbWMahZUZ0U88RGQL7 dFCTqmlh5Xa2iV0jtZqCvKGLbBtuVJKjRebosL2dwdA7TxrI4kFCIzhFkkA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKj+wa+IAlyTkzd1auH2NvypVadswHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw8YUyRdbcl3fxanfRpzuLqedBxY826sQQU sKRpYiWbsABf93oCNaxBv/DiQn6uWp9o5J+L99Ebd8VzIO7Ah4+Tmsa41NEkOzg+ ZsBk9V9L42yuSs9+OtnVLVj+jBz9EsZDM3ufFFvdyPA1UHOrfx30BAnHLwW5DwN/ tgDA/NmdAsFcjdTcdVHWpH9ckuJFcvWT/2XU7OsZyEWRpp/qqt9Ea6zkjhXLskdQ C153UzTDDDQbB0ycvOIerFRZUQqxXE2BoiXJGGV7rRkLsvaoKo9pN8YZReuH1+zJ WaLPyz/doOQKI0MY29FebtTeEwGQLV8EZi6sxw3EJJISJI/x1pg= -----END CERTIFICATE-----Generated at Sun Apr 20 04:23:00 2025 by rpki-client