$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: uW1zEziR/feJFQYlUoYxW1Gtf2FJ3w9jXWNoy7ma5T8= Subject key identifier: C4:C9:5A:C2:AF:DC:40:3A:9B:E6:F8:97:1F:9E:EC:0D:2B:B2:36:BB Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 01793864522B621BE203BFD7CADF940ADA71E850 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 034E Signing time: Sat 19 Apr 2025 20:51:18 +0000 Manifest this update: Sat 19 Apr 2025 20:46:18 +0000 Manifest next update: Wed 23 Apr 2025 05:14:18 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: POJge00Si4sH0Ev9s+gVzcno6Aih2IlfvfKRoOfh/X0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 05:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:79:38:64:52:2b:62:1b:e2:03:bf:d7:ca:df:94:0a:da:71:e8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Apr 19 20:46:18 2025 GMT Not After : Apr 23 05:14:18 2025 GMT Subject: CN=C4C95AC2AFDC403A9BE6F8971F9EEC0D2BB236BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3a:e2:4b:3b:48:61:98:ea:5e:a1:05:e8:c7: 90:f7:1d:d6:8e:64:c5:52:f1:27:48:16:62:f1:b2: 08:ee:0a:73:83:38:f4:8e:4a:ae:bf:bb:a8:20:03: a8:cd:51:4c:01:ab:20:7a:b9:50:34:50:19:f9:01: d6:03:42:73:74:18:a4:e2:a5:9a:f6:e9:44:61:14: f5:97:db:b8:20:e8:af:f4:3b:6e:69:d2:37:17:14: 1e:aa:c2:35:79:74:c3:91:00:54:89:bc:14:48:f3: 70:3b:0a:2f:f4:68:01:39:81:dc:f2:d2:e9:4e:af: 8e:2e:de:9d:54:5f:99:46:f2:45:d1:35:bf:62:cb: e6:83:1d:c6:24:00:1d:87:fe:90:2a:67:02:db:61: 1e:d2:38:f0:84:df:5d:18:4d:b7:89:04:95:b0:63: b2:84:52:2c:05:78:b5:d9:ce:ee:a7:f9:37:18:01: 26:f9:95:d4:ee:eb:a0:b1:69:c5:03:4b:21:a2:3a: 38:a0:3b:21:33:92:ff:cb:94:b8:5c:3e:3e:58:ba: 65:4f:bd:27:6e:ff:72:49:ce:fc:5a:ef:c7:3f:fc: d8:81:c8:f1:8a:6a:79:8e:f8:45:f9:2e:32:38:73: 6d:20:91:c3:09:43:9c:07:7a:7a:ea:d0:dd:fd:1c: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:5A:C2:AF:DC:40:3A:9B:E6:F8:97:1F:9E:EC:0D:2B:B2:36:BB X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:81:1e:9a:57:57:1b:7a:ea:e7:33:9c:41:ee:60:94:d8:c7: cb:53:4b:e8:39:ef:ae:4e:58:8f:13:8c:45:6f:4c:f4:e0:ab: 5a:85:27:6f:11:ab:95:a5:0e:a3:15:99:ce:b9:b3:19:54:47: be:7f:2c:c0:fb:87:06:4f:83:5a:68:ba:2c:39:22:80:27:73: 05:8d:42:9e:89:cd:ea:86:7e:73:e5:7b:c6:7e:48:a9:33:10: 40:39:4e:cc:32:06:a0:5d:cd:18:f8:e3:f2:0a:6f:ae:65:5b: f2:02:b2:d0:d5:d1:30:36:55:a8:95:0c:0f:c0:65:60:ae:e9: 55:2f:a6:76:7b:c2:e0:6c:f0:37:b3:3d:63:6e:68:5c:5a:f2: af:a5:af:37:49:10:6f:0b:a9:1f:ea:28:a3:8b:2d:48:af:64: 79:66:9e:fb:7c:fe:68:47:bb:db:1d:e8:de:26:5e:ad:80:9e: 17:67:2d:48:a9:df:a8:aa:38:8b:1f:07:85:1d:c7:16:19:1c: c8:d7:67:79:56:f6:9c:e4:cf:ee:77:5a:9a:35:cd:e9:ff:5f: bf:44:ab:b4:0d:38:c5:68:69:bd:5f:45:b8:55:6e:48:6f:56: 59:15:de:4c:46:aa:b1:0e:95:e1:63:63:9a:3b:d7:eb:d6:a2: 90:1d:e3:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXk4ZFIrYhviA7/Xyt+UCtpx6FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTA0MTkyMDQ2MThaFw0yNTA0MjMwNTE0MThaMDMxMTAvBgNV BAMTKEM0Qzk1QUMyQUZEQzQwM0E5QkU2Rjg5NzFGOUVFQzBEMkJCMjM2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtOuJLO0hhmOpeoQXox5D3HdaO ZMVS8SdIFmLxsgjuCnODOPSOSq6/u6ggA6jNUUwBqyB6uVA0UBn5AdYDQnN0GKTi pZr26URhFPWX27gg6K/0O25p0jcXFB6qwjV5dMORAFSJvBRI83A7Ci/0aAE5gdzy 0ulOr44u3p1UX5lG8kXRNb9iy+aDHcYkAB2H/pAqZwLbYR7SOPCE310YTbeJBJWw Y7KEUiwFeLXZzu6n+TcYASb5ldTu66CxacUDSyGiOjigOyEzkv/LlLhcPj5YumVP vSdu/3JJzvxa78c//NiByPGKanmO+EX5LjI4c20gkcMJQ5wHenrq0N39HFmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxMlawq/cQDqb5viXH57sDSuyNrswHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyBHppXVxt66ucznEHuYJTYx8tTS+g5765O WI8TjEVvTPTgq1qFJ28Rq5WlDqMVmc65sxlUR75/LMD7hwZPg1pouiw5IoAncwWN Qp6JzeqGfnPle8Z+SKkzEEA5TswyBqBdzRj44/IKb65lW/ICstDV0TA2VaiVDA/A ZWCu6VUvpnZ7wuBs8DezPWNuaFxa8q+lrzdJEG8LqR/qKKOLLUivZHlmnvt8/mhH u9sd6N4mXq2AnhdnLUip36iqOIsfB4UdxxYZHMjXZ3lW9pzkz+53Wpo1zen/X79E q7QNOMVoab1fRbhVbkhvVlkV3kxGqrEOleFjY5o71+vWopAd4wE= -----END CERTIFICATE-----Generated at Sun Apr 20 17:36:53 2025 by rpki-client