$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: 5X8T6W9+RzueJD6fdCEHD8QhOewmCmf4JnOooA1twSM= Subject key identifier: 17:D4:5B:76:7D:3B:9E:EC:10:AF:4C:E7:61:2C:1E:7F:40:C5:3D:1A Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 2204EF4D69BB9F3467EF25879C54664A279CA4E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 02E5 Signing time: Wed 16 Apr 2025 16:01:18 +0000 Manifest this update: Wed 16 Apr 2025 15:56:18 +0000 Manifest next update: Sun 20 Apr 2025 00:31:18 +0000 Files and hashes: 1: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: 5gkDTUPOP86ZTszssHmuwfTeqK0h2OtUw2I8RqWkJHk=) 2: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) 3: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 4: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:04:ef:4d:69:bb:9f:34:67:ef:25:87:9c:54:66:4a:27:9c:a4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Apr 16 15:56:18 2025 GMT Not After : Apr 20 00:31:18 2025 GMT Subject: CN=17D45B767D3B9EEC10AF4CE7612C1E7F40C53D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:18:b8:ea:f3:8b:5a:83:41:77:2e:1d:b6: b8:df:8e:72:a0:15:84:55:0b:03:7d:35:9b:71:92: c1:5b:50:af:e9:97:c3:09:40:a4:44:28:5f:93:61: da:c0:ec:9b:a6:82:26:36:69:0a:e0:11:dd:ce:9e: fd:5d:a9:88:43:99:0b:4e:36:75:79:a4:2a:94:5f: e4:d6:fe:e9:f0:92:52:22:b7:9a:78:8c:66:18:76: d7:4a:7d:44:fd:1c:8c:32:81:1c:e8:c5:33:cf:3a: 2e:74:d8:f9:54:5c:4e:ab:13:7f:0f:bc:c0:1c:34: 4a:f8:4b:c6:16:77:60:48:5c:9b:15:8c:7f:7b:21: 21:c5:70:22:0b:1d:d7:59:4b:f5:86:9d:e8:1a:30: e0:d8:6f:8e:01:a2:4b:67:01:85:c9:ec:e8:e9:16: e0:63:28:8d:cd:b9:36:98:b4:f8:81:5c:6d:31:2b: 92:a2:e5:ed:fb:fb:5c:64:78:93:3d:a0:93:36:fa: 39:af:63:29:69:42:ba:5f:4a:c2:ad:16:87:7b:99: 25:40:2f:68:0c:8c:e2:e8:f5:8e:56:26:42:10:af: 4a:e8:02:59:5c:8b:70:c1:99:af:32:de:6e:3b:e6: fd:d3:66:72:d5:d1:65:f5:e3:67:7e:29:c4:4d:8d: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D4:5B:76:7D:3B:9E:EC:10:AF:4C:E7:61:2C:1E:7F:40:C5:3D:1A X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:09:a1:50:65:43:13:c7:bc:86:36:85:7f:87:9e:85:05:ac: a8:cc:b2:46:44:08:15:e7:01:26:dc:a4:d2:c9:a0:4c:bb:e9: d1:fb:d7:9a:4b:25:57:25:30:95:2a:85:ea:9f:13:8f:cc:4b: 03:f3:c7:5e:97:1e:8d:6b:0d:79:a0:4a:5d:8b:e0:ee:35:67: 43:ae:90:9f:37:00:8a:3c:42:a9:95:de:8d:ac:e9:6f:20:90: df:a4:fe:5c:c3:3f:fa:20:17:bf:c1:1f:a9:0c:51:28:18:f9: 7d:27:75:4b:31:cd:20:1f:42:3d:4d:6a:e9:e1:36:c0:fb:2a: 13:f7:44:93:49:36:8f:f7:59:f8:92:b3:80:75:77:0c:e4:00: 4f:c7:ac:93:23:5a:97:4c:2a:29:ca:78:a6:34:b4:4d:91:d3: 93:14:d3:d1:c2:ab:c2:79:20:7d:68:80:d0:10:b0:f6:c8:79: 83:db:7b:d1:ff:6e:17:75:33:c5:d4:f4:f6:f3:ab:1d:bb:58: 06:f6:71:cd:c2:91:75:c1:b2:60:c1:84:4e:ff:70:29:23:32: e8:c4:85:db:8a:f4:2a:53:75:c9:c1:75:ab:68:1d:b7:3e:4e: 58:35:c0:39:f1:e6:7f:1e:c7:d1:6c:e7:47:49:8e:56:3c:ce: a9:43:8e:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgTvTWm7nzRn7yWHnFRmSiecpOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA0MTYxNTU2MThaFw0yNTA0MjAwMDMxMThaMDMxMTAvBgNV BAMTKDE3RDQ1Qjc2N0QzQjlFRUMxMEFGNENFNzYxMkMxRTdGNDBDNTNEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Pxi46vOLWoNBdy4dtrjfjnKg FYRVCwN9NZtxksFbUK/pl8MJQKREKF+TYdrA7JumgiY2aQrgEd3Onv1dqYhDmQtO NnV5pCqUX+TW/unwklIit5p4jGYYdtdKfUT9HIwygRzoxTPPOi502PlUXE6rE38P vMAcNEr4S8YWd2BIXJsVjH97ISHFcCILHddZS/WGnegaMODYb44BoktnAYXJ7Ojp FuBjKI3NuTaYtPiBXG0xK5Ki5e37+1xkeJM9oJM2+jmvYylpQrpfSsKtFod7mSVA L2gMjOLo9Y5WJkIQr0roAllci3DBma8y3m475v3TZnLV0WX142d+KcRNjQzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF9Rbdn07nuwQr0znYSwef0DFPRowHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMJoVBlQxPHvIY2hX+HnoUFrKjMskZECBXn ASbcpNLJoEy76dH715pLJVclMJUqheqfE4/MSwPzx16XHo1rDXmgSl2L4O41Z0Ou kJ83AIo8QqmV3o2s6W8gkN+k/lzDP/ogF7/BH6kMUSgY+X0ndUsxzSAfQj1Naunh NsD7KhP3RJNJNo/3WfiSs4B1dwzkAE/HrJMjWpdMKinKeKY0tE2R05MU09HCq8J5 IH1ogNAQsPbIeYPbe9H/bhd1M8XU9Pbzqx27WAb2cc3CkXXBsmDBhE7/cCkjMujE hduK9CpTdcnBdatoHbc+Tlg1wDnx5n8ex9Fs50dJjlY8zqlDjrY= -----END CERTIFICATE-----Generated at Fri Apr 18 15:26:22 2025 by rpki-client