$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: G4W8YtWc4HiO8Kmr6YxvmkjUGABRDct1vLcolGcGCv4= Subject key identifier: 62:85:64:44:36:8A:7E:95:3A:AA:62:3F:AF:B2:28:42:47:09:5A:DC Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 457B49CCD71EFF20C236AC027B77FEA783290E83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: D4 Signing time: Thu 03 Apr 2025 14:00:59 +0000 Manifest this update: Thu 03 Apr 2025 13:55:59 +0000 Manifest next update: Sun 06 Apr 2025 14:46:59 +0000 Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) 2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: rBc5PNm4qLOepyLJXremkbhVw/8euN4iTXB+hWiVIBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 14:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7b:49:cc:d7:1e:ff:20:c2:36:ac:02:7b:77:fe:a7:83:29:0e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Apr 3 13:55:59 2025 GMT Not After : Apr 6 14:46:59 2025 GMT Subject: CN=62856444368A7E953AAA623FAFB2284247095ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f9:f7:de:0c:53:1e:71:09:74:f0:5e:1c:d1: fc:fc:64:38:c8:f7:5c:62:ca:26:62:58:cb:d4:e3: b5:6e:d6:90:98:f8:e7:41:7d:3b:06:af:82:d6:66: 3d:25:1b:4d:3d:ff:60:78:4e:ba:f8:9f:e3:53:e5: 9e:60:c4:25:27:71:16:c8:86:d6:db:e4:5d:9e:be: 4b:ac:68:48:01:a6:74:9c:60:12:8a:86:0d:ce:44: b3:4b:ab:ef:6f:b3:8a:ff:bc:31:2a:63:f3:6e:0f: 2d:8f:af:94:33:44:0e:7b:c8:db:7e:8d:a7:ad:6b: 75:e0:26:42:3d:42:c1:9c:4a:0e:1c:05:25:92:5d: 0d:d2:74:14:14:50:bc:dc:c6:d4:a5:6b:86:29:97: fb:5e:64:04:48:51:f7:81:52:21:ac:46:57:b6:e4: d3:6f:b2:f2:a2:aa:fc:ad:95:b3:6f:51:5f:5f:98: be:5b:73:2c:55:98:0b:12:ad:59:90:d3:b5:2e:2f: a8:c9:b3:f0:f1:af:a3:d9:8c:96:b4:ed:ea:aa:f5: 65:2d:08:fa:d1:cc:99:d6:94:8c:94:14:ae:c8:4f: a7:8f:ac:54:91:d5:8b:c3:14:94:db:a9:3f:da:2e: 5d:5f:79:99:1a:4d:02:20:79:1c:ee:81:fe:9a:11: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:85:64:44:36:8A:7E:95:3A:AA:62:3F:AF:B2:28:42:47:09:5A:DC X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ab:89:c4:9f:00:a9:5f:a4:c2:8b:4f:8f:b3:67:c7:08:7d: 9c:02:68:2b:3d:35:27:0e:b9:09:1f:d1:56:e7:5e:da:0f:99: e7:31:6d:93:0e:66:2a:3d:b5:26:74:bf:00:ad:4a:86:91:ab: 9b:b4:92:51:c5:ab:69:b8:70:5d:b8:ac:3a:1c:0d:da:11:6a: ac:64:49:ae:49:a4:9a:bc:5a:f8:80:9a:63:f7:0d:61:98:1d: d0:bd:f7:ac:54:fe:75:ec:87:c0:0f:de:85:d8:c1:51:56:cf: 9a:d3:29:24:15:b4:58:76:01:f9:9e:4c:e1:2f:61:71:f4:0a: e5:4a:97:bd:00:c0:3c:7e:05:73:f8:b9:75:5f:ca:3b:72:05: 34:5c:bc:b5:e5:30:92:39:dc:73:0d:13:76:58:b0:f3:d8:39: 88:ea:aa:de:4b:34:86:13:ea:72:57:43:af:da:6c:52:39:7a: bc:b9:63:20:ed:8d:f1:19:fc:60:14:74:aa:82:63:97:0a:6e: 91:bf:00:67:1a:da:d8:ba:74:05:84:25:47:d4:e7:85:27:88: b2:aa:d0:00:13:5a:53:18:5f:b4:4b:ec:e8:2f:01:da:f5:b8: 8c:20:ee:b6:43:08:ec:c6:5f:14:41:f2:9e:6b:ed:85:82:4f: 7d:d9:ce:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXtJzNce/yDCNqwCe3f+p4MpDoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTA0MDMxMzU1NTlaFw0yNTA0MDYxNDQ2NTlaMDMxMTAvBgNV BAMTKDYyODU2NDQ0MzY4QTdFOTUzQUFBNjIzRkFGQjIyODQyNDcwOTVBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+ffeDFMecQl08F4c0fz8ZDjI 91xiyiZiWMvU47Vu1pCY+OdBfTsGr4LWZj0lG009/2B4Trr4n+NT5Z5gxCUncRbI htbb5F2evkusaEgBpnScYBKKhg3ORLNLq+9vs4r/vDEqY/NuDy2Pr5QzRA57yNt+ jaeta3XgJkI9QsGcSg4cBSWSXQ3SdBQUULzcxtSla4Ypl/teZARIUfeBUiGsRle2 5NNvsvKiqvytlbNvUV9fmL5bcyxVmAsSrVmQ07UuL6jJs/Dxr6PZjJa07eqq9WUt CPrRzJnWlIyUFK7IT6ePrFSR1YvDFJTbqT/aLl1feZkaTQIgeRzugf6aERvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYoVkRDaKfpU6qmI/r7IoQkcJWtwwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2ricSfAKlfpMKLT4+zZ8cIfZwCaCs9NScO uQkf0VbnXtoPmecxbZMOZio9tSZ0vwCtSoaRq5u0klHFq2m4cF24rDocDdoRaqxk Sa5JpJq8WviAmmP3DWGYHdC996xU/nXsh8AP3oXYwVFWz5rTKSQVtFh2AfmeTOEv YXH0CuVKl70AwDx+BXP4uXVfyjtyBTRcvLXlMJI53HMNE3ZYsPPYOYjqqt5LNIYT 6nJXQ6/abFI5ery5YyDtjfEZ/GAUdKqCY5cKbpG/AGca2ti6dAWEJUfU54UniLKq 0AATWlMYX7RL7OgvAdr1uIwg7rZDCOzGXxRB8p5r7YWCT33Zzpc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:11 2025 by rpki-client