$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json) Hash identifier: /IzeGBa/jtSbOYAusxZ4QahmViB4zN/Ixg7vyUoOf5I= Subject key identifier: A4:21:10:8C:49:C6:E4:9A:76:0F:FE:05:F2:31:4E:79:74:12:EA:F0 Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5 Certificate serial: 05888A8CB16E629241D2FFDFC43BE2BDC88D72F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft Manifest number: 5D Signing time: Tue 08 Apr 2025 14:40:49 +0000 Manifest this update: Tue 08 Apr 2025 14:35:49 +0000 Manifest next update: Sat 12 Apr 2025 01:06:49 +0000 Files and hashes: 1: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: FLXPGBJ4Siq1VvBVIqzQdgs5xnGBom5EjCtqarg0Eqk=) 2: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: HcaTNypRxuW2zAybyV9VS8hBeP7zx+IeNUadRM7QbJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:88:8a:8c:b1:6e:62:92:41:d2:ff:df:c4:3b:e2:bd:c8:8d:72:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5 Validity Not Before: Apr 8 14:35:49 2025 GMT Not After : Apr 12 01:06:49 2025 GMT Subject: CN=A421108C49C6E49A760FFE05F2314E797412EAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:39:8c:ea:08:4e:ee:a2:51:11:3b:0b:db: a2:ea:38:f7:f6:db:5b:77:e6:6f:95:20:16:c2:5a: 8c:0e:eb:b0:c7:23:ef:ea:33:df:1a:2b:8d:fd:b9: 72:9a:fb:03:7f:b0:24:70:1d:78:1b:78:5e:d0:cc: 8f:28:fb:6a:03:d8:e7:fd:23:a0:fe:c1:43:d2:26: aa:34:73:94:e7:de:17:f5:88:77:e1:7d:08:81:82: 51:d6:dc:51:aa:03:4a:46:ef:cb:90:af:15:67:52: 00:8e:08:af:f3:4f:28:d5:44:14:22:e7:b1:8e:c1: 85:0e:9c:3c:82:f5:cf:33:4e:54:6e:ca:f1:d9:6f: 6b:74:2d:b4:f0:97:04:21:13:bb:17:c0:29:a9:bd: 3a:c7:61:cf:2a:9e:be:d4:05:88:af:50:77:58:4e: 56:a5:9f:f0:4f:93:44:a7:1b:a7:d5:70:89:2b:de: 22:6a:ea:71:93:6d:24:55:19:43:65:0f:c8:0b:72: 4f:a4:7b:72:b5:8d:a6:1f:ff:8d:f6:0c:c5:eb:db: c0:b3:61:6e:48:fc:13:78:c4:5c:14:1a:60:0e:55: ad:c4:88:7e:b6:17:90:cb:74:cf:50:8a:65:b2:6f: 97:c3:3f:bb:03:73:61:73:09:b7:4e:3d:b6:79:6a: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:21:10:8C:49:C6:E4:9A:76:0F:FE:05:F2:31:4E:79:74:12:EA:F0 X509v3 Authority Key Identifier: keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:eb:66:28:f6:87:6a:4f:27:73:a5:6e:7a:d0:6c:8d:18:c2: 63:e3:43:34:9b:41:36:40:99:f8:a9:6f:71:fa:7d:fc:af:10: da:ff:88:2f:d6:72:95:5b:d6:a5:21:a2:17:48:4b:f2:24:d7: 9e:60:85:cb:cb:8a:35:cd:a6:9d:2a:71:f7:47:b1:1f:40:d2: 6f:e3:b3:32:7b:a4:8a:f5:ec:02:4a:27:4d:52:df:c4:d4:0d: 5e:2c:0b:89:64:dc:6e:14:cc:29:4e:df:00:03:2b:aa:14:48: 27:ec:88:9f:4b:bc:e9:ce:b8:86:0b:d0:19:be:85:0d:37:1e: 42:4b:ef:d6:81:5b:3b:a4:08:c7:03:c6:45:6b:31:63:a6:73: 3e:9e:d6:7c:c8:bc:13:c3:7b:bf:92:64:5d:c0:a0:70:0e:49: 4a:4b:ba:63:d0:7f:c2:16:db:3a:48:11:09:01:86:b6:65:81: c6:29:80:81:70:8d:93:e6:e2:a9:63:63:9a:e6:db:8b:db:90: 6a:f3:a3:79:d6:a6:1d:a7:7b:62:a1:d6:7a:fe:0f:b3:ff:a6: a7:f5:3a:41:87:e6:35:d6:4a:d7:da:e5:f0:9f:16:57:15:98: fa:e7:0f:07:d2:7c:e8:34:18:16:66:5d:94:09:37:f0:ff:f3: 4d:62:12:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYiKjLFuYpJB0v/fxDvivciNcvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENG NzhFODdFNTAeFw0yNTA0MDgxNDM1NDlaFw0yNTA0MTIwMTA2NDlaMDMxMTAvBgNV BAMTKEE0MjExMDhDNDlDNkU0OUE3NjBGRkUwNUYyMzE0RTc5NzQxMkVBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJDmM6ghO7qJRETsL26LqOPf2 21t35m+VIBbCWowO67DHI+/qM98aK439uXKa+wN/sCRwHXgbeF7QzI8o+2oD2Of9 I6D+wUPSJqo0c5Tn3hf1iHfhfQiBglHW3FGqA0pG78uQrxVnUgCOCK/zTyjVRBQi 57GOwYUOnDyC9c8zTlRuyvHZb2t0LbTwlwQhE7sXwCmpvTrHYc8qnr7UBYivUHdY Tlaln/BPk0SnG6fVcIkr3iJq6nGTbSRVGUNlD8gLck+ke3K1jaYf/432DMXr28Cz YW5I/BN4xFwUGmAOVa3EiH62F5DLdM9QimWyb5fDP7sDc2FzCbdOPbZ5ali9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpCEQjEnG5Jp2D/4F8jFOeXQS6vAwHwYDVR0j BBgwFoAUFFhWaI1Y7rZz5ZzALSERTPeOh+UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmIwNWYzNi1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC8xNDU4NTY2ODhE NThFRUI2NzNFNTlDQzAyRDIxMTE0Q0Y3OEU4N0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENGNzhF ODdFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTEx NENGNzhFODdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLrZij2h2pPJ3OlbnrQbI0YwmPjQzSbQTZA mfipb3H6ffyvENr/iC/WcpVb1qUhohdIS/Ik155ghcvLijXNpp0qcfdHsR9A0m/j szJ7pIr17AJKJ01S38TUDV4sC4lk3G4UzClO3wADK6oUSCfsiJ9LvOnOuIYL0Bm+ hQ03HkJL79aBWzukCMcDxkVrMWOmcz6e1nzIvBPDe7+SZF3AoHAOSUpLumPQf8IW 2zpIEQkBhrZlgcYpgIFwjZPm4qljY5rm24vbkGrzo3nWph2ne2Kh1nr+D7P/pqf1 OkGH5jXWStfa5fCfFlcVmPrnDwfSfOg0GBZmXZQJN/D/801iEhA= -----END CERTIFICATE-----Generated at Wed Apr 9 17:00:31 2025 by rpki-client