$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: /q2of8taLPzGLyEF3CUu6bACbShC4Om8PyHv6ZCl7fQ= Subject key identifier: 50:76:7A:2B:5F:48:7A:30:B0:B4:28:F5:FC:3E:53:7F:E4:7C:E6:2A Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 2D45B56C01B9B0CA3999BAE61315CCBEC5F53670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 0165 Signing time: Fri 04 Apr 2025 17:31:05 +0000 Manifest this update: Fri 04 Apr 2025 17:26:05 +0000 Manifest next update: Tue 08 Apr 2025 04:54:05 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) 2: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: ETPfhSVLyANLdDK8nfaQ565y5BKWjW3m2Uceubqa76E=) 3: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:45:b5:6c:01:b9:b0:ca:39:99:ba:e6:13:15:cc:be:c5:f5:36:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Apr 4 17:26:05 2025 GMT Not After : Apr 8 04:54:05 2025 GMT Subject: CN=50767A2B5F487A30B0B428F5FC3E537FE47CE62A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:44:ee:4c:5b:49:66:6b:6b:b9:5b:d5:f7: 53:c4:3c:fb:89:46:18:a3:e9:c7:97:e0:f2:2f:75: 63:1f:47:8b:0e:04:82:b8:6e:22:7f:1e:31:d8:d0: 4a:3a:a2:23:fa:f1:4b:a1:43:c4:22:f0:63:01:ee: 00:d1:06:aa:ec:f5:9e:5f:45:e4:7b:7b:03:2a:23: a1:97:0e:88:84:79:f0:f0:07:c0:5d:19:e6:b8:6a: f6:1d:5f:9e:a2:2e:91:a2:04:de:a4:0d:74:26:8a: ea:70:6d:b5:5c:cc:49:6e:1b:40:42:70:bf:0e:de: a3:d1:db:d8:f9:8e:ea:67:61:34:47:10:f4:e6:9e: 32:73:9b:c9:12:52:6b:3b:04:22:c2:b1:66:44:4f: 68:3f:00:96:99:ba:dd:a8:e2:d5:bb:cf:04:56:98: b6:a5:96:5d:63:16:94:c9:8f:d0:71:74:86:e4:b5: df:cf:87:fd:30:a8:c5:c8:03:39:f3:36:bb:2a:73: 69:ae:a5:35:18:09:50:96:ca:75:88:97:5b:1c:0f: db:5e:ef:69:c6:39:d2:56:c9:91:d3:ac:1d:fa:90: f4:5f:13:31:56:20:e2:53:cd:ad:93:ea:0a:a0:e3: 4e:db:ea:da:8d:9e:9d:a2:5d:ae:4a:2c:7e:d4:05: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:76:7A:2B:5F:48:7A:30:B0:B4:28:F5:FC:3E:53:7F:E4:7C:E6:2A X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ef:f4:ae:b5:5f:81:0d:70:41:78:3c:85:90:0e:1d:bd:80: a6:cc:4c:02:a4:88:f9:e2:1b:c1:10:9d:55:6d:c6:2e:37:30: f2:5a:05:ea:71:49:e6:34:5a:f3:f4:56:e5:67:a3:3e:41:d4: a3:ec:98:2a:5d:43:f3:38:d1:b9:ee:6c:70:b9:30:ce:10:af: 3d:5c:2d:51:f3:de:83:c0:36:50:a0:e5:b6:14:8a:c0:2d:3b: 4a:55:03:8d:aa:3c:c5:d3:1f:62:33:50:8d:8b:df:8b:91:dd: 31:00:cc:a7:48:45:6b:58:2d:00:79:a6:cd:59:c1:71:68:e7: 90:d2:cb:f4:b9:fc:19:35:be:64:50:9d:aa:b1:c4:f6:6e:48: 37:d3:8c:e0:1a:ee:ce:e0:f9:a7:c6:7a:74:32:a3:ec:fc:fd: 08:f4:3f:d1:f1:97:18:19:44:96:0b:fc:5f:0d:44:b5:0b:90: 4f:64:27:b3:fe:5f:4a:08:b1:f4:52:8e:05:38:50:ae:52:a7: 02:bd:05:e1:c6:e0:93:8a:07:06:51:d5:d9:d0:a3:4c:fb:73: 34:aa:0e:9c:69:d4:47:6d:b7:89:86:0b:59:48:01:da:d4:01: c3:1b:df:ac:75:fb:0c:af:8b:38:99:99:1f:40:2e:74:0e:c4: ca:92:0f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUW1bAG5sMo5mbrmExXMvsX1NnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTA0MDQxNzI2MDVaFw0yNTA0MDgwNDU0MDVaMDMxMTAvBgNV BAMTKDUwNzY3QTJCNUY0ODdBMzBCMEI0MjhGNUZDM0U1MzdGRTQ3Q0U2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQkTuTFtJZmtruVvV91PEPPuJ Rhij6ceX4PIvdWMfR4sOBIK4biJ/HjHY0Eo6oiP68UuhQ8Qi8GMB7gDRBqrs9Z5f ReR7ewMqI6GXDoiEefDwB8BdGea4avYdX56iLpGiBN6kDXQmiupwbbVczEluG0BC cL8O3qPR29j5jupnYTRHEPTmnjJzm8kSUms7BCLCsWZET2g/AJaZut2o4tW7zwRW mLalll1jFpTJj9BxdIbktd/Ph/0wqMXIAznzNrsqc2mupTUYCVCWynWIl1scD9te 72nGOdJWyZHTrB36kPRfEzFWIOJTza2T6gqg407b6tqNnp2iXa5KLH7UBcppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUHZ6K19IejCwtCj1/D5Tf+R85iowHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHv9K61X4ENcEF4PIWQDh29gKbMTAKkiPni G8EQnVVtxi43MPJaBepxSeY0WvP0VuVnoz5B1KPsmCpdQ/M40bnubHC5MM4Qrz1c LVHz3oPANlCg5bYUisAtO0pVA42qPMXTH2IzUI2L34uR3TEAzKdIRWtYLQB5ps1Z wXFo55DSy/S5/Bk1vmRQnaqxxPZuSDfTjOAa7s7g+afGenQyo+z8/Qj0P9HxlxgZ RJYL/F8NRLULkE9kJ7P+X0oIsfRSjgU4UK5SpwK9BeHG4JOKBwZR1dnQo0z7czSq Dpxp1Edtt4mGC1lIAdrUAcMb36x1+wyviziZmR9ALnQOxMqSD/w= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:07 2025 by rpki-client