$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: 4F5VxoHQsl8MeTno+uKS6i8sj3xxUNW+vQhvg1q5AL4= Subject key identifier: 72:DC:E4:29:D6:57:E6:A6:9A:12:6C:AC:49:D1:6E:FE:00:27:3F:69 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 237793FC30BA340E5A89525612E0E0F4CDA19387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: 50 Signing time: Thu 17 Apr 2025 08:31:13 +0000 Manifest this update: Thu 17 Apr 2025 08:26:13 +0000 Manifest next update: Sun 20 Apr 2025 10:35:13 +0000 Files and hashes: 1: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: TxTC2v3sBGuNzD/7pAwJq8+hVg6iPYD1W71+E9F+XzU=) 2: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: acW7MmyfNG3sUp37/a67TBL3VhsulHr1Ydf1eaVxfYA=) 3: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: ie4sQLxOQNtdTHS7IMgLTuJXVqA+Jeqi1atGjiSOc6M=) 4: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: sdFf65pWHqDguzQodheeefSyOGT0g0gjcknsFa81ar4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 10:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:77:93:fc:30:ba:34:0e:5a:89:52:56:12:e0:e0:f4:cd:a1:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Apr 17 08:26:13 2025 GMT Not After : Apr 20 10:35:13 2025 GMT Subject: CN=72DCE429D657E6A69A126CAC49D16EFE00273F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:5a:78:b7:d7:e2:02:3b:b6:7e:d1:55:87: b7:a0:73:03:f4:cd:18:43:a8:79:9b:83:a2:02:06: da:13:74:d1:d4:1f:e1:ef:f0:31:90:99:e8:d7:f6: ca:d2:f4:6e:8e:99:59:11:2f:e6:37:28:ce:d8:55: cf:5c:83:18:cb:1f:9c:4d:c6:95:47:d2:76:99:81: 49:dc:3e:33:44:f4:af:8e:e6:a6:01:70:a1:d8:8c: 78:cf:a4:96:22:f2:6c:20:1d:50:8a:85:5a:91:f0: ca:14:25:80:52:34:af:8e:77:3c:cc:c4:70:1b:49: 41:dc:f1:bd:b3:e4:fe:bd:61:33:64:85:f2:79:16: 81:f0:12:dc:42:88:a5:43:6f:fc:b5:24:b0:1f:44: 07:0e:17:47:7b:be:a2:d6:46:26:6a:05:1b:a8:a6: 2e:6c:02:0f:ef:81:b1:5a:cb:d0:df:7d:ee:df:9d: c5:90:b7:8b:c6:43:d0:80:e0:a9:e5:c6:f6:93:97: 60:9f:b6:4d:d8:68:be:2e:b7:6b:1f:3e:ba:74:bb: a5:58:0c:5a:8f:05:59:47:bc:57:2d:3a:1d:36:3a: 62:4f:0d:b9:64:81:0d:b5:49:50:d3:52:f3:d1:8c: 8c:8c:7d:c6:3d:d9:ed:e6:af:c4:01:ee:64:12:8b: 30:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:E4:29:D6:57:E6:A6:9A:12:6C:AC:49:D1:6E:FE:00:27:3F:69 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a9:88:4f:0d:6a:02:d4:2d:bb:6b:63:43:ca:45:9b:bf:53: 60:2f:7d:91:0e:c0:07:6f:15:01:f4:cc:d5:1c:dd:74:fb:4c: 24:27:30:21:e9:9d:33:62:7e:89:29:65:ea:0a:eb:b1:c0:d2: 8f:ef:8e:ff:e9:b2:f2:7a:f2:17:fd:4e:1e:70:70:54:83:f5: c3:69:b7:29:d9:fa:bc:6b:70:fa:36:7e:e8:7a:0f:8c:20:db: 5a:dd:9e:d0:02:f6:55:78:2f:e6:d7:93:5c:f0:a8:b8:90:42: aa:90:dd:a9:90:18:55:bf:cc:81:91:54:63:8f:e6:dd:0a:8f: ab:e8:ae:1a:ef:1f:99:2d:02:98:6e:b4:12:5f:2d:b6:32:49: 18:5a:a8:da:a9:88:52:8d:91:e3:5c:7f:66:3b:ee:97:a7:38: 37:58:b0:a7:e2:29:dc:e5:d4:fb:5d:d4:b0:3c:b2:35:2e:95: 1d:d7:0b:29:d6:f4:61:1a:88:32:43:0a:7a:49:38:b5:7c:03: b7:4c:e3:25:94:ba:16:11:12:ac:f0:ec:92:4b:b6:28:c9:00: 46:85:68:04:a4:32:2b:00:7f:bd:fb:20:1c:3a:22:46:ec:84: 61:6d:68:7c:80:7b:4e:92:76:77:4f:03:8d:81:1b:27:b6:80: ae:6d:ea:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3eT/DC6NA5aiVJWEuDg9M2hk4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTA0MTcwODI2MTNaFw0yNTA0MjAxMDM1MTNaMDMxMTAvBgNV BAMTKDcyRENFNDI5RDY1N0U2QTY5QTEyNkNBQzQ5RDE2RUZFMDAyNzNGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDy1p4t9fiAju2ftFVh7egcwP0 zRhDqHmbg6ICBtoTdNHUH+Hv8DGQmejX9srS9G6OmVkRL+Y3KM7YVc9cgxjLH5xN xpVH0naZgUncPjNE9K+O5qYBcKHYjHjPpJYi8mwgHVCKhVqR8MoUJYBSNK+OdzzM xHAbSUHc8b2z5P69YTNkhfJ5FoHwEtxCiKVDb/y1JLAfRAcOF0d7vqLWRiZqBRuo pi5sAg/vgbFay9Dffe7fncWQt4vGQ9CA4KnlxvaTl2Cftk3YaL4ut2sfPrp0u6VY DFqPBVlHvFctOh02OmJPDblkgQ21SVDTUvPRjIyMfcY92e3mr8QB7mQSizDXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctzkKdZX5qaaEmysSdFu/gAnP2kwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKpiE8NagLULbtrY0PKRZu/U2AvfZEOwAdv FQH0zNUc3XT7TCQnMCHpnTNifokpZeoK67HA0o/vjv/psvJ68hf9Th5wcFSD9cNp tynZ+rxrcPo2fuh6D4wg21rdntAC9lV4L+bXk1zwqLiQQqqQ3amQGFW/zIGRVGOP 5t0Kj6vorhrvH5ktAphutBJfLbYySRhaqNqpiFKNkeNcf2Y77penODdYsKfiKdzl 1Ptd1LA8sjUulR3XCynW9GEaiDJDCnpJOLV8A7dM4yWUuhYREqzw7JJLtijJAEaF aASkMisAf737IBw6IkbshGFtaHyAe06SdndPA42BGye2gK5t6s4= -----END CERTIFICATE-----Generated at Thu Apr 17 23:16:53 2025 by rpki-client