$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: f5skcx2/boX2VhvwHtoF5oc8EU0WuxyqUW8Yk5M50gw= Subject key identifier: B0:05:04:40:91:C9:B2:F3:2A:D0:B0:A9:A2:15:D0:52:AC:5B:1B:13 Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 79E017866399577F223339947A9658F704A79FEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 043D Signing time: Fri 18 Apr 2025 16:20:45 +0000 Manifest this update: Fri 18 Apr 2025 16:15:45 +0000 Manifest next update: Tue 22 Apr 2025 04:14:45 +0000 Files and hashes: 1: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: Bkimq3Y+FDCpoXrJVzQHrak+YkAyXPLShZBbOm7jcf0=) 2: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: 8Q6Ja4+FBCMVjxp75iktXQMgyvElquVgRng+jWYaUXc=) 3: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=) 4: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: RMdraQufey7b0AYDp/6bRtg/QYsFFLcC+Hv50AKroyc=) 5: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: aKnOKOXrf8WDLTz9lOnMLQ3rz67XYoyw6eEFmfbGG64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e0:17:86:63:99:57:7f:22:33:39:94:7a:96:58:f7:04:a7:9f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Apr 18 16:15:45 2025 GMT Not After : Apr 22 04:14:45 2025 GMT Subject: CN=B005044091C9B2F32AD0B0A9A215D052AC5B1B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:79:12:36:c0:66:e8:7c:4e:c7:74:31:3b:ca: 2e:17:18:d5:0d:d4:4d:55:92:28:cd:35:e4:7d:4f: a1:10:6a:1c:68:13:31:8b:66:c8:7c:26:af:a2:27: 42:d6:94:0d:2c:4c:9f:d7:35:81:b0:b8:1c:a9:a4: d2:7c:0d:01:e3:d7:8e:21:89:a3:44:dd:b5:9b:4a: 7a:f6:c8:86:3e:db:a4:bf:7c:6d:6d:d3:38:8e:f1: 7f:46:e9:e2:1f:ad:21:27:ed:ff:38:26:e2:14:d1: ad:fb:68:ac:b8:3a:0d:d3:d7:2a:1b:62:fb:eb:75: ff:06:c9:4e:12:d3:f7:e9:e6:1a:b4:10:91:36:93: c7:70:f1:eb:8e:46:37:21:9c:f0:f0:85:29:ba:f8: da:6d:37:35:1f:bc:b6:4d:06:d2:31:79:53:e0:93: 59:79:31:4d:76:2e:83:a8:8b:74:d1:87:a1:7d:04: 51:d4:ab:d8:7f:d7:0f:47:c3:a7:a1:bb:36:53:b5: bc:b7:a7:79:d6:d3:8d:0d:88:ef:83:3f:f9:51:c5: ae:11:b4:c9:c7:f4:47:de:c1:67:44:4f:be:ed:dd: d9:59:48:6b:d1:63:26:e0:c0:c9:12:41:67:0a:8e: dd:18:83:e6:05:68:90:5d:ed:cb:86:40:87:15:e1: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:04:40:91:C9:B2:F3:2A:D0:B0:A9:A2:15:D0:52:AC:5B:1B:13 X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:94:8a:a9:b4:01:d9:d1:99:28:60:a4:68:e9:3e:31:47:21: 38:08:55:ac:1f:db:91:65:c2:85:e9:d6:ba:24:43:0a:76:59: 24:e8:64:63:68:7e:c3:8e:89:ee:53:39:e0:31:0f:65:8f:0e: a7:0f:f7:e3:7e:c6:9e:e9:41:cc:93:b7:d9:3d:f0:ac:d4:71: 58:34:df:12:23:e3:2b:ab:0e:b0:54:72:c5:22:95:cd:47:c2: c5:c5:05:3d:04:03:7a:e5:5f:ba:d1:44:cc:bc:00:2c:08:89: 0b:c2:0e:b4:95:b0:88:84:2f:40:ff:23:39:39:75:15:e4:0b: 76:b3:36:c4:50:e8:35:9e:06:9c:a2:d2:38:0c:45:81:a6:29: 9e:e3:ad:ac:ce:09:6c:f0:1c:98:7d:1d:3a:f6:68:ad:ca:ba: 4c:5c:1f:ea:b6:4d:27:c6:c0:c8:3e:83:4b:9d:49:da:1c:d5: 08:fe:05:f7:b7:35:63:97:e7:d4:98:12:8e:d0:b0:87:4c:9b: b8:f0:f5:2d:55:db:36:4e:50:ba:d4:b8:73:a0:47:c5:06:d4: 64:1d:e7:10:4c:3b:2d:97:48:60:29:43:2d:7e:60:40:7d:62: f8:79:18:77:5f:b1:28:dc:01:28:90:c9:d9:4a:30:85:cb:e1: cb:ee:42:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeeAXhmOZV38iMzmUepZY9wSnn+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTA0MTgxNjE1NDVaFw0yNTA0MjIwNDE0NDVaMDMxMTAvBgNV BAMTKEIwMDUwNDQwOTFDOUIyRjMyQUQwQjBBOUEyMTVEMDUyQUM1QjFCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyeRI2wGbofE7HdDE7yi4XGNUN 1E1VkijNNeR9T6EQahxoEzGLZsh8Jq+iJ0LWlA0sTJ/XNYGwuByppNJ8DQHj144h iaNE3bWbSnr2yIY+26S/fG1t0ziO8X9G6eIfrSEn7f84JuIU0a37aKy4Og3T1yob Yvvrdf8GyU4S0/fp5hq0EJE2k8dw8euORjchnPDwhSm6+NptNzUfvLZNBtIxeVPg k1l5MU12LoOoi3TRh6F9BFHUq9h/1w9Hw6ehuzZTtby3p3nW040NiO+DP/lRxa4R tMnH9EfewWdET77t3dlZSGvRYybgwMkSQWcKjt0Yg+YFaJBd7cuGQIcV4Yb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsAUEQJHJsvMq0LCpohXQUqxbGxMwHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGUiqm0AdnRmShgpGjpPjFHITgIVawf25Fl woXp1rokQwp2WSToZGNofsOOie5TOeAxD2WPDqcP9+N+xp7pQcyTt9k98KzUcVg0 3xIj4yurDrBUcsUilc1HwsXFBT0EA3rlX7rRRMy8ACwIiQvCDrSVsIiEL0D/Izk5 dRXkC3azNsRQ6DWeBpyi0jgMRYGmKZ7jrazOCWzwHJh9HTr2aK3KukxcH+q2TSfG wMg+g0udSdoc1Qj+Bfe3NWOX59SYEo7QsIdMm7jw9S1V2zZOULrUuHOgR8UG1GQd 5xBMOy2XSGApQy1+YEB9Yvh5GHdfsSjcASiQydlKMIXL4cvuQu0= -----END CERTIFICATE-----Generated at Sat Apr 19 12:31:34 2025 by rpki-client