$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: 02vYefjzJ9yRoZs9OluI/Bn2/FYzz1/LKx3lNIuoHiI= Subject key identifier: 24:70:A7:CC:8A:C7:0A:DA:13:C4:CE:1C:5E:F2:6F:45:20:37:68:BA Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 5AFEAB8B693AB31EAB2D6CE93CAF41A43D0DBBF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 04D7 Signing time: Wed 16 Apr 2025 02:11:33 +0000 Manifest this update: Wed 16 Apr 2025 02:06:33 +0000 Manifest next update: Sat 19 Apr 2025 06:04:33 +0000 Files and hashes: 1: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) 2: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) 3: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: cwgF5OJpmKylH+mJpKN6IiDS65OEboAYiksvh0G9bsA=) 4: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: MQx/O8O2uQJVqHYOSxfo/Q2KG9J3bcLTiM4IdvIIF+I=) 5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: UFrAKKu5fsS6UWOb9wJlqSpemNBUmWPsRRBfie+o4XQ=) 6: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: dUXFtPIF61cMsxlijUdeGn+XAjJGBrV/EpzRTuOKE9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 06:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fe:ab:8b:69:3a:b3:1e:ab:2d:6c:e9:3c:af:41:a4:3d:0d:bb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Apr 16 02:06:33 2025 GMT Not After : Apr 19 06:04:33 2025 GMT Subject: CN=2470A7CC8AC70ADA13C4CE1C5EF26F45203768BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:b3:d5:67:56:5b:89:cd:6c:fe:52:ca:5f: ce:a2:65:df:ff:02:68:02:27:6e:4b:48:a2:6d:0b: 55:89:3b:18:ae:3a:e1:cc:2e:47:76:f4:75:4f:32: 74:97:be:85:cc:a7:13:d1:5b:94:89:ef:ae:41:f6: c3:e1:4e:f9:75:7f:d2:d0:be:0e:46:84:3e:df:f9: a0:09:45:12:2b:cd:21:6f:cb:e0:a1:2d:42:94:23: 26:92:47:b9:25:17:6d:02:9b:75:16:90:2f:d6:42: 45:03:60:38:7f:06:ac:c1:25:78:8c:d2:14:46:36: 54:45:53:e9:b7:38:e6:d3:fb:80:ca:c7:f6:de:9a: 0d:12:80:53:80:0c:04:33:d0:e5:3c:79:92:29:6e: 0b:9e:7f:81:fd:01:14:76:81:00:44:99:b5:f6:fc: c3:f4:4f:91:ef:46:43:1e:25:ec:d2:59:b3:62:e1: f8:61:1a:19:ff:1f:35:b6:db:e6:f8:ae:12:c1:e8: 75:64:23:ef:7c:e5:09:2f:c1:c7:44:3b:0d:b1:c1: 11:d4:e6:04:99:00:e2:ec:0a:ed:0c:68:90:69:6e: 75:93:ba:4a:66:53:20:36:7d:87:78:28:4c:cd:09: 88:64:ae:e7:9b:e9:5b:db:0c:39:eb:23:e7:86:a1: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:70:A7:CC:8A:C7:0A:DA:13:C4:CE:1C:5E:F2:6F:45:20:37:68:BA X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:90:20:23:87:1e:88:0b:e4:3a:28:cd:00:1e:40:8d:f7:77: be:4d:d9:50:b1:23:25:7e:b7:ce:06:e5:28:12:0c:37:c5:9c: 37:ed:fa:88:08:12:95:30:02:ff:ba:24:05:d8:69:ad:c3:2d: f4:39:f2:a5:cf:11:c6:9d:1b:ce:f0:9f:df:83:c1:14:36:a0: ca:2a:68:a6:60:83:f1:5c:35:29:91:1c:df:4e:e9:6e:58:63: 2f:2c:e2:f1:4a:42:3c:69:ff:6d:3b:b9:41:a5:d2:36:ec:42: 49:31:99:d9:a2:8a:3f:db:2c:9f:6a:34:b6:7b:dd:12:80:e0: 2c:58:9b:40:e6:87:2d:29:24:d9:fb:f7:64:cf:72:13:3f:82: 7f:97:55:4a:bc:a6:f0:ed:eb:a6:88:bb:97:9d:52:7a:f3:e0: 4a:a2:e9:c8:b2:94:18:29:b0:00:b0:42:c0:33:8c:f6:81:42: 54:ba:3e:6e:8d:ca:25:a6:54:58:f8:24:2a:54:8e:81:cb:0c: 50:4b:a0:a9:06:61:7b:60:f0:2e:69:6a:26:aa:67:2f:d7:97: 7d:73:81:43:7e:3f:1e:63:af:37:ad:ed:15:8e:1f:5f:5a:6a: 65:8c:42:10:67:76:1a:19:71:d2:e1:27:49:bd:12:6c:3f:d5: 76:6a:6f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWv6ri2k6sx6rLWzpPK9BpD0Nu/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTA0MTYwMjA2MzNaFw0yNTA0MTkwNjA0MzNaMDMxMTAvBgNV BAMTKDI0NzBBN0NDOEFDNzBBREExM0M0Q0UxQzVFRjI2RjQ1MjAzNzY4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cbPVZ1Zbic1s/lLKX86iZd// AmgCJ25LSKJtC1WJOxiuOuHMLkd29HVPMnSXvoXMpxPRW5SJ765B9sPhTvl1f9LQ vg5GhD7f+aAJRRIrzSFvy+ChLUKUIyaSR7klF20Cm3UWkC/WQkUDYDh/BqzBJXiM 0hRGNlRFU+m3OObT+4DKx/bemg0SgFOADAQz0OU8eZIpbguef4H9ARR2gQBEmbX2 /MP0T5HvRkMeJezSWbNi4fhhGhn/HzW22+b4rhLB6HVkI+985QkvwcdEOw2xwRHU 5gSZAOLsCu0MaJBpbnWTukpmUyA2fYd4KEzNCYhkrueb6VvbDDnrI+eGoYefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHCnzIrHCtoTxM4cXvJvRSA3aLowHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWQICOHHogL5DoozQAeQI33d75N2VCxIyV+ t84G5SgSDDfFnDft+ogIEpUwAv+6JAXYaa3DLfQ58qXPEcadG87wn9+DwRQ2oMoq aKZgg/FcNSmRHN9O6W5YYy8s4vFKQjxp/207uUGl0jbsQkkxmdmiij/bLJ9qNLZ7 3RKA4CxYm0Dmhy0pJNn792TPchM/gn+XVUq8pvDt66aIu5edUnrz4Eqi6ciylBgp sACwQsAzjPaBQlS6Pm6NyiWmVFj4JCpUjoHLDFBLoKkGYXtg8C5paiaqZy/Xl31z gUN+Px5jrzet7RWOH19aamWMQhBndhoZcdLhJ0m9Emw/1XZqb4g= -----END CERTIFICATE-----Generated at Fri Apr 18 01:53:40 2025 by rpki-client