$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: 8+0AEeFNufWXE7t/ID0aAq3Za4bvzT2j7i8CawCpUY8= Subject key identifier: 06:8D:D1:7E:3C:CD:4B:A9:18:D4:F1:42:09:B4:AE:A2:B7:5D:81:D7 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 05990B5163C88AC766C68764D0EA8053A9D452DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 0497 Signing time: Sat 05 Apr 2025 13:41:49 +0000 Manifest this update: Sat 05 Apr 2025 13:36:49 +0000 Manifest next update: Wed 09 Apr 2025 00:37:49 +0000 Files and hashes: 1: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: tPobItRGD2Vk5fK4/Oz2ojiatmX4ZdcXGBSqbeWy7Ng=) 2: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: aiifXcdy2AXRocJRKbN8Cd9UOvAE9erAu5vyFTkl88c=) 3: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: PwE45jFMLVz2aKNWwjQc8HudCo64xhteJbVEjdFpgd8=) 4: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: DO7ogbI2UpcST5Do0xfAryknKNzHKoFL4YPFX4NOgG8=) 5: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: 3tcVJEuUAMEMSquwccOP5T3vzKRwoDei9VdVUVbEEmk=) 6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=) 7: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 3kwk4UMF9iNYpMSf21W/eUwvYsmaPApbmHcViGehMaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:99:0b:51:63:c8:8a:c7:66:c6:87:64:d0:ea:80:53:a9:d4:52:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Apr 5 13:36:49 2025 GMT Not After : Apr 9 00:37:49 2025 GMT Subject: CN=068DD17E3CCD4BA918D4F14209B4AEA2B75D81D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9d:11:28:47:87:87:ff:68:ef:ea:a3:e4:e5: 41:11:46:35:40:aa:4a:d9:ae:10:6c:cf:e1:61:20: 84:41:6e:04:11:d4:c6:93:9a:cf:c3:c6:48:bc:5e: b2:94:68:32:4c:1a:70:e5:ea:30:9f:a5:37:9c:2d: eb:9d:db:d9:aa:f8:5f:42:e8:05:14:fc:52:14:a5: b3:45:e2:44:4d:e4:d6:81:21:f6:d5:28:4f:f8:49: a8:70:07:78:1b:9e:43:0f:a4:58:84:d8:f8:7b:7a: 83:6d:e4:b0:0c:69:c7:ae:9f:76:1d:b0:d0:3e:37: 66:4b:2e:f2:07:86:72:02:93:f9:e2:2f:f2:a5:1d: 44:17:7d:00:fe:92:0d:9e:01:24:7d:72:2e:5d:ba: 27:35:65:96:00:ea:df:a1:02:7f:df:ef:fc:75:2c: 81:26:05:35:54:25:06:32:e1:3d:16:14:1b:5a:2e: 2a:3d:93:10:2a:5f:77:a2:67:5f:6f:81:2c:12:1d: c2:d2:3a:b1:90:a1:95:63:38:70:3c:79:82:07:17: 5e:54:cf:ee:ff:1b:03:d5:6f:41:2a:b0:a5:41:b8: 5d:5b:6e:28:8c:2a:39:0d:ae:b9:32:15:89:1c:bf: 41:d3:0f:6e:ff:18:11:6b:51:36:0a:aa:70:c1:38: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8D:D1:7E:3C:CD:4B:A9:18:D4:F1:42:09:B4:AE:A2:B7:5D:81:D7 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0c:0d:31:28:54:f9:49:9d:c3:1e:cf:95:b6:88:c2:87:33: 21:2d:35:d7:fe:db:ea:9f:e7:65:cf:24:90:2e:5e:0f:c3:b2: 33:66:d6:9d:97:6f:1a:36:36:66:49:48:f8:8c:80:cd:4d:4a: 65:07:4c:c3:d4:db:84:d3:02:d0:86:d4:a2:26:75:40:48:ab: 29:1b:da:3b:35:7f:e1:11:75:f8:b9:5b:40:54:4a:26:ff:51: 52:04:94:26:65:54:8d:65:ba:0c:37:ca:4e:d1:f6:d4:4a:e7: 6a:48:82:0b:15:d0:ad:b4:46:b2:82:ed:af:76:7c:84:8c:43: 20:9d:9a:33:52:04:40:a6:c6:f5:c3:93:7b:16:56:4b:41:66: 41:cd:92:72:4e:8f:80:72:a5:a8:4e:86:e6:d4:d5:5c:7c:bb: 6d:af:76:1b:bc:f4:01:38:e6:4f:7a:75:1d:d8:6a:2f:ee:d8: 70:2f:9d:35:80:96:93:b9:7d:3b:f9:fd:c7:a5:5b:db:41:57: 2a:b0:4c:6c:de:d5:dd:41:4b:08:4c:92:3c:ea:b9:4a:e3:66: c0:6a:0e:91:3d:f7:f7:84:5b:4d:8c:95:c8:3b:ff:3f:fd:c3: a4:f6:d7:b6:22:0c:95:53:58:d5:50:7e:f1:4d:ac:02:d5:61: a5:8b:cb:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZkLUWPIisdmxodk0OqAU6nUUt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTA0MDUxMzM2NDlaFw0yNTA0MDkwMDM3NDlaMDMxMTAvBgNV BAMTKDA2OEREMTdFM0NDRDRCQTkxOEQ0RjE0MjA5QjRBRUEyQjc1RDgxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnREoR4eH/2jv6qPk5UERRjVA qkrZrhBsz+FhIIRBbgQR1MaTms/Dxki8XrKUaDJMGnDl6jCfpTecLeud29mq+F9C 6AUU/FIUpbNF4kRN5NaBIfbVKE/4SahwB3gbnkMPpFiE2Ph7eoNt5LAMaceun3Yd sNA+N2ZLLvIHhnICk/niL/KlHUQXfQD+kg2eASR9ci5duic1ZZYA6t+hAn/f7/x1 LIEmBTVUJQYy4T0WFBtaLio9kxAqX3eiZ19vgSwSHcLSOrGQoZVjOHA8eYIHF15U z+7/GwPVb0EqsKVBuF1bbiiMKjkNrrkyFYkcv0HTD27/GBFrUTYKqnDBONkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBo3RfjzNS6kY1PFCCbSuorddgdcwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0MDTEoVPlJncMez5W2iMKHMyEtNdf+2+qf 52XPJJAuXg/DsjNm1p2Xbxo2NmZJSPiMgM1NSmUHTMPU24TTAtCG1KImdUBIqykb 2js1f+ERdfi5W0BUSib/UVIElCZlVI1lugw3yk7R9tRK52pIggsV0K20RrKC7a92 fISMQyCdmjNSBECmxvXDk3sWVktBZkHNknJOj4BypahOhubU1Vx8u22vdhu89AE4 5k96dR3Yai/u2HAvnTWAlpO5fTv5/celW9tBVyqwTGze1d1BSwhMkjzquUrjZsBq DpE99/eEW02Mlcg7/z/9w6T217YiDJVTWNVQfvFNrALVYaWLy7c= -----END CERTIFICATE-----Generated at Sat Apr 5 19:00:54 2025 by rpki-client