$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: LZ/rE1nJbsVF2PLsc4lBwIi9VNjUTUpKINgRVQSCvR0= Subject key identifier: A3:59:4C:1A:98:F8:75:E8:08:62:B7:91:5E:DC:98:97:46:D1:0E:88 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 24FAE2466D447A804A4600AC719A5D5248E43432 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 0458 Signing time: Sat 05 Apr 2025 17:41:30 +0000 Manifest this update: Sat 05 Apr 2025 17:36:30 +0000 Manifest next update: Tue 08 Apr 2025 21:33:30 +0000 Files and hashes: 1: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: IQxqj9PY3nbC6wwPV82C6ExLe7/jv0UMpi+DEeQSqxQ=) 2: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: HyCE+wb3o9CDjWwDlbm/esNR5nByEQvKGtR35PJURy0=) 3: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: g8UPVDpb1m/IFnDlcUZIzOXR04b/PAWmv165hevmi70=) 4: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: 3T8MbbOtG2+ZgU9C1xgwAYx2HlDNUDW4JXH7L0pvZ80=) 5: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: c6fpSUbyQdt1ZsHYs9eWhZI0zdnm3cArV6v/GBThWWc=) 6: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: g0FFTgDxa4Hez+HwVNQ7bFyBpeqsTBamtra1C6gMee0=) 7: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: X8jeQtRG0gQdsHddWpmgroR3WCHEgeDBEGsrNHV9Pms=) 8: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: cfaaVl5RivAI5aEsFEpR96b1yzNXPD55gNZl0+j6JoI=) 9: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: N7dD/FSi3TZ7eLd1FkTH81UWI+fs0udUhwSc1vTMSUU=) 10: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: CnkVTPyXoN81CXoMBzW6erzeaYjqRdKYOHnGAhWhsKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fa:e2:46:6d:44:7a:80:4a:46:00:ac:71:9a:5d:52:48:e4:34:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Apr 5 17:36:30 2025 GMT Not After : Apr 8 21:33:30 2025 GMT Subject: CN=A3594C1A98F875E80862B7915EDC989746D10E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:ce:1f:61:bd:61:10:e3:ac:34:3f:72:4b: 6e:37:ee:0c:74:df:e5:ca:a7:2c:0a:1f:88:86:ea: f6:77:cc:31:a7:bb:00:92:0e:db:8b:11:9b:8f:8e: 6d:44:32:1d:34:98:f9:60:aa:c4:28:36:7d:67:5c: 57:d2:77:05:9b:c0:dd:8a:45:b8:18:e3:cf:70:42: a9:0a:f5:7d:2b:6c:82:c6:03:69:a6:1a:59:09:2f: 9c:54:7a:21:9d:7d:8b:0c:ce:26:f1:63:87:d6:fa: 46:b6:29:b7:8f:54:6e:ab:64:1a:b0:fa:22:96:9a: 83:bf:7b:df:4c:ec:69:00:90:e1:05:ea:47:5b:06: 56:64:94:5a:11:05:8b:05:8a:c5:fe:c8:fc:24:62: c1:da:7a:88:10:b7:fc:48:25:66:35:a1:55:3e:14: 4e:89:2d:dc:3e:d5:f7:f3:88:dc:d6:c4:48:ea:a8: de:6c:cb:a7:61:0b:4f:41:90:06:17:6f:36:2d:76: 12:4e:f4:81:c3:8f:7e:43:7f:68:5a:ee:73:1c:7a: 11:bc:01:2b:d6:8c:2f:04:04:a0:e6:6b:03:13:8c: fe:f0:91:de:5a:2e:08:b9:f1:18:16:80:65:0b:3b: 59:9e:21:ed:6c:cb:22:eb:61:b6:d0:24:78:75:08: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:59:4C:1A:98:F8:75:E8:08:62:B7:91:5E:DC:98:97:46:D1:0E:88 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:cd:65:51:c3:2b:32:05:69:2e:28:e1:e5:29:54:15:20: 98:44:7e:a2:03:ef:c6:d4:9e:3c:13:bb:d2:4e:78:3e:e1:e1: 68:d4:54:5d:62:32:9a:30:43:0b:8f:c3:a6:61:ce:20:c6:09: 6c:81:b9:e0:d8:a7:35:49:24:32:15:1f:c4:b9:ff:96:a6:45: 84:42:5a:91:a0:d9:90:3a:45:c1:1c:40:5a:de:b5:af:98:4d: b0:cc:1b:77:af:e6:33:a4:7d:94:eb:9f:6d:ed:54:1e:41:53: 21:b3:d5:6c:9b:c0:0b:f3:22:f0:f6:a2:fc:6e:bd:5c:e0:94: 16:65:7f:21:80:9d:38:18:f3:1b:82:52:08:20:4b:5e:d5:a8: 1b:5e:66:57:f4:ba:61:ab:c4:11:e1:36:94:b0:4f:c0:71:48: a1:f4:a2:ae:7f:8c:47:82:b7:20:1b:1a:24:4c:2e:b3:31:6b: 67:9b:b5:d5:d2:b3:fa:90:6b:1b:d7:0a:35:64:78:57:a8:e4: 3c:e6:0e:8f:da:c2:9a:46:49:ce:95:eb:35:98:9a:8d:07:30: 0b:83:b8:08:97:6b:44:3e:37:29:4a:cc:79:95:c6:35:ce:3e: fd:59:74:06:71:de:fe:55:b8:61:66:b6:e9:44:42:fe:de:64: 98:1d:d5:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPriRm1EeoBKRgCscZpdUkjkNDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNTA0MDUxNzM2MzBaFw0yNTA0MDgyMTMzMzBaMDMxMTAvBgNV BAMTKEEzNTk0QzFBOThGODc1RTgwODYyQjc5MTVFREM5ODk3NDZEMTBFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsc4fYb1hEOOsND9yS2437gx0 3+XKpywKH4iG6vZ3zDGnuwCSDtuLEZuPjm1EMh00mPlgqsQoNn1nXFfSdwWbwN2K RbgY489wQqkK9X0rbILGA2mmGlkJL5xUeiGdfYsMzibxY4fW+ka2KbePVG6rZBqw +iKWmoO/e99M7GkAkOEF6kdbBlZklFoRBYsFisX+yPwkYsHaeogQt/xIJWY1oVU+ FE6JLdw+1ffziNzWxEjqqN5sy6dhC09BkAYXbzYtdhJO9IHDj35Df2ha7nMcehG8 ASvWjC8EBKDmawMTjP7wkd5aLgi58RgWgGULO1meIe1syyLrYbbQJHh1CEEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1lMGpj4degIYreRXtyYl0bRDogwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgGzWVRwysyBWkuKOHlKVQVIJhEfqID78bU njwTu9JOeD7h4WjUVF1iMpowQwuPw6ZhziDGCWyBueDYpzVJJDIVH8S5/5amRYRC WpGg2ZA6RcEcQFreta+YTbDMG3ev5jOkfZTrn23tVB5BUyGz1WybwAvzIvD2ovxu vVzglBZlfyGAnTgY8xuCUgggS17VqBteZlf0umGrxBHhNpSwT8BxSKH0oq5/jEeC tyAbGiRMLrMxa2ebtdXSs/qQaxvXCjVkeFeo5DzmDo/awppGSc6V6zWYmo0HMAuD uAiXa0Q+NylKzHmVxjXOPv1ZdAZx3v5VuGFmtulEQv7eZJgd1bA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:49 2025 by rpki-client