$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: 1Bo3EpC8oym4e1c/p46AyoMu2P+sbqdKud4E2zWJ4SQ= Subject key identifier: 8B:41:10:2E:AA:48:6E:99:36:84:11:27:4D:93:82:48:89:5C:11:29 Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 77F5EDA7466C3AD93CB391CA25F5007707D15053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 018E Signing time: Fri 18 Apr 2025 23:51:00 +0000 Manifest this update: Fri 18 Apr 2025 23:46:00 +0000 Manifest next update: Tue 22 Apr 2025 07:19:00 +0000 Files and hashes: 1: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: i4WTj6ROI1LovWvl85sgu563rBY6lw0bx0UkgJAc2EQ=) 2: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: 9VCyBS9IIeec/M2Dmo8IoJQFogFZ4Fro1YlaePTTG58=) 3: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: M890dag6EE1qtsFlPkd3PB/fu3TZaGNSDr48ih7+xpg=) 4: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: 0P8RiV2EV8KtV2wVPDkhbbfmwCyYhPd1bfzDVq451ls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f5:ed:a7:46:6c:3a:d9:3c:b3:91:ca:25:f5:00:77:07:d1:50:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Apr 18 23:46:00 2025 GMT Not After : Apr 22 07:19:00 2025 GMT Subject: CN=8B41102EAA486E99368411274D938248895C1129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1a:d3:39:c7:41:fd:de:51:a0:a8:54:56:14: f6:84:3d:2e:59:5f:54:c7:40:01:40:1b:80:f9:73: ac:3f:38:03:83:8c:25:12:7e:65:64:1c:7d:4a:45: 73:aa:74:81:8d:39:3a:90:80:73:d5:8d:13:b3:b6: 1a:17:37:d8:1c:ad:7d:24:8c:b6:79:d8:07:03:6f: 2f:12:4d:d8:72:1f:0d:c7:58:b4:ec:3f:98:58:c1: 5f:8c:f8:14:20:36:2e:23:2d:7f:64:5a:71:40:3b: 16:7a:ee:1b:60:08:ba:b8:55:97:3d:8f:65:f3:89: 07:2c:d2:f1:ae:a7:80:e9:64:4e:ad:20:08:23:f6: 68:d8:55:c4:77:32:66:03:56:8a:46:0e:75:49:63: f7:79:0e:6a:02:e9:e6:54:76:6b:48:95:aa:29:8c: 21:f4:ca:2b:f7:6d:fc:c0:bb:64:5c:54:1a:64:29: d0:de:75:30:49:ad:f6:89:0a:ed:2f:5e:8e:b5:09: 16:2e:b8:c6:f2:23:54:0f:31:b4:cb:a0:12:5e:ef: e6:62:52:89:1d:f0:c1:db:46:6b:60:e1:39:85:25: 92:7c:fe:fe:d5:f3:77:b0:c0:87:4c:5c:87:f1:5c: 88:f4:fb:c0:97:c0:a8:2a:e7:6b:df:61:2a:de:1a: da:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:41:10:2E:AA:48:6E:99:36:84:11:27:4D:93:82:48:89:5C:11:29 X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e6:ab:5d:a7:c3:9d:04:b5:5b:1d:a1:85:0f:79:5a:87:af: 2b:88:b9:72:48:17:b1:34:b8:1f:81:98:86:96:54:d0:dc:72: 87:e5:f0:3e:c6:f5:0e:e6:f2:85:8f:4b:44:5e:62:c6:55:d5: 31:26:4f:fa:73:c6:1e:f3:4b:75:b6:7f:fa:b6:04:b0:6e:1e: b8:fe:5b:ae:1c:41:84:55:1c:25:9b:ca:6d:c6:a3:b9:59:d0: 00:3c:ed:e2:29:21:a3:97:0d:52:fc:87:56:18:63:7a:c2:f6: a0:35:a6:9b:8d:51:de:f0:30:02:87:28:bf:05:26:b8:0e:77: 00:cf:f1:f8:9b:89:bf:e4:a7:c3:8e:b7:2c:4c:e1:a9:99:3c: cc:b0:2a:3f:e2:6a:3e:6b:b7:3a:29:d6:c5:1b:be:f5:61:d8: 43:45:c4:17:7f:00:d1:00:07:e1:cc:cf:3a:03:dc:d1:b1:f8: 3e:17:bc:98:78:04:b8:a9:b5:93:76:11:77:33:e3:5c:d0:75: f7:3f:d2:90:20:8a:55:90:cb:be:98:ad:6d:ba:fe:1c:d2:18: 82:d1:ce:3e:ed:d0:09:d2:35:15:ed:9e:04:95:a8:50:20:f5: 9a:a5:f7:fa:e2:72:e6:77:c9:7e:06:3b:80:d2:ef:32:77:f6: 7e:a5:d5:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/Xtp0ZsOtk8s5HKJfUAdwfRUFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTA0MTgyMzQ2MDBaFw0yNTA0MjIwNzE5MDBaMDMxMTAvBgNV BAMTKDhCNDExMDJFQUE0ODZFOTkzNjg0MTEyNzREOTM4MjQ4ODk1QzExMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5GtM5x0H93lGgqFRWFPaEPS5Z X1THQAFAG4D5c6w/OAODjCUSfmVkHH1KRXOqdIGNOTqQgHPVjROzthoXN9gcrX0k jLZ52AcDby8STdhyHw3HWLTsP5hYwV+M+BQgNi4jLX9kWnFAOxZ67htgCLq4VZc9 j2XziQcs0vGup4DpZE6tIAgj9mjYVcR3MmYDVopGDnVJY/d5DmoC6eZUdmtIlaop jCH0yiv3bfzAu2RcVBpkKdDedTBJrfaJCu0vXo61CRYuuMbyI1QPMbTLoBJe7+Zi Uokd8MHbRmtg4TmFJZJ8/v7V83ewwIdMXIfxXIj0+8CXwKgq52vfYSreGtqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi0EQLqpIbpk2hBEnTZOCSIlcESkwHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfmq12nw50EtVsdoYUPeVqHryuIuXJIF7E0 uB+BmIaWVNDccofl8D7G9Q7m8oWPS0ReYsZV1TEmT/pzxh7zS3W2f/q2BLBuHrj+ W64cQYRVHCWbym3Go7lZ0AA87eIpIaOXDVL8h1YYY3rC9qA1ppuNUd7wMAKHKL8F JrgOdwDP8fibib/kp8OOtyxM4amZPMywKj/iaj5rtzop1sUbvvVh2ENFxBd/ANEA B+HMzzoD3NGx+D4XvJh4BLiptZN2EXcz41zQdfc/0pAgilWQy76YrW26/hzSGILR zj7t0AnSNRXtngSVqFAg9Zql9/ricuZ3yX4GO4DS7zJ39n6l1ew= -----END CERTIFICATE-----Generated at Sat Apr 19 12:07:28 2025 by rpki-client