$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: XetL7XQ2tft2WNOOegT2Zw13RuutCg2GC5VovyQO4GM= Subject key identifier: FD:70:29:23:B4:7D:0F:02:7D:8E:AD:A9:22:95:C5:AC:12:E6:39:10 Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 04F1F7A8E80626A034F507BAF0943BB7EBAC509B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 02CD Signing time: Sat 19 Apr 2025 13:21:24 +0000 Manifest this update: Sat 19 Apr 2025 13:16:24 +0000 Manifest next update: Tue 22 Apr 2025 20:09:24 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: ZEIqrlpuQA8TZ6DDwCnPpX+cLrBZrQ4I6cTUW0D9+r8=) 2: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: s6xBtrIihrR958DHjH9X2nkbZiDSdn8II552U+6YVtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 20:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f1:f7:a8:e8:06:26:a0:34:f5:07:ba:f0:94:3b:b7:eb:ac:50:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Apr 19 13:16:24 2025 GMT Not After : Apr 22 20:09:24 2025 GMT Subject: CN=FD702923B47D0F027D8EADA92295C5AC12E63910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:89:c0:56:be:60:e6:42:f7:3d:85:44:03:60: af:93:df:8f:9e:2e:03:00:65:70:3e:02:5f:cb:09: 93:50:a8:8c:38:c6:b8:f1:6c:db:76:f2:d0:e5:68: 8f:f4:8a:39:ce:dc:c9:ed:c1:92:ac:8f:aa:46:5f: 76:01:af:95:50:e3:d2:ca:00:21:c4:af:4f:1d:f7: 91:fe:8e:57:b3:af:aa:5f:7b:33:24:cc:2f:9f:64: ad:64:a5:db:c1:26:52:6c:79:c9:18:84:30:43:1d: f4:dc:e2:5b:43:a4:e0:54:a1:1a:27:a9:f9:38:be: f6:10:f3:68:c2:a4:dd:bf:d4:8f:d8:e8:41:61:d4: bc:92:fd:ff:be:c3:5e:e6:3c:a8:fe:df:0e:cc:1b: d8:76:63:09:bf:e0:38:ad:84:0d:8a:c7:c8:de:d3: 67:ec:0d:8c:bd:2d:a6:82:88:47:44:4a:2a:a0:53: 77:bc:48:8a:97:bb:cc:c1:86:be:0f:a7:03:f6:51: 86:7b:9d:9b:46:d9:1d:d4:ff:41:e7:b6:03:68:c6: 2e:16:37:de:89:9b:fe:b1:11:03:f7:a5:98:da:05: 28:76:89:bd:98:cf:18:5d:fd:40:08:9b:03:ed:47: ba:ba:7b:64:ea:d0:e1:cf:a2:39:d9:b3:8d:39:83: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:70:29:23:B4:7D:0F:02:7D:8E:AD:A9:22:95:C5:AC:12:E6:39:10 X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:66:c1:73:dc:6b:3d:e8:a0:5d:90:b5:b3:a4:19:29:61:b7: 29:32:ba:72:e6:40:ba:6d:36:06:1c:0f:06:1b:e6:0f:dd:54: 3b:33:24:92:e5:62:df:e1:c8:f2:cf:b2:ac:3e:6d:88:12:34: 7d:89:16:4c:2a:7d:44:3a:2d:76:48:b7:30:c7:ce:d1:f8:86: 62:b8:75:df:a8:24:56:b7:d8:d1:39:ef:01:d0:db:cd:cf:c6: 6e:eb:ff:3d:f1:33:c0:48:d4:41:a3:9a:b1:05:ee:5e:ad:f2: ef:59:0c:30:3a:b7:cd:7f:b6:6c:46:91:de:e9:d7:e1:27:76: 26:2d:20:24:cc:e2:05:19:63:4e:c0:14:02:60:d8:01:2e:55: bd:9c:bc:d4:2c:40:f6:41:30:ec:2d:ed:cf:3d:02:fd:1c:9c: fb:cf:d7:02:5e:fb:a1:d8:ac:ae:a8:75:30:ec:89:cf:ee:ac: 21:45:62:cc:ef:4a:56:de:0a:14:d5:cc:e5:81:ef:76:ab:78: 5e:50:9c:c4:52:0d:e3:e9:aa:5e:83:4e:aa:36:ba:1b:94:f3: 4d:35:85:77:b5:49:46:be:9d:38:91:5c:ef:6e:1d:07:3b:2b: 8f:4c:ab:55:64:35:75:ff:22:07:2d:96:8e:3d:88:9d:37:e7: 0c:a5:c8:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPH3qOgGJqA09Qe68JQ7t+usUJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNTA0MTkxMzE2MjRaFw0yNTA0MjIyMDA5MjRaMDMxMTAvBgNV BAMTKEZENzAyOTIzQjQ3RDBGMDI3RDhFQURBOTIyOTVDNUFDMTJFNjM5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDficBWvmDmQvc9hUQDYK+T34+e LgMAZXA+Al/LCZNQqIw4xrjxbNt28tDlaI/0ijnO3MntwZKsj6pGX3YBr5VQ49LK ACHEr08d95H+jlezr6pfezMkzC+fZK1kpdvBJlJseckYhDBDHfTc4ltDpOBUoRon qfk4vvYQ82jCpN2/1I/Y6EFh1LyS/f++w17mPKj+3w7MG9h2Ywm/4DithA2Kx8je 02fsDYy9LaaCiEdESiqgU3e8SIqXu8zBhr4PpwP2UYZ7nZtG2R3U/0HntgNoxi4W N96Jm/6xEQP3pZjaBSh2ib2Yzxhd/UAImwPtR7q6e2Tq0OHPojnZs405g2xpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XApI7R9DwJ9jq2pIpXFrBLmORAwHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZmwXPcaz3ooF2QtbOkGSlhtykyunLmQLpt NgYcDwYb5g/dVDszJJLlYt/hyPLPsqw+bYgSNH2JFkwqfUQ6LXZItzDHztH4hmK4 dd+oJFa32NE57wHQ283Pxm7r/z3xM8BI1EGjmrEF7l6t8u9ZDDA6t81/tmxGkd7p 1+EndiYtICTM4gUZY07AFAJg2AEuVb2cvNQsQPZBMOwt7c89Av0cnPvP1wJe+6HY rK6odTDsic/urCFFYszvSlbeChTVzOWB73areF5QnMRSDePpql6DTqo2uhuU8001 hXe1SUa+nTiRXO9uHQc7K49Mq1VkNXX/Igctlo49iJ035wylyPE= -----END CERTIFICATE-----Generated at Sun Apr 20 04:18:25 2025 by rpki-client