$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: VtUo7My5YGlpowUjW6fBX0i9lUVZ8LGzqjiYgH5mNnE= Subject key identifier: E6:37:24:EA:D0:C6:19:6F:17:D0:17:BF:C6:F9:C9:A4:45:0D:AC:71 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 1548806C85CCC97EFAD715A4AA77E2BC57201668 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 0403 Signing time: Wed 12 Mar 2025 10:30:01 +0000 Manifest this update: Wed 12 Mar 2025 10:25:01 +0000 Manifest next update: Sat 15 Mar 2025 17:41:01 +0000 Files and hashes: 1: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: Kxj5n3XmBYqwY5xNhQm1hyvdBhggzR17lr3rokbc1x4=) 2: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: jW50ms0aH4HgWEQwGNSR71uxpw5ILP6vOExz3k18KwI=) 3: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: 3KMeocRXCDDL/zNyO5APYUs82Qdr9/XjvR3XpR7s0Oo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 17:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:48:80:6c:85:cc:c9:7e:fa:d7:15:a4:aa:77:e2:bc:57:20:16:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Mar 12 10:25:01 2025 GMT Not After : Mar 15 17:41:01 2025 GMT Subject: CN=E63724EAD0C6196F17D017BFC6F9C9A4450DAC71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:86:98:b2:4b:56:5c:1e:c6:60:18:00:ea: 32:d6:73:b6:6f:b2:33:f1:16:94:a4:f4:28:07:6f: bb:94:9e:e0:38:01:5b:de:49:a1:60:d3:cf:19:fd: cb:d3:53:3b:68:e8:1d:ae:5e:62:b9:3e:0e:77:6f: 1a:86:76:fa:d0:b6:f2:8b:a9:f4:c6:00:23:fb:a5: 5f:cc:df:d5:f9:17:cc:ff:d0:44:4d:5a:05:40:83: 22:17:0f:fc:6b:32:d1:1c:16:99:9b:8e:25:de:86: 8d:e1:15:c2:ef:a1:5f:a8:9f:ea:aa:bb:48:b4:d9: 5d:64:0e:45:6e:04:76:09:d1:31:b5:9a:a0:33:02: bf:d7:f7:14:ca:33:fa:40:9c:78:73:28:26:a8:8e: f8:7a:52:39:85:53:7d:f4:09:64:cb:7c:9f:fb:23: 30:cb:07:44:2e:fa:3b:ff:27:05:e1:69:17:4a:45: d1:b3:00:25:7e:7a:c0:a5:9d:19:38:34:66:70:a8: 12:e4:c2:c1:06:ee:cf:86:d3:90:d2:c2:b8:41:91: b7:e9:8c:2e:01:ef:f6:26:ee:a7:7d:3d:e5:f8:a4: 17:fc:a0:24:b5:92:db:9d:d5:01:a4:9f:7f:5b:91: 61:8d:64:19:fd:af:19:16:79:45:53:a2:7f:c8:64: 58:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:37:24:EA:D0:C6:19:6F:17:D0:17:BF:C6:F9:C9:A4:45:0D:AC:71 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:fa:18:11:d1:5c:56:69:d0:fd:c0:fc:ae:60:2d:62:23: 2c:6b:0f:5a:78:5e:22:7a:48:41:3c:e4:97:aa:07:2a:17:7c: 61:82:0a:70:e5:cb:dc:8d:1b:f4:66:08:89:90:f5:72:81:8f: 82:d3:9e:cd:3f:ba:41:34:f2:fb:56:f9:62:14:bf:b1:57:60: 8e:9c:6f:28:c5:36:0d:e4:aa:20:06:c4:3b:dd:ce:c0:7e:1c: 8d:03:0f:c7:7d:49:d3:4a:16:c6:a5:f9:74:e5:34:44:cf:ab: 15:a8:c4:34:46:29:a4:90:ad:20:c0:f1:ff:0c:ef:c8:cc:16: 99:16:68:98:66:06:5c:3f:4e:26:e1:d4:0e:cf:ab:ae:9d:8e: db:72:17:f3:d8:d4:48:c8:52:82:b0:ec:08:fc:45:2a:bf:a3: 60:8c:b6:df:74:78:5d:cd:75:27:1b:a7:f2:ab:7f:46:fe:ba: f5:2f:c3:79:f3:c1:e2:8e:03:1a:6c:5f:6e:78:cf:2e:ec:28: d4:be:cc:ca:fb:28:19:14:28:35:8a:2a:e7:6b:94:9a:40:e3: d7:34:d5:1a:89:0b:e7:ac:21:56:1c:11:de:7c:a0:e0:fd:ff: 27:8d:64:fe:53:2e:46:31:4d:b7:1f:c8:89:e5:ad:52:12:a7: 01:b9:9c:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUiAbIXMyX761xWkqnfivFcgFmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNTAzMTIxMDI1MDFaFw0yNTAzMTUxNzQxMDFaMDMxMTAvBgNV BAMTKEU2MzcyNEVBRDBDNjE5NkYxN0QwMTdCRkM2RjlDOUE0NDUwREFDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAloaYsktWXB7GYBgA6jLWc7Zv sjPxFpSk9CgHb7uUnuA4AVveSaFg088Z/cvTUzto6B2uXmK5Pg53bxqGdvrQtvKL qfTGACP7pV/M39X5F8z/0ERNWgVAgyIXD/xrMtEcFpmbjiXeho3hFcLvoV+on+qq u0i02V1kDkVuBHYJ0TG1mqAzAr/X9xTKM/pAnHhzKCaojvh6UjmFU330CWTLfJ/7 IzDLB0Qu+jv/JwXhaRdKRdGzACV+esClnRk4NGZwqBLkwsEG7s+G05DSwrhBkbfp jC4B7/Ym7qd9PeX4pBf8oCS1ktud1QGkn39bkWGNZBn9rxkWeUVTon/IZFi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5jck6tDGGW8X0Be/xvnJpEUNrHEwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTc+hgR0VxWadD9wPyuYC1iIyxrD1p4XiJ6 SEE85JeqByoXfGGCCnDly9yNG/RmCImQ9XKBj4LTns0/ukE08vtW+WIUv7FXYI6c byjFNg3kqiAGxDvdzsB+HI0DD8d9SdNKFsal+XTlNETPqxWoxDRGKaSQrSDA8f8M 78jMFpkWaJhmBlw/Tibh1A7Pq66djttyF/PY1EjIUoKw7Aj8RSq/o2CMtt90eF3N dScbp/Krf0b+uvUvw3nzweKOAxpsX254zy7sKNS+zMr7KBkUKDWKKudrlJpA49c0 1RqJC+esIVYcEd58oOD9/yeNZP5TLkYxTbcfyInlrVISpwG5nNE= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:41 2025 by rpki-client