$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: BRZiTCmXOGgJyfc8pqNcrvGZspuOu4vSs/WEfrhBbRc= Subject key identifier: 2F:AC:82:A5:6E:4B:06:DB:C7:62:8F:32:34:8D:16:91:4A:9E:A2:E3 Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 0919BC252BC635A3C47C08A1988CC771137B5316 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: E8 Signing time: Thu 03 Apr 2025 12:02:04 +0000 Manifest this update: Thu 03 Apr 2025 11:57:04 +0000 Manifest next update: Sun 06 Apr 2025 16:58:04 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: /A9HXd13I0+DkmsbISwlDHjrM6YvxlLYkQQcEaMVLGM=) 2: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: btfkx0X9W4LR8++1O+9BzodBkOasXVAmdrakCfxbLg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:19:bc:25:2b:c6:35:a3:c4:7c:08:a1:98:8c:c7:71:13:7b:53:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Apr 3 11:57:04 2025 GMT Not After : Apr 6 16:58:04 2025 GMT Subject: CN=2FAC82A56E4B06DBC7628F32348D16914A9EA2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:b1:aa:6b:c6:1e:a3:ac:ed:5e:6f:7e:3a: db:df:6b:4c:c2:40:4b:4f:22:dd:f2:bf:2d:3a:93: c5:a6:5d:f6:31:91:94:fa:da:1a:7e:a3:94:f5:15: 28:61:74:23:d8:15:13:f9:4e:90:69:0e:e9:3d:39: 58:ae:3b:a2:f3:b3:20:3b:7f:74:62:a5:ee:e7:e4: 31:3c:7c:c7:5f:78:b6:e3:34:5b:7e:35:d9:38:b3: d8:6c:4b:44:e5:83:96:74:a1:ab:5a:22:92:61:04: 4a:32:33:f6:99:15:e6:f6:d8:ed:2c:04:f2:51:26: 8b:17:88:79:d8:55:2a:11:80:bb:e7:ad:c3:57:5e: f3:bd:6d:4a:c9:95:ad:8b:17:0e:81:2b:33:63:92: 71:42:92:3f:9c:c3:14:80:aa:f6:88:2b:cb:a8:87: e6:b7:61:03:19:a6:4c:b0:02:07:3a:0a:68:d2:d7: f1:3c:ad:a9:5c:d5:1d:33:77:2e:6f:7a:71:e0:06: 63:7f:e2:ed:b0:8f:b6:0c:59:23:f4:d2:b9:66:9f: 2b:40:b3:bc:dd:1a:63:d0:9b:6f:8f:91:56:fb:f0: f7:e2:85:a7:49:49:7f:51:8f:2a:c5:e4:b2:f6:f5: 7d:c9:7e:6c:92:09:26:6f:c7:5f:9c:96:7a:f2:93: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AC:82:A5:6E:4B:06:DB:C7:62:8F:32:34:8D:16:91:4A:9E:A2:E3 X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:97:4c:5c:3a:7e:b0:89:3f:dc:ba:81:0d:50:fe:59:67:4a: 7b:12:fc:8a:2b:14:55:be:ef:1f:42:4f:0e:21:47:52:34:a6: 65:e3:1b:1c:61:c2:84:57:86:d5:4a:cc:47:4b:b4:e6:9d:1f: e2:b1:11:67:3f:73:5f:c1:00:09:65:a4:c3:b4:f3:e1:da:d4: 1b:34:e8:fe:27:a3:c6:71:4b:0e:17:a2:c6:9c:4d:43:cf:91: 8f:8e:a4:b3:57:79:e5:e5:53:91:c3:50:b3:f6:58:08:07:25: d5:0a:af:3a:af:9e:a9:70:e2:7a:fb:6a:8b:20:79:54:fe:38: aa:f2:a3:77:a6:97:77:a0:89:7d:55:15:cc:19:05:51:b3:58: 89:00:b9:7e:ad:c2:63:4a:b1:1a:e1:1b:6c:35:c8:fa:fb:42: ba:cd:5e:0b:97:a2:1c:8d:32:18:87:92:79:8a:64:98:5a:03: 2e:78:3b:28:93:de:b7:26:e9:63:1a:15:4d:1c:5d:11:cb:08: 9b:85:d4:1a:df:bb:e9:bc:7e:e8:5c:fe:8e:30:5d:88:21:d9: 86:bd:b3:86:63:e5:5c:8b:ea:51:d4:82:b9:a5:dc:90:0d:f7: 40:e8:7e:f4:8f:a6:7f:ed:65:d4:84:54:77:49:c8:97:ce:a5: cd:6f:c2:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRm8JSvGNaPEfAihmIzHcRN7UxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNTA0MDMxMTU3MDRaFw0yNTA0MDYxNjU4MDRaMDMxMTAvBgNV BAMTKDJGQUM4MkE1NkU0QjA2REJDNzYyOEYzMjM0OEQxNjkxNEE5RUEyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFbGqa8Yeo6ztXm9+Otvfa0zC QEtPIt3yvy06k8WmXfYxkZT62hp+o5T1FShhdCPYFRP5TpBpDuk9OViuO6LzsyA7 f3Ripe7n5DE8fMdfeLbjNFt+Ndk4s9hsS0Tlg5Z0oataIpJhBEoyM/aZFeb22O0s BPJRJosXiHnYVSoRgLvnrcNXXvO9bUrJla2LFw6BKzNjknFCkj+cwxSAqvaIK8uo h+a3YQMZpkywAgc6CmjS1/E8ralc1R0zdy5venHgBmN/4u2wj7YMWSP00rlmnytA s7zdGmPQm2+PkVb78PfihadJSX9RjyrF5LL29X3JfmySCSZvx1+clnryk8UzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL6yCpW5LBtvHYo8yNI0WkUqeouMwHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWXTFw6frCJP9y6gQ1Q/llnSnsS/IorFFW+ 7x9CTw4hR1I0pmXjGxxhwoRXhtVKzEdLtOadH+KxEWc/c1/BAAllpMO08+Ha1Bs0 6P4no8ZxSw4XosacTUPPkY+OpLNXeeXlU5HDULP2WAgHJdUKrzqvnqlw4nr7aosg eVT+OKryo3eml3egiX1VFcwZBVGzWIkAuX6twmNKsRrhG2w1yPr7QrrNXguXohyN MhiHknmKZJhaAy54OyiT3rcm6WMaFU0cXRHLCJuF1Brfu+m8fuhc/o4wXYgh2Ya9 s4Zj5VyL6lHUgrml3JAN90DofvSPpn/tZdSEVHdJyJfOpc1vwu0= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:25 2025 by rpki-client