$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: 7Q4P17XCSyMG/T5hJwrWM/dzrtI7nKW0PTxyJ+ngxok= Subject key identifier: 60:D5:6D:AC:D1:97:A9:60:AE:ED:56:DE:A9:21:09:86:B5:1F:DF:7D Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 69C07C8E5D69C6DFED07DE7DAEE07B6E84925237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 0170 Signing time: Fri 04 Apr 2025 22:41:45 +0000 Manifest this update: Fri 04 Apr 2025 22:36:45 +0000 Manifest next update: Mon 07 Apr 2025 23:14:45 +0000 Files and hashes: 1: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: xEKvL1Sy6gjieKkSQRdg2opwP1NrCxUV9PFI8nvYCrM=) 2: 3130332e3135302e3232362e302f32342d3234203d3e20313430343032.roa (hash: rrPHzA78yuwvUrOHC735jgsht0uhyJKhl6X4YZMdm8Q=) 3: 3130332e3135302e3232372e302f32342d3234203d3e20313430343032.roa (hash: 2LrW1zipw+qgfMNeHCf0k3gRVyNP/ytxbK452Dc6wXQ=) 4: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: n9y1PNL8NA863+tD8R6/XJjusX0GeLCnQIaWbgWZ4B4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c0:7c:8e:5d:69:c6:df:ed:07:de:7d:ae:e0:7b:6e:84:92:52:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Apr 4 22:36:45 2025 GMT Not After : Apr 7 23:14:45 2025 GMT Subject: CN=60D56DACD197A960AEED56DEA9210986B51FDF7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:db:c8:da:5e:17:d9:6d:1d:53:9b:d6:1b: 9c:0d:76:2c:5b:8b:f7:56:b1:24:84:a4:2b:6e:a0: 35:39:0b:c3:1a:c1:ca:73:c4:31:95:41:4e:74:9b: b9:5f:7b:5a:1d:2e:18:d5:e5:31:37:0c:98:78:a4: 75:58:97:50:95:5b:5f:81:14:53:3d:b1:f8:9f:20: 42:93:1e:88:b8:3f:47:e8:e0:90:31:a2:3f:1d:45: 94:a9:ef:5a:dc:a9:ba:cb:75:ac:88:15:1f:0f:ef: 18:d0:40:7e:f7:64:e5:8a:9a:bb:eb:ee:25:e0:d2: 41:4a:38:ff:9e:19:ba:25:15:a7:38:90:89:b5:49: 90:0e:4e:b7:30:3e:49:38:bf:0a:79:25:38:c4:04: f5:71:61:ca:d6:7d:ef:41:94:2b:7c:31:6e:e6:23: bf:39:a5:1b:19:90:3f:3f:b7:f0:cd:50:ab:d0:34: 7d:9a:eb:39:4d:ce:f0:5a:6c:9b:39:39:e2:6a:4d: 86:04:3b:36:70:79:b0:c7:ea:24:86:b3:9c:0f:ec: 22:60:b6:d5:ed:49:54:ee:f9:d4:76:a3:cc:01:79: 64:b4:f5:a3:7d:98:06:3d:89:cb:02:50:52:bb:8a: 95:49:0b:54:32:c3:3f:3c:c5:4f:d4:33:13:b1:3a: 0a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D5:6D:AC:D1:97:A9:60:AE:ED:56:DE:A9:21:09:86:B5:1F:DF:7D X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f3:1d:4a:fd:b5:e9:7b:38:62:a3:70:1b:1f:42:67:ec:3f: 9d:fe:d2:fe:3f:49:9d:19:56:39:62:43:85:50:d2:37:a0:56: 65:5e:6b:65:79:0c:bd:75:70:84:a9:76:80:05:4d:e3:3a:c5: 59:4a:b6:90:2a:e1:41:00:b4:9e:e2:66:45:21:7f:c4:2f:d0: 3d:4c:fb:56:72:85:b1:78:e3:36:b6:b5:91:86:7a:55:35:be: be:90:f0:f0:9c:06:d8:0e:3c:12:e1:0a:95:ac:c0:1a:ca:11: d1:db:8f:9a:b6:25:34:d6:07:13:f2:db:26:76:59:11:d8:8f: ce:ef:23:49:23:93:f0:db:2b:c9:41:17:32:35:51:40:c5:07: c0:d1:87:7b:5e:80:ea:46:2f:bb:2c:1c:ea:a0:59:2c:80:2f: 9c:4c:a0:7b:b3:2c:1b:e8:95:54:17:31:5f:a1:45:8d:1a:68: ec:fb:88:90:0b:1b:27:34:fb:fe:a0:44:d7:a9:40:ba:f7:33: 9c:11:2f:7f:5f:26:54:02:bc:4c:6b:d4:b5:ff:50:81:d8:fc: cc:5f:2f:d8:97:52:1a:b0:45:48:30:37:f1:0c:db:b6:b6:b8: a9:63:eb:ac:58:bf:2e:4c:5e:42:f4:fa:d5:e5:87:ad:48:e8: fc:1d:42:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacB8jl1pxt/tB959ruB7boSSUjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTA0MDQyMjM2NDVaFw0yNTA0MDcyMzE0NDVaMDMxMTAvBgNV BAMTKDYwRDU2REFDRDE5N0E5NjBBRUVENTZERUE5MjEwOTg2QjUxRkRGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvv9vI2l4X2W0dU5vWG5wNdixb i/dWsSSEpCtuoDU5C8MawcpzxDGVQU50m7lfe1odLhjV5TE3DJh4pHVYl1CVW1+B FFM9sfifIEKTHoi4P0fo4JAxoj8dRZSp71rcqbrLdayIFR8P7xjQQH73ZOWKmrvr 7iXg0kFKOP+eGbolFac4kIm1SZAOTrcwPkk4vwp5JTjEBPVxYcrWfe9BlCt8MW7m I785pRsZkD8/t/DNUKvQNH2a6zlNzvBabJs5OeJqTYYEOzZwebDH6iSGs5wP7CJg ttXtSVTu+dR2o8wBeWS09aN9mAY9icsCUFK7ipVJC1Qywz88xU/UMxOxOgrjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNVtrNGXqWCu7VbeqSEJhrUf330wHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvzHUr9tel7OGKjcBsfQmfsP53+0v4/SZ0Z VjliQ4VQ0jegVmVea2V5DL11cISpdoAFTeM6xVlKtpAq4UEAtJ7iZkUhf8Qv0D1M +1ZyhbF44za2tZGGelU1vr6Q8PCcBtgOPBLhCpWswBrKEdHbj5q2JTTWBxPy2yZ2 WRHYj87vI0kjk/DbK8lBFzI1UUDFB8DRh3tegOpGL7ssHOqgWSyAL5xMoHuzLBvo lVQXMV+hRY0aaOz7iJALGyc0+/6gRNepQLr3M5wRL39fJlQCvExr1LX/UIHY/Mxf L9iXUhqwRUgwN/EM27a2uKlj66xYvy5MXkL0+tXlh61I6PwdQr8= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:31 2025 by rpki-client