$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: Ml2+HMcYhOOEL+TneTG+IY/QIk1Ew+bxUD3YIOBJVQA= Subject key identifier: 3E:9F:24:07:C4:A5:6E:D9:18:EB:2A:20:79:0C:4D:4A:E3:2B:D2:43 Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 537264C25E5021C2CE5263A99DA0139AA848DD0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 0167 Signing time: Sat 05 Apr 2025 18:10:00 +0000 Manifest this update: Sat 05 Apr 2025 18:05:00 +0000 Manifest next update: Tue 08 Apr 2025 21:30:00 +0000 Files and hashes: 1: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: havg68xu2j3fdRiqNGjBQBI0S59jwEKuibs7wAz2hBY=) 2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: oxyDXrOoZ/zCFS3Gztc4WC6OS30QoAhbYVI4h5EBUSY=) 3: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: LHo1zMaie53AFYRQsAMBj1avC34kq9NJCGSH/LsdSnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:72:64:c2:5e:50:21:c2:ce:52:63:a9:9d:a0:13:9a:a8:48:dd:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Apr 5 18:05:00 2025 GMT Not After : Apr 8 21:30:00 2025 GMT Subject: CN=3E9F2407C4A56ED918EB2A20790C4D4AE32BD243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:eb:6f:7b:ba:7d:6a:53:43:99:f4:fb:1a: 3c:19:7b:fc:94:33:30:af:68:02:94:3a:a7:dd:cf: 9b:0d:50:f3:bb:20:af:bd:1a:40:00:bc:48:bc:62: 5b:ee:3a:3e:ba:26:85:5e:24:fd:52:78:14:8e:b0: 3f:34:89:94:76:9b:4f:40:72:4e:5a:6c:2c:8e:4a: f7:a3:2d:28:3b:5e:3a:b8:a7:6a:94:30:58:e1:51: ac:01:2e:2c:f0:73:7e:0a:bc:99:8f:de:05:c7:2c: a2:94:0b:49:c1:54:fa:96:3f:81:cc:45:64:04:ab: 51:7c:05:e9:7a:51:8b:8e:d1:0d:f8:97:1f:3d:60: 96:fc:f9:6b:bd:67:c0:60:86:18:0e:2a:27:f3:36: 30:4a:21:cf:0b:91:59:51:15:09:7a:2b:e4:ae:ad: a2:93:c4:05:00:12:d7:47:6c:dc:eb:04:89:6b:81: dc:ee:c3:bf:67:bb:85:77:a3:40:9e:07:53:83:14: 5a:ca:e3:b4:10:e8:ec:9d:70:8e:8c:89:b8:6c:40: 35:50:f5:89:65:9c:12:15:c0:7c:70:04:72:ba:2f: 21:c7:18:12:2c:c6:b9:3c:0c:5b:29:5a:27:54:c5: 03:18:75:21:f4:ca:94:aa:7a:df:84:f5:53:8c:33: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9F:24:07:C4:A5:6E:D9:18:EB:2A:20:79:0C:4D:4A:E3:2B:D2:43 X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5a:d8:ff:53:25:48:93:75:b6:27:81:6f:11:25:a9:21:42: 80:19:49:71:28:31:5a:20:b8:8f:0e:95:35:7a:d3:4f:6a:c8: 6e:ab:48:92:4a:60:b5:2c:36:9e:3d:1b:30:19:72:a0:25:ba: 05:10:1e:a1:cb:a5:25:f0:eb:9d:07:b9:03:cb:fa:ed:cb:85: a2:05:63:98:3d:dd:44:6b:22:0a:f7:3b:40:29:a3:5d:ba:6c: d0:c0:0d:e5:59:25:ed:86:da:3e:66:63:b8:9f:36:46:a7:57: 4f:3e:67:50:58:96:38:f3:70:eb:eb:21:1f:57:f6:8e:cf:4c: e9:e2:8e:d4:5f:13:0d:e6:89:a3:f2:7d:82:a6:d7:94:22:14: bd:bd:fc:0a:15:34:14:45:ff:7c:6b:9b:8e:25:2b:f5:c2:50: e5:b3:4b:37:e3:6f:c0:ee:2a:1f:30:bd:4d:9c:42:47:c5:ba: a8:cc:97:6c:8b:b8:24:96:3e:36:5a:4b:f9:cf:a1:5a:df:a0: 21:b1:fa:c7:a4:b0:ce:4e:e7:12:4e:4e:dd:31:a9:ac:3a:6d: cb:96:5b:c0:3d:26:73:d2:6d:da:c5:d0:b8:c1:3a:2d:c6:71: 40:bf:fd:b2:1b:6c:62:81:35:80:83:01:9e:cc:5c:c5:23:43: 83:e3:e3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3Jkwl5QIcLOUmOpnaATmqhI3QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNTA0MDUxODA1MDBaFw0yNTA0MDgyMTMwMDBaMDMxMTAvBgNV BAMTKDNFOUYyNDA3QzRBNTZFRDkxOEVCMkEyMDc5MEM0RDRBRTMyQkQyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPyutve7p9alNDmfT7GjwZe/yU MzCvaAKUOqfdz5sNUPO7IK+9GkAAvEi8YlvuOj66JoVeJP1SeBSOsD80iZR2m09A ck5abCyOSvejLSg7Xjq4p2qUMFjhUawBLizwc34KvJmP3gXHLKKUC0nBVPqWP4HM RWQEq1F8Bel6UYuO0Q34lx89YJb8+Wu9Z8BghhgOKifzNjBKIc8LkVlRFQl6K+Su raKTxAUAEtdHbNzrBIlrgdzuw79nu4V3o0CeB1ODFFrK47QQ6OydcI6MibhsQDVQ 9YllnBIVwHxwBHK6LyHHGBIsxrk8DFspWidUxQMYdSH0ypSqet+E9VOMMyKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPp8kB8SlbtkY6yogeQxNSuMr0kMwHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENa2P9TJUiTdbYngW8RJakhQoAZSXEoMVog uI8OlTV6009qyG6rSJJKYLUsNp49GzAZcqAlugUQHqHLpSXw650HuQPL+u3LhaIF Y5g93URrIgr3O0Apo126bNDADeVZJe2G2j5mY7ifNkanV08+Z1BYljjzcOvrIR9X 9o7PTOnijtRfEw3miaPyfYKm15QiFL29/AoVNBRF/3xrm44lK/XCUOWzSzfjb8Du Kh8wvU2cQkfFuqjMl2yLuCSWPjZaS/nPoVrfoCGx+seksM5O5xJOTt0xqaw6bcuW W8A9JnPSbdrF0LjBOi3GcUC//bIbbGKBNYCDAZ7MXMUjQ4Pj46o= -----END CERTIFICATE-----Generated at Mon Apr 7 11:50:10 2025 by rpki-client