$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: ti4D5LP22HH5RKxpjRo00tc4h8Oo0BAkuB5A53MxRB0= Subject key identifier: 0D:74:E7:F2:2D:D8:2B:71:84:71:BB:D6:2B:4A:B5:2B:C3:C1:E3:33 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 0757C898499CBB47FC8C0C381C4D551E502AFE51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 01E1 Signing time: Fri 04 Apr 2025 10:51:19 +0000 Manifest this update: Fri 04 Apr 2025 10:46:19 +0000 Manifest next update: Mon 07 Apr 2025 18:51:19 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: xSl5S79BfyBgOXzpCa2+vFeAMzKVXM9pSMn5k0NLon8=) 2: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: 8Cntvo3nget0QWVQKrqZ6Q6GS/E/zH2/V/+oAx0DHU8=) 3: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:57:c8:98:49:9c:bb:47:fc:8c:0c:38:1c:4d:55:1e:50:2a:fe:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Apr 4 10:46:19 2025 GMT Not After : Apr 7 18:51:19 2025 GMT Subject: CN=0D74E7F22DD82B718471BBD62B4AB52BC3C1E333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:a6:34:db:e6:b3:f1:92:40:8a:fa:40:93: c6:88:2c:ee:f8:bb:ac:b6:7c:ae:7f:3a:9a:12:2c: d7:eb:cd:6f:e6:da:ff:9a:ca:a8:82:15:fd:da:14: 7f:fa:1a:06:df:f0:e8:d1:7b:21:e7:3b:24:d9:57: aa:c2:01:3f:40:bf:a3:2c:20:cc:0a:20:f4:08:2c: bf:6d:79:60:35:bb:31:43:c4:69:71:34:85:c3:39: 08:4a:3c:ac:5f:b8:89:36:1d:4f:c7:4a:5d:01:84: 56:6d:72:8b:ab:67:21:c1:14:e1:65:69:de:ec:de: a8:3f:99:1e:4e:95:59:e7:5d:bf:9f:cd:7d:41:65: e3:98:f9:ec:aa:2c:d9:0f:d3:95:1f:a1:d3:e2:04: 69:16:0d:5d:39:a0:d4:5d:fe:0a:e8:cd:ee:a3:e1: cf:63:4b:ad:fe:e9:ce:06:a4:80:c6:f5:eb:61:f1: 95:a3:c6:df:c8:57:f3:38:8b:3f:75:66:04:38:a4: 8a:ac:02:e2:67:93:fb:09:b9:2b:bd:e6:ce:75:f5: c2:7e:dd:5b:85:b7:d6:f3:67:c6:53:4d:34:89:2e: 61:96:72:50:98:99:8f:76:ec:80:d9:23:32:2f:d4: b1:b5:89:71:2e:f9:5b:bb:5b:2b:92:77:7c:b7:dc: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:74:E7:F2:2D:D8:2B:71:84:71:BB:D6:2B:4A:B5:2B:C3:C1:E3:33 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ea:ca:79:70:a9:f1:92:d0:20:bb:06:f5:b3:88:e3:2d:e9: c0:6c:27:45:b1:7f:d8:a2:74:b9:da:fc:7f:ef:5c:6e:cf:80: 69:b4:54:96:1a:fa:a3:a0:df:94:06:75:47:bb:a2:ea:86:10: a1:a2:e3:54:8a:c4:26:d3:5d:0e:70:0c:3d:21:49:a0:e1:3d: af:18:fc:e8:42:77:4c:2d:8b:c2:51:fe:ee:6c:61:0a:ed:df: 49:14:af:dd:cb:84:63:8e:a7:1f:21:16:78:7b:d8:77:cb:2c: c6:4a:86:23:0e:9b:4e:c8:ec:30:e4:ea:83:6d:a1:b7:4e:a4: 06:ce:9e:80:ba:36:43:79:3a:34:4c:db:bd:02:c9:97:43:d9: df:c2:12:fb:b7:1b:48:00:fc:dd:6b:5d:b9:cc:ba:bd:91:3d: 33:24:5b:07:93:c0:01:57:ca:6e:eb:18:36:ef:7c:ed:79:50: a3:54:e4:77:3c:d2:e9:64:82:82:4f:4d:a6:dc:87:dc:da:27: 1c:7f:ab:0b:64:7c:c7:59:e9:4e:45:d9:f2:2c:32:d4:29:d5: 1e:30:4e:98:02:5b:c9:1e:17:c8:ed:5a:d8:f4:d2:94:36:1f: 2e:43:ba:c7:de:dc:ae:24:9b:00:d8:f9:51:ed:0b:46:3d:8c: e4:94:e6:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1fImEmcu0f8jAw4HE1VHlAq/lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTA0MDQxMDQ2MTlaFw0yNTA0MDcxODUxMTlaMDMxMTAvBgNV BAMTKDBENzRFN0YyMkREODJCNzE4NDcxQkJENjJCNEFCNTJCQzNDMUUzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CqY02+az8ZJAivpAk8aILO74 u6y2fK5/OpoSLNfrzW/m2v+ayqiCFf3aFH/6Ggbf8OjReyHnOyTZV6rCAT9Av6Ms IMwKIPQILL9teWA1uzFDxGlxNIXDOQhKPKxfuIk2HU/HSl0BhFZtcourZyHBFOFl ad7s3qg/mR5OlVnnXb+fzX1BZeOY+eyqLNkP05UfodPiBGkWDV05oNRd/groze6j 4c9jS63+6c4GpIDG9eth8ZWjxt/IV/M4iz91ZgQ4pIqsAuJnk/sJuSu95s519cJ+ 3VuFt9bzZ8ZTTTSJLmGWclCYmY927IDZIzIv1LG1iXEu+Vu7WyuSd3y33POnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXTn8i3YK3GEcbvWK0q1K8PB4zMwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfqynlwqfGS0CC7BvWziOMt6cBsJ0Wxf9ii dLna/H/vXG7PgGm0VJYa+qOg35QGdUe7ouqGEKGi41SKxCbTXQ5wDD0hSaDhPa8Y /OhCd0wti8JR/u5sYQrt30kUr93LhGOOpx8hFnh72HfLLMZKhiMOm07I7DDk6oNt obdOpAbOnoC6NkN5OjRM270CyZdD2d/CEvu3G0gA/N1rXbnMur2RPTMkWweTwAFX ym7rGDbvfO15UKNU5Hc80ulkgoJPTabch9zaJxx/qwtkfMdZ6U5F2fIsMtQp1R4w TpgCW8keF8jtWtj00pQ2Hy5Dusfe3K4kmwDY+VHtC0Y9jOSU5hw= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:49 2025 by rpki-client