$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: TJeHjhIChC04uScJrEx0DZ9vPHCPYMf/Xs5AkYgX1MA= Subject key identifier: EB:DA:84:FA:61:26:3E:5D:C5:95:F0:F8:63:81:D0:0A:E8:E9:D9:02 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 052C0F5454F2C4F49734268FBB16017FDA3E3472 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 025E Signing time: Sat 05 Apr 2025 00:12:19 +0000 Manifest this update: Sat 05 Apr 2025 00:07:19 +0000 Manifest next update: Tue 08 Apr 2025 11:45:19 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K58hS10IRX+zau5OGGRyu9JQqy2xuB39owD+O8xQ0hc=) 2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: oFJ4+PD4R0tKKqM/J0lQoFhCdkyLZNbdiEb0wNjTNjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2c:0f:54:54:f2:c4:f4:97:34:26:8f:bb:16:01:7f:da:3e:34:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Apr 5 00:07:19 2025 GMT Not After : Apr 8 11:45:19 2025 GMT Subject: CN=EBDA84FA61263E5DC595F0F86381D00AE8E9D902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:50:b5:f9:76:d8:be:d6:ba:33:f4:47:6b: 99:4d:4c:47:ad:23:38:0a:0f:97:f5:46:94:52:b3: 13:53:d3:73:bd:12:a2:78:93:62:8a:4e:44:b3:f7: 8c:3b:b9:9f:86:af:cf:88:37:6c:cb:6d:f8:1a:28: b0:22:4b:31:8c:b0:5d:d4:b0:f0:86:e2:ef:81:f8: 75:c2:3e:e6:e0:8b:ec:a0:2f:11:df:18:2c:d3:5c: ed:3d:f1:63:4d:9b:e8:04:0a:6b:f2:21:70:0c:38: 81:0c:f4:65:f6:5d:a5:c8:3a:e3:a0:cc:85:23:8a: 64:91:52:5d:af:02:3c:f8:44:6f:c3:50:a4:91:b5: ce:36:d1:ca:06:45:b2:57:b9:80:41:f3:96:40:c7: b9:7d:46:d2:57:57:5e:16:a5:f2:46:76:ee:19:aa: 70:00:87:a4:a7:f8:e9:88:66:e1:e8:52:54:79:eb: 82:90:ef:46:cb:a1:4c:91:b5:17:40:86:c6:10:1c: a6:d4:4a:7f:98:d2:e3:15:76:b1:78:02:d1:20:7f: 04:c8:bb:46:6f:0e:f5:19:34:ff:4f:69:e8:fd:19: fe:54:bc:87:4f:24:4e:6a:6d:ce:91:4e:bc:7a:24: 97:d6:77:c4:fe:f6:de:d2:b1:05:cf:4c:8e:2d:5a: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DA:84:FA:61:26:3E:5D:C5:95:F0:F8:63:81:D0:0A:E8:E9:D9:02 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cd:bb:95:ec:6c:3d:89:82:1a:39:3f:e0:e8:68:a3:fd:7a: 9c:a7:9f:a5:e0:ec:56:44:f5:08:cc:29:6a:e5:28:70:74:f9: 90:32:c0:1c:37:e5:63:7f:49:db:dc:d6:82:29:4c:c9:4e:cf: 2f:af:b3:64:41:1a:cd:9a:65:45:17:13:77:b6:18:12:a8:f5: 2b:64:92:c2:ae:56:cc:6c:7e:4d:56:c7:ef:73:07:cf:a7:7d: ef:07:90:73:d5:dd:97:d1:c6:1a:af:93:c9:9e:3b:88:c0:c1: c3:d8:c0:6a:86:cd:2e:f6:de:95:b7:ee:d5:f8:1e:bf:d0:8d: e0:e7:e3:99:4b:d1:e2:97:84:17:7a:9a:17:02:b4:a3:32:1d: af:92:a1:f2:c4:cd:ae:54:e0:91:65:c0:60:df:ce:0a:ca:ce: 54:f6:75:4a:93:90:74:ef:34:18:66:f7:73:d4:70:6c:4c:39: 05:04:99:fd:cd:28:fa:4e:37:d7:fd:30:5f:c5:70:04:9d:eb: 48:d9:5f:13:e5:98:f0:e8:58:fc:ad:a4:5a:f2:c2:fd:ac:ca: 36:18:3d:0e:4c:e9:0a:87:3e:f4:01:f5:7d:ba:0d:db:d7:42: a1:47:e5:76:cb:f2:bd:ca:31:84:3e:fb:c8:6a:fb:a4:f4:1a: b2:9f:e5:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSwPVFTyxPSXNCaPuxYBf9o+NHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTA0MDUwMDA3MTlaFw0yNTA0MDgxMTQ1MTlaMDMxMTAvBgNV BAMTKEVCREE4NEZBNjEyNjNFNURDNTk1RjBGODYzODFEMDBBRThFOUQ5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiFC1+XbYvta6M/RHa5lNTEet IzgKD5f1RpRSsxNT03O9EqJ4k2KKTkSz94w7uZ+Gr8+IN2zLbfgaKLAiSzGMsF3U sPCG4u+B+HXCPubgi+ygLxHfGCzTXO098WNNm+gECmvyIXAMOIEM9GX2XaXIOuOg zIUjimSRUl2vAjz4RG/DUKSRtc420coGRbJXuYBB85ZAx7l9RtJXV14WpfJGdu4Z qnAAh6Sn+OmIZuHoUlR564KQ70bLoUyRtRdAhsYQHKbUSn+Y0uMVdrF4AtEgfwTI u0ZvDvUZNP9Paej9Gf5UvIdPJE5qbc6RTrx6JJfWd8T+9t7SsQXPTI4tWiJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69qE+mEmPl3FlfD4Y4HQCujp2QIwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrNu5XsbD2Jgho5P+DoaKP9epynn6Xg7FZE 9QjMKWrlKHB0+ZAywBw35WN/Sdvc1oIpTMlOzy+vs2RBGs2aZUUXE3e2GBKo9Stk ksKuVsxsfk1Wx+9zB8+nfe8HkHPV3ZfRxhqvk8meO4jAwcPYwGqGzS723pW37tX4 Hr/QjeDn45lL0eKXhBd6mhcCtKMyHa+SofLEza5U4JFlwGDfzgrKzlT2dUqTkHTv NBhm93PUcGxMOQUEmf3NKPpON9f9MF/FcASd60jZXxPlmPDoWPytpFrywv2syjYY PQ5M6QqHPvQB9X26DdvXQqFH5XbL8r3KMYQ++8hq+6T0GrKf5d0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:34 2025 by rpki-client