$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: bv7FHz1QUpqx00gRYziX/X80tYGxlkJ47J4ks8N+0ts= Subject key identifier: 5A:5E:A4:3D:DE:33:7C:75:E0:9B:26:77:21:1A:27:91:82:CA:91:46 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 7218614631AF447066F77929B903031C60116130 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: 7E Signing time: Wed 16 Apr 2025 03:02:02 +0000 Manifest this update: Wed 16 Apr 2025 02:57:02 +0000 Manifest next update: Sat 19 Apr 2025 11:58:02 +0000 Files and hashes: 1: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: aRLzjjoEO1hxtw6SesQ6JWJ5mm4ERrypLIuwkhd6QHo=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: dIklSAhTd1QkYpzQrRNxPi4OuuOcSwctGkAy0Q3T1ls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 11:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:18:61:46:31:af:44:70:66:f7:79:29:b9:03:03:1c:60:11:61:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Apr 16 02:57:02 2025 GMT Not After : Apr 19 11:58:02 2025 GMT Subject: CN=5A5EA43DDE337C75E09B2677211A279182CA9146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:ea:91:95:19:0d:30:28:e7:00:1f:25:ba: 08:d9:5d:fd:1f:ef:f0:60:f3:fc:9e:16:83:91:86: 67:e9:7e:d4:61:a0:6a:06:74:71:40:c8:d2:6b:b6: e0:d3:60:5d:1f:0b:c0:ec:f4:73:0c:4b:1d:a4:ae: 40:2d:59:0f:8b:1e:1f:56:3f:3a:d2:05:0b:0e:41: f0:bd:98:65:fb:fe:33:0b:27:28:cb:68:6b:39:08: 3d:cb:54:3b:2d:c6:00:9b:59:fb:ea:02:9f:3f:2e: b2:03:93:48:e7:73:02:14:b3:f3:19:4a:3e:ee:12: 98:38:f3:33:d9:cd:99:5c:86:bc:71:78:32:8a:79: aa:52:e6:cc:d7:4d:04:29:13:a2:17:b0:f5:35:50: 14:4c:29:a3:66:60:91:1d:bd:f9:75:d6:60:5e:77: 9d:3c:e7:7d:ec:a9:c0:ec:9e:5e:03:0f:b5:75:e8: 5f:91:dc:6d:bd:71:a0:4c:8e:28:26:19:46:1c:63: 37:42:c0:b4:0a:ab:2c:1a:8a:8f:ed:d4:31:91:59: bd:5a:51:d2:ec:7e:e4:14:11:bd:21:e4:98:e4:4a: c5:7a:d0:46:63:a8:b4:a0:e6:8d:39:9d:a5:c1:58: f2:84:a2:7e:c5:1e:2e:92:3a:8a:58:ae:2f:18:f7: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5E:A4:3D:DE:33:7C:75:E0:9B:26:77:21:1A:27:91:82:CA:91:46 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d2:3c:d4:c3:2e:b1:b8:7f:62:a4:cc:9c:0f:6d:16:81:a9: 7b:0a:0a:90:d0:2c:f9:9d:83:5e:1f:39:93:8e:a0:aa:e5:1e: e5:d1:48:b4:a9:63:21:fd:5e:93:c0:e0:17:41:81:dc:17:63: 5a:a5:47:1a:1b:86:60:3f:c9:e9:bb:f4:07:dd:ff:1f:a1:fc: 46:61:54:63:ab:66:d5:30:3c:f9:ed:a5:5d:39:45:ee:9f:a0: 14:21:e9:40:6c:bd:d0:77:5e:2a:46:67:04:32:7c:00:76:61: 29:e0:34:db:e0:ac:7b:fa:f8:39:e7:ff:86:be:fc:f8:8e:87: 38:ae:93:15:d5:f9:45:7e:5d:33:ea:5c:ad:03:c3:95:ad:66: 16:b8:87:21:d8:62:2b:07:ca:8d:b8:4e:99:43:f0:37:09:a4: 7a:b3:e0:09:9a:f6:31:a9:0a:9d:2c:54:d4:31:a0:fd:4a:e8: af:17:8f:73:c2:22:f4:06:51:31:1f:85:65:a9:73:d5:69:ef: 6d:ce:ec:bb:76:b4:9c:ad:da:ad:86:f1:48:59:2e:0c:c2:fb: e3:91:94:a8:bf:2b:0e:a4:96:85:f0:01:74:f1:82:5f:02:34: e3:76:f6:a6:1e:4e:27:14:5f:f2:fd:11:b7:b7:ed:67:c1:76: 23:ca:f8:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchhhRjGvRHBm93kpuQMDHGARYTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTA0MTYwMjU3MDJaFw0yNTA0MTkxMTU4MDJaMDMxMTAvBgNV BAMTKDVBNUVBNDNEREUzMzdDNzVFMDlCMjY3NzIxMUEyNzkxODJDQTkxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1luqRlRkNMCjnAB8lugjZXf0f 7/Bg8/yeFoORhmfpftRhoGoGdHFAyNJrtuDTYF0fC8Ds9HMMSx2krkAtWQ+LHh9W PzrSBQsOQfC9mGX7/jMLJyjLaGs5CD3LVDstxgCbWfvqAp8/LrIDk0jncwIUs/MZ Sj7uEpg48zPZzZlchrxxeDKKeapS5szXTQQpE6IXsPU1UBRMKaNmYJEdvfl11mBe d508533sqcDsnl4DD7V16F+R3G29caBMjigmGUYcYzdCwLQKqywaio/t1DGRWb1a UdLsfuQUEb0h5JjkSsV60EZjqLSg5o05naXBWPKEon7FHi6SOopYri8Y90lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWl6kPd4zfHXgmyZ3IRonkYLKkUYwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHSPNTDLrG4f2KkzJwPbRaBqXsKCpDQLPmd g14fOZOOoKrlHuXRSLSpYyH9XpPA4BdBgdwXY1qlRxobhmA/yem79Afd/x+h/EZh VGOrZtUwPPntpV05Re6foBQh6UBsvdB3XipGZwQyfAB2YSngNNvgrHv6+Dnn/4a+ /PiOhziukxXV+UV+XTPqXK0Dw5WtZha4hyHYYisHyo24TplD8DcJpHqz4Ama9jGp Cp0sVNQxoP1K6K8Xj3PCIvQGUTEfhWWpc9Vp723O7Lt2tJyt2q2G8UhZLgzC++OR lKi/Kw6kloXwAXTxgl8CNON29qYeTicUX/L9Ebe37WfBdiPK+Mo= -----END CERTIFICATE-----Generated at Fri Apr 18 06:52:32 2025 by rpki-client