$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft (raw, json) Hash identifier: oAksYoPvqbBCzhV1E3YRlM2wq2KL9FZJWftNNyGYVgI= Subject key identifier: 03:C6:56:56:04:A9:8B:2B:86:45:6A:1F:79:A2:48:09:72:3C:9D:32 Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Certificate serial: 3B271EF5079B23B64406841406789A6FFCDE90C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft Manifest number: 04D0 Signing time: Sat 19 Apr 2025 17:30:00 +0000 Manifest this update: Sat 19 Apr 2025 17:25:00 +0000 Manifest next update: Tue 22 Apr 2025 18:09:00 +0000 Files and hashes: 1: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl (hash: WZa1mC7tpXxSNrxPrpR19I7Adnec1RIhEz2zmEd/LgI=) 2: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: s3woNilAqQ5e2dgXjfA4LkNTSDClHTfmkA54qmgHa2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 18:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:27:1e:f5:07:9b:23:b6:44:06:84:14:06:78:9a:6f:fc:de:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Validity Not Before: Apr 19 17:25:00 2025 GMT Not After : Apr 22 18:09:00 2025 GMT Subject: CN=03C6565604A98B2B86456A1F79A24809723C9D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:45:d8:c7:8f:d3:19:d0:5a:06:eb:f0:d1: bd:30:5c:d6:69:a6:c5:de:76:ea:5c:ab:c2:69:fb: 9e:46:dd:a7:32:8a:26:8a:46:7c:67:c8:82:7e:99: 62:c4:f5:db:c8:7f:7e:bc:c6:46:24:53:cd:56:c0: 5a:50:40:88:c2:c2:ed:bd:22:5e:dd:15:ec:f7:93: 00:a4:7e:48:9b:a6:06:ab:68:fb:da:ea:ec:54:3d: d7:8f:5b:ea:70:2b:00:bc:e3:cc:d9:06:6b:e0:97: 44:32:69:d1:41:f0:46:e3:83:94:b0:9b:3f:3e:d0: 26:f8:65:2e:b7:36:33:d9:f2:ee:3d:9d:fa:7a:d5: fc:ff:9d:69:aa:0f:93:9c:25:f8:d9:c5:38:dc:7f: a8:bd:63:1a:41:4c:53:88:3b:48:05:1a:dc:d2:7a: 56:53:42:44:11:b8:ab:cf:37:ff:69:b0:fa:35:14: 3d:4a:bc:f0:7f:de:56:79:a8:a0:4b:56:62:1d:81: d4:83:91:47:e1:b8:b2:4e:d8:82:97:9c:48:05:62: ae:d9:3e:d0:3b:cf:0a:0d:71:53:76:87:4d:79:5e: e5:03:fb:be:ba:87:01:d5:de:ba:c1:05:e2:64:0b: d1:76:c4:c7:5d:09:7a:2a:57:a7:98:bc:82:cb:89: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:56:56:04:A9:8B:2B:86:45:6A:1F:79:A2:48:09:72:3C:9D:32 X509v3 Authority Key Identifier: keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:09:44:ba:5d:f8:2d:dc:b6:c2:9d:b0:be:48:2c:75:e2:c0: f9:d9:52:c4:93:12:a0:c4:75:97:5f:00:da:0e:d2:3d:be:b5: 42:3d:4e:b5:e1:38:3d:cb:49:f7:d0:cf:ac:07:87:2e:c5:cc: dd:a8:10:66:f5:6a:e9:02:72:03:3b:ce:7e:81:f2:0a:5b:80: 07:57:cf:49:08:e0:7c:bb:6c:e8:23:80:9e:a8:be:95:e5:fc: 18:d9:6c:ed:ca:94:a6:f4:1f:00:3f:41:6c:de:85:65:00:46: 1f:2a:c2:2f:8c:3e:1d:74:8c:98:90:ee:02:d8:f2:f5:63:bc: d7:26:a8:fb:e6:7a:41:b0:74:2d:3a:5f:68:ae:08:64:03:f7: 48:45:8a:c3:3c:7c:bb:15:c9:a8:7c:f0:cf:a6:1b:3c:c5:10: 60:de:5a:a2:5a:27:b3:f2:a3:f6:0a:f2:36:ad:a8:07:ab:a3: a5:ef:8a:fe:30:56:1c:4d:83:86:23:38:5e:e7:48:ac:40:b5: cb:47:62:53:f0:01:8a:64:40:87:bb:12:76:91:87:ff:c2:11: 28:46:ad:6f:b9:e4:d4:2a:5d:57:4d:df:bf:03:64:33:f1:15: a2:36:27:16:a2:fa:b5:be:f0:ec:ed:05:93:5e:9f:bf:2b:d1: 10:9e:07:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyce9QebI7ZEBoQUBniab/zekMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQy NkU4QkE5ODAeFw0yNTA0MTkxNzI1MDBaFw0yNTA0MjIxODA5MDBaMDMxMTAvBgNV BAMTKDAzQzY1NjU2MDRBOThCMkI4NjQ1NkExRjc5QTI0ODA5NzIzQzlEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OEXYx4/TGdBaBuvw0b0wXNZp psXedupcq8Jp+55G3acyiiaKRnxnyIJ+mWLE9dvIf368xkYkU81WwFpQQIjCwu29 Il7dFez3kwCkfkibpgaraPva6uxUPdePW+pwKwC848zZBmvgl0QyadFB8Ebjg5Sw mz8+0Cb4ZS63NjPZ8u49nfp61fz/nWmqD5OcJfjZxTjcf6i9YxpBTFOIO0gFGtzS elZTQkQRuKvPN/9psPo1FD1KvPB/3lZ5qKBLVmIdgdSDkUfhuLJO2IKXnEgFYq7Z PtA7zwoNcVN2h015XuUD+766hwHV3rrBBeJkC9F2xMddCXoqV6eYvILLidiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8ZWVgSpiyuGRWofeaJICXI8nTIwHwYDVR0j BBgwFoAU9UNirStrGRy303tU3NJGhCboupgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMC9GNTQzNjJBRDJC NkIxOTFDQjdEMzdCNTREQ0QyNDY4NDI2RThCQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQyNkU4 QkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2 ODQyNkU4QkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcJRLpd+C3ctsKdsL5ILHXiwPnZUsSTEqDE dZdfANoO0j2+tUI9TrXhOD3LSffQz6wHhy7FzN2oEGb1aukCcgM7zn6B8gpbgAdX z0kI4Hy7bOgjgJ6ovpXl/BjZbO3KlKb0HwA/QWzehWUARh8qwi+MPh10jJiQ7gLY 8vVjvNcmqPvmekGwdC06X2iuCGQD90hFisM8fLsVyah88M+mGzzFEGDeWqJaJ7Py o/YK8jatqAero6Xviv4wVhxNg4YjOF7nSKxAtctHYlPwAYpkQIe7EnaRh//CEShG rW+55NQqXVdN378DZDPxFaI2Jxai+rW+8OztBZNen78r0RCeB0w= -----END CERTIFICATE-----Generated at Sun Apr 20 04:17:12 2025 by rpki-client