$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: KnuQuak4dI7jaauOHHZiwpjsvIoBazDoaaKwolUJy2s= Subject key identifier: ED:D0:6D:30:9D:AC:61:86:BE:E5:A0:7E:FA:EF:A4:53:77:52:F5:87 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 0F9412213B59A44823BE635BDF9339B9B6AD9EED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 02C3 Signing time: Wed 16 Apr 2025 20:10:53 +0000 Manifest this update: Wed 16 Apr 2025 20:05:53 +0000 Manifest next update: Sun 20 Apr 2025 00:41:53 +0000 Files and hashes: 1: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: WVLjePagHDDpdAANZToddqfBX/M1VG2Xw1A7L8qTk14=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: CnXMmVk77qU3n1s+zcvccpt4f5iYEiQUQVFxKO62rc8=) 3: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: Zt0zsxB+w7cKXBve2x/yKfK+K8HKfAC08Q972W/V9wQ=) 4: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: iQrfW4vm6eczOWBsSobvUfreWvjyzuZNC1OGl7c8Sx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:94:12:21:3b:59:a4:48:23:be:63:5b:df:93:39:b9:b6:ad:9e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Apr 16 20:05:53 2025 GMT Not After : Apr 20 00:41:53 2025 GMT Subject: CN=EDD06D309DAC6186BEE5A07EFAEFA4537752F587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:94:df:da:38:f0:64:3a:d8:bd:07:12:71: 3a:4e:34:0f:ee:85:2b:a3:ea:56:a3:aa:bf:91:53: 19:d6:d4:1f:25:b9:8c:42:2d:12:6c:59:fa:67:dc: 3d:49:42:fe:0c:9c:ec:13:c6:1f:ff:d0:74:39:8d: bf:b2:ea:8b:b9:70:37:cf:c0:df:7f:d3:34:2d:df: 46:35:6c:60:52:6f:f0:ee:0a:e3:0f:eb:e1:72:3e: ce:dd:78:9c:b0:2c:1e:92:30:83:62:87:27:22:c2: d9:c0:aa:d0:fa:06:31:8a:bc:68:23:c9:68:ff:81: db:13:81:2e:fd:00:42:09:fa:bd:27:8e:07:c3:2e: 9e:db:1d:3b:a3:ba:7a:ee:83:11:91:cb:99:c5:6c: 5e:a8:b2:64:cb:58:27:40:db:a3:72:8b:a4:96:9d: a2:53:8c:68:8b:03:d5:04:2f:ba:a9:bc:91:77:bb: 67:cf:85:ae:86:ec:38:81:7d:b5:49:1a:5c:35:d2: d9:20:87:66:4a:8e:b1:69:b4:cd:98:9f:85:f8:c7: 46:18:46:41:c2:8b:7a:95:63:ae:68:1f:35:2d:a5: 1f:e2:7d:ff:1d:ef:bc:a4:48:5c:04:65:13:d1:07: 3f:5f:4c:03:41:d7:12:0b:65:cc:f0:9d:bc:b4:46: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D0:6D:30:9D:AC:61:86:BE:E5:A0:7E:FA:EF:A4:53:77:52:F5:87 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7e:6c:96:0f:2c:45:fe:5d:43:4f:95:33:e1:8d:8d:86:a4: 80:48:10:d3:99:75:35:d1:1f:af:7c:e9:53:96:5a:b4:ad:54: 11:76:fd:30:55:c4:ea:3e:23:65:02:d3:ea:ae:82:2b:89:2d: 88:1b:b2:a3:b7:9e:72:6c:0f:76:b3:ed:bd:80:59:db:64:06: 6f:77:8d:01:45:19:e2:5f:10:b9:e0:8a:34:79:e3:e9:f8:12: 22:0c:18:96:d7:7f:dc:81:d9:38:b8:d3:b7:06:d3:75:6a:8c: a9:95:fa:0a:4c:95:90:1c:0f:c5:d2:ed:cf:1c:61:56:ee:a2: 9e:b1:6a:6c:63:ed:4d:5e:09:ab:7f:b9:87:57:34:21:9e:8b: 2e:5e:75:84:98:b7:ee:83:47:17:25:f1:26:54:97:f3:21:75: 28:bd:54:1c:55:40:d7:6a:81:d6:83:63:8a:09:7c:96:86:0d: 24:f9:60:a0:19:63:a4:f2:cf:1c:6c:85:da:12:1c:e3:56:f0: c0:7d:ec:b6:c2:42:34:39:bd:64:ce:36:43:c5:f1:36:ba:8e: d2:83:70:b4:17:70:a0:f6:dd:dd:7e:f4:f0:bb:d3:83:d1:51: cc:54:a9:6c:8f:a2:ef:91:5b:03:a6:86:82:79:f8:7d:3e:74: 3c:9b:b9:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD5QSITtZpEgjvmNb35M5ubatnu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTA0MTYyMDA1NTNaFw0yNTA0MjAwMDQxNTNaMDMxMTAvBgNV BAMTKEVERDA2RDMwOURBQzYxODZCRUU1QTA3RUZBRUZBNDUzNzc1MkY1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tZTf2jjwZDrYvQcScTpONA/u hSuj6lajqr+RUxnW1B8luYxCLRJsWfpn3D1JQv4MnOwTxh//0HQ5jb+y6ou5cDfP wN9/0zQt30Y1bGBSb/DuCuMP6+FyPs7deJywLB6SMINihyciwtnAqtD6BjGKvGgj yWj/gdsTgS79AEIJ+r0njgfDLp7bHTujunrugxGRy5nFbF6osmTLWCdA26Nyi6SW naJTjGiLA9UEL7qpvJF3u2fPha6G7DiBfbVJGlw10tkgh2ZKjrFptM2Yn4X4x0YY RkHCi3qVY65oHzUtpR/iff8d77ykSFwEZRPRBz9fTANB1xILZczwnby0RgEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7dBtMJ2sYYa+5aB++u+kU3dS9YcwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp+bJYPLEX+XUNPlTPhjY2GpIBIENOZdTXR H6986VOWWrStVBF2/TBVxOo+I2UC0+qugiuJLYgbsqO3nnJsD3az7b2AWdtkBm93 jQFFGeJfELngijR54+n4EiIMGJbXf9yB2Ti407cG03VqjKmV+gpMlZAcD8XS7c8c YVbuop6xamxj7U1eCat/uYdXNCGeiy5edYSYt+6DRxcl8SZUl/MhdSi9VBxVQNdq gdaDY4oJfJaGDST5YKAZY6TyzxxshdoSHONW8MB97LbCQjQ5vWTONkPF8Ta6jtKD cLQXcKD23d1+9PC704PRUcxUqWyPou+RWwOmhoJ5+H0+dDybuRk= -----END CERTIFICATE-----Generated at Fri Apr 18 00:42:47 2025 by rpki-client