$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: wSASb8ogsmZV3tMW3/HnM2lcEyLHa3WVs4Zg8uBbEUA= Subject key identifier: 2D:C9:42:F1:53:BC:87:24:EC:36:AF:AF:F0:26:5C:95:85:30:02:8B Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 08C06F949CB36EFEF1810292E53184F6375815F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 0133 Signing time: Fri 18 Apr 2025 03:11:17 +0000 Manifest this update: Fri 18 Apr 2025 03:06:17 +0000 Manifest next update: Mon 21 Apr 2025 05:50:17 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: u880hi+D7DiVMZTtM0R2zluDGsZisp33kG58HiXq4yE=) 2: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: 831SQ6z15dc5YyvEY61DVDqANlWDdpv9brXGcQZPK6I=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: Ra4kBxyKq0eMRR5T+q214TFxoVWgjk/J53dcHzjeFD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 05:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c0:6f:94:9c:b3:6e:fe:f1:81:02:92:e5:31:84:f6:37:58:15:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Apr 18 03:06:17 2025 GMT Not After : Apr 21 05:50:17 2025 GMT Subject: CN=2DC942F153BC8724EC36AFAFF0265C958530028B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:89:72:1a:68:e9:41:39:8c:ce:9a:de:ef: 76:90:7a:26:1d:65:a1:77:a5:d5:f8:5c:ef:96:f3: 94:e5:97:6e:54:b1:36:4e:49:0c:e9:aa:97:d8:1b: 41:80:15:83:1c:43:9a:56:11:31:f5:d6:c1:97:67: 58:4d:d2:cf:f1:b2:88:1b:b3:49:7b:29:5d:15:40: 8b:83:5e:df:f4:64:43:1b:ce:8f:61:dc:4c:57:34: 67:03:4f:99:63:ac:e5:9c:db:c5:9d:73:70:90:d0: 6b:a6:f8:03:40:f0:71:58:f5:48:3f:a9:26:50:d1: 8e:00:87:bc:d2:21:ae:65:8a:23:61:ad:b3:7d:48: 51:f7:11:de:fd:d4:8f:17:8e:4c:e5:d4:ca:8d:55: c4:5e:c4:da:c5:fa:08:f7:b1:67:44:a3:af:82:8f: a9:83:d0:4d:09:21:11:f4:b6:22:81:d4:cb:01:94: 9f:b1:f8:99:b9:43:89:3e:bb:ed:65:81:35:75:90: 23:be:3c:20:39:f0:34:e5:db:cc:46:25:f5:92:b3: 79:02:20:0a:24:7b:dd:0c:34:48:43:7b:bf:3b:32: db:a2:cb:26:50:3b:22:a0:b9:af:ed:a2:e4:51:ff: 01:64:f3:14:3f:a4:df:ff:95:f2:b0:a7:79:3f:57: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C9:42:F1:53:BC:87:24:EC:36:AF:AF:F0:26:5C:95:85:30:02:8B X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:17:23:a7:07:7c:ef:37:15:81:5b:dc:53:70:d9:74:9b:94: b4:cc:87:1c:86:4b:39:77:84:ed:1b:d0:1a:a8:ad:c0:3a:90: 6b:fa:0c:4b:35:1f:fb:72:07:02:b4:43:61:35:a8:19:e3:98: 9a:72:2a:5f:ea:22:81:52:40:fd:c1:3d:c7:75:17:33:fb:2c: e7:7f:16:1c:df:7d:35:f4:e5:f0:6f:f1:7f:8b:1b:b5:14:90: 29:ba:17:bf:ae:db:25:1b:83:b1:4a:cb:47:ba:e9:c8:8e:bc: 7b:b8:45:ac:ab:ba:6e:0d:5d:fd:17:91:34:bc:c3:d7:c3:ac: 27:be:c6:e4:9b:ce:9b:44:6c:36:78:e0:3f:4d:93:08:ec:3d: ef:20:6d:37:31:75:e8:7e:d5:da:cf:a5:c5:7e:97:4c:c9:14: 41:00:ba:51:e6:ce:06:d3:c3:55:33:f3:32:d0:5f:09:c7:10: 12:96:83:ba:52:7f:e2:0b:74:84:c1:94:88:4c:d7:f5:cf:7a: 08:b0:00:63:40:f9:31:53:26:10:d6:10:fa:38:36:99:2d:74: 57:af:09:a5:13:42:fd:10:35:5c:fb:b0:29:3f:bf:f0:95:f0: 61:dc:dd:37:0f:be:45:b3:f3:15:46:c8:da:f0:6d:f5:2c:e0: 86:06:15:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMBvlJyzbv7xgQKS5TGE9jdYFfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTA0MTgwMzA2MTdaFw0yNTA0MjEwNTUwMTdaMDMxMTAvBgNV BAMTKDJEQzk0MkYxNTNCQzg3MjRFQzM2QUZBRkYwMjY1Qzk1ODUzMDAyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRIlyGmjpQTmMzpre73aQeiYd ZaF3pdX4XO+W85Tll25UsTZOSQzpqpfYG0GAFYMcQ5pWETH11sGXZ1hN0s/xsogb s0l7KV0VQIuDXt/0ZEMbzo9h3ExXNGcDT5ljrOWc28Wdc3CQ0Gum+ANA8HFY9Ug/ qSZQ0Y4Ah7zSIa5liiNhrbN9SFH3Ed791I8Xjkzl1MqNVcRexNrF+gj3sWdEo6+C j6mD0E0JIRH0tiKB1MsBlJ+x+Jm5Q4k+u+1lgTV1kCO+PCA58DTl28xGJfWSs3kC IAoke90MNEhDe787MtuiyyZQOyKgua/touRR/wFk8xQ/pN//lfKwp3k/V9dnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULclC8VO8hyTsNq+v8CZclYUwAoswHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIXI6cHfO83FYFb3FNw2XSblLTMhxyGSzl3 hO0b0BqorcA6kGv6DEs1H/tyBwK0Q2E1qBnjmJpyKl/qIoFSQP3BPcd1FzP7LOd/ FhzffTX05fBv8X+LG7UUkCm6F7+u2yUbg7FKy0e66ciOvHu4Rayrum4NXf0XkTS8 w9fDrCe+xuSbzptEbDZ44D9NkwjsPe8gbTcxdeh+1drPpcV+l0zJFEEAulHmzgbT w1Uz8zLQXwnHEBKWg7pSf+ILdITBlIhM1/XPegiwAGNA+TFTJhDWEPo4NpktdFev CaUTQv0QNVz7sCk/v/CV8GHc3TcPvkWz8xVGyNrwbfUs4IYGFcQ= -----END CERTIFICATE-----Generated at Sat Apr 19 12:21:44 2025 by rpki-client