$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: ACZeAp9hv5U06/GoZoEt5wwmX4sz5PEMrNwZVL6J89s= Subject key identifier: 3D:2C:BB:A8:04:B4:F2:AD:BC:94:82:6C:35:8F:1B:37:F0:1D:08:61 Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 405EC1C339E67B3E724CE419FA1B312700418944 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 0485 Signing time: Sat 19 Apr 2025 20:41:49 +0000 Manifest this update: Sat 19 Apr 2025 20:36:49 +0000 Manifest next update: Tue 22 Apr 2025 21:17:49 +0000 Files and hashes: 1: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: 3zCQA43AUm8ux/91Q+xd8hgr0Bz+/1Ii8TSH/kAB8xY=) 2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: W6WFo2Hu+QfbijXkpTTas8+VNp9aDLxId/mc15FAtA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 21:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5e:c1:c3:39:e6:7b:3e:72:4c:e4:19:fa:1b:31:27:00:41:89:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Apr 19 20:36:49 2025 GMT Not After : Apr 22 21:17:49 2025 GMT Subject: CN=3D2CBBA804B4F2ADBC94826C358F1B37F01D0861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:c4:34:95:25:5c:ea:0d:09:24:bb:dc:39: 6f:0f:1b:bc:2f:ca:b9:d6:33:3b:64:4b:38:61:db: 79:46:b6:87:f1:fe:7f:02:08:9c:1b:a5:aa:59:4f: ad:05:f6:20:1d:d6:f1:84:be:df:cd:00:cf:09:fc: eb:4d:6c:7e:ee:f4:5f:c7:8a:81:5c:93:6a:ac:f8: 71:b6:9b:17:90:07:e5:21:1e:c6:99:be:1f:05:90: 4b:eb:22:db:3e:32:4e:71:95:10:78:d5:0c:c1:6d: dd:14:54:d6:9f:ee:e0:dd:7c:20:c2:ca:19:fb:45: 97:03:56:3a:7f:86:a9:22:24:a1:9b:d5:29:39:45: 9d:8b:2a:af:6f:54:37:e1:57:47:0a:32:29:a9:00: 21:ae:f2:c2:13:b6:dc:a2:5c:eb:cb:93:ba:92:a6: b9:eb:23:f6:29:b2:39:bc:0a:e1:fc:b7:dc:02:6e: e0:a1:6c:9f:64:9e:5f:da:08:0f:6b:03:41:70:7a: 5c:ea:56:01:ef:55:fd:30:7f:bd:48:ad:fb:40:e5: 45:70:89:3b:80:a0:be:a6:40:ce:37:82:52:46:35: f6:d1:b1:fd:a6:fb:8f:46:f5:8c:f7:cc:cb:ac:90: 11:ae:03:9e:d7:3b:72:b0:f9:a8:24:63:85:fc:ef: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2C:BB:A8:04:B4:F2:AD:BC:94:82:6C:35:8F:1B:37:F0:1D:08:61 X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:8a:77:5a:08:76:f7:0f:78:2d:80:53:bb:48:b3:df:9d: de:aa:ae:6e:bb:21:44:3f:6e:11:d0:17:3b:b5:41:4b:92:a6: b2:34:55:35:f3:d8:d9:c1:a6:78:a8:78:38:d4:aa:b7:b2:f2: 12:82:8e:79:17:83:90:04:7b:c9:1e:4e:73:0d:7e:61:9d:e0: 5f:7b:c6:47:28:c7:3e:b7:05:94:3a:48:f9:f9:2d:35:f6:23: 90:a4:5c:a9:fc:1d:c6:01:ad:77:e0:98:06:04:75:e1:d2:75: 7f:87:f8:86:39:ac:b8:31:63:36:b4:cf:f5:9a:70:87:84:5c: 7d:3b:09:9a:dc:d7:ec:1c:34:55:c6:dc:35:99:55:1f:55:41: 1b:ac:40:89:b3:6d:f1:61:a0:3a:44:3d:24:4b:ad:84:6e:fe: 55:9b:99:0e:dc:22:b1:96:57:77:22:5d:12:37:fc:99:6f:fb: 01:1b:0b:f9:c3:f1:7f:dd:0a:07:76:08:3b:26:26:07:63:30: be:b0:5f:49:12:0b:ab:e1:48:33:0b:53:a1:5a:30:48:df:49: a7:6f:8f:b0:d7:65:da:1f:31:2a:e2:ac:a6:92:e7:fb:78:76: 89:f4:c3:38:73:43:c0:c9:55:1e:1b:0d:1d:9e:c0:7c:dd:c9: 91:68:c4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQF7Bwznmez5yTOQZ+hsxJwBBiUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNTA0MTkyMDM2NDlaFw0yNTA0MjIyMTE3NDlaMDMxMTAvBgNV BAMTKDNEMkNCQkE4MDRCNEYyQURCQzk0ODI2QzM1OEYxQjM3RjAxRDA4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6sQ0lSVc6g0JJLvcOW8PG7wv yrnWMztkSzhh23lGtofx/n8CCJwbpapZT60F9iAd1vGEvt/NAM8J/OtNbH7u9F/H ioFck2qs+HG2mxeQB+UhHsaZvh8FkEvrIts+Mk5xlRB41QzBbd0UVNaf7uDdfCDC yhn7RZcDVjp/hqkiJKGb1Sk5RZ2LKq9vVDfhV0cKMimpACGu8sITttyiXOvLk7qS prnrI/Ypsjm8CuH8t9wCbuChbJ9knl/aCA9rA0FwelzqVgHvVf0wf71IrftA5UVw iTuAoL6mQM43glJGNfbRsf2m+49G9Yz3zMuskBGuA57XO3Kw+agkY4X877CZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSy7qAS08q28lIJsNY8bN/AdCGEwHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO4indaCHb3D3gtgFO7SLPfnd6qrm67IUQ/ bhHQFzu1QUuSprI0VTXz2NnBpnioeDjUqrey8hKCjnkXg5AEe8keTnMNfmGd4F97 xkcoxz63BZQ6SPn5LTX2I5CkXKn8HcYBrXfgmAYEdeHSdX+H+IY5rLgxYza0z/Wa cIeEXH07CZrc1+wcNFXG3DWZVR9VQRusQImzbfFhoDpEPSRLrYRu/lWbmQ7cIrGW V3ciXRI3/Jlv+wEbC/nD8X/dCgd2CDsmJgdjML6wX0kSC6vhSDMLU6FaMEjfSadv j7DXZdofMSrirKaS5/t4don0wzhzQ8DJVR4bDR2ewHzdyZFoxJ4= -----END CERTIFICATE-----Generated at Sun Apr 20 02:13:00 2025 by rpki-client