$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: SyqqMpmnsCnoLdfzTNoYC252i3jiYjpYQhM1xL6iITY= Subject key identifier: B1:BC:31:14:CA:7D:DE:68:33:E9:A7:64:51:82:F3:9C:19:1D:4E:CD Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 178F1160EA34DA71C902B4126452E7EC2CD0D9B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 0488 Signing time: Sat 05 Apr 2025 18:41:12 +0000 Manifest this update: Sat 05 Apr 2025 18:36:12 +0000 Manifest next update: Wed 09 Apr 2025 00:58:12 +0000 Files and hashes: 1: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: c3P2M0VXOcWc/kMqDxRrBxNZgSYKuvObUT8WGdbC1Pw=) 2: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: WZ4shpL3C8pc0Q1RN+DNNZqdwp4SqV96kPD82gjGY24=) 3: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: Qnt0YLYYkJsNy3hh74UwUESksUr+Z4SihbJC1Lwzqlo=) 4: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 77mfnCgSnucw48UKGT/imJpoab+aR/Q7MW67xLB0DdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8f:11:60:ea:34:da:71:c9:02:b4:12:64:52:e7:ec:2c:d0:d9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Apr 5 18:36:12 2025 GMT Not After : Apr 9 00:58:12 2025 GMT Subject: CN=B1BC3114CA7DDE6833E9A7645182F39C191D4ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:d3:bf:f3:ed:67:20:e0:6f:d4:db:86:9a: 91:1b:df:02:35:60:ca:22:c4:69:c0:83:34:d7:b9: 2f:30:1a:b1:a5:33:4e:3c:24:fc:ce:a7:aa:d2:7c: 59:fd:0b:68:dd:32:14:d4:89:e3:4f:9d:71:6c:60: 3d:96:40:a6:af:8d:ea:87:c6:45:9a:fd:d3:2d:18: 4d:eb:f1:70:35:01:33:c3:e3:58:a6:d0:05:53:46: 74:56:68:08:41:55:42:7b:aa:0e:f9:9b:ff:6e:85: 72:e5:45:bc:e0:d6:7d:48:0c:f3:36:1a:9c:fd:3a: 4b:3f:fc:a8:cc:d3:f8:91:84:ff:3d:9b:ab:e8:94: 83:30:c1:84:7b:3a:a2:e7:99:cb:cb:49:14:95:2e: 55:5f:52:96:00:4c:1a:1b:49:d9:23:e5:5e:4d:be: 68:78:45:1b:44:e1:5d:ae:fa:ca:71:08:50:00:53: a8:4b:83:36:c9:57:0c:40:06:90:c6:3c:84:cd:cf: 44:39:ba:dc:02:c8:c5:55:31:f5:e6:7d:7e:b0:c2: 24:d8:a3:33:0f:cd:41:ba:5e:bf:db:4a:50:2e:78: c0:7d:c1:ab:eb:0b:0b:92:dd:e0:ef:95:a5:eb:50: 87:a5:7a:f4:75:97:89:88:00:85:95:ca:90:3a:16: 2a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BC:31:14:CA:7D:DE:68:33:E9:A7:64:51:82:F3:9C:19:1D:4E:CD X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6a:84:a1:30:bc:47:77:2d:40:39:9e:9d:6a:30:d4:61:a3: f9:63:51:7d:89:fe:52:05:04:55:25:a1:4f:9c:53:06:e2:2c: 08:32:68:d2:1a:66:bc:a4:e7:77:79:79:be:a0:4e:b5:01:61: c5:16:b7:ef:59:34:9b:c4:93:d8:cb:3f:07:cd:27:09:86:47: 9f:b3:ac:09:d9:a5:aa:7b:27:70:b5:2e:bf:0b:ca:4a:22:d4: e5:fb:8e:12:56:ed:ae:ff:01:b4:5b:57:5c:27:f8:c7:b7:e1: 11:7f:a6:15:2f:e3:fe:73:f3:2a:6f:47:25:94:0d:98:b5:4c: 76:d8:07:9e:c4:88:53:28:e5:ce:77:99:e3:f0:83:17:3b:ae: 4a:5d:85:35:9d:67:6c:bd:5c:38:f8:b2:19:62:02:fc:a6:39: 1f:c9:50:ff:07:99:6f:55:27:30:55:7d:13:fe:40:bd:1a:9b: 96:53:6f:c4:71:9b:d7:6e:58:07:52:59:9d:f9:91:1c:05:ee: 47:8b:29:9f:3a:86:c0:93:4f:f1:08:d4:3e:97:3f:89:af:3c: b8:55:1f:db:45:cd:91:d5:5a:ce:28:8b:b6:97:91:4e:07:b9: d3:92:f6:81:2c:e0:ef:d6:46:b9:01:8c:c9:83:2e:59:5d:05: dc:f6:f0:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF48RYOo02nHJArQSZFLn7CzQ2bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA0MDUxODM2MTJaFw0yNTA0MDkwMDU4MTJaMDMxMTAvBgNV BAMTKEIxQkMzMTE0Q0E3RERFNjgzM0U5QTc2NDUxODJGMzlDMTkxRDRFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCdO/8+1nIOBv1NuGmpEb3wI1 YMoixGnAgzTXuS8wGrGlM048JPzOp6rSfFn9C2jdMhTUieNPnXFsYD2WQKavjeqH xkWa/dMtGE3r8XA1ATPD41im0AVTRnRWaAhBVUJ7qg75m/9uhXLlRbzg1n1IDPM2 Gpz9Oks//KjM0/iRhP89m6volIMwwYR7OqLnmcvLSRSVLlVfUpYATBobSdkj5V5N vmh4RRtE4V2u+spxCFAAU6hLgzbJVwxABpDGPITNz0Q5utwCyMVVMfXmfX6wwiTY ozMPzUG6Xr/bSlAueMB9wavrCwuS3eDvlaXrUIelevR1l4mIAIWVypA6FioxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsbwxFMp93mgz6adkUYLznBkdTs0wHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZqhKEwvEd3LUA5np1qMNRho/ljUX2J/lIF BFUloU+cUwbiLAgyaNIaZryk53d5eb6gTrUBYcUWt+9ZNJvEk9jLPwfNJwmGR5+z rAnZpap7J3C1Lr8Lykoi1OX7jhJW7a7/AbRbV1wn+Me34RF/phUv4/5z8ypvRyWU DZi1THbYB57EiFMo5c53mePwgxc7rkpdhTWdZ2y9XDj4shliAvymOR/JUP8HmW9V JzBVfRP+QL0am5ZTb8Rxm9duWAdSWZ35kRwF7keLKZ86hsCTT/EI1D6XP4mvPLhV H9tFzZHVWs4oi7aXkU4HudOS9oEs4O/WRrkBjMmDLlldBdz28DY= -----END CERTIFICATE-----Generated at Sun Apr 6 01:12:22 2025 by rpki-client