$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json) Hash identifier: UvvyTaL77do9/lXFFgF38R10V9k61O/lCZT/ymNO5Vs= Subject key identifier: 91:F4:41:1F:D7:DC:3D:AD:ED:1E:36:D4:16:C8:1A:8F:8A:A7:8F:D7 Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 119ED7D579AB7F2D90FB039B493FE278E82E8224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft Manifest number: 04C6 Signing time: Sat 19 Apr 2025 20:01:09 +0000 Manifest this update: Sat 19 Apr 2025 19:56:09 +0000 Manifest next update: Wed 23 Apr 2025 03:02:09 +0000 Files and hashes: 1: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: p4fKPzHQiJShsIucJlonSxUHs9qwKk23xukYkP5kspI=) 2: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: LUrbWnhsnE7NpPeckWhjPA7R1fwCnzq5fpnH5qqwIBs=) 3: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: wfDpnHqmUN+eXihzqBSKr7BZajQvwRQ5W0edcS/2fRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 03:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9e:d7:d5:79:ab:7f:2d:90:fb:03:9b:49:3f:e2:78:e8:2e:82:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Apr 19 19:56:09 2025 GMT Not After : Apr 23 03:02:09 2025 GMT Subject: CN=91F4411FD7DC3DADED1E36D416C81A8F8AA78FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:89:44:1d:74:50:03:8f:7b:6b:a8:f0:45:6c: 97:5a:cb:df:ab:c7:30:85:a8:84:df:27:02:05:0e: 97:26:3c:0b:3d:d7:d6:8c:e3:fa:1d:11:21:a5:47: aa:4d:28:bb:20:46:34:29:e8:3f:c7:5d:bd:3f:0e: 99:53:4c:02:b0:44:71:11:99:ba:dd:e5:3f:b3:81: 2f:58:44:84:f7:49:2f:9e:59:f6:73:d3:50:71:88: 11:90:7d:8b:cb:95:83:4c:cd:bc:91:7e:4b:14:13: e8:24:db:ec:c3:2b:0e:d4:c0:09:c4:28:82:d8:3b: 0f:9c:98:fc:e7:38:82:d1:8e:e7:cc:56:64:68:5d: 9f:5d:d3:67:b3:dd:8d:32:ba:18:a7:93:16:45:0d: 60:46:9a:c4:24:af:a7:55:35:44:0b:20:79:15:36: 83:b6:40:4d:26:6b:b0:e1:cb:13:0d:f1:d1:73:24: c1:51:bc:91:ac:36:42:76:77:f8:d6:94:96:1f:ff: 71:27:da:45:c7:20:e8:a7:51:8c:b8:78:f9:26:5a: 21:bc:9b:78:e5:3d:3f:22:01:f6:2b:37:cd:47:e5: a0:c6:e5:8e:f6:bf:48:e4:0a:f3:72:65:00:94:00: c6:ac:fa:e4:c5:6e:c6:b5:a0:cd:9d:96:73:00:4a: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F4:41:1F:D7:DC:3D:AD:ED:1E:36:D4:16:C8:1A:8F:8A:A7:8F:D7 X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:16:3c:47:f9:0a:94:34:21:6c:93:4e:a6:a6:0b:33:17:70: 68:a2:e7:08:76:62:1d:c6:17:42:74:51:53:04:5b:bb:94:d1: f5:ef:29:42:a7:07:23:80:78:3a:9e:fa:bd:9a:f7:f1:c3:64: 20:65:1a:32:be:3b:62:4f:2e:fa:ac:fd:2d:9f:f9:10:9c:04: fe:8d:04:a1:7c:75:c3:85:b7:4e:e6:df:8b:e0:ff:3d:a8:a3: 8c:cb:63:e5:73:16:62:a5:bc:4f:83:cc:60:9a:9e:97:ad:af: b1:66:81:91:62:37:42:49:31:27:0f:84:88:e5:77:5a:81:a7: 6b:01:bb:0d:34:7a:f1:00:d7:44:32:43:3a:70:c2:e4:90:f0: f2:21:d9:eb:92:a2:7c:9d:98:e7:65:50:53:d1:44:3d:b0:93: bf:bc:2d:30:06:4a:9c:36:e9:52:ed:da:68:f7:51:6b:34:20: 92:98:79:82:3f:f5:de:c8:21:35:80:0a:13:3b:dd:fe:47:39: ce:d8:14:44:61:92:3b:9c:91:73:12:60:4b:7d:8e:2f:a7:cb: 87:8b:e4:80:33:70:04:08:d7:be:2b:fc:4d:69:1d:26:c0:a6: 83:a6:fc:15:9c:c8:27:c4:39:ea:82:50:83:43:fc:36:4f:38: a5:a5:4b:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZ7X1Xmrfy2Q+wObST/ieOgugiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNTA0MTkxOTU2MDlaFw0yNTA0MjMwMzAyMDlaMDMxMTAvBgNV BAMTKDkxRjQ0MTFGRDdEQzNEQURFRDFFMzZENDE2QzgxQThGOEFBNzhGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiUQddFADj3trqPBFbJday9+r xzCFqITfJwIFDpcmPAs919aM4/odESGlR6pNKLsgRjQp6D/HXb0/DplTTAKwRHER mbrd5T+zgS9YRIT3SS+eWfZz01BxiBGQfYvLlYNMzbyRfksUE+gk2+zDKw7UwAnE KILYOw+cmPznOILRjufMVmRoXZ9d02ez3Y0yuhinkxZFDWBGmsQkr6dVNUQLIHkV NoO2QE0ma7DhyxMN8dFzJMFRvJGsNkJ2d/jWlJYf/3En2kXHIOinUYy4ePkmWiG8 m3jlPT8iAfYrN81H5aDG5Y72v0jkCvNyZQCUAMas+uTFbsa1oM2dlnMASnXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkfRBH9fcPa3tHjbUFsgaj4qnj9cwHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcWPEf5CpQ0IWyTTqamCzMXcGii5wh2Yh3G F0J0UVMEW7uU0fXvKUKnByOAeDqe+r2a9/HDZCBlGjK+O2JPLvqs/S2f+RCcBP6N BKF8dcOFt07m34vg/z2oo4zLY+VzFmKlvE+DzGCanpetr7FmgZFiN0JJMScPhIjl d1qBp2sBuw00evEA10QyQzpwwuSQ8PIh2euSonydmOdlUFPRRD2wk7+8LTAGSpw2 6VLt2mj3UWs0IJKYeYI/9d7IITWAChM73f5HOc7YFERhkjuckXMSYEt9ji+ny4eL 5IAzcAQI174r/E1pHSbApoOm/BWcyCfEOeqCUIND/DZPOKWlSz4= -----END CERTIFICATE-----Generated at Sun Apr 20 02:44:01 2025 by rpki-client