$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: k0SxZDbKZ4gUmabHf+7Qe39cpuAJsPc1OTvxkatS2o4= Subject key identifier: 73:D4:01:7A:C6:28:5E:1E:4B:1C:16:6C:EE:0A:00:63:75:F6:1F:F8 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 5785726B98E172A8BB0BD91AD6BA2DB655712527 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 01A6 Signing time: Fri 04 Apr 2025 09:21:06 +0000 Manifest this update: Fri 04 Apr 2025 09:16:06 +0000 Manifest next update: Mon 07 Apr 2025 20:08:06 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: T08XVM5zEDDkDXAFG5DIsglBKPSsZD2z2TPDuIW6IN4=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: yZTOcXBkGCXgKprLwFpmf211S49vRO43pg0K+2x6c9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:85:72:6b:98:e1:72:a8:bb:0b:d9:1a:d6:ba:2d:b6:55:71:25:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Apr 4 09:16:06 2025 GMT Not After : Apr 7 20:08:06 2025 GMT Subject: CN=73D4017AC6285E1E4B1C166CEE0A006375F61FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:33:98:b0:d3:c8:ef:27:37:31:93:0d:34: e8:04:87:30:4a:19:ff:e3:32:0d:5b:5c:a5:9f:ad: 67:19:8c:29:fc:27:3f:57:e3:b9:b4:14:20:43:e6: db:a9:3c:6e:4e:65:11:1c:2c:eb:9c:55:c6:af:37: 6d:d7:48:4b:71:e6:36:7e:e2:44:ce:00:d7:67:d3: a1:2e:3b:e4:88:2c:8f:2d:a1:da:9b:04:79:e4:00: 27:86:3d:3c:8a:f7:22:50:d5:ae:aa:0e:f4:73:ec: 50:01:6a:63:cc:2d:5e:66:30:ce:dc:c0:e8:5a:7b: 6f:e8:fb:b0:85:9b:b1:fc:d8:54:3b:5b:3b:a9:2e: cb:fd:05:d5:4a:4f:08:34:27:26:8d:c0:a0:e9:d1: b8:aa:7f:60:8d:29:35:43:8f:1c:6d:c2:ee:95:1a: 10:9c:91:5d:90:46:8c:36:b1:02:84:37:30:9d:a9: f5:52:db:78:c3:77:92:ec:97:b9:72:b7:57:3a:25: f0:f9:86:59:85:9a:bc:b8:9c:57:27:60:60:ef:ca: f8:2e:76:00:d0:f3:76:3c:b9:87:97:48:de:a0:5c: 1c:55:6e:6d:79:5f:43:87:55:a9:cc:40:8b:21:58: 22:0b:7e:60:0f:60:37:1f:24:1b:92:d5:c1:bb:aa: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D4:01:7A:C6:28:5E:1E:4B:1C:16:6C:EE:0A:00:63:75:F6:1F:F8 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:db:13:c2:d7:c5:f4:87:ac:4c:51:38:df:f1:95:d6:bf:98: 57:25:83:0c:7e:8d:77:2c:6c:c1:40:db:6a:32:97:3e:32:50: 11:98:64:60:a2:8e:4f:48:84:81:4c:01:b2:9a:49:58:d9:83: 3c:36:05:3f:96:a4:5d:86:9a:c2:c2:ad:1d:0d:64:b2:c2:bf: d9:db:e6:9b:40:47:2f:17:9d:48:20:6f:11:80:bd:3f:cc:a8: d2:55:73:44:63:9f:22:ed:38:c1:c5:b6:0c:ef:ae:f5:10:88: 6b:48:99:c6:63:c0:7b:67:ac:16:c1:4e:26:e6:65:97:46:ab: 0d:2a:d2:27:8d:ab:f0:3c:39:9d:01:b4:ca:cb:5e:b4:9b:5c: 4b:8a:bb:60:88:f3:62:b6:f8:06:fd:58:4c:f7:66:9f:bf:97: 02:c5:05:66:e7:66:d6:d9:ea:01:a7:81:3c:b6:62:7f:ec:e7: 40:d9:71:79:eb:6b:f3:cc:eb:3b:5f:52:4a:dc:25:8d:85:36: 8a:e0:79:2c:4d:d4:00:a3:54:f4:e0:a4:78:c4:49:80:53:b5: 6a:bc:49:7a:a5:7d:84:e6:5c:4f:80:79:ae:35:10:91:7b:cb: a4:13:6e:c8:43:55:74:7d:ed:e2:66:f0:40:51:e0:03:23:6b: 66:e2:09:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4Vya5jhcqi7C9ka1rottlVxJScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTA0MDQwOTE2MDZaFw0yNTA0MDcyMDA4MDZaMDMxMTAvBgNV BAMTKDczRDQwMTdBQzYyODVFMUU0QjFDMTY2Q0VFMEEwMDYzNzVGNjFGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGjOYsNPI7yc3MZMNNOgEhzBK Gf/jMg1bXKWfrWcZjCn8Jz9X47m0FCBD5tupPG5OZREcLOucVcavN23XSEtx5jZ+ 4kTOANdn06EuO+SILI8todqbBHnkACeGPTyK9yJQ1a6qDvRz7FABamPMLV5mMM7c wOhae2/o+7CFm7H82FQ7WzupLsv9BdVKTwg0JyaNwKDp0biqf2CNKTVDjxxtwu6V GhCckV2QRow2sQKENzCdqfVS23jDd5Lsl7lyt1c6JfD5hlmFmry4nFcnYGDvyvgu dgDQ83Y8uYeXSN6gXBxVbm15X0OHVanMQIshWCILfmAPYDcfJBuS1cG7qhDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc9QBesYoXh5LHBZs7goAY3X2H/gwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDbE8LXxfSHrExRON/xlda/mFclgwx+jXcs bMFA22oylz4yUBGYZGCijk9IhIFMAbKaSVjZgzw2BT+WpF2GmsLCrR0NZLLCv9nb 5ptARy8XnUggbxGAvT/MqNJVc0RjnyLtOMHFtgzvrvUQiGtImcZjwHtnrBbBTibm ZZdGqw0q0ieNq/A8OZ0BtMrLXrSbXEuKu2CI82K2+Ab9WEz3Zp+/lwLFBWbnZtbZ 6gGngTy2Yn/s50DZcXnra/PM6ztfUkrcJY2FNorgeSxN1ACjVPTgpHjESYBTtWq8 SXqlfYTmXE+Aea41EJF7y6QTbshDVXR97eJm8EBR4AMja2biCSI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:47 2025 by rpki-client