$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: FXBpZEznD0QiHMXiLBebq/Dw3xBqcPLqMa+RWftG6mA= Subject key identifier: 54:BA:F9:23:5A:F7:6B:3B:50:BE:97:B6:71:BF:A9:40:59:BC:86:9C Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 4FF1FD7FB5CDBAAFE7432103FAF9026FCD05B559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 02C5 Signing time: Fri 04 Apr 2025 01:20:53 +0000 Manifest this update: Fri 04 Apr 2025 01:15:53 +0000 Manifest next update: Mon 07 Apr 2025 04:25:53 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: BuxdkFBPTtaoeEC6BEyRF8ZCNI1j66gTe8/4ZGM4EF0=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: +ESPL9RiV1kXE5HVVZEJFevVqgb2FPlNrLYphfud9Dg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f1:fd:7f:b5:cd:ba:af:e7:43:21:03:fa:f9:02:6f:cd:05:b5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Apr 4 01:15:53 2025 GMT Not After : Apr 7 04:25:53 2025 GMT Subject: CN=54BAF9235AF76B3B50BE97B671BFA94059BC869C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:72:0e:ad:c7:61:1c:1b:fa:50:42:5c:70: b2:c6:80:8e:2b:49:bc:0f:e7:75:3c:ec:d2:96:66: 0b:ef:7d:ff:28:12:e2:86:2f:a5:06:96:9c:cd:bd: 10:6e:a0:0c:25:6e:06:f8:40:77:9e:46:35:d4:83: 09:36:14:c7:99:ab:b6:e7:a2:da:02:ea:19:48:3b: c1:74:28:70:46:05:55:4b:c7:63:a0:49:f2:73:55: 5b:a7:2a:9e:04:72:b9:0b:e7:a8:56:95:cf:6f:6c: 1f:97:43:38:a9:39:5a:be:5d:94:93:b7:c1:c3:48: 34:2f:79:79:ad:1a:cf:61:23:97:a7:8f:a1:f6:b6: 0d:7a:90:48:83:53:ad:b0:1f:8c:38:a1:fe:63:a6: 0f:ce:73:2c:22:0c:9b:e7:b8:1e:30:68:c1:b6:1b: 37:0f:47:5b:91:de:8c:72:7a:56:26:97:8c:df:0a: 2c:20:1d:9b:9f:df:0c:1c:39:53:db:d8:5d:30:7a: aa:b2:3b:77:5a:98:5a:69:97:30:5b:31:66:f8:a6: f0:04:50:8e:e9:f2:ff:4a:61:86:97:aa:a4:b7:7e: 83:8c:81:90:9e:4e:e2:fa:df:53:43:ca:a1:b8:ce: be:c7:f2:b7:d0:86:23:0c:2d:70:cf:77:15:b8:e8: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BA:F9:23:5A:F7:6B:3B:50:BE:97:B6:71:BF:A9:40:59:BC:86:9C X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d7:eb:f3:8f:d2:e7:1c:5b:04:37:e4:76:32:95:5b:1e:35: 39:a9:0d:44:d4:c0:f9:ae:52:51:b8:80:d5:94:31:f7:f0:c2: cc:f1:79:15:7f:1d:23:2d:13:6b:e6:04:d9:1b:86:0d:61:32: c9:4e:c2:e6:fc:dd:18:24:67:46:5e:d4:cb:55:1c:d9:25:70: 0b:8d:93:e2:9f:30:e7:38:4d:c1:72:9c:d7:f4:44:20:dc:67: 5d:8c:39:d8:a9:f7:be:fa:89:db:7a:20:0e:04:45:1d:07:10: 71:f9:ba:fd:c2:98:f1:64:e2:ee:7f:76:2b:76:65:e9:0e:ef: 42:a5:3b:e2:52:61:59:0c:ce:a6:7b:a7:11:c9:8c:ae:63:58: 22:f7:92:e8:81:be:0b:a3:ed:f6:aa:48:4f:28:fa:56:04:52: 94:c3:d3:05:a2:a5:b0:18:aa:e4:29:8f:7a:f7:e7:81:f5:15: 30:dd:71:b0:c2:56:f8:59:91:31:7d:19:0d:45:bf:c7:05:f5: c8:7e:19:a7:78:ef:86:5d:e7:ab:2a:35:0e:6b:14:8b:b2:f8: 60:ef:57:bd:19:8c:d7:25:35:20:66:b9:95:3c:fa:4f:2e:30: 06:af:25:3e:06:4a:96:94:0d:f7:a4:97:f0:cf:e9:fc:27:18: 81:d1:31:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/H9f7XNuq/nQyED+vkCb80FtVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA0MDQwMTE1NTNaFw0yNTA0MDcwNDI1NTNaMDMxMTAvBgNV BAMTKDU0QkFGOTIzNUFGNzZCM0I1MEJFOTdCNjcxQkZBOTQwNTlCQzg2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDScnIOrcdhHBv6UEJccLLGgI4r SbwP53U87NKWZgvvff8oEuKGL6UGlpzNvRBuoAwlbgb4QHeeRjXUgwk2FMeZq7bn otoC6hlIO8F0KHBGBVVLx2OgSfJzVVunKp4EcrkL56hWlc9vbB+XQzipOVq+XZST t8HDSDQveXmtGs9hI5enj6H2tg16kEiDU62wH4w4of5jpg/OcywiDJvnuB4waMG2 GzcPR1uR3oxyelYml4zfCiwgHZuf3wwcOVPb2F0weqqyO3damFpplzBbMWb4pvAE UI7p8v9KYYaXqqS3foOMgZCeTuL631NDyqG4zr7H8rfQhiMMLXDPdxW46P5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLr5I1r3aztQvpe2cb+pQFm8hpwwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPX6/OP0uccWwQ35HYylVseNTmpDUTUwPmu UlG4gNWUMffwwszxeRV/HSMtE2vmBNkbhg1hMslOwub83RgkZ0Ze1MtVHNklcAuN k+KfMOc4TcFynNf0RCDcZ12MOdip9776idt6IA4ERR0HEHH5uv3CmPFk4u5/dit2 ZekO70KlO+JSYVkMzqZ7pxHJjK5jWCL3kuiBvguj7faqSE8o+lYEUpTD0wWipbAY quQpj3r354H1FTDdcbDCVvhZkTF9GQ1Fv8cF9ch+Gad474Zd56sqNQ5rFIuy+GDv V70ZjNclNSBmuZU8+k8uMAavJT4GSpaUDfekl/DP6fwnGIHRMcs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:20 2025 by rpki-client