$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: xQG7P+fqEMBAZE4ok0XoB+cinWqYygEfa+VKUCDEBsE= Subject key identifier: AB:43:E7:0A:5A:B6:78:89:FA:D8:78:6E:2B:98:85:F8:CA:E4:43:37 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 54D0DD0C61D3820EB3BB088E111F9692A961FA14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 040E Signing time: Fri 04 Apr 2025 10:30:48 +0000 Manifest this update: Fri 04 Apr 2025 10:25:48 +0000 Manifest next update: Mon 07 Apr 2025 11:57:48 +0000 Files and hashes: 1: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 2: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: Y7oMoB+8vv0aZTkDkYJu0pvzQvDTNGvNtR4ZjaLRll0=) 3: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 4: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) 5: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 6: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 7: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 8: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 9: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d0:dd:0c:61:d3:82:0e:b3:bb:08:8e:11:1f:96:92:a9:61:fa:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Apr 4 10:25:48 2025 GMT Not After : Apr 7 11:57:48 2025 GMT Subject: CN=AB43E70A5AB67889FAD8786E2B9885F8CAE44337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:a2:92:aa:f8:0f:ee:f5:e4:9a:1c:cc:29: d3:6f:2b:c6:37:ba:d2:bd:e5:e3:ac:fd:1d:7d:72: cd:25:e4:8a:bb:41:d6:7f:1c:29:ab:2b:26:cb:ae: a6:3a:b1:3d:ac:a2:a6:42:ba:6d:0b:8a:92:f3:53: 1c:18:c3:66:70:3f:ed:92:eb:19:7c:ac:1d:9c:e9: 4f:1d:f8:cc:98:68:ea:5d:b1:49:43:e2:db:bf:cc: 47:6a:c5:bb:66:8a:dd:53:b7:b2:da:25:00:d3:29: 46:dd:5b:50:1b:21:b1:db:97:fa:58:e8:bf:1e:f6: cf:b0:8a:b7:84:59:7c:f0:17:4d:01:96:3c:c4:2d: db:8c:25:fa:b4:5c:bb:96:47:6c:43:e2:07:0b:8b: 79:80:54:c3:02:0a:c7:1f:3b:db:e0:10:a1:7b:f2: 42:4f:2d:55:b7:cf:d3:af:61:a6:89:9c:69:5a:96: e3:b0:86:8d:c0:4d:a6:ad:78:c7:92:25:c6:a2:1c: 88:d1:28:15:74:ff:6e:60:54:66:2b:e2:5a:19:46: 25:7e:63:b0:1f:e3:48:fc:d9:2a:37:33:0f:c3:6b: 9c:07:6f:8a:ef:22:c6:76:30:83:d5:d1:20:86:65: c4:32:16:83:f7:1f:3d:89:65:b3:28:20:27:87:14: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:43:E7:0A:5A:B6:78:89:FA:D8:78:6E:2B:98:85:F8:CA:E4:43:37 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:61:2e:85:b3:c5:ec:1c:1d:86:9a:e7:6f:c6:2e:45:20:d3: 9f:80:0c:11:ed:dc:02:67:17:bb:fd:f2:89:9d:31:c2:5c:63: c5:e3:e8:dc:62:cd:03:52:0b:7d:36:30:a1:52:90:25:ba:70: 18:65:77:4d:60:88:fc:78:c5:ed:e4:44:cd:99:53:05:6c:7e: c1:20:a7:f6:be:75:6e:31:d1:78:e7:5c:df:65:3b:e3:20:2a: dd:94:be:e6:e0:db:79:5c:a5:09:45:86:1e:ed:ce:c1:c5:27: 3c:11:51:ca:5e:1b:2d:82:c1:1a:1e:70:58:46:e8:69:ee:7b: 21:6a:ca:3d:53:6e:bf:6a:44:fe:bf:a7:7e:28:9a:83:18:37: 27:05:06:d6:fb:d5:9c:17:39:a3:3e:ea:d5:6a:8e:eb:be:26: d8:29:b4:09:fd:4f:1f:c5:38:5f:aa:e8:f8:8e:39:26:0b:98: ed:bd:03:57:13:67:4a:72:3b:5f:f6:b1:77:1f:c4:84:49:d4: 78:8a:23:29:52:72:b6:eb:27:48:fa:b1:e8:46:b1:84:07:4c: c9:68:7b:6a:9f:dc:58:06:21:5d:82:9e:fa:f7:67:33:96:67: c3:ae:62:f6:75:fb:d2:1d:f4:9b:f2:28:22:23:da:8e:fb:7c: a4:63:5a:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNDdDGHTgg6zuwiOER+Wkqlh+hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA0MDQxMDI1NDhaFw0yNTA0MDcxMTU3NDhaMDMxMTAvBgNV BAMTKEFCNDNFNzBBNUFCNjc4ODlGQUQ4Nzg2RTJCOTg4NUY4Q0FFNDQzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMqKSqvgP7vXkmhzMKdNvK8Y3 utK95eOs/R19cs0l5Iq7QdZ/HCmrKybLrqY6sT2soqZCum0LipLzUxwYw2ZwP+2S 6xl8rB2c6U8d+MyYaOpdsUlD4tu/zEdqxbtmit1Tt7LaJQDTKUbdW1AbIbHbl/pY 6L8e9s+wireEWXzwF00BljzELduMJfq0XLuWR2xD4gcLi3mAVMMCCscfO9vgEKF7 8kJPLVW3z9OvYaaJnGlaluOwho3ATaateMeSJcaiHIjRKBV0/25gVGYr4loZRiV+ Y7Af40j82So3Mw/Da5wHb4rvIsZ2MIPV0SCGZcQyFoP3Hz2JZbMoICeHFDHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq0PnClq2eIn62HhuK5iF+MrkQzcwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNhLoWzxewcHYaa52/GLkUg05+ADBHt3AJn F7v98omdMcJcY8Xj6NxizQNSC302MKFSkCW6cBhld01giPx4xe3kRM2ZUwVsfsEg p/a+dW4x0XjnXN9lO+MgKt2Uvubg23lcpQlFhh7tzsHFJzwRUcpeGy2CwRoecFhG 6GnueyFqyj1Tbr9qRP6/p34omoMYNycFBtb71ZwXOaM+6tVqjuu+JtgptAn9Tx/F OF+q6PiOOSYLmO29A1cTZ0pyO1/2sXcfxIRJ1HiKIylScrbrJ0j6sehGsYQHTMlo e2qf3FgGIV2Cnvr3ZzOWZ8OuYvZ1+9Id9JvyKCIj2o77fKRjWjE= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:08 2025 by rpki-client