$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: fifVCPVparjP0wnNTxIjSyuTmOX0Q2I91Wj2TQY7PSc= Subject key identifier: 06:27:E9:1C:41:1B:4F:A9:27:94:58:A6:13:74:3C:EC:3C:27:71:67 Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 4703226DEEEE3F7168B53697B635A55A49E35B9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 029C Signing time: Thu 03 Apr 2025 14:31:02 +0000 Manifest this update: Thu 03 Apr 2025 14:26:02 +0000 Manifest next update: Sun 06 Apr 2025 17:39:02 +0000 Files and hashes: 1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=) 2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: y13uts17X7EMROzXfb8gSZgbpu5zZskOjLOyqXDMevs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 17:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:03:22:6d:ee:ee:3f:71:68:b5:36:97:b6:35:a5:5a:49:e3:5b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Apr 3 14:26:02 2025 GMT Not After : Apr 6 17:39:02 2025 GMT Subject: CN=0627E91C411B4FA9279458A613743CEC3C277167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8f:26:e3:cb:27:41:0d:24:09:21:64:a0:58: 6b:bc:36:a2:d7:2f:de:bd:cd:7c:43:26:7f:9e:2b: 3f:a2:f5:6e:6a:82:11:66:d1:1a:f6:dd:b8:29:3c: 74:5d:c1:5a:34:cf:b5:e9:83:e5:39:d7:29:c0:e7: 90:9b:36:78:f7:94:48:92:e9:ee:f0:76:1c:3e:24: 58:a7:53:38:c4:fc:89:37:d1:64:7d:f2:d1:31:c2: 52:9e:72:c6:50:65:4c:0d:fb:04:1d:66:dd:47:30: 2d:ce:77:9e:68:e6:97:0a:f9:82:92:00:2c:12:88: 14:0e:5f:b6:8c:25:c3:26:2e:03:5e:dc:31:fe:de: a6:30:02:57:03:26:35:b5:d0:2f:cb:5f:e2:73:73: 26:25:f9:49:7c:a5:f3:5c:c1:4a:d2:31:0e:95:c2: 47:2c:d7:ef:be:a1:be:27:1a:59:bf:98:22:47:eb: d2:54:08:51:8d:58:9a:a7:ff:4f:36:c4:8e:ec:65: 7f:9b:90:ee:c3:87:75:ca:0f:5c:dd:96:08:5c:70: 66:9e:12:ff:b5:22:93:54:41:15:b9:1d:01:e1:7e: 6e:b7:ca:98:bd:0e:b3:41:8c:84:22:3f:d6:ba:85: d2:83:d3:56:29:e1:b9:5d:44:56:ea:3a:db:47:b2: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:27:E9:1C:41:1B:4F:A9:27:94:58:A6:13:74:3C:EC:3C:27:71:67 X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:da:59:e6:8a:ce:e8:cb:56:3f:ca:ce:13:ce:7b:c1:3b:a5: dd:97:25:3d:f1:ec:61:83:4e:f6:5f:09:f4:4d:22:19:15:f9: 82:de:fe:88:3a:d4:4e:8c:59:8a:bf:a3:5b:63:fc:03:fb:2e: 2c:d6:4a:fd:c0:70:4c:f3:86:a1:13:19:c5:7a:da:8b:42:b7: e3:e8:35:bf:6e:0c:56:bc:b8:f2:85:43:7e:b6:68:a0:7f:c0: 58:6c:97:d2:07:db:e7:60:41:06:02:d3:37:86:f2:cd:45:3c: ea:81:d8:07:89:eb:1a:3e:92:d9:fc:cd:64:e5:bc:c2:c6:49: d2:5e:67:a0:31:b4:8a:6b:d6:7d:8b:45:52:44:08:f6:38:d0: 8d:88:a4:43:94:f5:0b:e2:61:dc:bd:7d:8f:82:2c:18:69:16: 27:22:b1:98:36:01:3b:b1:44:ca:40:e9:a9:36:66:cf:c9:ef: dd:d5:14:d8:90:c5:26:f5:de:6e:31:15:e3:c0:2d:19:7e:c8: d1:aa:78:50:7c:3e:ac:ea:b9:f7:83:24:d7:c9:b5:9e:0f:31: 44:45:8b:d3:4b:10:93:55:a4:82:77:cd:97:c7:08:62:0d:42: b4:cc:5d:65:5e:01:6a:4b:48:69:7e:b7:85:ed:be:24:30:c3: 01:a3:30:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwMibe7uP3FotTaXtjWlWknjW50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTA0MDMxNDI2MDJaFw0yNTA0MDYxNzM5MDJaMDMxMTAvBgNV BAMTKDA2MjdFOTFDNDExQjRGQTkyNzk0NThBNjEzNzQzQ0VDM0MyNzcxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjybjyydBDSQJIWSgWGu8NqLX L969zXxDJn+eKz+i9W5qghFm0Rr23bgpPHRdwVo0z7Xpg+U51ynA55CbNnj3lEiS 6e7wdhw+JFinUzjE/Ik30WR98tExwlKecsZQZUwN+wQdZt1HMC3Od55o5pcK+YKS ACwSiBQOX7aMJcMmLgNe3DH+3qYwAlcDJjW10C/LX+JzcyYl+Ul8pfNcwUrSMQ6V wkcs1+++ob4nGlm/mCJH69JUCFGNWJqn/082xI7sZX+bkO7Dh3XKD1zdlghccGae Ev+1IpNUQRW5HQHhfm63ypi9DrNBjIQiP9a6hdKD01Yp4bldRFbqOttHskpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBifpHEEbT6knlFimE3Q87DwncWcwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfaWeaKzujLVj/KzhPOe8E7pd2XJT3x7GGD TvZfCfRNIhkV+YLe/og61E6MWYq/o1tj/AP7LizWSv3AcEzzhqETGcV62otCt+Po Nb9uDFa8uPKFQ362aKB/wFhsl9IH2+dgQQYC0zeG8s1FPOqB2AeJ6xo+ktn8zWTl vMLGSdJeZ6AxtIpr1n2LRVJECPY40I2IpEOU9QviYdy9fY+CLBhpFicisZg2ATux RMpA6ak2Zs/J793VFNiQxSb13m4xFePALRl+yNGqeFB8PqzqufeDJNfJtZ4PMURF i9NLEJNVpIJ3zZfHCGINQrTMXWVeAWpLSGl+t4XtviQwwwGjMD0= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:18 2025 by rpki-client