$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: g7nf1r3T7e/cjbnTOHQcbnCmTBGXYC6euTpc+Yvu2Js= Subject key identifier: E7:B2:AB:02:32:1D:BB:70:50:AC:5C:AA:AC:A9:DB:CC:32:52:52:15 Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 22F66D69948F40E36BD76E8EB1607DCA93CFD339 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 0160 Signing time: Fri 18 Apr 2025 00:11:53 +0000 Manifest this update: Fri 18 Apr 2025 00:06:53 +0000 Manifest next update: Mon 21 Apr 2025 02:45:53 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: 1J9sD0NtNg5JxxaORYNrE6huvwmuGUzpLr//CP+snsQ=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 02:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f6:6d:69:94:8f:40:e3:6b:d7:6e:8e:b1:60:7d:ca:93:cf:d3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Apr 18 00:06:53 2025 GMT Not After : Apr 21 02:45:53 2025 GMT Subject: CN=E7B2AB02321DBB7050AC5CAAACA9DBCC32525215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:18:0d:9d:38:ed:65:01:48:89:07:d3:7e: 0e:d3:3a:b1:c7:29:6b:72:1f:2d:3c:b7:bb:62:2b: f8:70:75:86:8e:c8:13:0c:86:e3:34:9a:99:bc:cb: 50:c1:5f:cf:de:6f:a2:25:bf:f0:25:00:28:93:8b: 4c:47:e9:f5:66:2f:4f:64:23:41:0d:56:40:b9:e1: e4:0c:6a:4b:e1:18:78:49:9c:fa:62:79:e2:cf:46: 90:35:bd:43:f1:01:74:fc:0a:2e:34:a4:03:71:14: 30:44:48:40:21:83:04:46:58:ba:49:5f:40:55:60: e2:af:61:5b:2e:78:ea:21:03:43:ae:8c:e3:36:84: b2:8f:9a:b7:0d:6c:3d:46:2b:ab:c8:b9:6e:3e:f0: 65:e9:30:4b:7d:d9:bd:14:3e:01:02:9c:2e:bb:c8: 03:fc:a7:75:45:3c:35:84:12:90:4f:c2:f5:3a:ce: 0b:8b:79:68:3b:47:81:a9:ab:35:fe:af:91:f9:de: da:ba:c1:82:c2:d9:81:39:ff:64:41:b2:50:f7:ee: 6e:8a:87:6f:3e:d8:0e:6f:a0:bb:2b:28:82:5b:64: 6f:9b:49:c0:83:a6:bd:73:0b:56:e8:82:84:9e:34: 8f:12:b8:23:35:06:22:27:7c:27:59:08:7e:33:ae: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B2:AB:02:32:1D:BB:70:50:AC:5C:AA:AC:A9:DB:CC:32:52:52:15 X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3c:30:a6:94:7c:4e:c4:50:72:2c:62:60:eb:d9:f1:63:0b: 89:8d:2e:d1:9e:cd:fa:ab:4c:08:09:58:90:16:5f:91:f4:2f: f7:b4:6c:4a:a6:7e:97:77:75:7f:89:e9:6b:54:9f:b7:d3:7f: 7e:b3:b5:e9:31:7b:dc:e8:2f:af:ab:c1:9f:da:e9:b4:58:11: f0:68:9c:ed:a2:41:b0:fe:c2:41:53:1b:eb:16:fc:c3:71:b2: ed:1d:c3:0e:3f:1f:98:06:84:dc:70:f0:ff:83:eb:05:63:44: 23:68:b9:ea:1b:2e:6d:99:82:d5:c2:b4:78:ae:16:c1:99:4f: cc:5d:6c:70:2f:e9:71:c7:de:06:7c:f7:28:6d:04:0d:9f:14: 5e:f0:a8:84:f1:f1:59:3a:9b:62:05:ce:89:da:4a:4e:6e:28: ae:1c:80:55:99:f8:42:61:76:8a:a1:d2:35:f4:c2:56:67:ad: 8a:50:ff:2d:12:2a:88:d1:37:33:6b:fe:f6:3d:54:d0:ac:fb: a5:43:c1:a0:4e:4a:f4:77:52:20:06:78:34:44:4e:1e:67:2a: 10:28:89:04:f8:d7:2e:6e:41:d8:53:3c:e0:b8:02:78:1f:48: ee:2d:a1:55:4d:9a:9c:47:53:19:5f:08:a3:bc:f9:28:dc:b9: 44:7b:d1:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvZtaZSPQONr126OsWB9ypPP0zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTA0MTgwMDA2NTNaFw0yNTA0MjEwMjQ1NTNaMDMxMTAvBgNV BAMTKEU3QjJBQjAyMzIxREJCNzA1MEFDNUNBQUFDQTlEQkNDMzI1MjUyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyRgNnTjtZQFIiQfTfg7TOrHH KWtyHy08t7tiK/hwdYaOyBMMhuM0mpm8y1DBX8/eb6Ilv/AlACiTi0xH6fVmL09k I0ENVkC54eQMakvhGHhJnPpieeLPRpA1vUPxAXT8Ci40pANxFDBESEAhgwRGWLpJ X0BVYOKvYVsueOohA0OujOM2hLKPmrcNbD1GK6vIuW4+8GXpMEt92b0UPgECnC67 yAP8p3VFPDWEEpBPwvU6zguLeWg7R4GpqzX+r5H53tq6wYLC2YE5/2RBslD37m6K h28+2A5voLsrKIJbZG+bScCDpr1zC1bogoSeNI8SuCM1BiInfCdZCH4zrrzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU57KrAjIdu3BQrFyqrKnbzDJSUhUwHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI8MKaUfE7EUHIsYmDr2fFjC4mNLtGezfqr TAgJWJAWX5H0L/e0bEqmfpd3dX+J6WtUn7fTf36ztekxe9zoL6+rwZ/a6bRYEfBo nO2iQbD+wkFTG+sW/MNxsu0dww4/H5gGhNxw8P+D6wVjRCNoueobLm2ZgtXCtHiu FsGZT8xdbHAv6XHH3gZ89yhtBA2fFF7wqITx8Vk6m2IFzonaSk5uKK4cgFWZ+EJh doqh0jX0wlZnrYpQ/y0SKojRNzNr/vY9VNCs+6VDwaBOSvR3UiAGeDRETh5nKhAo iQT41y5uQdhTPOC4AngfSO4toVVNmpxHUxlfCKO8+SjcuUR70WI= -----END CERTIFICATE-----Generated at Sun Apr 20 04:18:53 2025 by rpki-client