$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: B9jsZCTrRb7uVEMdxO2VIwucTZ+QcLZovn6dXuetPTk= Subject key identifier: BB:34:83:94:A4:01:B0:F7:72:FE:B9:6E:83:4A:CA:CF:92:6F:7E:F6 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 6EF76B5E5187FED5810AC172791AD9D7AB99E99C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 01FB Signing time: Sun 20 Apr 2025 00:20:34 +0000 Manifest this update: Sun 20 Apr 2025 00:15:34 +0000 Manifest next update: Wed 23 Apr 2025 10:58:34 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 2: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: toVX7+njVvUEajxP8AQM1Nl2K14w5bZX8HJ8WN/I2Fs=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 4: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 10:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f7:6b:5e:51:87:fe:d5:81:0a:c1:72:79:1a:d9:d7:ab:99:e9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Apr 20 00:15:34 2025 GMT Not After : Apr 23 10:58:34 2025 GMT Subject: CN=BB348394A401B0F772FEB96E834ACACF926F7EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:45:74:92:10:ac:83:fa:43:d5:12:9f:18: 49:d4:1e:0f:6f:c5:6c:57:00:85:e7:9e:3a:4a:81: b4:9d:31:fe:d3:52:0d:ca:95:52:14:cd:96:98:79: 5c:2f:4d:85:fb:10:a1:f5:2a:1f:e2:01:45:22:cc: 9c:5a:55:92:98:a0:43:d8:c7:9f:b8:4f:03:f2:f1: a3:1f:0c:c9:44:e6:76:3e:d8:35:f0:5c:d9:d5:f7: 2c:e6:81:03:f9:a3:02:4f:9e:70:b1:b8:da:af:79: 1a:1c:54:f8:22:9e:66:3b:a0:34:d7:d2:ae:06:49: 18:e5:df:da:16:15:dc:41:8d:e5:04:52:28:a3:62: 17:fa:4d:bb:8a:cf:52:e8:92:42:f7:81:3a:a9:2d: 4f:8c:70:83:5a:57:cd:dc:e1:78:b4:5c:8f:85:90: 79:09:03:e5:05:43:0f:35:e8:4a:11:de:b3:e8:34: 59:45:72:38:5e:c3:bf:49:a7:14:3a:39:c6:06:28: 06:6e:a4:17:d1:63:f4:13:33:56:fc:fb:11:ce:dd: 67:14:fa:b4:1d:94:b1:f3:cb:24:bc:2f:90:ce:76: 01:6b:95:47:94:79:5b:20:cf:44:d0:96:91:b0:0e: a2:5d:a0:c7:d7:e1:31:32:8b:3d:1e:bb:6e:bc:45: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:34:83:94:A4:01:B0:F7:72:FE:B9:6E:83:4A:CA:CF:92:6F:7E:F6 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c4:67:7a:b9:1e:e2:ba:84:4b:d2:3b:65:7f:25:27:92:84: a2:57:42:5a:58:c9:54:0c:7b:0d:3a:87:ec:40:7d:a3:ab:73: bd:29:78:a6:65:7a:dc:d3:d1:f2:54:fd:bd:e9:9e:41:40:2e: 98:d6:91:ce:40:81:1b:6d:d0:25:7d:42:06:0e:42:46:34:3c: 41:1d:52:05:b7:e3:08:df:ec:29:a8:a9:55:f2:7c:e4:15:3f: c2:a7:be:d3:e1:c0:63:e3:03:d7:31:e4:ae:69:e6:48:00:7f: 04:86:6a:ab:17:3d:c6:ec:7b:d7:c7:90:97:8f:38:41:47:60: f8:df:4f:4a:d6:ca:c1:ca:e0:e0:38:5a:ef:29:b8:64:cd:d6: e3:36:8c:d8:31:74:f5:31:8d:81:45:40:1f:85:4f:8d:3c:77: 6e:82:f6:4b:d4:66:d4:b1:24:b9:0d:0a:7d:2a:9b:b1:d6:70: f4:4d:9e:78:e9:4a:b5:ef:95:61:1c:a8:2d:9c:7d:42:18:d1: 58:ab:49:22:39:36:eb:fe:a9:6a:64:cf:e7:44:08:60:02:47: 1b:7b:0d:7c:7e:c9:60:6a:a6:b0:e4:94:2b:f3:f7:9f:bf:ad: 5e:ae:27:92:1a:60:87:3e:43:6e:a1:0f:69:10:fb:e1:1b:92: 62:d2:49:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvdrXlGH/tWBCsFyeRrZ16uZ6ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA0MjAwMDE1MzRaFw0yNTA0MjMxMDU4MzRaMDMxMTAvBgNV BAMTKEJCMzQ4Mzk0QTQwMUIwRjc3MkZFQjk2RTgzNEFDQUNGOTI2RjdFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VUV0khCsg/pD1RKfGEnUHg9v xWxXAIXnnjpKgbSdMf7TUg3KlVIUzZaYeVwvTYX7EKH1Kh/iAUUizJxaVZKYoEPY x5+4TwPy8aMfDMlE5nY+2DXwXNnV9yzmgQP5owJPnnCxuNqveRocVPginmY7oDTX 0q4GSRjl39oWFdxBjeUEUiijYhf6TbuKz1LokkL3gTqpLU+McINaV83c4Xi0XI+F kHkJA+UFQw816EoR3rPoNFlFcjhew79JpxQ6OcYGKAZupBfRY/QTM1b8+xHO3WcU +rQdlLHzyyS8L5DOdgFrlUeUeVsgz0TQlpGwDqJdoMfX4TEyiz0eu268RdNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuzSDlKQBsPdy/rlug0rKz5JvfvYwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjEZ3q5HuK6hEvSO2V/JSeShKJXQlpYyVQM ew06h+xAfaOrc70peKZletzT0fJU/b3pnkFALpjWkc5AgRtt0CV9QgYOQkY0PEEd UgW34wjf7CmoqVXyfOQVP8KnvtPhwGPjA9cx5K5p5kgAfwSGaqsXPcbse9fHkJeP OEFHYPjfT0rWysHK4OA4Wu8puGTN1uM2jNgxdPUxjYFFQB+FT408d26C9kvUZtSx JLkNCn0qm7HWcPRNnnjpSrXvlWEcqC2cfUIY0VirSSI5Nuv+qWpkz+dECGACRxt7 DXx+yWBqprDklCvz95+/rV6uJ5IaYIc+Q26hD2kQ++EbkmLSSVI= -----END CERTIFICATE-----Generated at Mon Apr 21 04:09:10 2025 by rpki-client