$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft File: C69451771D2C519C2269EA17115B3E600E9CF809.mft (raw, json) Hash identifier: yRD0/UW1+sfdEkya3nsDmsxnwmTQLvBbgprzyKTxYTI= Subject key identifier: C5:2A:19:92:23:CC:13:F2:69:A0:A2:EF:F1:60:F3:C8:1A:4D:59:77 Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 Certificate issuer: /CN=C69451771D2C519C2269EA17115B3E600E9CF809 Certificate serial: 035D71E0443DA845918691522F5DEA71F714C962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft Manifest number: 5D Signing time: Sat 12 Apr 2025 21:42:12 +0000 Manifest this update: Sat 12 Apr 2025 21:37:12 +0000 Manifest next update: Wed 16 Apr 2025 00:53:12 +0000 Files and hashes: 1: C69451771D2C519C2269EA17115B3E600E9CF809.crl (hash: H5DbDL7Q67ONvnE6Kome8vGlpz7aVnP/9bO5F44mLBY=) 2: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: HyQIrSfaVLasp8fH2cuEU5XU64FY/TlMBq7lyZFmW5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5d:71:e0:44:3d:a8:45:91:86:91:52:2f:5d:ea:71:f7:14:c9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809 Validity Not Before: Apr 12 21:37:12 2025 GMT Not After : Apr 16 00:53:12 2025 GMT Subject: CN=C52A199223CC13F269A0A2EFF160F3C81A4D5977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:e3:ce:b6:c2:10:8b:fb:fd:1b:44:ec:39: e7:92:ff:75:bc:44:91:8c:45:e9:8d:f1:f9:59:51: 01:32:30:9f:b0:b4:c3:24:df:b7:bd:7d:6d:10:60: b4:b4:85:66:d1:cd:dc:b4:fc:6f:d9:af:be:59:45: e5:6e:7b:b2:8a:08:3f:2b:62:f2:53:26:30:bd:a7: 1a:79:a9:34:fa:ad:4f:95:37:67:a4:08:d7:24:fb: ab:dc:af:a4:fd:2b:7f:83:7b:13:95:d8:cf:9b:08: 05:37:35:7e:8f:5a:db:e9:27:4d:22:82:bd:98:26: 3a:8d:25:e5:46:c9:c7:63:f9:a5:9d:35:e7:39:60: 11:6e:b4:bb:fb:0e:80:95:eb:c8:6d:92:f5:25:ce: 03:31:49:0f:7c:ab:20:ed:6b:cd:3e:86:bb:45:e0: 11:dd:81:17:ab:ca:f3:c8:f0:35:24:de:9e:65:df: 9b:95:39:9c:b2:7c:cd:a0:39:a9:d9:d3:2a:85:4b: ae:70:b1:44:ee:c0:12:4a:9c:39:0d:5e:a0:6f:13: bb:f1:59:d9:b3:50:f1:0e:11:f5:f5:3a:b1:fd:16: d6:18:e0:81:fb:7c:a6:1b:66:1b:b7:7f:52:ea:4e: 4a:0f:5f:ba:c1:a4:a1:c5:4f:87:3c:f8:e0:e0:86: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2A:19:92:23:CC:13:F2:69:A0:A2:EF:F1:60:F3:C8:1A:4D:59:77 X509v3 Authority Key Identifier: keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:01:a9:d0:8b:6e:05:00:e9:9e:1e:13:2e:9f:cc:23:13:92: a0:2d:f2:02:7a:f5:a0:c9:5b:c7:0c:a4:9c:4c:e6:29:3f:0c: 81:0e:33:af:30:1d:37:ab:3c:b7:06:a6:b3:8a:4b:ea:57:5c: d3:1a:bb:33:7c:04:5d:47:e1:e4:2c:fb:85:2c:e0:c1:b6:64: 47:90:67:26:a9:20:9b:9d:7a:67:c2:b4:a2:07:30:99:de:cb: 4d:1b:6c:c0:64:0f:32:17:e5:f7:08:82:e6:79:0f:72:24:71: de:3a:c3:b5:52:06:c5:6a:1d:04:0b:55:2f:d6:d2:2a:01:a5: f0:6f:1d:8c:36:83:79:c2:66:d7:44:3f:31:f8:76:9c:ce:7e: e0:df:ea:32:d9:13:76:8c:45:f3:a9:5e:b0:28:17:46:56:ae: a3:7e:a1:50:0a:61:1c:e6:69:6e:f0:0b:95:4b:b1:5b:89:71: a5:8c:32:8a:d9:23:ba:eb:0e:a2:23:a5:ff:9c:a7:03:b8:0a: d6:62:c6:e6:ff:fd:fa:f7:d9:a8:14:b2:75:b7:56:41:cd:78: 6b:b3:40:51:6e:f0:d7:b5:89:dc:0e:49:0d:19:9f:7e:59:59: 52:8e:40:63:21:09:f1:d0:71:ee:63:d7:5b:3c:36:45:a4:d6: 11:81:af:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA11x4EQ9qEWRhpFSL13qcfcUyWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAw RTlDRjgwOTAeFw0yNTA0MTIyMTM3MTJaFw0yNTA0MTYwMDUzMTJaMDMxMTAvBgNV BAMTKEM1MkExOTkyMjNDQzEzRjI2OUEwQTJFRkYxNjBGM0M4MUE0RDU5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjePOtsIQi/v9G0TsOeeS/3W8 RJGMRemN8flZUQEyMJ+wtMMk37e9fW0QYLS0hWbRzdy0/G/Zr75ZReVue7KKCD8r YvJTJjC9pxp5qTT6rU+VN2ekCNck+6vcr6T9K3+DexOV2M+bCAU3NX6PWtvpJ00i gr2YJjqNJeVGycdj+aWdNec5YBFutLv7DoCV68htkvUlzgMxSQ98qyDta80+hrtF 4BHdgReryvPI8DUk3p5l35uVOZyyfM2gOanZ0yqFS65wsUTuwBJKnDkNXqBvE7vx WdmzUPEOEfX1OrH9FtYY4IH7fKYbZhu3f1LqTkoPX7rBpKHFT4c8+ODghsVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxSoZkiPME/JpoKLv8WDzyBpNWXcwHwYDVR0j BBgwFoAUxpRRdx0sUZwiaeoXEVs+YA6c+AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTE0M2ExOS0yMTdhLTQ5ZWYtOGNiMS01OTMwMTJkMmI3NTkvMC9DNjk0NTE3NzFE MkM1MTlDMjI2OUVBMTcxMTVCM0U2MDBFOUNGODA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAwRTlD RjgwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExNDNhMTktMjE3YS00OWVmLThj YjEtNTkzMDEyZDJiNzU5LzAvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNF NjAwRTlDRjgwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQBqdCLbgUA6Z4eEy6fzCMTkqAt8gJ69aDJ W8cMpJxM5ik/DIEOM68wHTerPLcGprOKS+pXXNMauzN8BF1H4eQs+4Us4MG2ZEeQ ZyapIJudemfCtKIHMJney00bbMBkDzIX5fcIguZ5D3Ikcd46w7VSBsVqHQQLVS/W 0ioBpfBvHYw2g3nCZtdEPzH4dpzOfuDf6jLZE3aMRfOpXrAoF0ZWrqN+oVAKYRzm aW7wC5VLsVuJcaWMMorZI7rrDqIjpf+cpwO4CtZixub//fr32agUsnW3VkHNeGuz QFFu8Ne1idwOSQ0Zn35ZWVKOQGMhCfHQce5j11s8NkWk1hGBr7E= -----END CERTIFICATE-----Generated at Mon Apr 14 19:33:57 2025 by rpki-client