$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: VQYIydptKPM+C/vCc65S4rajFmfgVLy8dk0UisIeIys= Subject key identifier: 56:FD:5E:45:16:D2:82:D6:A2:11:AB:42:E5:82:E4:50:D6:63:DF:B8 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 4328E388262A7CE57FD15B7076D603782C620D6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 01B9 Signing time: Fri 18 Apr 2025 20:41:07 +0000 Manifest this update: Fri 18 Apr 2025 20:36:07 +0000 Manifest next update: Mon 21 Apr 2025 20:52:07 +0000 Files and hashes: 1: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: mOuWddLIv3rmxXcgYq0Vb/44PX6MbWRtH5/zWdVpQuM=) 2: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: wbDj2qVwWojdiwUQq1leoVbmSXtniu4/S6z44a48QLw=) 3: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: sovGmY1LNDEBP90HtbkYGEyytjx7NJaqlPRFRk+DmlQ=) 4: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: iEjk5CcPPupqxXgy6I6vHPPqr+aSFJlSEqX4aS5ddig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 20:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:28:e3:88:26:2a:7c:e5:7f:d1:5b:70:76:d6:03:78:2c:62:0d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Apr 18 20:36:07 2025 GMT Not After : Apr 21 20:52:07 2025 GMT Subject: CN=56FD5E4516D282D6A211AB42E582E450D663DFB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:10:9f:8b:1c:0f:70:27:e9:f0:a1:be:5a:70: 0d:e8:bc:a6:33:31:53:0e:bd:67:01:e8:7e:4b:21: 2e:f4:e2:27:1b:d4:2c:12:4f:de:2a:cb:80:7a:1b: f4:c8:69:e1:33:c1:48:68:33:16:d3:f8:7b:0d:a1: 3a:e6:57:43:07:91:3d:79:6b:6b:bd:d3:03:82:27: c2:65:89:73:73:f2:83:9d:a7:d6:70:2e:7b:5f:8d: ab:af:d0:8c:03:55:14:75:ed:7a:80:b0:ae:9d:de: f8:dd:bc:7d:d5:aa:b9:bf:14:95:68:0d:6a:58:e3: 8e:a3:e9:0c:fe:ae:a0:1d:e6:a4:51:98:7f:d8:a8: a8:9e:29:fd:27:1b:bd:6c:3a:bd:4b:6a:58:e3:f0: c4:e0:a4:04:8d:e1:87:f7:15:8b:75:ae:f6:24:72: a7:3a:24:86:c3:b7:e6:fd:ec:fa:c0:97:3a:b3:a9: 73:6c:c7:44:d4:59:68:90:66:f9:23:7a:03:08:f9: a6:7f:f2:2b:70:2e:29:c5:c5:c1:9f:b0:4a:e2:34: e1:a5:f0:29:98:99:8b:cd:4a:d8:70:01:e5:dd:ac: 5e:00:0a:c4:c9:df:d7:11:d7:9f:3e:99:41:c3:e3: 99:7c:16:80:12:24:52:51:ca:82:fd:ee:bc:f1:ba: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FD:5E:45:16:D2:82:D6:A2:11:AB:42:E5:82:E4:50:D6:63:DF:B8 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:da:69:a7:da:d3:58:61:14:b5:64:68:a5:63:92:52:d4:8e: 10:cb:30:9c:51:dd:77:34:a5:f6:66:80:6d:4e:8f:e7:dc:7a: d1:6a:a1:79:ed:4a:82:7e:96:4e:94:43:6a:b3:bf:95:83:e6: ac:a8:53:76:47:4c:ac:9e:4e:e8:95:b5:ef:01:47:55:82:b1: 42:71:cc:74:e2:45:c0:78:b8:e4:b5:ce:4f:9e:0a:d3:63:33: 22:26:18:e5:98:64:e8:07:dd:c3:1d:4d:f3:06:a7:88:7a:34: f0:7d:0c:73:8c:38:38:d2:ed:4a:35:70:45:b1:2d:1c:f9:a1: 60:09:2d:95:23:48:9e:d0:bc:30:82:7e:33:92:ca:4d:ea:d0: 93:d4:2d:ce:09:85:f4:78:fc:62:bf:14:e9:34:95:e7:41:f0: b5:37:4f:1d:8b:4b:4e:1c:23:26:72:d5:f4:a3:fa:7b:20:25: 2f:c5:3f:97:90:1b:9f:4b:f5:37:4f:e8:3a:2a:8f:66:8b:57: ba:21:8d:04:7e:ce:dd:66:43:e0:47:35:15:b2:2e:12:03:4e: 21:ed:c4:c9:d6:43:30:58:6d:8a:8a:2c:6e:a2:60:9f:dd:63: af:e5:3d:a6:1b:8a:10:f4:c8:5a:22:cd:26:df:77:82:ee:0e: 0a:04:b9:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyjjiCYqfOV/0VtwdtYDeCxiDWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTA0MTgyMDM2MDdaFw0yNTA0MjEyMDUyMDdaMDMxMTAvBgNV BAMTKDU2RkQ1RTQ1MTZEMjgyRDZBMjExQUI0MkU1ODJFNDUwRDY2M0RGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwEJ+LHA9wJ+nwob5acA3ovKYz MVMOvWcB6H5LIS704icb1CwST94qy4B6G/TIaeEzwUhoMxbT+HsNoTrmV0MHkT15 a2u90wOCJ8JliXNz8oOdp9ZwLntfjauv0IwDVRR17XqAsK6d3vjdvH3Vqrm/FJVo DWpY446j6Qz+rqAd5qRRmH/YqKieKf0nG71sOr1Laljj8MTgpASN4Yf3FYt1rvYk cqc6JIbDt+b97PrAlzqzqXNsx0TUWWiQZvkjegMI+aZ/8itwLinFxcGfsEriNOGl 8CmYmYvNSthwAeXdrF4ACsTJ39cR158+mUHD45l8FoASJFJRyoL97rzxukIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVv1eRRbSgtaiEatC5YLkUNZj37gwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvaaafa01hhFLVkaKVjklLUjhDLMJxR3Xc0 pfZmgG1Oj+fcetFqoXntSoJ+lk6UQ2qzv5WD5qyoU3ZHTKyeTuiVte8BR1WCsUJx zHTiRcB4uOS1zk+eCtNjMyImGOWYZOgH3cMdTfMGp4h6NPB9DHOMODjS7Uo1cEWx LRz5oWAJLZUjSJ7QvDCCfjOSyk3q0JPULc4JhfR4/GK/FOk0ledB8LU3Tx2LS04c IyZy1fSj+nsgJS/FP5eQG59L9TdP6Doqj2aLV7ohjQR+zt1mQ+BHNRWyLhIDTiHt xMnWQzBYbYqKLG6iYJ/dY6/lPaYbihD0yFoizSbfd4LuDgoEuY8= -----END CERTIFICATE-----Generated at Sat Apr 19 07:17:43 2025 by rpki-client