$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: Tbwme7IH1/B9TvsZ1vT64hHpc/Vy+KRApAtQ2s8EU30= Subject key identifier: 0F:F0:59:B2:5D:79:A2:F6:43:6B:A6:D5:F3:18:6A:68:16:CA:F6:17 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 28A0BF5B415A61E0D0E25208B7519DB66393A018 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: 85 Signing time: Tue 15 Apr 2025 17:00:37 +0000 Manifest this update: Tue 15 Apr 2025 16:55:37 +0000 Manifest next update: Sat 19 Apr 2025 01:24:37 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: 4rKF2GzzB6mvnfnOM/QC7MLbLSHw9267yWh1emU6ynI=) 2: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: QfhTFt8/VeS/kOL4l7Y+bexV2fq7/q0I4HLfvMZ5HzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 01:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a0:bf:5b:41:5a:61:e0:d0:e2:52:08:b7:51:9d:b6:63:93:a0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Apr 15 16:55:37 2025 GMT Not After : Apr 19 01:24:37 2025 GMT Subject: CN=0FF059B25D79A2F6436BA6D5F3186A6816CAF617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:2e:ba:5d:39:b8:41:dc:8c:eb:08:87:bd: 6d:65:79:65:32:0b:09:d5:a8:64:2b:e4:d4:e5:ce: f7:2d:ce:46:a1:06:59:cb:89:d1:0a:54:fb:53:12: 66:b1:89:33:d3:b1:31:2c:0f:a1:7a:3e:de:1d:01: 2f:6e:54:6a:52:21:d5:59:f4:cd:f9:ea:69:df:fe: cb:cf:8e:5a:c0:76:c9:f9:7e:77:2e:a7:8e:e7:d5: f5:70:7f:9c:9f:f7:aa:33:73:c8:e2:42:b3:2c:65: 4d:7a:80:07:d3:5c:96:c0:dd:b7:b9:e5:71:58:1b: 16:8f:e7:3e:2d:02:fe:15:58:67:f7:17:a9:9a:7a: 94:23:0c:cb:a4:8c:4f:ac:1d:87:7d:0e:83:96:40: 8f:fd:e5:f4:a8:8c:14:75:25:4e:c5:3e:dc:bd:a4: 68:d9:49:64:0a:5f:7a:28:7c:a3:1c:2f:6a:19:33: d3:64:cc:be:cd:04:83:54:36:0d:ac:22:da:92:2a: 06:f7:a8:bf:93:f8:57:6f:83:e0:5a:66:65:a4:59: c5:07:dd:f3:10:af:c3:cf:cf:f3:b8:5a:ab:e7:1b: a4:70:60:d4:46:87:00:e8:3e:04:73:92:89:11:3e: ef:c2:f2:de:55:9a:8a:0a:a0:1b:9d:0c:fd:49:24: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:59:B2:5D:79:A2:F6:43:6B:A6:D5:F3:18:6A:68:16:CA:F6:17 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:43:b8:6f:b2:62:fc:d0:0a:d1:34:83:11:c6:9d:a8:87:b3: 0a:24:41:d6:1e:cc:76:63:09:f5:fb:a8:48:3d:c2:d2:b0:d0: 1d:15:d9:a4:8b:15:67:e0:4b:4d:87:18:d0:a4:fb:00:ec:79: 46:56:4f:c4:bb:e7:13:c9:5e:1a:b6:3a:a1:1c:7f:da:3b:37: 44:2d:58:7a:f0:b7:25:4b:25:3e:ee:8d:6c:00:1c:7f:08:bf: d4:12:dc:52:e7:ca:d1:91:dc:20:cd:c6:48:75:af:70:38:07: 40:ca:0d:71:8d:89:4e:82:75:46:35:3f:70:7b:56:27:7d:33: 0f:ca:8e:3d:fb:3a:a4:74:6a:fc:25:56:d2:70:05:3a:9f:6d: aa:bc:c8:d1:48:da:8e:8f:8e:6a:4c:22:c6:9d:be:f4:53:1f: d1:70:e8:53:fd:92:a5:2a:4b:58:b9:11:0c:c2:81:de:28:25: 2a:f5:f4:5e:0f:64:a1:f3:4c:df:81:64:21:24:77:99:c6:4d: f8:a2:c0:bf:b3:85:13:e8:91:3c:bc:ba:e6:4d:9a:d8:3e:d1: 8f:57:49:8f:ae:91:42:15:f4:f5:59:c6:d6:8c:d7:fe:32:66: fd:de:71:05:e9:e6:8e:e8:1c:12:b7:05:b1:09:07:b6:c6:6d: 0e:5e:3e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKC/W0FaYeDQ4lIIt1GdtmOToBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTA0MTUxNjU1MzdaFw0yNTA0MTkwMTI0MzdaMDMxMTAvBgNV BAMTKDBGRjA1OUIyNUQ3OUEyRjY0MzZCQTZENUYzMTg2QTY4MTZDQUY2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmS66XTm4QdyM6wiHvW1leWUy CwnVqGQr5NTlzvctzkahBlnLidEKVPtTEmaxiTPTsTEsD6F6Pt4dAS9uVGpSIdVZ 9M356mnf/svPjlrAdsn5fncup47n1fVwf5yf96ozc8jiQrMsZU16gAfTXJbA3be5 5XFYGxaP5z4tAv4VWGf3F6maepQjDMukjE+sHYd9DoOWQI/95fSojBR1JU7FPty9 pGjZSWQKX3oofKMcL2oZM9NkzL7NBINUNg2sItqSKgb3qL+T+Fdvg+BaZmWkWcUH 3fMQr8PPz/O4WqvnG6RwYNRGhwDoPgRzkokRPu/C8t5VmooKoBudDP1JJD+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD/BZsl15ovZDa6bV8xhqaBbK9hcwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxDuG+yYvzQCtE0gxHGnaiHswokQdYezHZj CfX7qEg9wtKw0B0V2aSLFWfgS02HGNCk+wDseUZWT8S75xPJXhq2OqEcf9o7N0Qt WHrwtyVLJT7ujWwAHH8Iv9QS3FLnytGR3CDNxkh1r3A4B0DKDXGNiU6CdUY1P3B7 Vid9Mw/Kjj37OqR0avwlVtJwBTqfbaq8yNFI2o6PjmpMIsadvvRTH9Fw6FP9kqUq S1i5EQzCgd4oJSr19F4PZKHzTN+BZCEkd5nGTfiiwL+zhRPokTy8uuZNmtg+0Y9X SY+ukUIV9PVZxtaM1/4yZv3ecQXp5o7oHBK3BbEJB7bGbQ5ePtQ= -----END CERTIFICATE-----Generated at Thu Apr 17 23:15:07 2025 by rpki-client