$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: ob0sQJqkaeWMivGzAl6/l25013Kcoud8MtChoe3qzXU= Subject key identifier: 37:9C:B7:27:2D:4F:7D:7F:76:2E:81:66:78:3C:40:9D:F1:43:87:BF Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 2D132F11F1C3E0AD39DB3B10E9CACB74F28BB2F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 45 Signing time: Wed 12 Mar 2025 11:00:35 +0000 Manifest this update: Wed 12 Mar 2025 10:55:35 +0000 Manifest next update: Sat 15 Mar 2025 14:35:35 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: dWqWpdylNF7TG1EDzr4qcrf0yR5A8+8moa6Yz8dqFsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:13:2f:11:f1:c3:e0:ad:39:db:3b:10:e9:ca:cb:74:f2:8b:b2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Mar 12 10:55:35 2025 GMT Not After : Mar 15 14:35:35 2025 GMT Subject: CN=379CB7272D4F7D7F762E8166783C409DF14387BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:41:ac:07:98:7e:bd:cb:aa:61:f9:2e:86: 01:47:bd:ca:d1:22:98:05:0e:59:07:8e:62:f4:e4: 85:f6:a6:6b:c1:68:94:3d:ae:37:41:23:42:d3:a4: ef:16:95:32:35:a8:79:b7:8a:bb:2b:8b:b1:6a:d9: 34:c2:01:5b:84:e3:ab:07:97:ed:5f:cc:fa:6e:a2: bd:b2:f1:c7:fe:34:43:36:ba:d0:7e:7b:f0:92:57: c6:c6:7d:da:ad:44:4c:06:5b:4f:7e:a3:1b:8b:55: bf:2e:27:94:af:5a:78:72:0d:a9:f4:2e:58:a4:ae: 59:0e:7e:a0:3b:e9:0b:2a:1e:73:8f:0e:7e:0a:46: 04:25:73:57:33:be:2b:1b:9d:8c:f9:d1:bd:b5:63: 5b:f4:cf:9e:1c:a4:10:75:f4:e0:2e:ca:ba:33:fb: d5:38:41:c5:c5:83:e7:af:27:e9:2d:ce:89:d6:0b: 15:60:9e:0a:b3:c0:eb:f9:0e:f9:72:03:64:d2:cd: 4a:6d:a3:c1:c0:49:f1:da:f9:b5:02:bc:0d:34:bc: 2d:80:b4:7b:3c:c0:46:ce:93:e6:bc:b3:fc:bb:e3: f7:51:92:d6:86:91:07:3e:68:f5:86:a7:0a:0b:00: 6a:e5:d9:9c:b7:1c:23:4b:e5:c5:26:2c:76:9c:91: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9C:B7:27:2D:4F:7D:7F:76:2E:81:66:78:3C:40:9D:F1:43:87:BF X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:85:c4:46:a8:52:32:01:fc:4a:75:0b:5c:50:39:a0:8e: d8:6f:23:d0:1b:be:17:60:91:86:46:8d:e5:29:60:db:7e:14: fb:58:b6:53:f5:48:ae:52:73:bd:15:d4:ec:ca:66:64:fc:d8: f2:2f:64:a5:89:05:fe:86:bb:17:d8:22:05:5e:ab:dc:62:a0: bf:73:fa:ae:71:e0:b6:4a:d1:23:78:03:a4:3a:58:02:17:56: b6:87:6d:ab:3d:c8:8e:66:bc:9f:3b:aa:c2:90:73:d6:c0:21: d0:44:93:87:e9:a8:4b:62:21:48:de:2a:35:d0:63:47:a4:4f: a1:fc:e5:a0:fe:29:42:c3:bd:94:70:be:0b:cb:f4:21:58:15: 2e:51:f8:08:56:c3:66:3d:03:01:56:c4:fc:e1:c7:77:11:61: 8b:b6:89:a1:59:86:a4:21:4f:70:cb:1f:79:8f:9a:b5:41:4d: 62:46:8e:81:a5:d8:35:30:ce:9d:fa:cf:f8:e4:ad:2f:fa:88: 59:7c:75:ab:79:1b:d0:2a:dc:d0:b5:87:73:30:dc:bd:8e:c2: a2:2f:e3:f3:77:6a:d8:5d:85:b6:f7:17:e6:47:90:0c:d0:0b: dc:e0:8f:94:b3:3b:13:3c:39:a9:2c:c4:72:e6:80:ec:21:fb: c9:72:a6:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRMvEfHD4K052zsQ6crLdPKLsvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTAzMTIxMDU1MzVaFw0yNTAzMTUxNDM1MzVaMDMxMTAvBgNV BAMTKDM3OUNCNzI3MkQ0RjdEN0Y3NjJFODE2Njc4M0M0MDlERjE0Mzg3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwk0GsB5h+vcuqYfkuhgFHvcrR IpgFDlkHjmL05IX2pmvBaJQ9rjdBI0LTpO8WlTI1qHm3irsri7Fq2TTCAVuE46sH l+1fzPpuor2y8cf+NEM2utB+e/CSV8bGfdqtREwGW09+oxuLVb8uJ5SvWnhyDan0 LlikrlkOfqA76QsqHnOPDn4KRgQlc1czvisbnYz50b21Y1v0z54cpBB19OAuyroz +9U4QcXFg+evJ+ktzonWCxVgngqzwOv5DvlyA2TSzUpto8HASfHa+bUCvA00vC2A tHs8wEbOk+a8s/y74/dRktaGkQc+aPWGpwoLAGrl2Zy3HCNL5cUmLHackQn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5y3Jy1PfX92LoFmeDxAnfFDh78wHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkEhcRGqFIyAfxKdQtcUDmgjthvI9Abvhdg kYZGjeUpYNt+FPtYtlP1SK5Sc70V1OzKZmT82PIvZKWJBf6GuxfYIgVeq9xioL9z +q5x4LZK0SN4A6Q6WAIXVraHbas9yI5mvJ87qsKQc9bAIdBEk4fpqEtiIUjeKjXQ Y0ekT6H85aD+KULDvZRwvgvL9CFYFS5R+AhWw2Y9AwFWxPzhx3cRYYu2iaFZhqQh T3DLH3mPmrVBTWJGjoGl2DUwzp36z/jkrS/6iFl8dat5G9Aq3NC1h3Mw3L2OwqIv 4/N3athdhbb3F+ZHkAzQC9zgj5SzOxM8OaksxHLmgOwh+8lypl0= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:46 2025 by rpki-client