$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: amipbkeLh2pdjaceKoDv1YPyOBPJ94xP4lIFgovd8Pc= Subject key identifier: 61:39:98:66:F6:B2:D7:7D:76:B2:80:BD:2B:6F:7D:22:04:C3:46:1A Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 4DE7273D3411078C18104FFE5851DC68AB917C89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 55 Signing time: Thu 17 Apr 2025 02:00:35 +0000 Manifest this update: Thu 17 Apr 2025 01:55:35 +0000 Manifest next update: Sun 20 Apr 2025 09:59:35 +0000 Files and hashes: 1: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: fQ16aYrIzbGmaUM8RvSOtG6CAufnQsNugIoaiIN4NBE=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) 3: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 09:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e7:27:3d:34:11:07:8c:18:10:4f:fe:58:51:dc:68:ab:91:7c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Apr 17 01:55:35 2025 GMT Not After : Apr 20 09:59:35 2025 GMT Subject: CN=61399866F6B2D77D76B280BD2B6F7D2204C3461A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:41:1a:55:17:7e:ee:df:52:d1:6f:aa:9b: c9:c7:e7:99:2e:63:67:b9:62:c2:91:4a:54:8a:0e: cb:fc:af:98:1c:e8:a3:5a:63:e2:46:d0:a8:03:2d: 7f:e0:5e:ce:d6:9e:9f:ae:c2:81:d7:bc:28:f8:50: 68:e6:55:6e:5c:ef:a0:b4:8c:07:05:d8:b4:18:29: 7a:24:38:6b:53:32:36:af:3e:55:b5:70:39:eb:e5: 57:2d:55:ba:0d:96:78:4a:12:ce:a3:5b:0b:3b:d6: 2f:42:3a:d7:7c:38:6a:a5:94:6b:83:2a:de:33:22: de:02:9e:b3:2f:d8:40:03:0b:7c:09:ed:9a:de:a9: 4d:6c:a4:85:1c:71:d2:30:25:09:21:a3:5e:aa:85: b8:94:58:48:0d:cc:22:f2:d2:40:7b:24:2b:54:d9: 73:e7:0c:74:5a:64:a6:ae:e9:3f:e9:f9:08:79:2e: d3:33:1a:df:0a:84:f8:bc:0c:d1:d5:d4:e5:9f:4d: fa:82:e4:c5:3e:06:d0:df:6c:80:61:b3:a0:a8:c5: 5f:05:f6:f1:8a:4e:a6:d6:12:c4:0c:57:45:89:d1: 8d:98:3a:49:c8:df:8b:62:c4:d0:20:88:22:6d:05: 23:c3:4a:c0:71:81:62:68:f4:75:07:49:54:3c:1a: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:98:66:F6:B2:D7:7D:76:B2:80:BD:2B:6F:7D:22:04:C3:46:1A X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e0:66:33:37:d5:dc:a0:f9:ad:f8:d3:01:b5:44:1e:ab:79: be:0e:ed:ef:d8:bc:61:2f:e8:af:63:d0:60:63:de:42:3c:ea: ca:d1:aa:d1:ac:d8:9e:ce:b3:fb:5f:fc:6c:10:62:05:a6:a0: 1d:68:5a:5a:0c:31:f8:10:27:4e:fb:fe:8e:07:dc:66:78:1e: c7:dd:78:48:52:53:39:34:f0:54:a5:d6:6e:1e:c2:a4:14:5b: 83:87:ca:20:21:c7:42:74:f0:f5:e6:9a:1c:86:31:a4:e0:6b: 40:77:b2:84:0a:5d:1b:ae:f8:ec:52:8f:09:42:f6:5c:a8:b4: 6e:31:c6:2f:23:f8:a7:02:4c:f4:06:e9:c4:10:5c:ae:48:86: 5e:31:22:c3:97:06:ae:f4:70:de:4d:7e:1d:35:db:b9:86:30: 0f:b5:d8:8b:13:36:f0:50:ec:a3:be:20:70:a6:57:d3:e4:89: 8b:d6:97:10:5a:f6:f7:e7:d1:db:a9:a9:fa:57:09:f4:55:3f: 3d:f4:cc:54:87:45:62:58:b5:c0:1d:a6:8d:2b:4f:e9:b2:62: 99:1a:7b:fe:cb:ab:ad:7c:ca:16:40:0b:68:0f:b0:d4:9c:38: c5:d0:b1:d9:eb:67:84:2f:e8:38:57:05:78:38:58:e4:7c:0a: ea:18:d6:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTecnPTQRB4wYEE/+WFHcaKuRfIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA0MTcwMTU1MzVaFw0yNTA0MjAwOTU5MzVaMDMxMTAvBgNV BAMTKDYxMzk5ODY2RjZCMkQ3N0Q3NkIyODBCRDJCNkY3RDIyMDRDMzQ2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSUEaVRd+7t9S0W+qm8nH55ku Y2e5YsKRSlSKDsv8r5gc6KNaY+JG0KgDLX/gXs7Wnp+uwoHXvCj4UGjmVW5c76C0 jAcF2LQYKXokOGtTMjavPlW1cDnr5VctVboNlnhKEs6jWws71i9COtd8OGqllGuD Kt4zIt4CnrMv2EADC3wJ7ZreqU1spIUccdIwJQkho16qhbiUWEgNzCLy0kB7JCtU 2XPnDHRaZKau6T/p+Qh5LtMzGt8KhPi8DNHV1OWfTfqC5MU+BtDfbIBhs6CoxV8F 9vGKTqbWEsQMV0WJ0Y2YOknI34tixNAgiCJtBSPDSsBxgWJo9HUHSVQ8GpojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYTmYZvay1312soC9K299IgTDRhowHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPgZjM31dyg+a340wG1RB6reb4O7e/YvGEv 6K9j0GBj3kI86srRqtGs2J7Os/tf/GwQYgWmoB1oWloMMfgQJ077/o4H3GZ4Hsfd eEhSUzk08FSl1m4ewqQUW4OHyiAhx0J08PXmmhyGMaTga0B3soQKXRuu+OxSjwlC 9lyotG4xxi8j+KcCTPQG6cQQXK5Ihl4xIsOXBq70cN5Nfh0127mGMA+12IsTNvBQ 7KO+IHCmV9PkiYvWlxBa9vfn0dupqfpXCfRVPz30zFSHRWJYtcAdpo0rT+myYpka e/7Lq618yhZAC2gPsNScOMXQsdnrZ4Qv6DhXBXg4WOR8CuoY1ro= -----END CERTIFICATE-----Generated at Fri Apr 18 07:27:32 2025 by rpki-client