$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: x4lIFkdakqN8wo/smiEJS43ov/p3hCP8GwLzlo3Q74g= Subject key identifier: 4C:76:A8:6F:98:16:B4:18:58:31:1B:BF:29:AA:CF:CF:1F:3E:E2:14 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 629E1C0999DC690992E3996BC60FDB73BE7F679A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 045C Signing time: Sat 05 Apr 2025 11:41:00 +0000 Manifest this update: Sat 05 Apr 2025 11:36:00 +0000 Manifest next update: Tue 08 Apr 2025 12:18:00 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 2: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: T2dV9ECct1Ud7fOAgoF7v8UJVDJx36l7KpwFXhp6Z8U=) 3: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: r4bbE3J74imEfGNc3Yq/RkOZJXcnua5imBb7qm1BGas=) 4: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: cxHZngbuKk/rMbp7XXVd8aMu6aMO80leEYu2grFiZmk=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9e:1c:09:99:dc:69:09:92:e3:99:6b:c6:0f:db:73:be:7f:67:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Apr 5 11:36:00 2025 GMT Not After : Apr 8 12:18:00 2025 GMT Subject: CN=4C76A86F9816B41858311BBF29AACFCF1F3EE214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:32:bd:4e:df:3c:9f:5f:47:14:b9:b6:77: 97:6c:e9:f4:a6:ec:8d:22:f8:4c:a7:b4:66:ff:ed: 88:7c:5e:c4:00:53:1e:38:0a:16:55:7a:a5:b1:3a: ff:cf:2d:48:00:d8:08:81:bd:f0:39:8a:a1:af:a2: 55:c1:c6:50:c2:73:1f:2d:e4:ab:46:08:f3:72:41: 33:fc:54:20:e6:4e:54:8a:a8:d9:a0:71:e3:d6:07: 96:7c:90:29:d3:42:2e:28:14:0d:91:81:bf:ec:cd: ee:8f:07:23:45:12:9e:8a:ec:b8:2a:f5:ca:53:20: a2:3e:ee:fe:13:87:c3:a1:c2:b9:65:9e:8e:d0:d0: 87:d5:b4:ef:2c:b2:18:2e:c1:44:39:be:2d:55:0c: 2d:73:d5:09:43:a9:1d:d9:80:ae:6c:7f:a4:23:21: 58:f9:67:1d:7b:a2:b2:23:dc:60:db:8d:d0:fa:35: 5a:99:85:df:04:d9:4e:d8:c0:00:bc:6c:fd:59:15: bc:05:57:be:9f:9c:77:91:45:d9:0d:79:96:53:e3: ff:a7:c5:ce:78:9f:a0:93:2a:ec:af:c4:b7:5d:4a: 44:95:12:bd:75:d3:be:41:7e:8d:1d:9a:e6:63:16: e2:ee:70:41:f1:4a:1c:a1:72:d9:52:4a:9b:12:aa: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:76:A8:6F:98:16:B4:18:58:31:1B:BF:29:AA:CF:CF:1F:3E:E2:14 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:20:e7:e8:b8:06:15:4c:60:8f:67:c7:b8:62:4f:4c:f4:96: c7:37:b7:81:57:6c:d2:f6:15:17:13:bb:1f:e1:64:0b:b5:b9: 10:9e:07:2d:67:65:e1:ce:1e:7e:5b:b3:c7:ab:11:d2:33:95: a3:7d:2f:1a:d0:1c:be:93:e3:6c:f2:db:61:5c:6d:f0:38:c1: e9:44:f7:df:3d:80:47:1e:6d:a1:a5:57:1d:d8:d2:c9:b2:73: 92:6d:26:35:98:8c:85:5e:cf:5d:7a:1f:06:c2:cf:22:f9:43: 16:d5:94:36:aa:82:c8:a7:0c:aa:aa:e4:60:b7:4c:45:08:73: a2:8d:c9:af:ed:14:72:51:56:58:fd:f3:d4:c4:1a:20:27:04: b8:e4:23:64:81:67:f8:6d:d5:7b:ea:9b:a6:0c:76:2a:b0:33: 19:14:50:8a:7c:b0:bc:c4:1b:4c:33:ef:34:d9:7a:ab:7c:39: 22:e5:fb:eb:58:b9:c4:37:61:cf:a8:09:cb:7b:49:c4:4d:6d: 81:c4:3b:62:ca:21:04:ff:5d:21:ae:20:cf:cc:87:8f:ac:f8: c8:ad:ec:ec:71:04:00:44:2a:99:e9:ae:8f:1b:de:6b:98:5d: 3d:13:59:73:3d:6d:9c:b3:36:d0:b6:c8:7d:50:2f:77:f1:24: 33:d8:f5:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYp4cCZncaQmS45lrxg/bc75/Z5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA0MDUxMTM2MDBaFw0yNTA0MDgxMjE4MDBaMDMxMTAvBgNV BAMTKDRDNzZBODZGOTgxNkI0MTg1ODMxMUJCRjI5QUFDRkNGMUYzRUUyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFzK9Tt88n19HFLm2d5ds6fSm 7I0i+EyntGb/7Yh8XsQAUx44ChZVeqWxOv/PLUgA2AiBvfA5iqGvolXBxlDCcx8t 5KtGCPNyQTP8VCDmTlSKqNmgcePWB5Z8kCnTQi4oFA2Rgb/sze6PByNFEp6K7Lgq 9cpTIKI+7v4Th8Ohwrllno7Q0IfVtO8sshguwUQ5vi1VDC1z1QlDqR3ZgK5sf6Qj IVj5Zx17orIj3GDbjdD6NVqZhd8E2U7YwAC8bP1ZFbwFV76fnHeRRdkNeZZT4/+n xc54n6CTKuyvxLddSkSVEr11075Bfo0dmuZjFuLucEHxShyhctlSSpsSqulJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTHaob5gWtBhYMRu/KarPzx8+4hQwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0g5+i4BhVMYI9nx7hiT0z0lsc3t4FXbNL2 FRcTux/hZAu1uRCeBy1nZeHOHn5bs8erEdIzlaN9LxrQHL6T42zy22FcbfA4welE 9989gEcebaGlVx3Y0smyc5JtJjWYjIVez116HwbCzyL5QxbVlDaqgsinDKqq5GC3 TEUIc6KNya/tFHJRVlj989TEGiAnBLjkI2SBZ/ht1Xvqm6YMdiqwMxkUUIp8sLzE G0wz7zTZeqt8OSLl++tYucQ3Yc+oCct7ScRNbYHEO2LKIQT/XSGuIM/Mh4+s+Mit 7OxxBABEKpnpro8b3muYXT0TWXM9bZyzNtC2yH1QL3fxJDPY9Ro= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:32 2025 by rpki-client