$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: 9a2n13UzreUfDBgBPWFPTNpd5rLY0S0KQQmgD91JJsw= Subject key identifier: F0:80:92:ED:C1:D0:4D:42:9F:5A:C6:2F:EE:3F:52:44:E8:2C:66:BF Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 76023B64AED20529563C67595968959D1E7E4FB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: E0 Signing time: Thu 03 Apr 2025 05:41:20 +0000 Manifest this update: Thu 03 Apr 2025 05:36:20 +0000 Manifest next update: Sun 06 Apr 2025 15:34:20 +0000 Files and hashes: 1: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: tqUJOdcN69rt3Wx0RX8LENaPApwUI1qVRnJhKxdlYNI=) 2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: P7QsgIeBI6Jlmylg4E9bqTZzbWkEwew+La7Hoh4W7Lw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 15:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:02:3b:64:ae:d2:05:29:56:3c:67:59:59:68:95:9d:1e:7e:4f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Apr 3 05:36:20 2025 GMT Not After : Apr 6 15:34:20 2025 GMT Subject: CN=F08092EDC1D04D429F5AC62FEE3F5244E82C66BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:f6:6a:54:98:95:1a:19:be:09:e4:41:87: eb:84:c6:84:86:ee:72:a6:4b:f4:08:7f:ce:13:ef: 99:7f:a4:e6:3b:2f:0b:d2:8f:dd:9d:d2:4d:06:3f: d3:52:f7:73:51:e6:26:39:3d:02:f2:00:2c:18:d3: e0:fd:8c:2d:03:1b:1c:2b:04:57:95:3f:cc:2b:ee: 84:59:3e:b6:63:4f:13:45:a3:35:4f:fe:86:b1:72: 2e:41:43:2e:e4:08:65:49:66:42:31:c7:14:a2:de: ba:de:f6:fa:af:8a:97:76:46:9e:5b:64:28:76:26: 67:cc:d3:7c:4a:92:c0:67:e9:db:0a:e9:37:57:34: 0b:6a:f7:de:03:da:f7:05:0a:6c:65:64:7e:45:90: 6f:a6:12:3a:ef:85:1f:66:d8:c6:d9:d7:4f:4e:3e: 35:0c:65:bf:2c:5e:6a:28:56:14:a9:2d:73:cd:dd: 4c:d9:6e:d0:38:2f:bd:03:95:83:e5:02:cc:9a:3f: c4:8d:e5:61:ac:f4:68:42:a4:66:7b:ba:3f:ac:27: 7f:73:a5:21:88:6b:6c:a3:79:50:e2:54:fc:6f:e7: 10:29:f2:1d:04:b1:21:b6:10:8f:b2:bc:44:9b:90: 2b:f0:66:43:ed:54:dc:51:45:08:d0:7f:96:31:4d: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:80:92:ED:C1:D0:4D:42:9F:5A:C6:2F:EE:3F:52:44:E8:2C:66:BF X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:19:6f:2a:f0:1d:32:7a:a7:63:8b:a1:6a:dd:11:02:a4:a8: 7d:cc:32:78:47:2d:f6:c1:79:9c:84:4f:8c:c0:3f:94:8b:2c: 4c:dd:40:b0:eb:95:af:e9:ca:6e:8e:89:c5:d1:b5:fe:95:a8: 40:e4:bf:fd:fa:34:d7:32:7b:31:e9:c0:31:7c:54:56:4f:c8: 1f:3c:c6:e7:d1:ff:cb:57:ef:bc:b1:30:6f:a3:4a:cd:ad:5c: 5a:b1:8a:16:3f:11:cf:7f:31:1b:6b:ce:a9:40:e7:1d:a1:77: fb:70:75:a4:58:9c:79:b2:d4:bf:a6:23:90:3b:30:58:dc:4b: e5:09:45:08:d6:e6:d3:3c:03:fa:eb:17:3f:db:13:e6:c3:1c: f9:46:7c:3e:6b:76:d0:23:35:3a:18:b5:03:71:48:61:88:a4: 36:07:03:c4:0a:a8:37:86:d6:e1:44:f4:67:c8:20:c9:5a:41: d9:a7:aa:21:8f:21:8b:36:34:17:5e:27:69:ee:f3:89:af:1f: 0a:d9:00:b5:24:b1:ca:a1:1f:b1:99:63:5f:6a:e3:2e:3a:53: 96:d0:00:78:2a:82:12:10:3c:b8:84:e6:71:24:ba:f0:2b:f4: c1:b2:eb:14:63:64:d1:d8:81:12:6d:88:8f:b7:d9:ad:36:b3: 84:74:42:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgI7ZK7SBSlWPGdZWWiVnR5+T7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNTA0MDMwNTM2MjBaFw0yNTA0MDYxNTM0MjBaMDMxMTAvBgNV BAMTKEYwODA5MkVEQzFEMDRENDI5RjVBQzYyRkVFM0Y1MjQ0RTgyQzY2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlPZqVJiVGhm+CeRBh+uExoSG 7nKmS/QIf84T75l/pOY7LwvSj92d0k0GP9NS93NR5iY5PQLyACwY0+D9jC0DGxwr BFeVP8wr7oRZPrZjTxNFozVP/oaxci5BQy7kCGVJZkIxxxSi3rre9vqvipd2Rp5b ZCh2JmfM03xKksBn6dsK6TdXNAtq994D2vcFCmxlZH5FkG+mEjrvhR9m2MbZ109O PjUMZb8sXmooVhSpLXPN3UzZbtA4L70DlYPlAsyaP8SN5WGs9GhCpGZ7uj+sJ39z pSGIa2yjeVDiVPxv5xAp8h0EsSG2EI+yvESbkCvwZkPtVNxRRQjQf5YxTe37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ICS7cHQTUKfWsYv7j9SROgsZr8wHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMZbyrwHTJ6p2OLoWrdEQKkqH3MMnhHLfbB eZyET4zAP5SLLEzdQLDrla/pym6OicXRtf6VqEDkv/36NNcyezHpwDF8VFZPyB88 xufR/8tX77yxMG+jSs2tXFqxihY/Ec9/MRtrzqlA5x2hd/twdaRYnHmy1L+mI5A7 MFjcS+UJRQjW5tM8A/rrFz/bE+bDHPlGfD5rdtAjNToYtQNxSGGIpDYHA8QKqDeG 1uFE9GfIIMlaQdmnqiGPIYs2NBdeJ2nu84mvHwrZALUkscqhH7GZY19q4y46U5bQ AHgqghIQPLiE5nEkuvAr9MGy6xRjZNHYgRJtiI+32a02s4R0Qqg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:34 2025 by rpki-client