$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: umYFSkIomVTkqBFq3xY+sT6h7/8FNosvrMu3lHAb3jg= Subject key identifier: 78:17:BE:69:46:36:08:79:B8:E1:EF:98:23:FF:E4:2D:A0:A7:D8:E1 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 48F8436BE86723A920BED9F0D2FA9CC8ED39E205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 04C3 Signing time: Thu 03 Apr 2025 17:01:52 +0000 Manifest this update: Thu 03 Apr 2025 16:56:52 +0000 Manifest next update: Sun 06 Apr 2025 19:08:52 +0000 Files and hashes: 1: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: vwG6rdNeDAh4jG1/O0P49gXsPwynq5he4dtgM3d7KkM=) 2: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: z/nuUAZoy4GXG810gRPs/M1z88xhgLn93uZNOzbNelw=) 3: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: vzqh/DIiKaxTtSHfzibTju1MXYLVCm6nZTZLoRiAMXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 19:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f8:43:6b:e8:67:23:a9:20:be:d9:f0:d2:fa:9c:c8:ed:39:e2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Apr 3 16:56:52 2025 GMT Not After : Apr 6 19:08:52 2025 GMT Subject: CN=7817BE6946360879B8E1EF9823FFE42DA0A7D8E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:19:28:aa:b4:dc:15:63:73:7b:59:53:f7: fa:f3:9d:06:4f:88:34:a0:bf:9b:2f:71:6b:d8:a2: f2:e0:e9:9d:dc:d6:b5:8c:4b:53:a0:0b:55:7f:fc: 65:46:f1:9e:73:89:95:10:6d:b2:6f:a8:e8:6b:a6: 43:0c:cb:c5:e7:0b:c3:c1:80:d0:56:42:90:40:01: 5e:13:5d:a2:24:9f:bd:3a:ff:a2:0c:74:0d:29:5a: 8d:00:3a:7c:a4:ea:a2:fc:bd:2f:6e:bc:8a:da:90: e0:43:47:50:a0:86:4f:05:b8:c1:b0:2c:4a:a4:33: 27:69:f5:15:da:08:60:c1:96:6d:a5:d0:d3:fb:1e: 57:ad:5a:41:df:17:95:af:bc:6e:d4:72:6b:64:99: ce:db:1d:81:8a:b9:64:94:dc:99:bd:30:3f:8a:53: 83:ad:09:a7:bd:d4:6d:c3:36:05:a6:28:ed:33:47: 75:b2:2b:a9:b1:80:e4:79:21:16:6e:ba:ec:ae:47: aa:4b:19:68:e4:f2:a9:19:b7:a9:5d:03:58:9d:4e: d3:f6:c2:c4:ae:09:0f:f3:31:d8:f7:42:ce:60:61: c7:02:b0:c8:9f:ca:29:37:47:b8:36:85:5e:21:6f: 01:ab:52:67:61:21:98:48:96:ce:db:2c:f6:e4:f5: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:BE:69:46:36:08:79:B8:E1:EF:98:23:FF:E4:2D:A0:A7:D8:E1 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:77:98:43:ac:f4:da:08:a8:e6:a0:a2:ff:3c:9b:87:2f:22: 89:b2:75:10:1c:32:d1:59:25:96:71:3d:b6:15:ea:f6:c9:95: e3:bb:ee:9f:38:01:3c:48:e1:51:26:74:dd:84:c2:33:26:1f: d4:6b:84:a1:81:01:40:58:01:78:ae:68:8d:3a:7c:6d:fd:7f: f0:18:f0:67:8f:7c:37:63:9f:64:2f:8f:e2:c8:ea:ab:7b:f1: b1:dc:15:a0:c4:e9:33:2b:66:6f:29:41:9b:08:8f:46:c9:42: a8:73:f4:c3:17:1a:c1:c5:89:3e:f0:13:97:07:01:63:1c:16: 23:6c:8e:56:62:d5:d8:b7:d8:55:ed:eb:13:b1:0a:ad:2c:7b: 31:e7:9e:94:ee:be:40:ca:55:ec:4d:30:8c:cb:ff:bc:55:6d: 38:57:79:17:33:8c:a2:ba:90:59:23:ba:40:d5:3c:14:4a:49: 97:0c:aa:c3:49:40:81:0b:a1:26:ca:c2:1b:a9:5d:b6:81:ce: c6:9d:02:81:c8:d8:0d:ca:3a:a0:58:52:b6:7b:5a:f3:6d:b9: 6e:f6:5f:b5:fd:ac:c8:57:06:72:24:3d:4e:8b:48:55:a8:43: 08:aa:78:c2:f3:12:26:ba:1d:d6:d4:77:eb:b5:36:06:72:6f: d7:77:1b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPhDa+hnI6kgvtnw0vqcyO054gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNTA0MDMxNjU2NTJaFw0yNTA0MDYxOTA4NTJaMDMxMTAvBgNV BAMTKDc4MTdCRTY5NDYzNjA4NzlCOEUxRUY5ODIzRkZFNDJEQTBBN0Q4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeBkoqrTcFWNze1lT9/rznQZP iDSgv5svcWvYovLg6Z3c1rWMS1OgC1V//GVG8Z5ziZUQbbJvqOhrpkMMy8XnC8PB gNBWQpBAAV4TXaIkn706/6IMdA0pWo0AOnyk6qL8vS9uvIrakOBDR1Cghk8FuMGw LEqkMydp9RXaCGDBlm2l0NP7HletWkHfF5WvvG7Ucmtkmc7bHYGKuWSU3Jm9MD+K U4OtCae91G3DNgWmKO0zR3WyK6mxgOR5IRZuuuyuR6pLGWjk8qkZt6ldA1idTtP2 wsSuCQ/zMdj3Qs5gYccCsMifyik3R7g2hV4hbwGrUmdhIZhIls7bLPbk9cHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeBe+aUY2CHm44e+YI//kLaCn2OEwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABl3mEOs9NoIqOagov88m4cvIomydRAcMtFZ JZZxPbYV6vbJleO77p84ATxI4VEmdN2EwjMmH9RrhKGBAUBYAXiuaI06fG39f/AY 8GePfDdjn2Qvj+LI6qt78bHcFaDE6TMrZm8pQZsIj0bJQqhz9MMXGsHFiT7wE5cH AWMcFiNsjlZi1di32FXt6xOxCq0sezHnnpTuvkDKVexNMIzL/7xVbThXeRczjKK6 kFkjukDVPBRKSZcMqsNJQIELoSbKwhupXbaBzsadAoHI2A3KOqBYUrZ7WvNtuW72 X7X9rMhXBnIkPU6LSFWoQwiqeMLzEia6HdbUd+u1NgZyb9d3G7E= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:50 2025 by rpki-client