$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: rGz4R+72Dwwe+HDVYXW/6LCT6dChmlhsM88Qt3SZW4s= Subject key identifier: 3F:4E:0A:88:3C:27:8F:9A:7C:4C:98:D5:B2:43:AA:A3:3B:86:D1:C1 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 7B40C710DD9DD5E473F47DD3BB964A9D4B762345 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 018F Signing time: Thu 17 Apr 2025 10:41:42 +0000 Manifest this update: Thu 17 Apr 2025 10:36:42 +0000 Manifest next update: Sun 20 Apr 2025 14:45:42 +0000 Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=) 2: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: LhRs96vUHLJN+/qAdBGzKel78tBjXtNf5n7kcMnFSCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 14:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:40:c7:10:dd:9d:d5:e4:73:f4:7d:d3:bb:96:4a:9d:4b:76:23:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Apr 17 10:36:42 2025 GMT Not After : Apr 20 14:45:42 2025 GMT Subject: CN=3F4E0A883C278F9A7C4C98D5B243AAA33B86D1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:69:9c:c0:ef:cb:b2:a6:77:d5:de:37:4b: 49:9c:19:8a:54:c8:0b:c0:88:ba:7b:5a:73:cf:8d: 83:84:39:11:0a:2a:ef:2c:f7:4f:75:5d:59:79:a3: 82:cc:40:7f:6c:df:96:75:1c:af:19:72:18:6e:ed: 09:70:63:ef:f0:97:79:d7:60:a3:38:bd:16:8f:66: 2e:f3:61:f0:fb:61:70:1b:cd:b8:3c:95:b3:da:5e: ad:44:76:fa:69:bb:95:78:5a:7a:cb:b7:c9:e1:37: b1:ae:d0:b0:f0:14:a9:70:9b:76:3c:33:26:5d:c3: bb:52:8e:f1:2f:ff:2c:e3:7d:de:72:6f:8b:a4:1e: c1:84:64:3b:e7:26:28:e1:c2:f7:28:66:fa:a9:15: f1:d1:b2:0e:b3:f0:e6:13:30:ff:24:e6:2d:18:ed: 6f:e6:36:fa:a9:82:70:2a:80:24:f2:08:99:ce:6e: ba:c8:15:66:31:15:19:42:c3:41:0b:09:30:4d:58: c8:87:59:0f:91:2a:a7:b9:c0:4c:dc:fe:ec:f2:07: 63:ff:ee:0a:0f:9c:37:33:e4:d3:f7:03:fc:21:b5: ea:f4:46:eb:08:98:9c:3e:38:44:f0:b8:6e:d1:b9: 69:0c:39:57:f0:e0:71:02:1d:d7:6f:1a:1e:34:15: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4E:0A:88:3C:27:8F:9A:7C:4C:98:D5:B2:43:AA:A3:3B:86:D1:C1 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:89:fb:8b:7d:04:9d:0e:01:a0:53:ec:5c:bd:ef:be:33:36: 45:a1:6c:f8:46:c2:25:98:ee:9a:5a:50:40:f5:3d:c1:b7:bf: ac:43:ea:bb:10:77:11:20:78:63:6b:03:40:ef:56:f3:26:25: 42:d3:b9:d3:ac:96:63:6d:82:5a:e6:63:c4:87:65:79:8b:b0: e9:dd:80:7f:67:91:d9:5e:4c:e4:a3:1f:5a:37:4e:82:02:6b: ef:44:d4:9f:b8:c0:8b:58:5e:44:10:6f:8d:d5:40:6e:84:87: bc:39:97:83:d1:09:d0:96:9d:d2:11:1c:78:9c:3a:ce:16:fa: 80:86:63:5e:74:3c:3d:66:36:45:eb:8c:2c:64:fd:11:3b:5e: ea:ac:91:2b:cd:88:57:75:e4:7f:36:1a:26:30:0e:00:fc:7c: ce:aa:2d:b1:d9:47:00:55:fd:f0:56:4c:d5:d4:d9:94:2f:e4: 32:24:50:29:d8:58:42:57:a1:ea:c6:76:ea:34:81:bd:3b:d2: 9f:61:da:80:03:93:b7:2d:72:8f:f3:e8:99:2e:a6:05:c3:a1: ff:b2:bc:d6:c8:6b:54:ff:cd:72:9a:db:fd:20:26:65:3c:30: 98:87:07:e6:e6:44:49:9b:a5:23:2f:85:36:58:85:7e:82:2c: 38:ca:8e:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0DHEN2d1eRz9H3Tu5ZKnUt2I0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA0MTcxMDM2NDJaFw0yNTA0MjAxNDQ1NDJaMDMxMTAvBgNV BAMTKDNGNEUwQTg4M0MyNzhGOUE3QzRDOThENUIyNDNBQUEzM0I4NkQxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyommcwO/LsqZ31d43S0mcGYpU yAvAiLp7WnPPjYOEOREKKu8s9091XVl5o4LMQH9s35Z1HK8Zchhu7QlwY+/wl3nX YKM4vRaPZi7zYfD7YXAbzbg8lbPaXq1Edvppu5V4WnrLt8nhN7Gu0LDwFKlwm3Y8 MyZdw7tSjvEv/yzjfd5yb4ukHsGEZDvnJijhwvcoZvqpFfHRsg6z8OYTMP8k5i0Y 7W/mNvqpgnAqgCTyCJnObrrIFWYxFRlCw0ELCTBNWMiHWQ+RKqe5wEzc/uzyB2P/ 7goPnDcz5NP3A/whter0RusImJw+OETwuG7RuWkMOVfw4HECHddvGh40Fe4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP04KiDwnj5p8TJjVskOqozuG0cEwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWJ+4t9BJ0OAaBT7Fy9774zNkWhbPhGwiWY 7ppaUED1PcG3v6xD6rsQdxEgeGNrA0DvVvMmJULTudOslmNtglrmY8SHZXmLsOnd gH9nkdleTOSjH1o3ToICa+9E1J+4wItYXkQQb43VQG6Eh7w5l4PRCdCWndIRHHic Os4W+oCGY150PD1mNkXrjCxk/RE7XuqskSvNiFd15H82GiYwDgD8fM6qLbHZRwBV /fBWTNXU2ZQv5DIkUCnYWEJXoerGduo0gb070p9h2oADk7ctco/z6JkupgXDof+y vNbIa1T/zXKa2/0gJmU8MJiHB+bmREmbpSMvhTZYhX6CLDjKjq4= -----END CERTIFICATE-----Generated at Fri Apr 18 02:03:18 2025 by rpki-client