$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: R+IzVx4CsI6Az5GV70ueEoTnvMTNaDYDLShA0aeCkRw= Subject key identifier: B0:7D:96:6D:48:7B:3D:81:05:06:54:9C:3B:C1:18:D3:AC:1C:36:11 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 3939EB79F4CAAF52F59C816C412C180C3DEB4073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 01BD Signing time: Fri 04 Apr 2025 21:02:10 +0000 Manifest this update: Fri 04 Apr 2025 20:57:10 +0000 Manifest next update: Tue 08 Apr 2025 03:15:10 +0000 Files and hashes: 1: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: uZG98ke4Mau5mQtIOGnsHGFJiFVVb2sozy05/PpehIc=) 2: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: rBpy14k8W3mbLlNgX4J0/2ZVTjIArp0RYRGvkTqIoQQ=) 3: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: Ra1E9cOQanH1SiHnfJl04HYirMLU+Yh3tE7np1INosY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:39:eb:79:f4:ca:af:52:f5:9c:81:6c:41:2c:18:0c:3d:eb:40:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Apr 4 20:57:10 2025 GMT Not After : Apr 8 03:15:10 2025 GMT Subject: CN=B07D966D487B3D810506549C3BC118D3AC1C3611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:21:87:47:2c:f8:07:97:1b:2a:46:e5:03: 51:4e:ee:ee:f5:bf:c2:34:6d:38:da:aa:76:9d:4c: b2:f0:21:76:b3:20:63:9d:11:0f:d3:e0:c4:f3:cf: 48:95:87:8a:9c:39:7c:6f:e7:66:86:48:3a:aa:69: 66:a5:47:12:9f:8f:ce:8c:0f:e3:26:98:7c:0c:9a: 4c:54:3b:6f:92:44:d0:fb:e5:67:05:a7:9a:e1:d1: 46:b8:9d:73:11:cf:d0:34:ef:9d:24:54:00:6a:40: 91:90:fb:e4:54:98:b2:da:db:7e:27:8e:da:5f:8a: 3d:db:02:c8:bd:7b:dd:32:52:52:4a:5c:4a:9d:37: b0:e0:1e:6b:a6:67:ab:7f:85:64:93:07:4e:5d:bf: 39:f4:0f:63:4e:63:14:4e:15:55:b9:34:7a:ae:83: 09:32:4f:0d:82:e2:55:68:0b:ec:fd:d3:34:e4:91: 83:0c:e3:40:9d:72:24:14:50:6d:17:9a:6e:07:23: 70:97:0f:17:8b:ba:af:47:aa:8c:15:34:82:18:f3: b7:ff:7c:75:ba:8e:9e:cf:66:31:91:7b:15:83:9a: 36:b9:b9:e4:7e:6e:e9:80:51:3c:f9:4b:23:20:c9: 02:39:b1:79:53:00:31:bc:1c:e4:07:e0:5b:67:7f: e1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7D:96:6D:48:7B:3D:81:05:06:54:9C:3B:C1:18:D3:AC:1C:36:11 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:97:db:73:34:cc:07:f4:64:b3:ca:ff:ea:57:f8:e2:6e:08: 8d:08:10:52:c9:01:ae:99:af:2b:d8:90:22:75:9a:bf:7e:ee: 82:f4:1b:bd:5b:a6:eb:71:69:bc:d1:08:da:aa:86:c8:1b:e4: 57:22:30:76:00:9d:a2:34:42:6c:9e:d1:33:f1:a7:00:fd:57: 90:96:c7:2a:83:80:93:14:cf:0b:87:95:68:36:a4:97:aa:c2: d0:a5:d4:06:db:48:fd:ef:a5:36:2c:3a:e6:66:42:df:81:74: d1:9a:ea:0d:dc:fa:0c:07:d2:e5:c8:a0:5f:3f:85:62:43:00: d2:76:c0:90:ea:2d:2d:f8:04:ba:da:41:86:46:97:18:b2:77: 70:83:c0:b4:dd:5d:99:5f:51:49:36:0c:1e:02:ed:ea:2a:8e: 6c:46:e2:93:13:da:af:d8:95:45:c4:8f:5b:f5:ab:c2:3a:56: f6:13:52:0f:93:35:c0:e3:8a:41:cb:fa:c7:e6:3c:bf:0e:52: f2:d9:7d:c5:15:55:52:92:60:b8:fb:02:55:8d:b8:9b:da:c9: 69:fa:de:ec:be:d9:0a:10:d2:67:c6:f0:07:02:7a:7a:db:4e: 91:dc:2a:d6:f4:0e:99:87:26:a2:e5:e4:bb:d3:91:56:94:2a: e9:2f:b5:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTnrefTKr1L1nIFsQSwYDD3rQHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNTA0MDQyMDU3MTBaFw0yNTA0MDgwMzE1MTBaMDMxMTAvBgNV BAMTKEIwN0Q5NjZENDg3QjNEODEwNTA2NTQ5QzNCQzExOEQzQUMxQzM2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJyGHRyz4B5cbKkblA1FO7u71 v8I0bTjaqnadTLLwIXazIGOdEQ/T4MTzz0iVh4qcOXxv52aGSDqqaWalRxKfj86M D+MmmHwMmkxUO2+SRND75WcFp5rh0Ua4nXMRz9A0750kVABqQJGQ++RUmLLa234n jtpfij3bAsi9e90yUlJKXEqdN7DgHmumZ6t/hWSTB05dvzn0D2NOYxROFVW5NHqu gwkyTw2C4lVoC+z90zTkkYMM40CdciQUUG0Xmm4HI3CXDxeLuq9HqowVNIIY87f/ fHW6jp7PZjGRexWDmja5ueR+bumAUTz5SyMgyQI5sXlTADG8HOQH4Ftnf+GzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsH2WbUh7PYEFBlScO8EY06wcNhEwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOX23M0zAf0ZLPK/+pX+OJuCI0IEFLJAa6Z ryvYkCJ1mr9+7oL0G71bputxabzRCNqqhsgb5FciMHYAnaI0Qmye0TPxpwD9V5CW xyqDgJMUzwuHlWg2pJeqwtCl1AbbSP3vpTYsOuZmQt+BdNGa6g3c+gwH0uXIoF8/ hWJDANJ2wJDqLS34BLraQYZGlxiyd3CDwLTdXZlfUUk2DB4C7eoqjmxG4pMT2q/Y lUXEj1v1q8I6VvYTUg+TNcDjikHL+sfmPL8OUvLZfcUVVVKSYLj7AlWNuJvayWn6 3uy+2QoQ0mfG8AcCenrbTpHcKtb0DpmHJqLl5LvTkVaUKukvtbA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:17 2025 by rpki-client