$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: ciyH4TNYlg2rhwf52+yR6sD4qVXDOv13jc5QTkkAAyE= Subject key identifier: 08:97:A0:A9:26:E4:12:48:68:AE:15:90:AD:36:AB:5C:EE:2C:4C:36 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 0D40A738D4A9C9FE5D0D027203A2AF6C6403B2E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 01C9 Signing time: Fri 04 Apr 2025 19:10:36 +0000 Manifest this update: Fri 04 Apr 2025 19:05:36 +0000 Manifest next update: Tue 08 Apr 2025 02:58:36 +0000 Files and hashes: 1: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: UeRCOjo57wOeUyYDJJ1YZ67dLYbNF8SefWTH/DR2yv8=) 2: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: bxs+Vg9nLJeLytnTsMnbGkyV97Xk9fKivtp/CohL1ig=) 3: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: w12N/uYx27kZZwmhbBAPGCXLuSyR2+QhhurllIrq3Bc=) 4: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: nbEpopwiojWgYGehW+g9TqMlbT1/tFwqFVAFzwn9bm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:a7:38:d4:a9:c9:fe:5d:0d:02:72:03:a2:af:6c:64:03:b2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Apr 4 19:05:36 2025 GMT Not After : Apr 8 02:58:36 2025 GMT Subject: CN=0897A0A926E4124868AE1590AD36AB5CEE2C4C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:8b:11:db:e3:0c:2b:8f:34:d1:1d:d4:60: 24:20:b8:90:7e:d3:92:ec:44:63:9e:d8:9e:e3:6a: 90:42:d6:70:aa:8f:b5:39:47:43:d9:51:4c:da:42: 5a:2f:fb:db:cb:13:0f:3d:78:e4:ab:6f:f4:e5:ad: 18:bf:1f:6e:74:4f:5a:6e:51:35:28:36:09:99:8d: ae:a8:f4:5b:b0:a5:9e:c8:b6:f5:3e:fc:48:6d:14: a0:d5:53:08:8d:91:07:3f:1e:ee:cf:5e:96:fd:4b: b3:2f:60:41:bc:5b:6e:14:b5:90:fb:a5:a6:c0:cd: 2a:38:5f:18:d0:82:c4:2f:a4:f3:0a:8d:73:b3:09: 86:1f:ba:89:15:83:46:84:96:ca:6e:43:47:c8:83: 98:d7:5d:53:ba:7f:99:b2:36:43:b8:69:3e:10:2a: 04:24:3d:9f:c8:dc:d3:e4:74:d7:7f:8c:76:32:89: e6:bc:ad:ee:0b:76:c2:eb:cd:ea:34:c4:37:eb:8d: 20:3d:0a:95:c9:d5:5d:b5:1e:fd:0c:c4:73:2b:2f: 81:3b:a2:35:bd:bf:5d:a5:b7:49:e4:14:9f:40:3b: cb:56:c8:aa:8e:4c:a4:02:69:62:4f:17:79:81:34: e7:f3:bc:a9:50:66:21:3e:c1:27:a7:69:a4:96:4b: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:97:A0:A9:26:E4:12:48:68:AE:15:90:AD:36:AB:5C:EE:2C:4C:36 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2a:ac:71:6c:a6:0b:cd:b4:97:f5:b2:c5:d9:e1:f2:ba:49: 6c:90:f2:ba:6a:0e:23:aa:69:ae:e0:06:9b:e3:46:f7:ca:1d: 60:c8:32:04:cb:ed:80:98:0a:98:cc:d4:d3:d2:10:87:d9:7e: 39:e7:5c:ca:09:5b:d5:65:c2:08:bb:d1:e3:ba:e0:d3:b2:c4: 17:6e:64:b2:36:af:a6:fb:55:1a:d7:49:eb:54:e0:92:ac:f0: 13:b4:b7:f1:29:6c:ad:0b:f8:29:46:54:1a:0b:b2:b3:e9:bc: 4d:e3:d9:32:1b:20:96:48:35:e5:7a:b8:ff:9b:bd:52:33:c6: 3e:a2:ba:d5:34:40:a3:14:dc:8d:28:05:a0:7f:c1:b6:98:40: ee:3c:45:16:5f:a0:8e:74:9e:55:6d:ec:84:17:e4:98:1b:3a: 6b:ee:c8:96:49:68:38:6b:86:4d:dc:72:20:79:da:c5:9f:ba: 26:82:1b:ec:b8:b5:9d:cf:6c:03:52:b3:f0:8e:76:97:64:ed: 10:d2:f6:0b:96:33:92:05:48:51:e1:c3:1a:ac:1d:8a:20:d2: 2e:80:22:b8:7d:0c:e2:37:92:41:43:2c:45:a6:59:5b:cf:fe: 8d:2d:c8:8d:2b:23:79:78:53:78:ca:10:25:fe:ae:59:81:28: 18:ba:1f:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUCnONSpyf5dDQJyA6KvbGQDsuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTA0MDQxOTA1MzZaFw0yNTA0MDgwMjU4MzZaMDMxMTAvBgNV BAMTKDA4OTdBMEE5MjZFNDEyNDg2OEFFMTU5MEFEMzZBQjVDRUUyQzRDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQYsR2+MMK4800R3UYCQguJB+ 05LsRGOe2J7japBC1nCqj7U5R0PZUUzaQlov+9vLEw89eOSrb/TlrRi/H250T1pu UTUoNgmZja6o9FuwpZ7ItvU+/EhtFKDVUwiNkQc/Hu7PXpb9S7MvYEG8W24UtZD7 pabAzSo4XxjQgsQvpPMKjXOzCYYfuokVg0aElspuQ0fIg5jXXVO6f5myNkO4aT4Q KgQkPZ/I3NPkdNd/jHYyiea8re4LdsLrzeo0xDfrjSA9CpXJ1V21Hv0MxHMrL4E7 ojW9v12lt0nkFJ9AO8tWyKqOTKQCaWJPF3mBNOfzvKlQZiE+wSenaaSWS4ApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJegqSbkEkhorhWQrTarXO4sTDYwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgqrHFspgvNtJf1ssXZ4fK6SWyQ8rpqDiOq aa7gBpvjRvfKHWDIMgTL7YCYCpjM1NPSEIfZfjnnXMoJW9Vlwgi70eO64NOyxBdu ZLI2r6b7VRrXSetU4JKs8BO0t/EpbK0L+ClGVBoLsrPpvE3j2TIbIJZINeV6uP+b vVIzxj6iutU0QKMU3I0oBaB/wbaYQO48RRZfoI50nlVt7IQX5JgbOmvuyJZJaDhr hk3cciB52sWfuiaCG+y4tZ3PbANSs/COdpdk7RDS9guWM5IFSFHhwxqsHYog0i6A Irh9DOI3kkFDLEWmWVvP/o0tyI0rI3l4U3jKECX+rlmBKBi6H1M= -----END CERTIFICATE-----Generated at Sat Apr 5 21:56:10 2025 by rpki-client