$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: 4suO9Z2uf0fbcIjiGJohdduRTH2+WmcDH8KcRsHJKKk= Subject key identifier: 66:7B:9F:BD:CA:B2:D5:91:79:35:E5:9C:95:50:B4:22:85:8C:DC:00 Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 56F9FF172AB119CD158940C600C5BEA4A54B8D97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 023E Signing time: Sat 05 Apr 2025 13:31:01 +0000 Manifest this update: Sat 05 Apr 2025 13:26:01 +0000 Manifest next update: Tue 08 Apr 2025 13:54:01 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: YOxI5AruilwPeqn2JH6oNVlj6/QpOCkIyi3/nU6PJQs=) 2: 3230322e3138332e302e302f31392d3139203d3e20313331373336.roa (hash: VRIMxbKk2/BgJ4rNh3WEsQrmcL4C16eroJWi/c1DV6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f9:ff:17:2a:b1:19:cd:15:89:40:c6:00:c5:be:a4:a5:4b:8d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Apr 5 13:26:01 2025 GMT Not After : Apr 8 13:54:01 2025 GMT Subject: CN=667B9FBDCAB2D5917935E59C9550B422858CDC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:a2:06:15:d3:66:30:d0:5a:8a:e3:38:5d: 96:94:18:35:c6:4a:1c:93:7a:97:d5:ab:87:c6:b6: 12:74:4a:02:03:d7:77:07:10:54:53:13:75:30:d5: 7b:35:79:57:0c:0f:c8:13:8d:79:dc:fa:09:11:19: 83:55:b0:bf:1e:fe:9f:87:85:57:0b:d8:a3:29:eb: 36:f2:83:41:66:9f:a2:46:7b:b6:13:98:52:8c:68: 26:24:9f:2b:79:fa:0c:e2:82:45:73:bd:42:31:84: 47:17:08:82:72:72:0a:74:40:ea:ac:ac:14:ee:05: db:56:8a:ce:e3:1c:af:39:37:1a:fd:3a:91:6f:6a: 47:c5:f7:96:4a:64:77:b1:7d:8c:12:cd:83:66:06: f4:98:f9:a1:b8:98:d8:91:3f:ad:85:58:89:4e:4f: 8a:65:94:6a:36:d4:4c:05:3c:e6:04:1f:c7:e8:90: ff:1b:7f:ba:f2:44:35:d8:29:19:3f:ea:f6:7f:99: 37:59:e1:8d:8e:9e:83:26:5d:37:df:88:9a:a2:f9: 8a:41:11:7e:23:b5:e3:c6:fd:eb:b8:29:8f:c8:01: ce:66:cf:5b:98:c2:a2:6d:1b:f2:43:2e:78:a2:1e: 21:7a:11:86:d1:61:ee:bb:b7:ec:43:b1:06:cc:db: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7B:9F:BD:CA:B2:D5:91:79:35:E5:9C:95:50:B4:22:85:8C:DC:00 X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:99:39:a4:b6:f0:3c:aa:ea:16:d7:c0:30:2a:b4:b9:0e:51: 5d:ba:c2:29:ba:e8:a6:f5:25:4c:ae:c1:b0:06:ba:91:e8:f7: 03:7e:b5:80:67:6f:8d:43:6c:de:2c:f8:f7:78:84:3d:f6:c0: 9b:b5:fe:f0:52:e4:da:a7:fa:a7:18:70:a5:1e:c7:e0:f6:7d: f4:42:10:2c:1f:c4:ce:37:d9:fc:10:31:f4:5d:2a:5a:5c:54: 3d:c5:5d:d3:79:93:7e:29:4c:7e:a4:5b:ed:9e:f8:2e:94:2b: f5:3a:ec:90:95:51:93:e4:3f:24:f3:b7:d3:c3:97:ff:35:4b: bc:44:6c:69:4f:69:b4:f6:b1:5f:d7:32:10:d2:9d:31:08:05: 6d:68:c8:ee:bb:55:6f:eb:af:2f:5a:24:49:8b:23:42:79:b5: 03:ab:7f:00:f5:dc:52:3f:19:f4:e9:56:7c:f8:d9:44:ee:bf: a1:5a:49:10:3b:03:98:f3:80:bc:b1:b4:60:7d:08:ac:a7:1f: 5f:73:9c:c7:4d:58:df:8e:0f:47:d3:37:6c:d5:f9:7c:c1:30: ea:e9:3f:bc:fe:7b:f4:2e:4b:2e:f7:2a:8d:1e:40:7b:10:6e: 68:ff:68:59:f9:bb:c7:a7:0b:56:b6:d5:f6:1c:1f:a9:04:29: 70:3d:b2:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvn/FyqxGc0ViUDGAMW+pKVLjZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTA0MDUxMzI2MDFaFw0yNTA0MDgxMzU0MDFaMDMxMTAvBgNV BAMTKDY2N0I5RkJEQ0FCMkQ1OTE3OTM1RTU5Qzk1NTBCNDIyODU4Q0RDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaeKIGFdNmMNBaiuM4XZaUGDXG ShyTepfVq4fGthJ0SgID13cHEFRTE3Uw1Xs1eVcMD8gTjXnc+gkRGYNVsL8e/p+H hVcL2KMp6zbyg0Fmn6JGe7YTmFKMaCYknyt5+gzigkVzvUIxhEcXCIJycgp0QOqs rBTuBdtWis7jHK85Nxr9OpFvakfF95ZKZHexfYwSzYNmBvSY+aG4mNiRP62FWIlO T4pllGo21EwFPOYEH8fokP8bf7ryRDXYKRk/6vZ/mTdZ4Y2OnoMmXTffiJqi+YpB EX4jtePG/eu4KY/IAc5mz1uYwqJtG/JDLniiHiF6EYbRYe67t+xDsQbM2wKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZnufvcqy1ZF5NeWclVC0IoWM3AAwHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeZOaS28Dyq6hbXwDAqtLkOUV26wim66Kb1 JUyuwbAGupHo9wN+tYBnb41DbN4s+Pd4hD32wJu1/vBS5Nqn+qcYcKUex+D2ffRC ECwfxM432fwQMfRdKlpcVD3FXdN5k34pTH6kW+2e+C6UK/U67JCVUZPkPyTzt9PD l/81S7xEbGlPabT2sV/XMhDSnTEIBW1oyO67VW/rry9aJEmLI0J5tQOrfwD13FI/ GfTpVnz42UTuv6FaSRA7A5jzgLyxtGB9CKynH19znMdNWN+OD0fTN2zV+XzBMOrp P7z+e/QuSy73Ko0eQHsQbmj/aFn5u8enC1a21fYcH6kEKXA9snk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:02 2025 by rpki-client