$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: yLQ2VnLz+IpgbdbAdgRQaK1dMu1msut/liKbjLq9gf4= Subject key identifier: 30:D1:97:45:1D:BE:78:F2:14:F8:36:37:18:7C:C0:8C:0E:B1:B1:DD Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 2D04D15AB364C30AA48FC2BF9EEF3B03D3DF377B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 0238 Signing time: Thu 03 Apr 2025 22:11:08 +0000 Manifest this update: Thu 03 Apr 2025 22:06:08 +0000 Manifest next update: Mon 07 Apr 2025 06:57:08 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: Ui8vD0TxTacnUlVWU2gyI1o+nphjyVflMrJbL7tjFv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:04:d1:5a:b3:64:c3:0a:a4:8f:c2:bf:9e:ef:3b:03:d3:df:37:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Apr 3 22:06:08 2025 GMT Not After : Apr 7 06:57:08 2025 GMT Subject: CN=30D197451DBE78F214F83637187CC08C0EB1B1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:43:2e:1e:b9:ec:a4:06:0c:0e:04:23:c9: 90:61:50:07:cc:ee:87:a5:78:d0:d7:03:7f:99:b9: c4:ec:90:cd:e9:26:d6:f9:6c:e8:09:a2:91:01:a9: 5a:bd:97:d7:b1:35:f3:3b:9a:a7:82:53:14:5f:e5: 8b:62:26:95:68:85:ff:44:24:58:67:a1:4b:67:65: 75:11:c8:07:8f:70:ea:ba:e8:1c:94:e1:2f:3f:dd: 86:ad:cf:f3:99:29:f3:e4:70:cc:31:4e:03:fe:13: f4:40:13:43:a8:c3:4a:df:a0:a7:75:ca:77:3a:73: 91:64:25:49:b9:b5:a1:83:e7:5c:38:08:21:31:fe: ad:91:4f:7b:30:a6:1f:90:33:6e:a8:92:1f:d0:b7: 11:47:8a:1d:81:ba:dc:6c:1f:ae:0e:75:22:8c:d5: 79:88:90:55:1c:ad:53:ac:ca:15:91:44:25:41:58: a0:e5:31:f2:8b:59:0f:dd:bc:02:cc:5f:01:18:a6: 9a:53:5d:8e:37:cb:d8:7a:a6:c3:38:64:b4:d2:ef: 30:cd:f2:96:09:83:c1:82:ae:b1:bf:32:93:dd:25: 7c:e1:94:9e:6a:92:89:d2:c0:c9:de:4f:b8:84:20: ab:d8:a8:eb:6c:9b:2e:c3:a2:f2:ab:6c:53:6c:f5: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:97:45:1D:BE:78:F2:14:F8:36:37:18:7C:C0:8C:0E:B1:B1:DD X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:10:88:b8:53:e7:37:45:46:84:e2:e2:ff:83:61:54:4c:e7: 9e:f0:21:0c:d8:7c:b1:e6:a1:cb:eb:f2:09:63:23:36:20:b2: a3:96:fd:87:2f:67:a6:17:34:bf:1d:c0:79:f5:68:a2:ef:c6: 18:bf:ff:33:0d:9c:87:e3:bb:69:de:b3:fd:38:88:e7:39:e6: b8:8c:f2:41:f5:57:c4:a4:05:d9:ce:ed:29:55:bb:45:fe:89: 85:32:0c:b4:b5:83:51:c1:f1:89:4f:49:c4:77:52:45:e9:55: 24:c1:d8:38:fb:42:2a:6e:83:36:fb:b8:04:a0:7c:9f:72:87: b2:00:cd:1b:9a:f9:0b:11:e1:e6:f0:fc:25:6e:bb:70:15:d9: 3f:99:19:3f:96:d1:02:e4:a8:03:56:b4:4d:3c:73:a2:2e:89: 91:3e:ee:8a:53:3d:66:f3:6a:1a:04:bc:14:a8:cd:be:a5:bd: d6:19:8c:3f:16:b9:7a:cd:ae:32:30:77:28:2a:7a:99:10:33: 87:f9:1b:1d:76:f2:3b:66:35:b1:73:9a:19:02:0a:44:e5:18: 12:15:17:49:5b:d4:8d:0c:2b:c1:b2:ac:06:3c:19:36:0a:ed: 01:f4:f5:0b:df:2e:93:e3:0f:5a:74:55:d9:1f:dc:ba:7d:19: 84:93:e4:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQTRWrNkwwqkj8K/nu87A9PfN3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTA0MDMyMjA2MDhaFw0yNTA0MDcwNjU3MDhaMDMxMTAvBgNV BAMTKDMwRDE5NzQ1MURCRTc4RjIxNEY4MzYzNzE4N0NDMDhDMEVCMUIxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTg0MuHrnspAYMDgQjyZBhUAfM 7oeleNDXA3+ZucTskM3pJtb5bOgJopEBqVq9l9exNfM7mqeCUxRf5YtiJpVohf9E JFhnoUtnZXURyAePcOq66ByU4S8/3Yatz/OZKfPkcMwxTgP+E/RAE0Oow0rfoKd1 ync6c5FkJUm5taGD51w4CCEx/q2RT3swph+QM26okh/QtxFHih2ButxsH64OdSKM 1XmIkFUcrVOsyhWRRCVBWKDlMfKLWQ/dvALMXwEYpppTXY43y9h6psM4ZLTS7zDN 8pYJg8GCrrG/MpPdJXzhlJ5qkonSwMneT7iEIKvYqOtsmy7DovKrbFNs9e1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNGXRR2+ePIU+DY3GHzAjA6xsd0wHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoQiLhT5zdFRoTi4v+DYVRM557wIQzYfLHm ocvr8gljIzYgsqOW/YcvZ6YXNL8dwHn1aKLvxhi//zMNnIfju2nes/04iOc55riM 8kH1V8SkBdnO7SlVu0X+iYUyDLS1g1HB8YlPScR3UkXpVSTB2Dj7Qipugzb7uASg fJ9yh7IAzRua+QsR4ebw/CVuu3AV2T+ZGT+W0QLkqANWtE08c6IuiZE+7opTPWbz ahoEvBSozb6lvdYZjD8WuXrNrjIwdygqepkQM4f5Gx128jtmNbFzmhkCCkTlGBIV F0lb1I0MK8GyrAY8GTYK7QH09QvfLpPjD1p0Vdkf3Lp9GYST5F4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:59 2025 by rpki-client