$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: +baqEOfXLVKSFu/FB6+QsLYF7tBZgwsR/xhXYWWaAR0= Subject key identifier: 75:30:B7:1F:9E:C3:05:6A:FC:BC:45:5F:B3:CF:09:1B:15:10:DA:92 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 505951426E70B9A42C7C159BC3D95001F1262A06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 01FF Signing time: Sun 06 Apr 2025 05:51:22 +0000 Manifest this update: Sun 06 Apr 2025 05:46:22 +0000 Manifest next update: Wed 09 Apr 2025 13:57:22 +0000 Files and hashes: 1: 3130332e3136392e312e302f32342d3234203d3e20313432333235.roa (hash: QVwXZiEUDkzJTFJTP2kak0B1PFcbgFpWZtYiCacvLzc=) 2: 3130332e3136392e302e302f32342d3234203d3e20313432333235.roa (hash: BHsnMPpdFZL0d9XOfOmW0tnCHE686u/F/UGOnWHulsY=) 3: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: 1sU2UfyvONTP2FhryPBjMKS9oRSWdAbrR0AlEPnlcs8=) 4: 3130332e3136392e302e302f32332d3234203d3e20313432333235.roa (hash: kS5BqB0fQsybN4YzA6LLybAUUgYhEkwegd5mZxZdL2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 13:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:59:51:42:6e:70:b9:a4:2c:7c:15:9b:c3:d9:50:01:f1:26:2a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Apr 6 05:46:22 2025 GMT Not After : Apr 9 13:57:22 2025 GMT Subject: CN=7530B71F9EC3056AFCBC455FB3CF091B1510DA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:3d:fd:05:bf:b3:1a:5e:48:de:d7:26:3d: 84:f4:86:c7:a9:d6:86:04:3e:42:d8:0e:ec:e2:b1: e0:35:18:b9:0b:6b:36:95:05:d3:ef:32:d3:46:2e: 12:d5:5b:09:5f:64:bb:f9:af:d6:51:7a:5c:18:f7: 0d:fb:4b:9b:a2:6f:5c:a9:b5:45:9f:20:b5:02:11: 54:c1:a4:0a:14:8b:2c:7f:a0:1e:cb:0f:b8:f0:d8: b9:47:2e:a2:4d:9a:fb:ac:1e:0a:40:d2:6a:ea:6e: a9:8b:01:25:ed:65:bc:c9:1c:65:d7:d7:53:3d:26: 20:c5:2b:48:10:5b:1d:41:f7:c0:bf:0a:fa:d8:af: 83:f6:2d:0d:87:50:b7:9c:10:0a:51:33:1a:97:f4: 83:94:83:57:19:20:c0:89:ab:3b:4c:e2:5a:bb:76: b9:8b:16:33:72:87:11:a1:a0:4a:81:cc:cd:37:a2: 18:c6:75:cc:f4:84:b1:7c:02:57:fe:9c:87:67:a4: ef:47:25:d9:90:64:96:5b:7c:f6:58:24:d7:e3:e2: 4f:54:76:66:df:bf:74:69:6c:25:cf:8d:01:16:5c: 2c:1f:77:82:ad:d0:65:a9:6f:42:46:d1:a2:50:49: 7e:31:db:be:cb:34:f1:47:a0:ca:69:15:66:1a:4a: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:30:B7:1F:9E:C3:05:6A:FC:BC:45:5F:B3:CF:09:1B:15:10:DA:92 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:55:09:be:02:b7:9e:85:85:9e:eb:c0:a3:a0:66:29:d9:76: 40:0d:1f:f1:75:3b:56:c1:cc:da:df:c7:e3:88:28:26:61:5f: 44:8d:b2:57:5f:51:c7:c9:d9:45:71:da:ee:7c:3b:48:4c:05: b3:89:96:da:f8:c0:db:fa:c1:24:12:98:16:ab:15:ed:f9:e5: 12:03:5c:e8:3e:62:8f:30:35:00:e8:88:a5:8d:80:8c:06:32: 23:67:18:93:62:c2:85:4f:22:90:d2:f7:34:4f:4a:17:19:e3: 6d:d3:32:6c:d2:af:95:c9:8e:bb:2b:ab:17:49:46:67:36:9e: 34:14:6d:25:d2:88:c0:8d:9a:46:29:bc:9f:9c:23:fc:8a:78: d7:05:43:6c:f7:74:59:82:1a:8f:e6:18:0e:cb:67:2a:7d:bc: f5:79:6c:3b:e1:d4:99:8b:38:67:ed:e7:ea:20:18:0f:55:2a: 71:e7:98:e8:88:82:b6:db:03:4d:2f:95:d9:84:0b:61:97:4d: ad:d1:f7:6f:ee:a3:8e:54:1d:51:fb:00:be:b8:b5:d4:8d:7e: 5d:30:2f:fc:9f:e3:ed:33:27:3a:4b:ca:c6:d3:d5:f5:94:89: f3:33:9f:38:ca:20:a4:ac:7f:9b:70:9d:55:cf:ba:d2:31:d1: 3a:2b:06:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFlRQm5wuaQsfBWbw9lQAfEmKgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNTA0MDYwNTQ2MjJaFw0yNTA0MDkxMzU3MjJaMDMxMTAvBgNV BAMTKDc1MzBCNzFGOUVDMzA1NkFGQ0JDNDU1RkIzQ0YwOTFCMTUxMERBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtD39Bb+zGl5I3tcmPYT0hsep 1oYEPkLYDuziseA1GLkLazaVBdPvMtNGLhLVWwlfZLv5r9ZRelwY9w37S5uib1yp tUWfILUCEVTBpAoUiyx/oB7LD7jw2LlHLqJNmvusHgpA0mrqbqmLASXtZbzJHGXX 11M9JiDFK0gQWx1B98C/CvrYr4P2LQ2HULecEApRMxqX9IOUg1cZIMCJqztM4lq7 drmLFjNyhxGhoEqBzM03ohjGdcz0hLF8Alf+nIdnpO9HJdmQZJZbfPZYJNfj4k9U dmbfv3RpbCXPjQEWXCwfd4Kt0GWpb0JG0aJQSX4x277LNPFHoMppFWYaSksVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdTC3H57DBWr8vEVfs88JGxUQ2pIwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBVCb4Ct56FhZ7rwKOgZinZdkANH/F1O1bB zNrfx+OIKCZhX0SNsldfUcfJ2UVx2u58O0hMBbOJltr4wNv6wSQSmBarFe355RID XOg+Yo8wNQDoiKWNgIwGMiNnGJNiwoVPIpDS9zRPShcZ423TMmzSr5XJjrsrqxdJ Rmc2njQUbSXSiMCNmkYpvJ+cI/yKeNcFQ2z3dFmCGo/mGA7LZyp9vPV5bDvh1JmL OGft5+ogGA9VKnHnmOiIgrbbA00vldmEC2GXTa3R92/uo45UHVH7AL64tdSNfl0w L/yf4+0zJzpLysbT1fWUifMznzjKIKSsf5twnVXPutIx0TorBgg= -----END CERTIFICATE-----Generated at Tue Apr 8 15:55:38 2025 by rpki-client