$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: W7rvVFslvQ4C2Wsx8eWdjtiRrHKhv3z/Et7Kst9sjRs= Subject key identifier: 47:70:3A:38:B2:DD:B7:3C:61:46:0D:2A:83:29:0B:B6:26:FA:D9:BF Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 44211D2DD1BF8BF4A3FD687F42B896F77E977007 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 0410 Signing time: Sat 05 Apr 2025 04:31:36 +0000 Manifest this update: Sat 05 Apr 2025 04:26:36 +0000 Manifest next update: Tue 08 Apr 2025 06:09:36 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: jXDgy/eb14qmJfmNT0dKlIUN6+pIglpydCTus9xQXkw=) 2: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: 64bLCTmFh4WCvMW9MUoDg+McRLRrHkjAUgkSGqciOhg=) 3: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: rXrrXvyCDd8NdDQpC4YJVYW6xZrnJFF55E2ij+QGKtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:21:1d:2d:d1:bf:8b:f4:a3:fd:68:7f:42:b8:96:f7:7e:97:70:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Apr 5 04:26:36 2025 GMT Not After : Apr 8 06:09:36 2025 GMT Subject: CN=47703A38B2DDB73C61460D2A83290BB626FAD9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:86:bb:8d:06:cc:17:4c:d1:f1:92:46:87: 3f:6e:b2:37:7c:97:b5:2f:60:e8:86:55:28:2b:a2: 7d:cf:1f:14:31:29:db:6b:7c:65:99:0c:f1:d7:2e: 4f:6b:31:1f:e3:d6:e3:47:21:e5:c7:78:21:f5:7f: cb:04:80:53:7e:e6:07:d2:f8:1f:c0:8b:be:7e:e9: b5:1f:57:40:5d:50:61:c1:1f:c5:63:01:b5:6c:74: bd:87:1a:6e:b7:77:de:2a:31:90:3c:ae:4b:dd:ba: ac:57:43:ab:ac:6b:96:a4:10:e6:5e:cc:d3:a3:81: c0:b2:ca:b5:a3:37:48:e7:3f:d0:c1:d3:46:ee:7e: 19:52:a2:6c:bd:6a:0f:1c:fb:e6:f7:0b:a5:69:53: 7e:43:9a:1c:aa:d1:bf:0c:29:cb:23:d6:a8:0a:80: 26:58:6e:fd:61:a2:81:5c:ac:d1:bc:f5:c1:fd:c2: 6e:e4:53:8b:17:61:9c:3c:6d:35:9a:72:e6:4c:61: 9c:9b:06:e1:5b:78:3e:80:c1:0b:12:f1:ef:9e:d8: 6f:d3:07:7e:7d:ee:9f:1e:46:ac:82:55:03:fa:ce: ed:fa:45:2f:71:a8:11:8f:15:6e:ef:a6:d3:d6:2e: c4:4f:99:aa:8b:14:cb:3c:26:5c:e7:08:09:d7:68: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:3A:38:B2:DD:B7:3C:61:46:0D:2A:83:29:0B:B6:26:FA:D9:BF X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:af:b4:53:c8:45:f2:48:dc:ce:56:47:5a:a7:af:54:49:c9: 57:19:e2:91:c4:8a:14:0f:43:c8:8f:82:b2:89:b9:d4:e1:6d: 76:95:a1:16:db:b6:e3:c8:b6:e1:44:7a:84:b0:dd:ee:43:1f: 61:0c:af:f7:b2:5e:56:d3:59:9f:7e:eb:93:b0:da:26:9c:9f: c0:86:a5:3a:c5:62:44:db:7b:d7:b3:cb:ab:da:0d:f9:3b:3c: 3b:cb:45:a3:72:6f:af:61:70:1a:ac:5d:0a:10:2b:06:f1:7e: 26:14:ef:84:57:dd:ef:93:c4:90:de:e5:2b:40:37:bf:9d:90: 57:1f:9e:18:a8:0c:b6:c9:4e:81:28:e2:22:fd:67:6e:5b:de: aa:0e:dc:9c:3d:f1:88:5e:5a:39:eb:27:db:f0:68:23:ba:5d: 7d:ba:d1:2e:3f:49:67:0f:ed:06:65:c9:3f:62:d1:63:05:a2: 5a:3f:74:41:d0:d8:7a:3d:14:a4:83:b9:f8:5c:fb:e7:b9:5f: 6e:86:e6:22:5f:83:18:f5:cc:f9:c7:b8:45:39:c8:8b:f9:2f: 59:70:2b:b9:26:ba:dc:ee:6d:75:f8:22:68:a6:6c:31:66:fa: 4f:a6:65:b6:d0:67:36:22:d2:80:59:c7:bd:ba:63:97:bd:1a: 6c:ed:65:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCEdLdG/i/Sj/Wh/QriW936XcAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTA0MDUwNDI2MzZaFw0yNTA0MDgwNjA5MzZaMDMxMTAvBgNV BAMTKDQ3NzAzQTM4QjJEREI3M0M2MTQ2MEQyQTgzMjkwQkI2MjZGQUQ5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pYa7jQbMF0zR8ZJGhz9usjd8 l7UvYOiGVSgron3PHxQxKdtrfGWZDPHXLk9rMR/j1uNHIeXHeCH1f8sEgFN+5gfS +B/Ai75+6bUfV0BdUGHBH8VjAbVsdL2HGm63d94qMZA8rkvduqxXQ6usa5akEOZe zNOjgcCyyrWjN0jnP9DB00bufhlSomy9ag8c++b3C6VpU35Dmhyq0b8MKcsj1qgK gCZYbv1hooFcrNG89cH9wm7kU4sXYZw8bTWacuZMYZybBuFbeD6AwQsS8e+e2G/T B3597p8eRqyCVQP6zu36RS9xqBGPFW7vptPWLsRPmaqLFMs8JlznCAnXaHV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR3A6OLLdtzxhRg0qgykLtib62b8wHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuvtFPIRfJI3M5WR1qnr1RJyVcZ4pHEihQP Q8iPgrKJudThbXaVoRbbtuPItuFEeoSw3e5DH2EMr/eyXlbTWZ9+65Ow2iacn8CG pTrFYkTbe9ezy6vaDfk7PDvLRaNyb69hcBqsXQoQKwbxfiYU74RX3e+TxJDe5StA N7+dkFcfnhioDLbJToEo4iL9Z25b3qoO3Jw98YheWjnrJ9vwaCO6XX260S4/SWcP 7QZlyT9i0WMFolo/dEHQ2Ho9FKSDufhc++e5X26G5iJfgxj1zPnHuEU5yIv5L1lw K7kmutzubXX4ImimbDFm+k+mZbbQZzYi0oBZx726Y5e9GmztZcQ= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:31 2025 by rpki-client