$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json) Hash identifier: 1s8WEdN+x7H1PTR1HkfN1kJqhH/WY9eNejSbt0iIUhA= Subject key identifier: 94:BD:03:E2:D1:B0:5E:CA:63:60:B0:14:71:2E:8C:B9:DA:EB:C4:1D Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Certificate serial: 251F7DCCAD3F0C193F3929244CB8A3948268DB3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft Manifest number: 014D Signing time: Sat 05 Apr 2025 09:20:59 +0000 Manifest this update: Sat 05 Apr 2025 09:15:59 +0000 Manifest next update: Tue 08 Apr 2025 13:33:59 +0000 Files and hashes: 1: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: Z7Z02l6lwQScJffXxbcOwRM3DR/Zcud+xbv6JirEUW0=) 2: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: E2z3KSns6iTpnPXpRNJQCkLuXAdqTPQfcSqYdPzsxRI=) 3: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: tZLOVEN9BzIwsPkuvjOMWZLetBVgMmvyuWtZ50RMXJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1f:7d:cc:ad:3f:0c:19:3f:39:29:24:4c:b8:a3:94:82:68:db:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Validity Not Before: Apr 5 09:15:59 2025 GMT Not After : Apr 8 13:33:59 2025 GMT Subject: CN=94BD03E2D1B05ECA6360B014712E8CB9DAEBC41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:ae:41:e2:3c:7b:8f:66:fc:bc:00:19:da: 7b:82:5a:04:42:3c:62:72:41:b5:fb:a6:65:c7:38: c5:0c:df:a6:22:0f:d8:da:67:c3:75:ac:2a:97:37: 87:41:2d:c4:4c:41:54:92:19:44:c5:6a:6f:ea:e1: ea:ca:bb:ea:a3:df:a4:0f:21:da:29:92:a9:30:a2: f2:3a:73:f2:81:37:28:4f:d0:2a:49:60:13:60:02: d4:2c:1b:9f:46:b0:94:a4:63:7d:71:07:db:20:37: 93:9c:a5:29:c3:45:08:26:29:b0:52:a2:87:49:86: 0a:a9:87:8c:67:e3:97:1b:27:ad:eb:fc:d8:a1:2c: eb:18:90:ca:37:e4:0d:54:96:8a:df:81:3d:f9:86: 3c:20:66:a5:04:2b:41:a5:b2:d5:f9:42:ae:9d:2b: 88:6d:3e:d6:42:73:39:b2:e5:58:01:b0:2f:bf:fa: c1:bf:30:b7:23:aa:e1:ed:2d:e2:fa:d1:36:ea:fa: 02:8a:fe:95:13:9f:9e:bc:69:ba:b9:3c:43:38:43: dc:ef:a4:cc:6d:2d:d7:d9:1f:a0:31:99:31:5c:7b: 30:4b:3b:7c:78:94:b9:be:dc:dc:9a:61:d8:81:f8: cb:0f:22:ed:11:f1:1c:82:4e:34:46:ad:7f:9c:d4: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:03:E2:D1:B0:5E:CA:63:60:B0:14:71:2E:8C:B9:DA:EB:C4:1D X509v3 Authority Key Identifier: keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:76:2d:d6:5f:7b:20:f0:43:3b:d6:83:14:9e:a0:a7:ef:bd: f2:57:a8:a0:c5:02:ec:06:f0:23:b6:2b:db:e2:b7:95:39:92: c2:50:97:99:f6:11:72:3a:2c:f1:20:7f:7d:e0:19:65:ac:5d: 97:ff:e9:7f:90:e5:5c:c9:75:bf:9c:21:05:ff:e6:7d:04:f0: 0c:05:c6:ce:49:20:28:5d:47:94:87:5e:38:33:b3:6d:37:32: d7:f3:be:e3:84:c6:95:f2:d5:47:2b:cf:36:0a:b9:70:6b:52: a6:ec:32:87:5f:92:2d:bb:75:a5:c7:38:af:9e:d7:44:0a:12: d9:8e:f8:21:ff:1a:84:4a:5c:ec:aa:4b:90:65:97:5f:63:f0: 6f:c4:15:2d:57:ed:fe:6d:3f:c6:b1:32:f7:20:71:95:a1:c0: 82:90:d7:8b:05:ff:0c:f8:9f:16:13:0a:f9:c7:29:06:03:3b: 53:62:19:f1:3c:e4:e6:e3:5a:2b:e6:09:5d:fd:cc:72:a2:65: ed:e8:96:20:c4:c5:d7:e4:4e:ba:b6:82:b3:c7:40:49:9d:af: 37:17:71:9c:fd:58:72:12:88:ab:73:b1:5a:18:54:ef:46:54: fc:aa:64:6d:2e:ae:87:21:11:7b:e5:e7:7a:34:28:ff:14:0b: af:e7:ef:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJR99zK0/DBk/OSkkTLijlIJo2zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD NEU5NzhFNTAeFw0yNTA0MDUwOTE1NTlaFw0yNTA0MDgxMzMzNTlaMDMxMTAvBgNV BAMTKDk0QkQwM0UyRDFCMDVFQ0E2MzYwQjAxNDcxMkU4Q0I5REFFQkM0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLq5B4jx7j2b8vAAZ2nuCWgRC PGJyQbX7pmXHOMUM36YiD9jaZ8N1rCqXN4dBLcRMQVSSGUTFam/q4erKu+qj36QP IdopkqkwovI6c/KBNyhP0CpJYBNgAtQsG59GsJSkY31xB9sgN5OcpSnDRQgmKbBS oodJhgqph4xn45cbJ63r/NihLOsYkMo35A1UlorfgT35hjwgZqUEK0GlstX5Qq6d K4htPtZCczmy5VgBsC+/+sG/MLcjquHtLeL60Tbq+gKK/pUTn568abq5PEM4Q9zv pMxtLdfZH6AxmTFcezBLO3x4lLm+3NyaYdiB+MsPIu0R8RyCTjRGrX+c1GxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlL0D4tGwXspjYLAUcS6MudrrxB0wHwYDVR0j BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2 MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5 NzhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIx QjRDNEU5NzhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ12LdZfeyDwQzvWgxSeoKfvvfJXqKDFAuwG 8CO2K9vit5U5ksJQl5n2EXI6LPEgf33gGWWsXZf/6X+Q5VzJdb+cIQX/5n0E8AwF xs5JIChdR5SHXjgzs203MtfzvuOExpXy1UcrzzYKuXBrUqbsModfki27daXHOK+e 10QKEtmO+CH/GoRKXOyqS5Bll19j8G/EFS1X7f5tP8axMvcgcZWhwIKQ14sF/wz4 nxYTCvnHKQYDO1NiGfE85ObjWivmCV39zHKiZe3oliDExdfkTrq2grPHQEmdrzcX cZz9WHISiKtzsVoYVO9GVPyqZG0urochEXvl53o0KP8UC6/n71E= -----END CERTIFICATE-----Generated at Sun Apr 6 03:36:20 2025 by rpki-client