$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: 5uUzsW+PBDID+jg/KHR8laJp8J6gyLZtgVX8WKZMKqQ= Subject key identifier: C9:46:65:19:40:8E:C5:1F:46:5F:3B:7C:6A:E6:3D:93:E5:F8:D6:F3 Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 49AD0043F2B9014DEE2E626661AA0E75CA0C9BED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 01CB Signing time: Sat 05 Apr 2025 09:00:51 +0000 Manifest this update: Sat 05 Apr 2025 08:55:51 +0000 Manifest next update: Tue 08 Apr 2025 13:17:51 +0000 Files and hashes: 1: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: /98DMXkzU+QDHjIDKoOYU1wcZedvwYZgWNBABDhsRv0=) 2: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: OE9RtKqhojdfzH9kFs86w9tyCrPEEEo7rGv2ge+gePU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ad:00:43:f2:b9:01:4d:ee:2e:62:66:61:aa:0e:75:ca:0c:9b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Apr 5 08:55:51 2025 GMT Not After : Apr 8 13:17:51 2025 GMT Subject: CN=C9466519408EC51F465F3B7C6AE63D93E5F8D6F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:6c:26:3a:00:21:55:74:67:7f:86:ee:56: 3d:e3:dd:30:42:07:fc:84:3e:f9:f6:04:76:a7:bd: d2:22:a6:9f:de:f2:c0:09:b4:7f:11:ea:d6:38:9b: 03:08:d0:ad:0b:62:4e:74:ed:ca:13:80:7f:72:b2: 6e:30:ba:1a:88:64:72:52:98:82:76:eb:c1:c9:d7: 6e:d6:8d:6f:0a:95:03:51:51:ed:09:42:81:40:9b: e2:7b:22:99:6c:f9:34:01:ca:b4:cb:d3:04:5c:32: 28:fd:d6:8b:72:3f:14:7e:b0:23:db:fa:26:f8:0e: be:35:94:63:15:1e:67:43:24:25:f0:92:37:11:04: 28:68:34:6b:c4:b3:e9:99:6a:b0:3f:86:82:37:52: 6e:f5:b9:a4:8f:06:b0:17:f0:07:40:4d:ac:72:da: 6a:59:97:41:16:f9:fd:41:f5:1d:d4:2e:ee:fa:8c: f7:89:42:6a:c8:7a:2d:13:cd:8a:9f:6e:7c:94:8f: f9:6a:82:0f:17:f5:80:7c:c1:4c:88:57:4e:4a:9d: c7:32:f2:68:5d:35:a0:cb:ff:b9:8f:39:07:ac:0c: 66:e4:60:68:68:70:11:5c:03:66:76:5d:38:2d:d9: 40:0b:1a:dd:de:a7:f5:06:8d:d7:c6:b2:2f:f2:94: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:46:65:19:40:8E:C5:1F:46:5F:3B:7C:6A:E6:3D:93:E5:F8:D6:F3 X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0b:aa:8b:7e:16:53:71:99:88:c2:3c:ff:37:e6:89:90:0d: 11:3f:50:5c:fa:45:c6:a5:da:77:dd:d8:db:c9:d6:9b:ec:65: 22:db:88:cb:8f:40:81:c3:33:42:8a:51:4b:0d:c9:66:47:0b: cb:3a:74:63:86:f1:d2:4b:e2:0f:08:1d:70:12:33:26:8d:d2: 7d:51:bf:a3:f0:d0:57:44:4c:2b:33:67:90:cd:e0:f5:ac:5b: 06:fb:4b:e4:8e:52:1b:c4:a8:f7:93:f4:ab:7a:63:6e:09:ba: e6:6f:25:40:89:8c:c7:34:df:d7:81:49:62:e4:79:d1:e0:2d: 14:b9:1e:40:3a:bb:f7:aa:c0:64:0d:af:fe:71:63:54:c3:2c: 11:b1:a5:56:1f:6c:09:5f:cc:a4:13:bc:5e:fd:c5:cf:11:aa: d9:66:cc:82:1b:a6:51:11:f8:e5:e4:93:f5:7c:1b:fc:2e:6a: 95:25:1d:1f:32:10:8e:81:cc:f1:94:c0:02:03:b8:0b:36:69: 9c:3d:4d:06:06:04:1b:67:e5:19:12:a3:3d:7c:95:85:4c:8c: 36:a2:8d:7b:31:9c:df:32:52:79:d6:3a:af:50:a8:7e:ba:8f: dc:d3:2d:f7:c9:c8:7c:74:9f:ff:a3:b7:31:df:9a:60:33:30: 42:b6:d7:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSa0AQ/K5AU3uLmJmYaoOdcoMm+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNTA0MDUwODU1NTFaFw0yNTA0MDgxMzE3NTFaMDMxMTAvBgNV BAMTKEM5NDY2NTE5NDA4RUM1MUY0NjVGM0I3QzZBRTYzRDkzRTVGOEQ2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33GwmOgAhVXRnf4buVj3j3TBC B/yEPvn2BHanvdIipp/e8sAJtH8R6tY4mwMI0K0LYk507coTgH9ysm4wuhqIZHJS mIJ268HJ127WjW8KlQNRUe0JQoFAm+J7Ipls+TQByrTL0wRcMij91otyPxR+sCPb +ib4Dr41lGMVHmdDJCXwkjcRBChoNGvEs+mZarA/hoI3Um71uaSPBrAX8AdATaxy 2mpZl0EW+f1B9R3ULu76jPeJQmrIei0TzYqfbnyUj/lqgg8X9YB8wUyIV05Knccy 8mhdNaDL/7mPOQesDGbkYGhocBFcA2Z2XTgt2UALGt3ep/UGjdfGsi/ylID7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyUZlGUCOxR9GXzt8auY9k+X41vMwHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHELqot+FlNxmYjCPP835omQDRE/UFz6Rcal 2nfd2NvJ1pvsZSLbiMuPQIHDM0KKUUsNyWZHC8s6dGOG8dJL4g8IHXASMyaN0n1R v6Pw0FdETCszZ5DN4PWsWwb7S+SOUhvEqPeT9Kt6Y24JuuZvJUCJjMc039eBSWLk edHgLRS5HkA6u/eqwGQNr/5xY1TDLBGxpVYfbAlfzKQTvF79xc8RqtlmzIIbplER +OXkk/V8G/wuapUlHR8yEI6BzPGUwAIDuAs2aZw9TQYGBBtn5RkSoz18lYVMjDai jXsxnN8yUnnWOq9QqH66j9zTLffJyHx0n/+jtzHfmmAzMEK2164= -----END CERTIFICATE-----Generated at Sat Apr 5 20:25:10 2025 by rpki-client