$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: GWB4B2ySpvWEjQ8WopP1CLWrUv00K+V4mRZy4EWEt7Y= Subject key identifier: A4:2A:EF:4C:D2:91:AC:1D:5F:70:2D:E2:5B:B1:AD:46:21:E0:DF:0A Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 131B903CCB8D6400C320D92D137BB5890B9EEEFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 015F Signing time: Wed 04 Jun 2025 03:20:34 +0000 Manifest this update: Wed 04 Jun 2025 03:15:34 +0000 Manifest next update: Sat 07 Jun 2025 10:38:34 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 3: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: D+/isc1hzbvopVFqSVz8fjiM/tRDvWDM3He6ELJdL/Y=) 4: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: BdihZDS/tzCmUBevlIu9UDvRioqzeTxPODGMUovQZWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1b:90:3c:cb:8d:64:00:c3:20:d9:2d:13:7b:b5:89:0b:9e:ee:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Jun 4 03:15:34 2025 GMT Not After : Jun 7 10:38:34 2025 GMT Subject: CN=A42AEF4CD291AC1D5F702DE25BB1AD4621E0DF0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:41:28:90:e3:5d:ea:17:64:36:f2:00:5a: 35:f5:89:ba:ed:35:e2:43:02:de:55:d9:ba:24:6a: d9:a8:e8:62:de:90:86:2c:5e:d5:10:b1:8f:fe:ae: a8:54:5f:6c:4a:c8:f7:8f:1d:dd:d3:9b:e8:7a:2c: bf:e0:46:5f:08:95:b0:38:91:9d:12:c7:f6:b6:21: 29:b5:e9:c9:bf:ec:70:ce:1f:d1:2c:78:e0:a9:96: d1:71:48:73:a4:f8:5b:e5:07:a9:de:d0:3a:64:f5: d3:49:aa:73:15:a7:20:cd:5d:7b:7a:a0:33:cf:b1: 4b:94:35:fd:f6:2c:0d:91:53:5f:37:f9:2a:5d:aa: ef:0a:64:ce:16:4c:bd:bc:62:59:18:78:6a:01:a4: 8e:12:6c:af:85:d4:1b:4c:a6:2e:3a:c0:58:46:12: 0b:9d:82:ff:4b:8c:f7:af:01:be:9f:14:94:75:67: 2e:df:f0:71:25:85:46:59:fa:97:ea:a2:be:26:c5: f5:15:b5:e5:cd:51:05:d2:3d:9f:f7:56:f0:95:8f: 1d:16:a7:ce:c1:37:ec:31:b8:ff:5a:1e:41:cb:20: 47:3d:10:cf:a5:29:76:bc:d6:5c:ba:ca:48:09:88: a5:fd:97:cd:bb:f2:7d:a0:c8:b1:99:54:0c:84:5c: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:EF:4C:D2:91:AC:1D:5F:70:2D:E2:5B:B1:AD:46:21:E0:DF:0A X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:51:6c:84:61:45:42:dd:f7:9b:47:3c:39:41:15:d4:cd:95: 6a:0d:d1:e6:ae:7b:8a:17:0a:51:82:8d:98:ef:cf:ce:ff:60: 08:47:aa:8d:32:ce:75:d8:8f:2d:15:e4:16:c7:89:b5:5f:67: e8:e5:e9:fb:5b:f6:6c:5a:7b:ad:21:5c:cd:44:c9:52:7d:2b: 30:fd:c4:05:5b:02:73:48:de:06:63:a9:e8:10:ae:aa:69:c5: 2c:1b:6e:01:6a:53:4e:16:97:e7:da:84:9e:05:88:5b:1c:9b: 54:e0:43:75:ca:c1:57:09:e1:97:1b:ae:22:2a:33:a5:b6:1b: 86:a1:32:fc:9f:5f:4d:e7:49:df:80:de:b5:7f:c9:e7:3c:dc: ce:de:e5:ae:98:29:d5:5b:0b:41:4f:b6:22:dd:ba:a8:fc:ea: b5:cb:13:d8:90:40:fb:35:fc:da:6e:bf:5b:68:ca:e4:6c:44: 88:14:ef:9c:54:1b:86:3a:c4:ee:39:fb:47:f0:22:93:1d:19: a4:c9:ac:f4:46:1f:72:62:f7:54:37:6d:a9:d1:28:f5:3f:06: 2c:ec:5f:e7:9f:3a:b9:a8:ca:8b:19:1a:01:70:b3:9a:f9:e4: 04:80:fb:18:ce:f7:37:30:8a:31:f9:28:3e:b2:83:69:bd:8c: 9e:85:5e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExuQPMuNZADDINktE3u1iQue7v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTA2MDQwMzE1MzRaFw0yNTA2MDcxMDM4MzRaMDMxMTAvBgNV BAMTKEE0MkFFRjRDRDI5MUFDMUQ1RjcwMkRFMjVCQjFBRDQ2MjFFMERGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDao0EokONd6hdkNvIAWjX1ibrt NeJDAt5V2bokatmo6GLekIYsXtUQsY/+rqhUX2xKyPePHd3Tm+h6LL/gRl8IlbA4 kZ0Sx/a2ISm16cm/7HDOH9EseOCpltFxSHOk+FvlB6ne0Dpk9dNJqnMVpyDNXXt6 oDPPsUuUNf32LA2RU183+Spdqu8KZM4WTL28YlkYeGoBpI4SbK+F1BtMpi46wFhG Egudgv9LjPevAb6fFJR1Zy7f8HElhUZZ+pfqor4mxfUVteXNUQXSPZ/3VvCVjx0W p87BN+wxuP9aHkHLIEc9EM+lKXa81ly6ykgJiKX9l8278n2gyLGZVAyEXCG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpCrvTNKRrB1fcC3iW7GtRiHg3wowHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRRbIRhRULd95tHPDlBFdTNlWoN0eaue4oX ClGCjZjvz87/YAhHqo0yznXYjy0V5BbHibVfZ+jl6ftb9mxae60hXM1EyVJ9KzD9 xAVbAnNI3gZjqegQrqppxSwbbgFqU04Wl+fahJ4FiFscm1TgQ3XKwVcJ4ZcbriIq M6W2G4ahMvyfX03nSd+A3rV/yec83M7e5a6YKdVbC0FPtiLduqj86rXLE9iQQPs1 /Npuv1toyuRsRIgU75xUG4Y6xO45+0fwIpMdGaTJrPRGH3Ji91Q3banRKPU/Bizs X+efOrmoyosZGgFws5r55ASA+xjO9zcwijH5KD6yg2m9jJ6FXtQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:21 2025 by rpki-client