$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: mH/H4Y53nUZW4JcfQRMYbdu+AZy74kYw4na3B+uNrhA= Subject key identifier: 77:37:ED:30:47:49:7E:46:44:1B:80:09:EE:9B:D7:B4:7C:2E:43:17 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 21A7E2821A33F67B2BE25FA4AED5952A4CE99B74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 0457 Signing time: Fri 04 Apr 2025 17:21:38 +0000 Manifest this update: Fri 04 Apr 2025 17:16:38 +0000 Manifest next update: Mon 07 Apr 2025 19:25:38 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: Bzmrzq7Gbtiu54161s3iMms/pao23pt3FGXTmrC7v4o=) 2: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=) 3: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: NgCvE1hp44YLC96n/lodIlhmLB1FaaOx9l0TuasHSug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a7:e2:82:1a:33:f6:7b:2b:e2:5f:a4:ae:d5:95:2a:4c:e9:9b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Apr 4 17:16:38 2025 GMT Not After : Apr 7 19:25:38 2025 GMT Subject: CN=7737ED3047497E46441B8009EE9BD7B47C2E4317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:06:ab:03:e2:74:51:65:8c:06:12:e1:d9: e2:16:a3:f3:f9:da:89:09:12:6e:80:7f:fa:74:10: 91:07:9d:39:48:d8:2a:51:bf:0b:a5:75:e2:6a:4e: 38:e2:81:d7:59:87:1f:b7:17:e8:34:ae:7a:c1:3a: bb:07:27:43:5e:68:00:1b:37:c3:f1:a5:50:91:d6: 93:89:62:00:f3:2e:4c:a1:0a:cd:63:ac:22:09:f8: 1e:bb:67:29:49:0d:9e:70:2e:1f:fb:58:dc:76:74: 53:cc:d1:20:a2:b3:0b:f3:c2:82:4b:8d:c1:02:b9: 00:7a:bb:53:ea:04:5a:0f:02:57:b7:68:19:5c:8f: 4c:92:dd:22:ef:7c:5d:83:59:b9:ae:1c:d4:69:f9: 5c:41:bf:00:20:b8:9c:01:a6:19:5e:34:ca:86:e5: 0b:37:76:15:ee:3f:62:ed:2e:f4:d3:88:9e:f6:51: 49:c7:11:14:0e:38:da:9e:3f:d2:ee:c9:8e:c8:a0: a4:af:b7:06:26:67:9c:9b:e8:9b:4e:b0:3e:8f:c5: 07:d8:e6:ab:a6:17:d2:9e:39:65:7a:07:7d:ea:f3: b1:ce:dd:69:18:80:0a:c1:4e:41:5b:97:67:cb:a7: 13:bc:75:24:0c:5b:02:b1:74:f1:b8:9e:62:cf:8a: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:37:ED:30:47:49:7E:46:44:1B:80:09:EE:9B:D7:B4:7C:2E:43:17 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:35:b2:02:c6:71:26:48:6c:a2:41:5a:ad:f9:f2:ea:f5:d4: 1a:e5:c9:cb:e4:89:5b:36:39:08:16:c6:50:2b:1e:ac:2e:18: da:89:7d:b1:b0:53:37:41:74:e8:1c:af:2b:43:2f:6e:6a:70: 9e:1d:eb:4f:5a:3a:c9:8d:f4:c6:6f:cc:65:d2:91:62:54:53: 81:12:7b:0e:02:44:4b:48:b6:07:e6:2d:7c:15:12:15:06:c2: cc:27:00:ea:56:a0:9b:c7:f0:c6:d5:ca:4e:f0:67:73:b9:ff: 21:12:1e:40:be:8b:fd:0b:63:76:06:38:76:93:b8:67:b8:6a: ed:74:b5:d7:d7:65:2b:5b:87:18:c7:8c:ce:ca:db:2d:6c:26: 42:c6:34:ed:b8:9c:73:97:c7:77:a4:ae:99:c1:3b:21:6c:47: d1:a4:05:8f:ac:b5:b4:4b:d5:77:e7:d5:d8:27:fb:ac:6f:33: 57:1b:0c:99:78:34:82:30:08:77:6e:b4:71:11:f8:85:11:cd: 6f:bc:f2:75:79:15:13:1d:d4:08:91:96:1c:4c:ef:33:51:55: 2f:e6:07:46:61:78:47:de:7b:dc:c4:41:79:ef:8f:75:1e:f0: 30:87:30:38:79:ac:37:6d:e4:2c:e0:d0:a4:a7:eb:9a:a3:2e: f3:bf:79:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIafighoz9nsr4l+krtWVKkzpm3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTA0MDQxNzE2MzhaFw0yNTA0MDcxOTI1MzhaMDMxMTAvBgNV BAMTKDc3MzdFRDMwNDc0OTdFNDY0NDFCODAwOUVFOUJEN0I0N0MyRTQzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHAarA+J0UWWMBhLh2eIWo/P5 2okJEm6Af/p0EJEHnTlI2CpRvwuldeJqTjjigddZhx+3F+g0rnrBOrsHJ0NeaAAb N8PxpVCR1pOJYgDzLkyhCs1jrCIJ+B67ZylJDZ5wLh/7WNx2dFPM0SCiswvzwoJL jcECuQB6u1PqBFoPAle3aBlcj0yS3SLvfF2DWbmuHNRp+VxBvwAguJwBphleNMqG 5Qs3dhXuP2LtLvTTiJ72UUnHERQOONqeP9LuyY7IoKSvtwYmZ5yb6JtOsD6PxQfY 5qumF9KeOWV6B33q87HO3WkYgArBTkFbl2fLpxO8dSQMWwKxdPG4nmLPijWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdzftMEdJfkZEG4AJ7pvXtHwuQxcwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo1sgLGcSZIbKJBWq358ur11BrlycvkiVs2 OQgWxlArHqwuGNqJfbGwUzdBdOgcrytDL25qcJ4d609aOsmN9MZvzGXSkWJUU4ES ew4CREtItgfmLXwVEhUGwswnAOpWoJvH8MbVyk7wZ3O5/yESHkC+i/0LY3YGOHaT uGe4au10tdfXZStbhxjHjM7K2y1sJkLGNO24nHOXx3ekrpnBOyFsR9GkBY+stbRL 1Xfn1dgn+6xvM1cbDJl4NIIwCHdutHER+IURzW+88nV5FRMd1AiRlhxM7zNRVS/m B0ZheEfee9zEQXnvj3Ue8DCHMDh5rDdt5Czg0KSn65qjLvO/eUE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:00 2025 by rpki-client