$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: 3y1MvUNG61G4XOKRQhSxVg7PdOBm69Y7KFlhKPyU9Bk= Subject key identifier: 57:AE:F1:2B:79:37:EF:0D:A7:C2:26:BB:5F:52:70:32:86:AC:11:5D Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 3901F5C6CA6F10F43F2F51216C60BAAC45F5D1CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 04BF Signing time: Fri 04 Apr 2025 04:11:35 +0000 Manifest this update: Fri 04 Apr 2025 04:06:35 +0000 Manifest next update: Mon 07 Apr 2025 15:02:35 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: qD8+U6FWqdghglJFTwFE5s+BmnuAfqAua/JQmhrj2r8=) 2: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: iArmdB6Xmwne1qM2afDTqVSj06uD3mLVfN37VycmReA=) 3: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: kLTlxWEFNfnVHoct9vSIbW94LzE1qa0ElrbO/1tRpX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 15:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:01:f5:c6:ca:6f:10:f4:3f:2f:51:21:6c:60:ba:ac:45:f5:d1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Apr 4 04:06:35 2025 GMT Not After : Apr 7 15:02:35 2025 GMT Subject: CN=57AEF12B7937EF0DA7C226BB5F52703286AC115D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:df:d6:ae:d7:cb:3c:7a:bc:4a:c0:00:4e: 10:2d:55:f6:cd:a8:76:c6:99:b1:3e:ab:01:8b:e1: c3:fe:38:38:59:b5:86:89:0f:ec:10:fa:99:c2:4c: 6a:d4:78:58:a1:10:ab:13:36:de:61:6f:0c:ac:16: 8a:3f:3d:9b:b5:00:32:92:d8:73:fa:1b:65:46:df: e8:1e:d9:79:ea:4b:7c:17:de:2d:45:c4:79:ba:f5: 48:8f:a4:f3:7f:e5:e5:ae:87:1a:e2:33:0a:54:5d: e4:05:8b:f9:a8:c8:1a:89:ce:7a:7f:5b:40:06:91: 04:df:31:52:32:26:9c:65:95:49:ec:d3:df:9e:84: 80:64:3b:b9:c4:39:09:af:49:7c:08:43:c9:6b:a0: 18:cb:ef:7c:bd:91:16:68:35:bd:7e:47:c3:66:1b: fc:ac:a9:0e:c2:80:7b:d9:dd:22:6c:99:ba:c2:57: e9:50:32:76:c8:7d:52:c1:b7:7b:83:dc:fb:85:0a: ca:9d:67:76:dd:8e:a5:b0:d9:51:23:fd:a1:2b:1b: 7d:62:cc:37:ac:b4:30:cf:ff:46:35:46:e1:86:b2: b1:5a:26:de:7e:3d:c3:5f:94:cf:e2:2d:4f:1d:cd: 23:19:ef:46:eb:4f:a9:57:21:72:37:a2:c9:0e:15: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AE:F1:2B:79:37:EF:0D:A7:C2:26:BB:5F:52:70:32:86:AC:11:5D X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:5d:ce:58:ca:89:d7:d4:5b:d9:03:9d:dd:24:c9:a9:70:b1: 8c:f5:27:74:11:15:44:ff:79:f1:a9:fb:43:49:a6:32:28:96: db:49:ca:b7:ba:2a:20:6c:4b:cf:4c:70:da:54:dd:de:2a:9d: 7b:ef:78:e9:7c:e3:c8:9b:cd:23:ef:2e:ae:9c:2c:1c:20:06: 5b:78:6c:0c:e8:ae:18:0d:33:0d:14:5e:67:70:06:1e:10:a0: df:19:d5:38:63:1a:e1:b3:c5:d7:af:12:3c:3b:36:f8:f7:25: 08:e1:0c:c4:1b:a2:d2:1b:32:27:fa:21:fe:ed:f7:9d:0c:e3: 5a:72:99:8b:39:9b:dd:fd:32:3e:60:11:69:19:9c:74:9c:0d: 40:3a:86:8f:6f:32:52:c2:a4:75:5e:92:f8:4d:e0:8e:43:6b: 65:fe:e4:5b:81:ba:80:ba:43:79:03:f3:e9:fb:16:ed:a9:16: aa:f0:6f:2b:16:cd:3e:1b:7b:d1:02:45:75:8c:0e:92:80:d1: b2:6c:d0:d3:b2:09:35:36:98:07:11:d5:9b:88:3a:2e:90:a3: 46:45:11:3f:9e:36:1e:c4:5c:04:17:2b:33:3a:66:0e:59:63: bd:94:07:16:e6:cb:c2:81:34:83:0b:29:fe:e4:f0:cf:0f:98: bf:81:b3:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQH1xspvEPQ/L1EhbGC6rEX10c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNTA0MDQwNDA2MzVaFw0yNTA0MDcxNTAyMzVaMDMxMTAvBgNV BAMTKDU3QUVGMTJCNzkzN0VGMERBN0MyMjZCQjVGNTI3MDMyODZBQzExNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Xt/WrtfLPHq8SsAAThAtVfbN qHbGmbE+qwGL4cP+ODhZtYaJD+wQ+pnCTGrUeFihEKsTNt5hbwysFoo/PZu1ADKS 2HP6G2VG3+ge2XnqS3wX3i1FxHm69UiPpPN/5eWuhxriMwpUXeQFi/moyBqJznp/ W0AGkQTfMVIyJpxllUns09+ehIBkO7nEOQmvSXwIQ8lroBjL73y9kRZoNb1+R8Nm G/ysqQ7CgHvZ3SJsmbrCV+lQMnbIfVLBt3uD3PuFCsqdZ3bdjqWw2VEj/aErG31i zDestDDP/0Y1RuGGsrFaJt5+PcNflM/iLU8dzSMZ70brT6lXIXI3oskOFeY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV67xK3k37w2nwia7X1JwMoasEV0wHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5dzljKidfUW9kDnd0kyalwsYz1J3QRFUT/ efGp+0NJpjIolttJyre6KiBsS89McNpU3d4qnXvveOl848ibzSPvLq6cLBwgBlt4 bAzorhgNMw0UXmdwBh4QoN8Z1ThjGuGzxdevEjw7Nvj3JQjhDMQbotIbMif6If7t 950M41pymYs5m939Mj5gEWkZnHScDUA6ho9vMlLCpHVekvhN4I5Da2X+5FuBuoC6 Q3kD8+n7Fu2pFqrwbysWzT4be9ECRXWMDpKA0bJs0NOyCTU2mAcR1ZuIOi6Qo0ZF ET+eNh7EXAQXKzM6Zg5ZY72UBxbmy8KBNIMLKf7k8M8PmL+Bsyw= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:00 2025 by rpki-client