$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: clmDTsMHfaiN8ypns9Mxuu/z+LdQLNp96BocBnBT7S8= Subject key identifier: FA:44:D3:6F:48:F7:4F:B8:6D:F5:77:87:31:08:D5:31:B1:25:C9:79 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 4EE502BF5213AA4019ACDAFFF5E0CF5513585171 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 0156 Signing time: Fri 18 Apr 2025 21:30:44 +0000 Manifest this update: Fri 18 Apr 2025 21:25:44 +0000 Manifest next update: Tue 22 Apr 2025 08:25:44 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: 35xapykPHCBkpGdiCHqpu4bXDvcdOoNdzIeT1uZkbyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 08:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e5:02:bf:52:13:aa:40:19:ac:da:ff:f5:e0:cf:55:13:58:51:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Apr 18 21:25:44 2025 GMT Not After : Apr 22 08:25:44 2025 GMT Subject: CN=FA44D36F48F74FB86DF577873108D531B125C979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:d4:7b:c7:13:8d:7e:0d:96:ff:e6:41:9f: f7:12:11:7d:78:72:e8:e2:1e:96:0e:67:96:44:28: c0:10:da:71:74:de:2f:cf:58:df:6d:01:9b:58:4f: 92:85:03:0c:88:96:68:97:4f:47:58:23:ba:0a:a3: ac:13:b9:8d:ed:9e:f0:a4:62:7f:8a:e4:6c:aa:1a: da:a4:93:63:0b:88:30:26:42:79:90:84:d3:ba:91: cb:8c:a9:f3:cc:06:2f:e7:b4:12:60:4e:cb:a9:21: e7:70:dd:13:25:ba:be:4c:46:aa:28:e1:65:61:37: f8:db:74:40:72:5e:fb:68:44:3a:ae:a8:d3:04:41: 97:e3:b0:bd:e8:75:e7:49:8a:71:b8:c9:02:52:db: 42:ad:f3:ae:d2:4a:7f:92:10:ad:5a:97:03:0a:8d: 92:15:3f:1f:7c:17:59:dd:2e:1d:bc:0c:8f:e8:79: fa:64:a7:50:34:81:9d:69:95:a8:da:31:fc:a2:96: 7e:3e:16:5e:7a:79:15:ff:68:56:54:12:eb:39:25: 21:67:6a:ea:42:57:da:67:c2:c7:e6:8e:e2:59:03: 3d:3e:f7:32:e7:62:c8:02:93:18:a4:d2:d5:7b:ae: 9e:99:c2:35:05:e4:27:a8:c7:e8:81:fb:b1:c7:8e: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:44:D3:6F:48:F7:4F:B8:6D:F5:77:87:31:08:D5:31:B1:25:C9:79 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ca:29:3d:72:f0:f8:72:23:4e:23:24:e2:81:02:7c:3b:99: a0:18:6e:d8:92:85:14:a8:b7:0d:d7:cf:c2:da:e5:9f:9f:03: d7:db:18:f8:aa:94:8e:be:fa:a9:e6:98:b6:f4:0b:d0:1b:5f: fe:99:c4:3b:9f:f1:2c:1b:b2:5e:c2:86:b1:4e:68:57:1f:8c: ce:1a:e7:a9:65:dc:77:59:1b:af:b9:83:52:69:4f:94:d6:38: b6:de:62:81:24:e8:1b:43:b0:82:e6:70:79:7a:79:8e:89:47: 7c:71:69:57:56:9b:76:b4:37:5d:3d:33:58:63:e5:da:23:fb: e3:87:4e:12:81:85:41:45:05:b0:b9:9e:88:8b:7c:4d:14:bc: 41:00:13:77:37:a8:06:96:a4:ed:0d:de:f2:6e:79:c0:be:31: 33:24:dd:2e:7b:d5:77:8e:85:ac:b9:1e:9e:11:12:ab:fb:0d: 07:db:26:12:b9:e9:d1:46:f1:f0:1a:15:6b:b5:73:7b:56:46: 21:ca:81:49:d6:73:28:59:4a:57:7a:a7:ec:c1:23:68:3a:d8: 37:25:57:78:e3:ae:db:f3:ab:08:7d:05:84:88:74:7f:36:fe: c5:31:8a:56:96:83:9e:be:8b:cd:90:11:06:2b:7d:65:4e:7c: 5c:3a:01:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuUCv1ITqkAZrNr/9eDPVRNYUXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTA0MTgyMTI1NDRaFw0yNTA0MjIwODI1NDRaMDMxMTAvBgNV BAMTKEZBNDREMzZGNDhGNzRGQjg2REY1Nzc4NzMxMDhENTMxQjEyNUM5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcOdR7xxONfg2W/+ZBn/cSEX14 cujiHpYOZ5ZEKMAQ2nF03i/PWN9tAZtYT5KFAwyIlmiXT0dYI7oKo6wTuY3tnvCk Yn+K5GyqGtqkk2MLiDAmQnmQhNO6kcuMqfPMBi/ntBJgTsupIedw3RMlur5MRqoo 4WVhN/jbdEByXvtoRDquqNMEQZfjsL3odedJinG4yQJS20Kt867SSn+SEK1alwMK jZIVPx98F1ndLh28DI/oefpkp1A0gZ1plajaMfyiln4+Fl56eRX/aFZUEus5JSFn aupCV9pnwsfmjuJZAz0+9zLnYsgCkxik0tV7rp6ZwjUF5Ceox+iB+7HHjj27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+kTTb0j3T7ht9XeHMQjVMbElyXkwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHKKT1y8PhyI04jJOKBAnw7maAYbtiShRSo tw3Xz8La5Z+fA9fbGPiqlI6++qnmmLb0C9AbX/6ZxDuf8Swbsl7ChrFOaFcfjM4a 56ll3HdZG6+5g1JpT5TWOLbeYoEk6BtDsILmcHl6eY6JR3xxaVdWm3a0N109M1hj 5doj++OHThKBhUFFBbC5noiLfE0UvEEAE3c3qAaWpO0N3vJuecC+MTMk3S571XeO hay5Hp4REqv7DQfbJhK56dFG8fAaFWu1c3tWRiHKgUnWcyhZSld6p+zBI2g62Dcl V3jjrtvzqwh9BYSIdH82/sUxilaWg56+i82QEQYrfWVOfFw6AcM= -----END CERTIFICATE-----Generated at Mon Apr 21 01:21:34 2025 by rpki-client