$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft File: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json) Hash identifier: Xy/qR9rZ31bp3/YZ8IObHZHJHp0AjcETyda2nCrsTD8= Subject key identifier: D5:FA:24:C2:7C:33:AD:8E:9A:53:51:C8:5B:08:89:8D:3C:3A:DB:8D Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 Certificate issuer: /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Certificate serial: 43A409D908DD1BF519F9F6A9C29147CC47DB4E7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft Manifest number: 01BD Signing time: Sat 19 Apr 2025 13:42:18 +0000 Manifest this update: Sat 19 Apr 2025 13:37:18 +0000 Manifest next update: Tue 22 Apr 2025 17:21:18 +0000 Files and hashes: 1: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: DioQx5KU85pebnS+zhFnBOqkUSs5LHpnf44+J5TiWwQ=) 2: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: 42IGiLwFKLvYfl+qjbuD9uwII9RWEDzXsY4xu3MXVkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 17:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:09:d9:08:dd:1b:f5:19:f9:f6:a9:c2:91:47:cc:47:db:4e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Validity Not Before: Apr 19 13:37:18 2025 GMT Not After : Apr 22 17:21:18 2025 GMT Subject: CN=D5FA24C27C33AD8E9A5351C85B08898D3C3ADB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:07:0f:06:5d:84:56:20:07:cf:7c:8c:6f: b9:15:a8:4c:0e:68:aa:4a:82:7b:c1:f3:c8:f7:f0: 5e:3c:3c:36:4b:65:49:99:38:04:2d:bc:5b:68:de: 9c:96:5d:e8:4b:6e:63:8f:41:fb:96:71:7c:75:96: 1e:78:b9:fe:0c:bc:00:7f:eb:66:f5:77:ca:4c:35: a7:16:b1:76:7d:07:1e:18:88:d2:ec:31:d0:8b:30: ea:f0:96:74:12:09:9c:93:08:0c:e2:d5:2c:ab:ab: e5:3c:58:83:47:d2:73:86:69:4b:ee:f2:24:5a:f6: d1:8d:a5:a3:ef:5b:02:c3:ea:06:d8:1b:9a:27:85: 38:86:24:6c:d0:77:ee:0a:22:0d:56:b9:4d:aa:24: dd:cf:4f:52:11:5c:ef:8b:3e:36:9c:43:31:0d:40: eb:bc:be:7c:40:a2:68:97:70:ba:80:5a:14:db:e3: 14:67:2d:44:6e:39:3f:df:6a:f4:20:6f:36:43:43: 79:2f:f7:b1:ff:e5:0b:dd:d3:1b:86:87:77:42:a3: 31:3b:17:34:91:6e:da:94:7b:14:1f:6b:9f:dc:b6: e3:63:4f:f8:13:10:95:d9:09:4f:be:43:41:6e:49: 59:6b:51:ed:22:cb:46:49:e0:fa:30:40:54:a0:14: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:24:C2:7C:33:AD:8E:9A:53:51:C8:5B:08:89:8D:3C:3A:DB:8D X509v3 Authority Key Identifier: keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c5:e1:7a:92:2c:77:7c:48:31:8d:fd:34:6c:25:b8:ee:79: be:95:b7:32:c3:ac:59:7c:eb:ce:f4:45:1d:5d:11:04:97:5f: 89:55:81:ee:a0:40:ad:69:68:cd:bc:b3:18:bd:a8:16:54:50: d5:37:e3:20:d2:9f:5e:f5:6b:06:2e:4d:41:c2:fd:e8:f7:f9: 19:78:78:48:f9:5b:fc:31:f0:41:b0:71:5e:49:c5:b3:34:a4: 2d:f2:16:14:b6:cf:16:ed:e1:48:98:fa:de:e5:ff:96:04:96: b6:3f:a0:73:c4:70:82:24:db:0c:6b:09:b4:ea:ef:5d:96:be: a8:9b:94:3f:60:b9:1c:e4:29:de:21:d1:48:1d:75:e2:81:9f: 1c:40:72:aa:73:63:b8:6f:f7:27:5e:f6:63:3b:3e:ce:2a:67: 2b:e2:11:de:5b:5e:86:aa:09:e5:46:40:e0:df:9c:be:99:57: 33:94:13:bd:57:7c:80:27:2d:a8:27:12:19:b7:d6:71:e2:b6: 29:a2:a7:27:e9:f5:b6:2c:ef:bd:1c:59:73:ba:fe:8a:88:cd: 66:fc:17:15:64:1f:22:e5:bd:7c:32:9e:17:a7:03:69:92:75: ce:51:a1:20:0c:18:3e:c6:a8:6e:46:76:8a:09:0f:da:01:3d: c7:1f:92:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6QJ2QjdG/UZ+fapwpFHzEfbTn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUz MTdEN0U5NDAeFw0yNTA0MTkxMzM3MThaFw0yNTA0MjIxNzIxMThaMDMxMTAvBgNV BAMTKEQ1RkEyNEMyN0MzM0FEOEU5QTUzNTFDODVCMDg4OThEM0MzQURCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrQcPBl2EViAHz3yMb7kVqEwO aKpKgnvB88j38F48PDZLZUmZOAQtvFto3pyWXehLbmOPQfuWcXx1lh54uf4MvAB/ 62b1d8pMNacWsXZ9Bx4YiNLsMdCLMOrwlnQSCZyTCAzi1Syrq+U8WINH0nOGaUvu 8iRa9tGNpaPvWwLD6gbYG5onhTiGJGzQd+4KIg1WuU2qJN3PT1IRXO+LPjacQzEN QOu8vnxAomiXcLqAWhTb4xRnLURuOT/favQgbzZDQ3kv97H/5Qvd0xuGh3dCozE7 FzSRbtqUexQfa5/ctuNjT/gTEJXZCU++Q0FuSVlrUe0iy0ZJ4PowQFSgFF9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fokwnwzrY6aU1HIWwiJjTw6240wHwYDVR0j BBgwFoAUuTdZsZ5MH4/7bp0eLmdOTjF9fpQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzYwZjA3OC04YTIwLTQ4ZDEtODJiOC1lMWY1MGExNTUyMDEvMC9COTM3NTlCMTlF NEMxRjhGRkI2RTlEMUUyRTY3NEU0RTMxN0Q3RTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUzMTdE N0U5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRF NEUzMTdEN0U5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHF4XqSLHd8SDGN/TRsJbjueb6VtzLDrFl8 6870RR1dEQSXX4lVge6gQK1paM28sxi9qBZUUNU34yDSn171awYuTUHC/ej3+Rl4 eEj5W/wx8EGwcV5JxbM0pC3yFhS2zxbt4UiY+t7l/5YElrY/oHPEcIIk2wxrCbTq 712WvqiblD9guRzkKd4h0UgddeKBnxxAcqpzY7hv9yde9mM7Ps4qZyviEd5bXoaq CeVGQODfnL6ZVzOUE71XfIAnLagnEhm31nHitimipyfp9bYs770cWXO6/oqIzWb8 FxVkHyLlvXwynhenA2mSdc5RoSAMGD7GqG5GdooJD9oBPccfkho= -----END CERTIFICATE-----Generated at Sun Apr 20 13:07:06 2025 by rpki-client