$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: fmrVQkWAyD337/WfSP9nQ49H5O/8G/RmOUNMMSEFAic= Subject key identifier: 20:9E:56:7D:69:35:83:77:96:B8:9D:BB:9C:C0:64:12:EE:EB:47:3F Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 7AA4484AA3EF695B2F4A57A8817A6D8CF4DFE9BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 019E Signing time: Fri 04 Apr 2025 08:21:42 +0000 Manifest this update: Fri 04 Apr 2025 08:16:42 +0000 Manifest next update: Mon 07 Apr 2025 18:52:42 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: XruL81aH+YN1ovypVRcmkN6zvYT5ojMoMI2ZZS2pPEk=) 2: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: OIaxpXeP3v7VHaq+wwH1uhaQOO+Pyv8isHCWuCJ/5UM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a4:48:4a:a3:ef:69:5b:2f:4a:57:a8:81:7a:6d:8c:f4:df:e9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Apr 4 08:16:42 2025 GMT Not After : Apr 7 18:52:42 2025 GMT Subject: CN=209E567D6935837796B89DBB9CC06412EEEB473F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:ca:e2:26:94:d0:1b:85:43:9e:e7:89:71: 09:fa:4a:3c:aa:b7:ab:a4:f1:f7:3b:55:39:db:cc: 98:61:ae:d1:f9:ef:bc:fc:3b:17:94:86:92:8a:75: 74:56:1e:85:e2:61:75:72:92:05:3b:d8:6d:ea:75: 77:2d:41:af:00:27:82:a4:5c:cb:cb:95:22:f8:59: 31:40:40:73:11:e9:ee:24:88:9f:a0:66:8d:3d:82: d7:fa:8c:e1:33:a3:f0:58:f1:89:18:db:a7:05:ce: d9:08:c8:18:39:dc:f9:56:6a:cd:92:d9:cb:7b:d0: bd:4f:ff:78:c6:2d:77:16:85:6b:21:ea:01:6a:00: 0a:3a:cf:d4:c8:29:70:3e:24:25:26:85:82:76:66: 5f:03:f0:59:ab:1b:77:4a:7b:a4:50:e7:7a:eb:77: 41:93:d2:66:cd:fa:8d:bf:b2:50:b4:60:ca:18:e8: d2:8b:3b:f7:ec:87:85:c8:52:20:92:fa:74:b0:f1: 56:a2:ce:56:5a:ed:ac:a2:c9:80:79:60:20:07:21: 81:2f:b2:e7:8f:1a:52:8d:fd:68:44:0c:38:76:e2: a8:1f:cb:fd:19:d9:f4:fe:3f:9e:61:d4:b4:85:de: 5a:9c:29:86:f2:83:5e:94:f0:d3:de:30:d1:4c:56: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9E:56:7D:69:35:83:77:96:B8:9D:BB:9C:C0:64:12:EE:EB:47:3F X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:91:be:11:7f:d6:3f:35:29:96:51:fc:b0:fa:71:16:ac:d1: 7d:92:fc:1a:a9:a0:81:da:4b:2e:19:31:b2:2f:d0:7f:14:80: 01:5c:cc:da:03:95:71:15:e3:27:39:b2:98:04:07:af:1e:e0: 8b:b2:77:84:17:a1:f0:de:cc:49:9a:d2:f9:ee:8d:87:0b:ca: 51:9d:95:55:35:15:57:ee:8e:7d:77:9c:62:14:37:15:dd:a3: 5d:94:de:0a:1f:19:56:0e:65:ce:ac:cf:63:56:78:8a:14:60: a5:dd:17:2e:41:18:52:3a:d9:17:4e:25:34:57:30:e2:fc:76: 0a:48:55:c0:c8:1b:58:2e:c5:f5:a5:10:3f:1b:1d:d2:39:e3: e0:91:71:e1:20:c8:77:33:b1:68:11:f1:a7:6d:e0:cd:b2:ec: be:25:94:6e:3b:da:37:59:9d:db:7c:12:90:4d:46:91:69:36: fe:f9:ed:79:3e:77:de:23:d6:14:a7:31:d1:7c:7d:e7:0a:33: 65:39:69:44:38:e6:c5:4c:b1:d3:e3:9e:46:e8:1a:cb:27:f8: bc:86:23:60:85:9b:ec:29:fc:f2:80:25:ba:ac:6a:6b:ee:8c: 7c:cf:94:86:f8:90:b6:1f:a1:ab:38:8c:d8:1d:7d:67:30:71: 9d:f0:dc:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqRISqPvaVsvSleogXptjPTf6bwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTA0MDQwODE2NDJaFw0yNTA0MDcxODUyNDJaMDMxMTAvBgNV BAMTKDIwOUU1NjdENjkzNTgzNzc5NkI4OURCQjlDQzA2NDEyRUVFQjQ3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLcriJpTQG4VDnueJcQn6Sjyq t6uk8fc7VTnbzJhhrtH577z8OxeUhpKKdXRWHoXiYXVykgU72G3qdXctQa8AJ4Kk XMvLlSL4WTFAQHMR6e4kiJ+gZo09gtf6jOEzo/BY8YkY26cFztkIyBg53PlWas2S 2ct70L1P/3jGLXcWhWsh6gFqAAo6z9TIKXA+JCUmhYJ2Zl8D8FmrG3dKe6RQ53rr d0GT0mbN+o2/slC0YMoY6NKLO/fsh4XIUiCS+nSw8VaizlZa7ayiyYB5YCAHIYEv suePGlKN/WhEDDh24qgfy/0Z2fT+P55h1LSF3lqcKYbyg16U8NPeMNFMVgPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJ5WfWk1g3eWuJ27nMBkEu7rRz8wHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGORvhF/1j81KZZR/LD6cRas0X2S/BqpoIHa Sy4ZMbIv0H8UgAFczNoDlXEV4yc5spgEB68e4Iuyd4QXofDezEma0vnujYcLylGd lVU1FVfujn13nGIUNxXdo12U3gofGVYOZc6sz2NWeIoUYKXdFy5BGFI62RdOJTRX MOL8dgpIVcDIG1guxfWlED8bHdI54+CRceEgyHczsWgR8adt4M2y7L4llG472jdZ ndt8EpBNRpFpNv757Xk+d94j1hSnMdF8fecKM2U5aUQ45sVMsdPjnkboGssn+LyG I2CFm+wp/PKAJbqsamvujHzPlIb4kLYfoas4jNgdfWcwcZ3w3Ck= -----END CERTIFICATE-----Generated at Sun Apr 6 12:45:29 2025 by rpki-client