$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft File: 053084D88D32CFF591DBCBF3109B9137C3E74648.mft (raw, json) Hash identifier: HhHceQVoAyAFpbY7xz9Bn5a7NxBrSJ7kcl3F3s+LaOc= Subject key identifier: 71:15:7F:B7:28:74:3C:76:99:AE:83:87:56:C3:50:D5:02:4D:3D:AE Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48 Certificate issuer: /CN=053084D88D32CFF591DBCBF3109B9137C3E74648 Certificate serial: 1F94E3D55BFD3F6990C5C66E58EB1924B7D3F550 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft Manifest number: 0122 Signing time: Sun 06 Apr 2025 20:22:09 +0000 Manifest this update: Sun 06 Apr 2025 20:17:09 +0000 Manifest next update: Thu 10 Apr 2025 00:00:09 +0000 Files and hashes: 1: 053084D88D32CFF591DBCBF3109B9137C3E74648.crl (hash: yZTeDREmfvbnM7htKkBN4+HGuhcea4kq2Cm1js7w0mQ=) 2: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: IFF8MMQl7QrAWHNWN8IJDvMcW+S+e7mDZB2ax29c+ck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:94:e3:d5:5b:fd:3f:69:90:c5:c6:6e:58:eb:19:24:b7:d3:f5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648 Validity Not Before: Apr 6 20:17:09 2025 GMT Not After : Apr 10 00:00:09 2025 GMT Subject: CN=71157FB728743C7699AE838756C350D5024D3DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:b7:a9:5f:23:50:3e:16:7d:c1:70:a4:a3: a6:35:a5:32:93:d3:d6:b0:0b:d6:a5:07:89:b4:ef: 9f:88:ff:da:9b:00:17:87:f8:98:a9:18:8f:2c:bb: 5a:b0:fc:e8:da:b5:8f:85:8c:de:4f:1c:7a:05:9b: 1f:e3:97:41:9c:6d:2e:ad:e8:4a:92:b4:87:75:4d: 58:5b:20:d9:be:04:6c:cd:aa:7a:13:49:7a:73:83: 39:e1:7e:bf:70:53:9f:fb:dd:4f:0b:c0:50:e3:4e: ef:16:f0:a4:55:ca:00:a0:29:4c:a4:d6:de:cd:37: ec:59:18:b0:02:f9:ce:ac:9c:db:03:56:7e:e8:f3: c5:29:7b:72:e4:48:10:d8:a3:b5:be:1f:38:90:b6: 64:af:3e:5f:9c:dc:9c:2b:e6:51:06:88:61:1b:fc: 30:4b:c0:19:c6:64:f4:11:3e:6f:32:df:e3:c5:eb: 09:aa:6b:5c:7d:e9:31:c8:e0:d9:92:80:9e:d8:bb: fe:f1:c9:87:b3:a4:f6:16:28:ed:a9:dd:91:5e:a4: 7d:cf:d1:c1:81:43:36:4c:b5:c4:a6:8e:bf:6f:e1: 74:44:e9:38:1e:b2:9d:f1:da:8c:10:3a:51:7e:dd: dd:d0:25:a3:79:00:b7:46:fc:d9:55:ec:d4:e7:4a: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:15:7F:B7:28:74:3C:76:99:AE:83:87:56:C3:50:D5:02:4D:3D:AE X509v3 Authority Key Identifier: keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:be:e1:b6:0b:d2:6f:5c:ba:85:6f:a2:90:0b:67:c1:be:74: 4f:0e:af:42:9e:07:fd:09:66:fa:cb:a4:e9:25:48:e7:f1:63: d1:64:9f:7b:fd:7a:69:52:da:78:19:b8:cf:47:02:da:83:25: 1e:9d:f8:a2:e4:6c:60:52:a9:51:ec:c1:9b:00:40:fb:34:77: be:61:5c:98:04:18:31:fb:96:0e:ba:47:ca:8a:92:88:d4:e7: 0e:cc:db:3e:9e:6c:e0:8e:76:b0:fc:b4:58:a8:44:68:cf:c9: 80:d8:c7:6b:ed:e4:d7:c1:da:9f:a9:09:60:d8:1e:f9:32:d8: 61:c9:70:6e:56:33:be:48:e6:f3:e4:88:48:f2:4e:65:c9:02: ef:85:c7:b0:6f:6e:cd:ac:dc:5a:d3:64:3d:e8:c1:d1:fc:e7: c1:16:79:1c:01:0a:4f:7a:2b:de:0c:b8:ac:d4:01:90:50:ca: 6e:dc:6c:9c:8c:8e:80:71:d3:b8:8c:67:6f:b4:4b:0c:40:7b: 64:35:b4:d9:8c:66:d7:8c:af:a1:af:78:10:4f:cd:c0:d2:78: 35:00:1d:89:16:df:53:df:d3:ae:cb:b2:85:4b:d8:6b:ed:2a: 94:08:de:c1:04:31:7c:b8:51:90:3c:ab:04:68:4c:d3:fe:88: 13:27:0c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5Tj1Vv9P2mQxcZuWOsZJLfT9VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5QjkxMzdD M0U3NDY0ODAeFw0yNTA0MDYyMDE3MDlaFw0yNTA0MTAwMDAwMDlaMDMxMTAvBgNV BAMTKDcxMTU3RkI3Mjg3NDNDNzY5OUFFODM4NzU2QzM1MEQ1MDI0RDNEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rLepXyNQPhZ9wXCko6Y1pTKT 09awC9alB4m075+I/9qbABeH+JipGI8su1qw/OjatY+FjN5PHHoFmx/jl0GcbS6t 6EqStId1TVhbINm+BGzNqnoTSXpzgznhfr9wU5/73U8LwFDjTu8W8KRVygCgKUyk 1t7NN+xZGLAC+c6snNsDVn7o88Upe3LkSBDYo7W+HziQtmSvPl+c3Jwr5lEGiGEb /DBLwBnGZPQRPm8y3+PF6wmqa1x96THI4NmSgJ7Yu/7xyYezpPYWKO2p3ZFepH3P 0cGBQzZMtcSmjr9v4XRE6Tgesp3x2owQOlF+3d3QJaN5ALdG/NlV7NTnSm9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcRV/tyh0PHaZroOHVsNQ1QJNPa4wHwYDVR0j BBgwFoAUBTCE2I0yz/WR28vzEJuRN8PnRkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA3OWJlZi03ZjdkLTQzY2QtOTI3Zi1kNWNmNTlhMGIwZmIvMC8wNTMwODREODhE MzJDRkY1OTFEQkNCRjMxMDlCOTEzN0MzRTc0NjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5QjkxMzdDM0U3 NDY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNzliZWYtN2Y3ZC00M2NkLTky N2YtZDVjZjU5YTBiMGZiLzAvMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5Qjkx MzdDM0U3NDY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFi+4bYL0m9cuoVvopALZ8G+dE8Or0KeB/0J ZvrLpOklSOfxY9Fkn3v9emlS2ngZuM9HAtqDJR6d+KLkbGBSqVHswZsAQPs0d75h XJgEGDH7lg66R8qKkojU5w7M2z6ebOCOdrD8tFioRGjPyYDYx2vt5NfB2p+pCWDY Hvky2GHJcG5WM75I5vPkiEjyTmXJAu+Fx7Bvbs2s3FrTZD3owdH858EWeRwBCk96 K94MuKzUAZBQym7cbJyMjoBx07iMZ2+0SwxAe2Q1tNmMZteMr6GveBBPzcDSeDUA HYkW31Pf067LsoVL2GvtKpQI3sEEMXy4UZA8qwRoTNP+iBMnDH8= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:48 2025 by rpki-client