$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: JZNhiPiQ6e9ROTF5UQ1rOO/+Rg9cn5wFwt1sjVdYvmg= Subject key identifier: F1:1C:AF:02:1A:78:39:94:75:4D:BA:78:FA:E9:37:E1:D4:39:BF:F2 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 6F5F1A01E46B58BF3540EAB3E1323A303A015DF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: 85 Signing time: Tue 08 Apr 2025 13:30:38 +0000 Manifest this update: Tue 08 Apr 2025 13:25:38 +0000 Manifest next update: Fri 11 Apr 2025 14:58:38 +0000 Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: h6Xd/SAAEwG00Q/VrFre9Jvl3zxHn5JFFX57h/LqC8E=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: PVzIS0ESkEZ67q03gwRLnYkqKCd0joMIjci7Y3exMbQ=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: pjc/YrdKV/TdiFaIjRayQO8Sqerd8j/hCT2Hki4kTnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5f:1a:01:e4:6b:58:bf:35:40:ea:b3:e1:32:3a:30:3a:01:5d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Apr 8 13:25:38 2025 GMT Not After : Apr 11 14:58:38 2025 GMT Subject: CN=F11CAF021A783994754DBA78FAE937E1D439BFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:c0:65:ae:de:34:62:93:9d:0b:a2:90:82: 23:b6:ee:a0:ab:fe:3f:ba:11:46:16:91:e0:1c:29: a6:c3:e6:db:f5:b8:c8:80:1a:07:29:41:67:d1:88: 76:a8:4b:fe:f6:32:92:ec:17:b4:0a:ed:47:a0:bc: a1:a1:d7:de:90:64:8a:0c:e4:bf:db:dd:4e:19:e4: f3:d3:19:a2:e9:6e:33:b8:70:92:bd:49:b2:d3:7d: e6:15:bb:7a:0b:7b:17:55:e2:1f:32:21:74:37:67: d5:d1:d0:59:9e:81:0b:2e:03:86:13:d7:53:29:ba: 10:f4:15:fb:28:26:09:07:1e:e9:91:a8:af:ef:ea: 2f:85:46:39:8d:ce:ff:05:10:55:a0:47:f6:36:73: 81:e8:2b:1c:0b:6e:f0:07:41:4f:0e:51:2b:26:08: b8:fb:f1:35:1f:8e:27:ee:a4:20:f1:bf:19:ca:62: f7:41:db:23:a6:74:fa:50:d2:d8:cb:6c:7e:f5:7e: fa:3f:36:60:67:54:1e:7c:50:b3:79:76:9c:88:f3: da:88:bd:65:7e:26:02:a0:eb:88:a3:d0:aa:de:fb: fd:03:3a:34:cd:8f:6a:43:53:a4:69:a3:57:62:22: 26:f1:b5:76:28:77:d0:88:b8:c9:44:53:f0:7b:2e: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1C:AF:02:1A:78:39:94:75:4D:BA:78:FA:E9:37:E1:D4:39:BF:F2 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fa:b3:ac:a6:a1:f1:83:53:03:18:0e:a5:bf:d2:a2:d5:1b: c3:63:0d:a0:3f:3a:b2:fd:6f:a4:17:81:cb:35:fb:2e:b1:8a: 9a:a6:b3:d1:85:39:58:68:c2:29:ac:b2:00:ef:84:9e:a5:37: 44:e1:e6:75:35:1c:ad:87:84:f9:68:df:41:94:f7:a8:de:62: ba:a6:52:d9:ea:c8:ee:d8:77:15:71:5d:07:2c:f2:62:22:ee: 5d:68:41:0a:e9:f3:b1:65:02:6d:03:fb:28:b4:1a:cd:9f:d9: 69:f7:a0:2a:62:59:4c:94:0d:b7:8e:ee:50:8b:d8:b5:07:1a: 02:9c:7f:86:2e:6e:58:c7:c6:57:9f:e1:92:50:57:0c:0a:d8: d6:c7:e3:90:e2:9f:e8:ed:ac:6c:42:d4:51:26:68:97:97:d4: 9c:11:73:96:b4:2d:3d:0d:ba:34:06:13:67:84:18:c0:7f:58: 3a:7d:58:1f:84:10:3b:04:d1:04:ba:0f:44:77:72:d2:52:16: d3:85:f6:db:fa:eb:95:b2:ea:5d:16:7e:5f:da:c1:e1:ae:59: 76:3d:33:69:5c:0c:22:b4:7b:1d:5b:95:0c:21:6f:ca:a8:e7: 7a:50:5b:48:c8:b4:7a:c8:32:aa:f3:52:c5:09:d1:f9:af:62: 34:02:29:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb18aAeRrWL81QOqz4TI6MDoBXfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA0MDgxMzI1MzhaFw0yNTA0MTExNDU4MzhaMDMxMTAvBgNV BAMTKEYxMUNBRjAyMUE3ODM5OTQ3NTREQkE3OEZBRTkzN0UxRDQzOUJGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5sBlrt40YpOdC6KQgiO27qCr /j+6EUYWkeAcKabD5tv1uMiAGgcpQWfRiHaoS/72MpLsF7QK7UegvKGh196QZIoM 5L/b3U4Z5PPTGaLpbjO4cJK9SbLTfeYVu3oLexdV4h8yIXQ3Z9XR0FmegQsuA4YT 11MpuhD0FfsoJgkHHumRqK/v6i+FRjmNzv8FEFWgR/Y2c4HoKxwLbvAHQU8OUSsm CLj78TUfjifupCDxvxnKYvdB2yOmdPpQ0tjLbH71fvo/NmBnVB58ULN5dpyI89qI vWV+JgKg64ij0Kre+/0DOjTNj2pDU6Rpo1diIibxtXYod9CIuMlEU/B7LlMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8RyvAhp4OZR1Tbp4+uk34dQ5v/IwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj6s6ymofGDUwMYDqW/0qLVG8NjDaA/OrL9 b6QXgcs1+y6xipqms9GFOVhowimssgDvhJ6lN0Th5nU1HK2HhPlo30GU96jeYrqm UtnqyO7YdxVxXQcs8mIi7l1oQQrp87FlAm0D+yi0Gs2f2Wn3oCpiWUyUDbeO7lCL 2LUHGgKcf4YubljHxlef4ZJQVwwK2NbH45Din+jtrGxC1FEmaJeX1JwRc5a0LT0N ujQGE2eEGMB/WDp9WB+EEDsE0QS6D0R3ctJSFtOF9tv665Wy6l0Wfl/aweGuWXY9 M2lcDCK0ex1blQwhb8qo53pQW0jItHrIMqrzUsUJ0fmvYjQCKe8= -----END CERTIFICATE-----Generated at Wed Apr 9 16:43:38 2025 by rpki-client