$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: Pj638X99jADkvYSD/deD/snLwQk4BqbAbcDSA3nCdlY= Subject key identifier: D9:CD:C6:8B:2B:0E:27:7A:40:EE:8F:18:C7:2E:BC:F8:0A:BF:C6:0C Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 0A4F7EC1CA817B355BBF44895E91715E821D721B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 0150 Signing time: Sat 05 Apr 2025 12:31:04 +0000 Manifest this update: Sat 05 Apr 2025 12:26:04 +0000 Manifest next update: Tue 08 Apr 2025 22:43:04 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) 2: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: 74YUHLZQATifazLvfnUZQ8yJ6K/DoTwh4DAF2dSyw+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4f:7e:c1:ca:81:7b:35:5b:bf:44:89:5e:91:71:5e:82:1d:72:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Apr 5 12:26:04 2025 GMT Not After : Apr 8 22:43:04 2025 GMT Subject: CN=D9CDC68B2B0E277A40EE8F18C72EBCF80ABFC60C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:21:21:1c:48:10:0a:8f:51:12:5d:25:1a: 74:32:07:09:da:7a:ff:48:19:09:38:8f:d1:e9:3b: ee:cc:f7:c2:e5:19:de:cd:c8:ba:f6:16:9f:91:22: b3:41:dc:e3:ed:bc:62:b4:77:a8:fa:2d:f1:60:e4: be:19:5d:5d:5a:7b:80:0e:71:f9:09:6f:b7:48:08: c9:d1:e7:36:ba:55:41:9f:1a:f3:75:e9:52:44:25: ab:c8:4f:98:c9:f1:b8:19:4c:b5:08:97:4a:95:81: 72:fa:fa:af:b1:94:d5:a7:0f:64:82:e2:c0:46:1d: 4e:45:74:0f:42:fc:e5:f8:5a:61:0f:dc:99:06:0c: ec:91:56:f2:54:b9:af:f4:80:11:a2:43:a0:0a:08: 68:ac:0d:2a:5c:86:84:a8:01:8a:5d:56:ad:7d:c3: 1d:b5:8f:36:b8:e8:c4:22:57:ce:e0:3a:76:dc:5c: 2a:c9:d8:e3:42:06:dc:24:7c:88:3a:d4:6c:97:36: 84:9c:b0:c6:41:23:bf:13:5a:2d:da:42:a6:44:6b: c9:1c:cd:73:14:cb:1d:3f:47:13:33:f5:0c:a5:9d: 5b:8b:fb:7c:98:52:88:d6:e1:70:e3:12:0c:c7:cb: a6:4c:00:80:9a:a2:06:91:4c:7e:7a:be:65:f0:b1: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CD:C6:8B:2B:0E:27:7A:40:EE:8F:18:C7:2E:BC:F8:0A:BF:C6:0C X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:39:40:aa:3b:09:98:9f:1e:83:95:f7:85:28:27:e5:fe:c0: 87:20:d7:da:92:c3:43:8a:08:ae:0c:a4:19:29:fd:e1:dd:ea: 9c:9f:cc:86:10:29:65:a9:70:89:95:db:5d:7f:bf:50:9c:15: 87:20:47:3a:72:6a:c8:e2:64:59:9d:26:b6:ed:c9:8b:dc:0e: 70:29:df:2b:74:61:af:82:bc:92:83:05:70:e9:22:8a:8b:d8: 29:75:83:6d:9a:1a:03:27:7a:d4:6a:b6:13:b0:a0:e5:5b:8f: 19:f9:73:53:22:5c:36:c6:a2:c2:cc:72:b8:91:0f:67:9b:11: f2:d1:c8:49:2e:08:a7:e3:09:8e:f0:e2:d3:ed:95:20:da:63: e6:70:3b:ab:dd:76:f6:c5:69:7f:1e:df:1e:18:ba:6e:20:5d: bd:eb:53:c8:39:a2:b5:e8:44:2c:5a:2a:3c:e2:58:23:c4:05: be:7e:d9:ef:1a:c9:d2:e8:79:3a:5b:04:5f:08:20:3a:92:c4: ca:be:9f:f7:9f:5d:bb:80:43:0a:20:1b:bb:d4:f6:23:25:5d: eb:83:cc:56:71:80:b4:a3:41:9c:44:ab:ea:5d:67:01:c0:40: e6:1c:52:93:73:18:04:a5:a4:d5:9c:17:3c:cd:a3:08:28:d8: 00:37:65:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCk9+wcqBezVbv0SJXpFxXoIdchswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTA0MDUxMjI2MDRaFw0yNTA0MDgyMjQzMDRaMDMxMTAvBgNV BAMTKEQ5Q0RDNjhCMkIwRTI3N0E0MEVFOEYxOEM3MkVCQ0Y4MEFCRkM2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7SEhHEgQCo9REl0lGnQyBwna ev9IGQk4j9HpO+7M98LlGd7NyLr2Fp+RIrNB3OPtvGK0d6j6LfFg5L4ZXV1ae4AO cfkJb7dICMnR5za6VUGfGvN16VJEJavIT5jJ8bgZTLUIl0qVgXL6+q+xlNWnD2SC 4sBGHU5FdA9C/OX4WmEP3JkGDOyRVvJUua/0gBGiQ6AKCGisDSpchoSoAYpdVq19 wx21jza46MQiV87gOnbcXCrJ2ONCBtwkfIg61GyXNoScsMZBI78TWi3aQqZEa8kc zXMUyx0/RxMz9QylnVuL+3yYUojW4XDjEgzHy6ZMAICaogaRTH56vmXwsR6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2c3GiysOJ3pA7o8Yxy68+Aq/xgwwHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI5QKo7CZifHoOV94UoJ+X+wIcg19qSw0OK CK4MpBkp/eHd6pyfzIYQKWWpcImV211/v1CcFYcgRzpyasjiZFmdJrbtyYvcDnAp 3yt0Ya+CvJKDBXDpIoqL2Cl1g22aGgMnetRqthOwoOVbjxn5c1MiXDbGosLMcriR D2ebEfLRyEkuCKfjCY7w4tPtlSDaY+ZwO6vddvbFaX8e3x4Yum4gXb3rU8g5orXo RCxaKjziWCPEBb5+2e8aydLoeTpbBF8IIDqSxMq+n/efXbuAQwogG7vU9iMlXeuD zFZxgLSjQZxEq+pdZwHAQOYcUpNzGASlpNWcFzzNowgo2AA3Zfs= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:19 2025 by rpki-client