$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: rJ4vLTwALQmZ4BjRbz7J30QPT9OqyTz7edjm8VVljE0= Subject key identifier: FE:00:11:BC:FD:62:4D:9A:57:40:8A:36:BE:5D:EE:00:74:0A:93:2D Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 3C5F136BAC6B13462B38F6475549117BB26B0AC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 6A Signing time: Wed 16 Apr 2025 11:31:06 +0000 Manifest this update: Wed 16 Apr 2025 11:26:06 +0000 Manifest next update: Sat 19 Apr 2025 22:46:06 +0000 Files and hashes: 1: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: UPMtGZnVrXvsdD+hW/ollUDYvpfz7ZVuljYcTW02tw0=) 2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5f:13:6b:ac:6b:13:46:2b:38:f6:47:55:49:11:7b:b2:6b:0a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Apr 16 11:26:06 2025 GMT Not After : Apr 19 22:46:06 2025 GMT Subject: CN=FE0011BCFD624D9A57408A36BE5DEE00740A932D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:5d:24:1c:0f:4a:bd:ce:e6:50:97:ad:89: 1e:2b:34:45:d9:f0:d2:13:2c:3c:99:e0:b7:b6:6b: 17:b9:d0:f5:04:fc:dc:c7:52:6e:e0:50:5f:90:98: 15:97:d6:9d:43:e5:56:9b:4f:1e:8f:a7:8e:17:a3: b6:3b:2b:bd:65:b9:fd:0d:26:4b:5a:ea:5a:c2:48: 57:0e:16:d3:d5:df:4f:92:01:c4:aa:18:c2:46:c4: 5e:bb:a2:ec:31:97:ff:12:f0:60:87:a8:96:cf:52: 99:57:06:7b:de:2b:36:4e:1e:2b:31:16:91:ba:3c: f7:05:2a:0c:f5:44:b2:a3:db:3c:6f:9f:ec:58:da: b6:44:eb:32:2a:ae:33:b4:cb:48:ef:a0:6f:47:a1: 7e:35:f1:d5:bb:56:7a:49:c4:7d:34:43:83:39:82: 4c:92:87:7d:ad:d5:79:d9:98:2e:c7:29:6e:09:ee: a1:27:95:47:1a:5a:e3:13:77:90:34:72:8c:69:9d: 14:cb:ec:9a:a1:20:fd:c9:29:37:ae:fc:62:f8:6e: ed:69:71:b0:d1:c8:e1:ea:df:53:d9:da:7c:bb:d8: e4:6b:75:21:d5:13:b2:79:0c:e7:0c:bf:09:64:32: 1f:15:18:73:34:ba:88:0b:2f:1d:f5:7a:fb:72:ce: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:00:11:BC:FD:62:4D:9A:57:40:8A:36:BE:5D:EE:00:74:0A:93:2D X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e6:cb:94:de:89:c8:ae:7f:07:0a:e4:69:c1:00:34:8c:5d: ef:11:02:66:57:e7:93:7a:83:e2:50:93:ba:d8:99:89:57:ec: be:c4:9a:6f:20:dc:d5:cf:6c:cb:19:6a:08:84:e7:35:18:76: 74:95:94:5e:8e:4c:8a:f2:63:ec:10:7b:d5:c2:19:00:a7:f5: 68:fc:7c:8d:6c:7b:99:bf:59:b8:0b:3a:fb:0c:e3:f9:5c:d0: 36:2f:af:38:4e:37:47:d1:38:20:df:02:f0:e6:fd:f1:24:ba: 2e:fb:05:d1:02:cb:cf:6a:37:7e:8d:ae:c7:c4:16:23:31:15: cd:f6:83:28:29:a3:92:62:8f:66:77:37:e3:78:f5:2b:9a:c4: 0c:0b:65:52:30:f8:0f:cf:84:34:9b:c4:4a:3c:cd:6e:d4:fa: 23:a4:b1:33:2c:ab:3f:70:fa:53:69:99:4c:25:61:c1:f5:91: f1:2a:a4:33:a3:75:94:83:b6:4a:82:b6:d6:17:0a:ed:bf:99: ff:8d:2c:23:8f:70:a2:be:4d:e9:8c:01:ab:4d:62:b5:c2:c5: 13:28:a6:b0:3d:42:0c:22:60:c4:d3:09:e0:ea:a5:3c:3b:b6: 71:0c:0a:ba:3f:b9:80:a1:82:af:65:18:18:b8:51:1f:ed:d7: 4c:6e:38:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF8Ta6xrE0YrOPZHVUkRe7JrCskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA0MTYxMTI2MDZaFw0yNTA0MTkyMjQ2MDZaMDMxMTAvBgNV BAMTKEZFMDAxMUJDRkQ2MjREOUE1NzQwOEEzNkJFNURFRTAwNzQwQTkzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bl0kHA9Kvc7mUJetiR4rNEXZ 8NITLDyZ4Le2axe50PUE/NzHUm7gUF+QmBWX1p1D5VabTx6Pp44Xo7Y7K71luf0N Jkta6lrCSFcOFtPV30+SAcSqGMJGxF67ouwxl/8S8GCHqJbPUplXBnveKzZOHisx FpG6PPcFKgz1RLKj2zxvn+xY2rZE6zIqrjO0y0jvoG9HoX418dW7VnpJxH00Q4M5 gkySh32t1XnZmC7HKW4J7qEnlUcaWuMTd5A0coxpnRTL7JqhIP3JKTeu/GL4bu1p cbDRyOHq31PZ2ny72ORrdSHVE7J5DOcMvwlkMh8VGHM0uogLLx31evtyziGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/gARvP1iTZpXQIo2vl3uAHQKky0wHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjmy5TeiciufwcK5GnBADSMXe8RAmZX55N6 g+JQk7rYmYlX7L7Emm8g3NXPbMsZagiE5zUYdnSVlF6OTIryY+wQe9XCGQCn9Wj8 fI1se5m/WbgLOvsM4/lc0DYvrzhON0fROCDfAvDm/fEkui77BdECy89qN36NrsfE FiMxFc32gygpo5Jij2Z3N+N49SuaxAwLZVIw+A/PhDSbxEo8zW7U+iOksTMsqz9w +lNpmUwlYcH1kfEqpDOjdZSDtkqCttYXCu2/mf+NLCOPcKK+TemMAatNYrXCxRMo prA9QgwiYMTTCeDqpTw7tnEMCro/uYChgq9lGBi4UR/t10xuOAA= -----END CERTIFICATE-----Generated at Thu Apr 17 05:57:16 2025 by rpki-client