$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: H4sEB7UzQ6UVqiAvUFVJ5f+CjQlOxZQL6jeBgiy4ZZE= Subject key identifier: EF:68:78:5D:E9:87:F0:09:16:50:39:AF:C7:80:F4:3E:1A:E7:07:E3 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 1FAE1B60E767145E63567ED71671B45EC3BE4BF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 0198 Signing time: Mon 07 Apr 2025 07:30:52 +0000 Manifest this update: Mon 07 Apr 2025 07:25:52 +0000 Manifest next update: Thu 10 Apr 2025 12:10:52 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: PXsuVPLEzGme/TvSRalwKMlC1hWsjOPUgK0Lgy+M/Is=) 3: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: OWNLOylGVTT6Te3vkJrMmhAlDrkLehEOU/PYZWS6oYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 12:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ae:1b:60:e7:67:14:5e:63:56:7e:d7:16:71:b4:5e:c3:be:4b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Apr 7 07:25:52 2025 GMT Not After : Apr 10 12:10:52 2025 GMT Subject: CN=EF68785DE987F009165039AFC780F43E1AE707E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:0a:76:51:d7:90:76:22:0b:db:9c:cf:79: 9b:86:b7:54:94:ad:d3:5d:3a:98:33:a0:42:64:ec: 30:24:03:d9:df:15:b4:ec:e1:64:af:e6:33:da:db: 56:89:c0:8b:e3:af:e7:01:39:bd:e2:c5:41:88:16: 8a:6d:24:94:b7:92:98:4a:c3:61:a5:cb:0f:96:1d: 49:81:af:40:41:48:14:84:4a:53:ff:5d:06:ee:e7: 13:9c:62:59:d3:25:0d:fa:91:5d:81:13:da:c2:47: f1:d2:6f:b2:6d:9c:4b:97:00:b9:38:9a:75:d5:54: 10:95:36:1b:f4:cd:8f:10:70:e3:2f:88:a8:e7:80: 56:7a:52:21:6b:17:78:19:92:51:97:d5:7d:c7:bf: 68:cf:4c:b4:72:74:bb:fb:e2:7e:a4:d4:6e:98:ee: 37:47:7b:01:e5:3e:86:8b:24:2f:3f:cc:a6:b2:e1: 32:ef:c1:ff:9f:13:38:be:e9:06:f3:24:d9:5b:14: ba:8b:f1:85:7a:55:c7:8b:0e:2a:75:7e:2a:a6:8c: 31:87:7f:55:d8:d7:26:f0:5b:66:c5:bf:7c:00:47: fe:6c:0d:80:fc:2a:f9:11:86:a1:48:7f:67:80:97: f9:71:42:d9:23:34:30:08:8c:d1:d7:bf:71:67:2d: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:68:78:5D:E9:87:F0:09:16:50:39:AF:C7:80:F4:3E:1A:E7:07:E3 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:12:3f:c6:4d:13:0c:70:e2:4c:01:d4:ee:cc:d7:bb:2f:15: 69:15:10:ea:00:78:72:64:1a:91:b6:ea:94:1e:ed:20:db:71: 9d:ea:ec:56:1c:41:09:02:15:6a:b8:d5:7b:b2:eb:f0:a1:e9: 79:f0:e7:4b:83:6e:31:0f:c4:ec:d2:6a:d7:45:fa:ca:ca:6d: b0:bf:5c:d1:cc:15:77:e4:93:46:b2:83:0f:e2:c1:e2:7f:a9: 64:b0:53:80:f3:22:32:9e:de:52:2a:bd:71:8c:b3:4e:20:95: f9:98:43:b8:cd:2d:f3:aa:32:ec:b9:c8:70:e4:04:fb:49:59: 3a:24:f1:d9:32:35:03:d5:50:76:29:27:cc:96:38:78:f9:e1: 4e:6b:94:78:82:9b:14:8e:62:de:62:eb:8f:e0:8c:7f:b0:40: ae:7e:82:15:a2:52:20:a4:e6:ec:ed:f2:df:39:c8:22:6a:66: 75:f1:06:2d:77:29:b2:2b:55:81:2f:07:f9:46:21:33:17:ca: bc:cc:f0:22:3b:e0:31:db:36:33:3d:68:76:a9:9b:74:89:1c: e3:53:17:08:b2:be:fe:51:29:90:e0:df:ac:71:da:e8:44:7a: e2:0d:36:27:9d:2a:71:80:db:4e:66:4f:c1:64:b9:cc:5d:d9: f4:93:c4:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH64bYOdnFF5jVn7XFnG0XsO+S/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTA0MDcwNzI1NTJaFw0yNTA0MTAxMjEwNTJaMDMxMTAvBgNV BAMTKEVGNjg3ODVERTk4N0YwMDkxNjUwMzlBRkM3ODBGNDNFMUFFNzA3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvAp2UdeQdiIL25zPeZuGt1SU rdNdOpgzoEJk7DAkA9nfFbTs4WSv5jPa21aJwIvjr+cBOb3ixUGIFoptJJS3kphK w2Glyw+WHUmBr0BBSBSESlP/XQbu5xOcYlnTJQ36kV2BE9rCR/HSb7JtnEuXALk4 mnXVVBCVNhv0zY8QcOMviKjngFZ6UiFrF3gZklGX1X3Hv2jPTLRydLv74n6k1G6Y 7jdHewHlPoaLJC8/zKay4TLvwf+fEzi+6QbzJNlbFLqL8YV6VceLDip1fiqmjDGH f1XY1ybwW2bFv3wAR/5sDYD8KvkRhqFIf2eAl/lxQtkjNDAIjNHXv3FnLb/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU72h4XemH8AkWUDmvx4D0PhrnB+MwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoSP8ZNEwxw4kwB1O7M17svFWkVEOoAeHJk GpG26pQe7SDbcZ3q7FYcQQkCFWq41Xuy6/Ch6Xnw50uDbjEPxOzSatdF+srKbbC/ XNHMFXfkk0aygw/iweJ/qWSwU4DzIjKe3lIqvXGMs04glfmYQ7jNLfOqMuy5yHDk BPtJWTok8dkyNQPVUHYpJ8yWOHj54U5rlHiCmxSOYt5i64/gjH+wQK5+ghWiUiCk 5uzt8t85yCJqZnXxBi13KbIrVYEvB/lGITMXyrzM8CI74DHbNjM9aHapm3SJHONT Fwiyvv5RKZDg36xx2uhEeuINNiedKnGA205mT8Fkucxd2fSTxNE= -----END CERTIFICATE-----Generated at Tue Apr 8 23:58:39 2025 by rpki-client