$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: OaE16iwc+cPl+C+wBnGv0UJ7G6+90j9y1t36vhneCjk= Subject key identifier: 78:7B:8E:83:03:41:C7:6D:A2:30:DA:F3:F7:6C:54:08:9A:8A:78:D0 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 140243F66A9E6BA6396DC5B5C9DA71C2480D6D32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 0283 Signing time: Fri 18 Apr 2025 11:11:00 +0000 Manifest this update: Fri 18 Apr 2025 11:06:00 +0000 Manifest next update: Mon 21 Apr 2025 13:16:00 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: 9f69sWZTisCGNH/vv/6nTqK0wESwsjRBoexQ2/b3jzQ=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: tXcQSjFRgRXWYm56Zc7JHT0yut/bAGiDVFBVYQq84Lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 13:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:02:43:f6:6a:9e:6b:a6:39:6d:c5:b5:c9:da:71:c2:48:0d:6d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Apr 18 11:06:00 2025 GMT Not After : Apr 21 13:16:00 2025 GMT Subject: CN=787B8E830341C76DA230DAF3F76C54089A8A78D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:d0:12:e3:7c:11:de:2e:06:31:fd:dd:9e: 52:85:c6:49:58:b9:2f:6d:d6:76:6a:0c:ee:70:b9: 3b:a9:f7:2f:92:75:df:0d:01:29:6c:5e:16:82:44: 8e:f5:0a:fd:54:f0:2b:c0:d6:58:70:e4:b7:98:f9: 11:30:ba:14:9b:ec:71:c1:62:ee:8c:d2:31:5d:58: 32:bf:06:0c:9b:9a:99:69:6b:2f:e3:47:08:1e:f4: 21:3b:85:b0:c8:ec:04:22:1e:87:55:f1:9c:45:5d: c4:77:9d:94:84:c9:4d:3a:57:54:e1:80:9b:91:6c: e4:b0:73:e6:ca:21:20:fb:40:67:1c:54:dd:2c:92: 28:97:94:bd:98:5e:ca:78:fc:d2:98:24:d5:37:7f: 9f:84:1e:9d:c5:9d:59:bf:8c:2f:70:05:0d:9c:7c: a2:50:bd:1e:55:65:5a:dc:78:b9:8d:68:8e:aa:a0: 88:37:d7:6a:81:59:bb:e6:e5:cc:a1:b8:2d:41:c0: 59:4f:ed:24:41:4e:7d:28:f2:bc:26:6d:c1:11:01: f9:30:c9:a2:95:be:ea:53:d7:70:0b:ec:8f:53:4d: 5d:fb:49:e5:d3:ed:83:9a:7e:df:1f:98:be:c4:ed: 46:2f:d3:3a:ae:26:c1:6e:bb:f7:69:43:bd:4a:b8: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7B:8E:83:03:41:C7:6D:A2:30:DA:F3:F7:6C:54:08:9A:8A:78:D0 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:65:d9:a1:8c:92:61:e8:45:f4:d4:b7:f8:77:b6:0f:80:84: a5:35:0e:c1:21:58:7e:d8:32:76:5e:92:fb:59:6b:30:aa:13: b4:89:88:75:8b:bf:5d:c2:36:ec:fd:be:1b:e8:74:a5:93:23: df:15:aa:4c:1f:31:7c:47:2d:db:6e:2e:70:4d:54:09:00:80: dd:a5:b2:44:a5:77:6e:5f:5d:d0:2a:27:26:e5:76:cb:bf:ff: fd:ea:68:61:43:13:43:1c:c9:3f:8e:35:a6:b1:91:66:70:f8: b4:4d:2a:92:34:4c:68:81:5e:96:b8:34:66:8a:3e:9d:af:c1: 30:2a:64:6c:32:ae:4a:f7:9a:7d:d3:3b:d7:ee:2c:cd:0c:f6: 30:02:fc:b5:e9:c0:0d:4c:97:cc:57:41:75:14:4a:93:bc:95: 2e:a1:29:67:0b:31:68:77:ef:b9:ee:d6:73:db:c1:0d:3d:00: 24:a2:82:6e:15:34:fd:26:43:ea:80:31:52:c8:d8:bc:e2:0b: ae:73:2a:a5:3e:5e:d8:1f:cf:5c:31:8f:ad:0b:56:dc:32:60: b6:70:6b:80:ba:de:d9:41:b6:64:5f:a0:b7:78:fc:24:c4:53: 94:ae:92:3c:14:61:5c:6f:d1:8f:41:5b:96:b4:75:51:bc:f8: ec:f3:86:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAJD9mqea6Y5bcW1ydpxwkgNbTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTA0MTgxMTA2MDBaFw0yNTA0MjExMzE2MDBaMDMxMTAvBgNV BAMTKDc4N0I4RTgzMDM0MUM3NkRBMjMwREFGM0Y3NkM1NDA4OUE4QTc4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0tAS43wR3i4GMf3dnlKFxklY uS9t1nZqDO5wuTup9y+Sdd8NASlsXhaCRI71Cv1U8CvA1lhw5LeY+REwuhSb7HHB Yu6M0jFdWDK/Bgybmplpay/jRwge9CE7hbDI7AQiHodV8ZxFXcR3nZSEyU06V1Th gJuRbOSwc+bKISD7QGccVN0skiiXlL2YXsp4/NKYJNU3f5+EHp3FnVm/jC9wBQ2c fKJQvR5VZVrceLmNaI6qoIg312qBWbvm5cyhuC1BwFlP7SRBTn0o8rwmbcERAfkw yaKVvupT13AL7I9TTV37SeXT7YOaft8fmL7E7UYv0zquJsFuu/dpQ71KuGohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeHuOgwNBx22iMNrz92xUCJqKeNAwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABl2aGMkmHoRfTUt/h3tg+AhKU1DsEhWH7Y MnZekvtZazCqE7SJiHWLv13CNuz9vhvodKWTI98VqkwfMXxHLdtuLnBNVAkAgN2l skSld25fXdAqJybldsu///3qaGFDE0McyT+ONaaxkWZw+LRNKpI0TGiBXpa4NGaK Pp2vwTAqZGwyrkr3mn3TO9fuLM0M9jAC/LXpwA1Ml8xXQXUUSpO8lS6hKWcLMWh3 77nu1nPbwQ09ACSigm4VNP0mQ+qAMVLI2LziC65zKqU+Xtgfz1wxj60LVtwyYLZw a4C63tlBtmRfoLd4/CTEU5SukjwUYVxv0Y9BW5a0dVG8+OzzhpU= -----END CERTIFICATE-----Generated at Sat Apr 19 15:14:05 2025 by rpki-client