$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: gqxaKMNd+BvSUl5B/oCWtP7RRzq0h6/pIhAWTHRCn7k= Subject key identifier: 95:72:7D:6D:76:EE:11:3D:F7:BB:79:01:B1:C3:F7:CB:79:39:D8:5F Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 31F72092426F3455B8EE9669D07E213AFC6D8E72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 0333 Signing time: Fri 04 Apr 2025 21:02:09 +0000 Manifest this update: Fri 04 Apr 2025 20:57:09 +0000 Manifest next update: Tue 08 Apr 2025 03:26:09 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) 2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: ilizM63AI/gKshT9ITWKs2idIUHu0JkB6GSLWJI7mxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 03:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f7:20:92:42:6f:34:55:b8:ee:96:69:d0:7e:21:3a:fc:6d:8e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Apr 4 20:57:09 2025 GMT Not After : Apr 8 03:26:09 2025 GMT Subject: CN=95727D6D76EE113DF7BB7901B1C3F7CB7939D85F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:46:a7:27:5d:55:a4:dd:64:c1:66:3f:88: a0:3e:2b:a6:16:3f:ed:2e:44:40:c0:21:df:42:e3: 0b:a6:36:9a:6f:b5:10:8e:b2:ee:9a:d0:c6:ae:c0: d9:cc:db:37:cf:c4:a5:83:71:20:ba:0e:6d:5f:15: cb:04:07:f3:66:42:ef:47:65:19:c1:b3:ce:a3:f7: a6:2e:8d:2b:a7:3e:4f:de:8a:c2:79:0b:21:e1:c8: 41:37:39:c4:88:94:53:0e:2d:cd:47:54:2d:f9:9b: ed:c8:c0:4e:ac:b3:fd:e9:b0:12:7d:71:3f:24:0c: 5c:9a:07:b8:13:2c:60:ff:25:ef:d0:e7:2a:56:c7: 09:68:bd:77:a8:80:26:11:0e:a3:cb:8d:22:06:93: cc:e5:6c:35:d2:02:9f:68:41:90:fe:d1:44:1a:ba: 33:67:9c:b1:4f:ea:8d:90:73:de:ff:a3:79:e2:3d: 5f:41:64:38:65:cb:3d:7b:10:55:1f:ca:97:ef:64: 85:5c:d4:de:ea:e5:d0:04:28:c7:8f:b3:76:a0:e6: 94:02:91:a5:0f:29:2a:ae:14:c9:6d:ec:c8:0c:e4: 10:84:76:53:78:23:9f:81:af:f5:18:8a:40:34:23: 14:5f:3a:83:06:46:ba:a8:50:75:7a:7d:5f:c3:44: 0b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:7D:6D:76:EE:11:3D:F7:BB:79:01:B1:C3:F7:CB:79:39:D8:5F X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:05:d3:e1:a6:fe:d6:e1:70:98:cd:e0:bd:58:99:cf:22:03: 97:88:c5:ed:99:61:96:f9:33:cc:73:57:b1:16:4f:18:2e:a4: 1e:92:51:a3:b3:38:68:42:27:6d:dc:9a:c0:0b:bc:8f:45:20: d2:70:02:a0:d7:f6:a4:db:b2:0c:9e:b8:57:12:24:de:0f:88: cc:08:9b:e4:0d:4b:f0:e3:58:c4:b0:7e:fe:69:4a:8e:ea:13: 81:bf:a3:b6:c7:93:73:18:1f:73:d3:0b:89:d8:da:30:27:c0: 61:ef:b8:61:a1:b4:78:8e:1a:88:ec:ef:67:ea:8e:04:d3:7d: 2e:0e:ec:df:51:7e:e3:77:6f:4c:52:21:09:a4:f5:b7:e3:3a: 34:5a:ad:b1:2c:fa:18:51:29:d8:09:98:a1:5b:af:46:ed:cf: 3e:8d:ac:9d:87:e9:3c:e4:1b:38:25:29:a9:dd:50:52:87:b9: 0d:85:25:86:7e:28:3e:08:67:ad:8a:b3:99:f9:2c:63:d3:8d: 82:1d:68:e8:df:5f:ea:ab:f9:07:08:1d:18:ba:03:35:b1:92: 93:82:66:6a:31:91:69:b0:da:96:f2:e9:c1:89:18:a1:1e:d0: 92:2e:43:4e:52:2e:94:3e:e0:3c:b8:55:d2:2a:59:22:aa:e3: 8f:d3:a3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfcgkkJvNFW47pZp0H4hOvxtjnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTA0MDQyMDU3MDlaFw0yNTA0MDgwMzI2MDlaMDMxMTAvBgNV BAMTKDk1NzI3RDZENzZFRTExM0RGN0JCNzkwMUIxQzNGN0NCNzkzOUQ4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEG0anJ11VpN1kwWY/iKA+K6YW P+0uREDAId9C4wumNppvtRCOsu6a0MauwNnM2zfPxKWDcSC6Dm1fFcsEB/NmQu9H ZRnBs86j96YujSunPk/eisJ5CyHhyEE3OcSIlFMOLc1HVC35m+3IwE6ss/3psBJ9 cT8kDFyaB7gTLGD/Je/Q5ypWxwlovXeogCYRDqPLjSIGk8zlbDXSAp9oQZD+0UQa ujNnnLFP6o2Qc97/o3niPV9BZDhlyz17EFUfypfvZIVc1N7q5dAEKMePs3ag5pQC kaUPKSquFMlt7MgM5BCEdlN4I5+Br/UYikA0IxRfOoMGRrqoUHV6fV/DRAsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXJ9bXbuET33u3kBscP3y3k52F8wHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgF0+Gm/tbhcJjN4L1Ymc8iA5eIxe2ZYZb5 M8xzV7EWTxgupB6SUaOzOGhCJ23cmsALvI9FINJwAqDX9qTbsgyeuFcSJN4PiMwI m+QNS/DjWMSwfv5pSo7qE4G/o7bHk3MYH3PTC4nY2jAnwGHvuGGhtHiOGojs72fq jgTTfS4O7N9RfuN3b0xSIQmk9bfjOjRarbEs+hhRKdgJmKFbr0btzz6NrJ2H6Tzk GzglKandUFKHuQ2FJYZ+KD4IZ62Ks5n5LGPTjYIdaOjfX+qr+QcIHRi6AzWxkpOC ZmoxkWmw2pby6cGJGKEe0JIuQ05SLpQ+4Dy4VdIqWSKq44/ToyE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:16:19 2025 by rpki-client