$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: Z70R1owHY2x0crfp2+F3XHNRrvywLqy09TSZJxevJyQ= Subject key identifier: 3B:35:1F:8A:35:A4:3C:28:E2:45:FB:39:30:C5:64:5C:C2:08:E7:EA Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 7C860A9F4447D936290905174EC671E3738B29D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: D4 Signing time: Fri 04 Apr 2025 23:11:54 +0000 Manifest this update: Fri 04 Apr 2025 23:06:54 +0000 Manifest next update: Tue 08 Apr 2025 00:00:54 +0000 Files and hashes: 1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: I+3rRr+sjwbklXRxI1mhp6cftXHNfO32u4vrwTHCH/Y=) 2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: GanArMdyxHcMbx7yNEnXuF/pBEYLZnuk0ZSf31LCDR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:86:0a:9f:44:47:d9:36:29:09:05:17:4e:c6:71:e3:73:8b:29:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Apr 4 23:06:54 2025 GMT Not After : Apr 8 00:00:54 2025 GMT Subject: CN=3B351F8A35A43C28E245FB3930C5645CC208E7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:77:6b:1a:59:dc:a8:f2:b0:26:53:18:b8: bf:74:cb:45:ca:b5:97:32:ad:c1:e2:d5:24:f7:98: ae:13:16:74:cb:96:62:b1:81:fa:f9:3a:c5:8a:3c: eb:bd:49:04:35:8c:78:7b:09:1c:24:18:2e:a5:fe: e1:6b:f4:45:33:4e:2b:ef:40:20:03:96:45:26:af: 66:8b:6f:fe:4c:33:42:e9:52:32:83:3c:5b:5a:9b: 78:11:69:54:e7:03:de:2d:bb:a9:5e:0b:6c:e9:a3: 20:8d:d0:1a:c2:ca:7c:92:c0:77:3e:31:af:ea:49: 00:95:07:c9:ff:72:eb:f3:28:2b:0e:1f:1b:dc:85: a5:4a:37:87:0e:96:ec:e0:5d:51:08:d9:a3:9d:63: fa:4b:cf:63:7c:4f:d3:e2:cc:bd:32:e8:96:7d:e5: cf:db:43:d0:3d:d1:62:65:23:16:9b:bb:81:32:f2: 1b:29:10:18:c3:08:cc:20:d4:22:2c:0b:52:9d:f6: 1e:fa:b8:77:04:86:c6:d0:24:7a:23:f4:48:97:ca: e1:81:03:18:99:55:15:a2:6d:f7:5b:74:f3:c9:bd: f2:b0:02:66:28:55:0a:5e:cd:d8:ad:5b:0f:30:f7: 5f:10:c4:1f:b2:2e:83:27:47:48:9c:fd:e0:de:0b: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:35:1F:8A:35:A4:3C:28:E2:45:FB:39:30:C5:64:5C:C2:08:E7:EA X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:06:f7:47:42:08:c0:e9:80:32:89:e9:d3:d3:e4:80:32:f0: ef:e3:0c:aa:c4:42:dc:37:ab:2c:45:9f:e6:1c:53:5e:ad:d3: 52:ed:4c:8a:53:51:0f:3f:99:53:28:dd:bb:8d:80:dd:3b:c9: cb:1e:63:9b:0d:f4:cb:03:59:cf:84:f4:c9:db:6f:cd:ee:19: 15:be:38:ae:fd:20:05:f9:89:04:40:9f:de:af:2a:92:f0:55: 17:96:f4:65:b2:bf:d8:fa:c1:13:a0:37:72:54:7c:53:e5:ad: 8c:c7:eb:f5:e3:72:6b:e6:9b:5a:5d:01:c6:48:2c:fc:8d:52: a2:c2:ef:00:b5:9b:76:a5:a9:63:b1:9b:d5:70:2a:23:5e:76: 08:f2:e3:31:85:6f:a9:ad:2c:23:a4:0e:06:3c:79:80:ab:b4: 5d:6e:32:c2:b6:54:b0:2b:9a:f7:e1:c4:58:e4:b5:17:24:d4: a0:ca:91:9f:f7:6b:5c:52:d2:43:0f:3d:df:e7:c8:8e:fd:6e: c3:c2:d5:d9:d7:94:8e:58:94:bd:59:25:6b:bc:1a:d6:ba:fd: 58:6e:fc:a5:de:3c:90:f6:dc:57:61:3f:3d:b6:ad:33:b1:6b: 20:35:a5:18:da:9c:13:b7:81:59:db:56:0d:63:1f:cf:1e:3c: 1c:d0:da:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIYKn0RH2TYpCQUXTsZx43OLKdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTA0MDQyMzA2NTRaFw0yNTA0MDgwMDAwNTRaMDMxMTAvBgNV BAMTKDNCMzUxRjhBMzVBNDNDMjhFMjQ1RkIzOTMwQzU2NDVDQzIwOEU3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94HdrGlncqPKwJlMYuL90y0XK tZcyrcHi1ST3mK4TFnTLlmKxgfr5OsWKPOu9SQQ1jHh7CRwkGC6l/uFr9EUzTivv QCADlkUmr2aLb/5MM0LpUjKDPFtam3gRaVTnA94tu6leC2zpoyCN0BrCynySwHc+ Ma/qSQCVB8n/cuvzKCsOHxvchaVKN4cOluzgXVEI2aOdY/pLz2N8T9PizL0y6JZ9 5c/bQ9A90WJlIxabu4Ey8hspEBjDCMwg1CIsC1Kd9h76uHcEhsbQJHoj9EiXyuGB AxiZVRWibfdbdPPJvfKwAmYoVQpezditWw8w918QxB+yLoMnR0ic/eDeCxO/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzUfijWkPCjiRfs5MMVkXMII5+owHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0G90dCCMDpgDKJ6dPT5IAy8O/jDKrEQtw3 qyxFn+YcU16t01LtTIpTUQ8/mVMo3buNgN07ycseY5sN9MsDWc+E9Mnbb83uGRW+ OK79IAX5iQRAn96vKpLwVReW9GWyv9j6wROgN3JUfFPlrYzH6/Xjcmvmm1pdAcZI LPyNUqLC7wC1m3alqWOxm9VwKiNedgjy4zGFb6mtLCOkDgY8eYCrtF1uMsK2VLAr mvfhxFjktRck1KDKkZ/3a1xS0kMPPd/nyI79bsPC1dnXlI5YlL1ZJWu8Gta6/Vhu /KXePJD23FdhPz22rTOxayA1pRjanBO3gVnbVg1jH88ePBzQ2qk= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:20 2025 by rpki-client