$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: FZkNSZJ48FsGaUSuObyP3RlB+pPyK8TELnRB6yU/rnQ= Subject key identifier: FC:7C:7E:CF:F9:A6:B8:A5:78:56:64:39:54:0C:AD:4F:E3:B2:E0:40 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 55ABACA7909714B3483A0FD86194BEA2AED770EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: AF Signing time: Thu 13 Mar 2025 02:21:45 +0000 Manifest this update: Thu 13 Mar 2025 02:16:45 +0000 Manifest next update: Sun 16 Mar 2025 11:26:45 +0000 Files and hashes: 1: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: H1DdWgBrJcOPmKqILjOANT40s2dlxjun0eFgZvJicIs=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ab:ac:a7:90:97:14:b3:48:3a:0f:d8:61:94:be:a2:ae:d7:70:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Mar 13 02:16:45 2025 GMT Not After : Mar 16 11:26:45 2025 GMT Subject: CN=FC7C7ECFF9A6B8A578566439540CAD4FE3B2E040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:31:6d:2e:7e:56:ae:ea:e1:1f:3e:1c:e4: 54:4f:7d:19:af:aa:71:41:19:bf:9a:a2:71:60:74: 5c:60:6e:fc:d6:48:c8:c1:91:b5:4b:d4:e9:0a:f6: 7f:dc:a4:78:e2:4c:56:9c:c5:1c:fd:a9:72:51:27: f8:b7:6a:44:d6:1b:ff:3a:b9:3a:e7:1e:e1:b2:d6: 52:5c:37:ac:9e:ec:6a:df:24:eb:39:96:09:94:a5: d1:a4:13:09:be:42:23:f2:50:58:c5:6d:6a:04:07: 8e:45:52:41:ef:1f:fd:dc:31:46:c9:a0:03:49:67: 14:05:96:73:53:e7:90:60:74:f1:e7:28:b1:aa:9a: b7:f2:d6:dd:75:7d:05:5d:93:bd:7c:8f:2f:26:5c: ed:7d:a5:c2:ca:c4:52:57:ac:fb:78:c2:bf:fe:26: 3e:17:4b:14:e6:5f:c2:59:d1:1d:4a:b0:22:51:d4: 48:ff:2e:8b:f5:27:c4:48:ce:86:78:6f:09:3a:d8: 99:e4:75:67:02:38:4f:2a:3f:f2:81:cd:49:f6:22: 5e:6c:74:1e:cd:b6:01:67:78:65:60:1d:91:59:22: e7:b0:66:62:e6:aa:a1:2e:b5:0c:8a:13:e2:ea:e9: 18:34:97:96:64:41:a5:81:31:a1:bd:3c:c2:b8:f2: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7C:7E:CF:F9:A6:B8:A5:78:56:64:39:54:0C:AD:4F:E3:B2:E0:40 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:89:44:86:8f:6a:ba:1a:14:95:3f:6e:fd:97:a0:74:5e:87: c6:60:3f:a8:35:c4:7a:5b:0a:cb:c5:79:58:1d:b9:6b:7c:78: e0:c1:b7:36:43:d6:a2:67:d1:1b:b3:a4:a7:ea:a9:8b:0c:cb: 69:96:a4:77:64:d4:1f:49:1d:1f:ee:17:ff:07:9b:0e:4a:4d: 7a:c9:c9:3a:df:68:25:0f:93:ec:91:5b:5e:5d:3e:b1:b5:0a: b3:81:9b:f2:8c:7c:9a:b3:90:59:92:07:5b:e4:89:75:86:51: c2:d3:d1:6d:3f:29:55:6d:5c:6e:c2:54:8a:24:6b:69:29:e9: df:9c:03:9a:d4:ea:2a:09:5e:5d:91:79:a8:69:b8:b1:01:4d: b0:56:e3:0c:78:17:d2:ce:86:af:a1:2e:c0:4c:65:eb:8f:3e: 5e:b4:80:ee:bf:ea:58:e2:61:2c:61:80:d9:e4:32:d5:c4:b6: 2b:ae:74:0c:fa:0c:06:dd:8a:9e:1d:cc:e2:f8:17:d2:fb:75: a7:2e:d8:76:d1:11:0b:cb:18:f1:40:38:85:3f:d6:9c:b5:eb: ad:9b:59:c6:39:3e:a4:d9:7f:2d:c9:c5:8c:23:86:cf:6d:0f: 1f:23:4d:57:8e:f6:ad:15:44:be:cb:2d:c4:f9:db:2b:1e:53: 6b:0b:c8:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVausp5CXFLNIOg/YYZS+oq7XcOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTAzMTMwMjE2NDVaFw0yNTAzMTYxMTI2NDVaMDMxMTAvBgNV BAMTKEZDN0M3RUNGRjlBNkI4QTU3ODU2NjQzOTU0MENBRDRGRTNCMkUwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDezTFtLn5WrurhHz4c5FRPfRmv qnFBGb+aonFgdFxgbvzWSMjBkbVL1OkK9n/cpHjiTFacxRz9qXJRJ/i3akTWG/86 uTrnHuGy1lJcN6ye7GrfJOs5lgmUpdGkEwm+QiPyUFjFbWoEB45FUkHvH/3cMUbJ oANJZxQFlnNT55BgdPHnKLGqmrfy1t11fQVdk718jy8mXO19pcLKxFJXrPt4wr/+ Jj4XSxTmX8JZ0R1KsCJR1Ej/Lov1J8RIzoZ4bwk62JnkdWcCOE8qP/KBzUn2Il5s dB7NtgFneGVgHZFZIuewZmLmqqEutQyKE+Lq6Rg0l5ZkQaWBMaG9PMK48jxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Hx+z/mmuKV4VmQ5VAytT+Oy4EAwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6JRIaParoaFJU/bv2XoHReh8ZgP6g1xHpb CsvFeVgduWt8eODBtzZD1qJn0RuzpKfqqYsMy2mWpHdk1B9JHR/uF/8Hmw5KTXrJ yTrfaCUPk+yRW15dPrG1CrOBm/KMfJqzkFmSB1vkiXWGUcLT0W0/KVVtXG7CVIok a2kp6d+cA5rU6ioJXl2ReahpuLEBTbBW4wx4F9LOhq+hLsBMZeuPPl60gO6/6lji YSxhgNnkMtXEtiuudAz6DAbdip4dzOL4F9L7dacu2HbREQvLGPFAOIU/1py1662b WcY5PqTZfy3JxYwjhs9tDx8jTVeO9q0VRL7LLcT52yseU2sLyHQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:55 2025 by rpki-client