$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: 648fz+WknygIjj9zbhKfTMGKTKzeDdrQtleNqVvyYQk= Subject key identifier: E6:27:88:70:2D:EC:4B:CB:17:13:DA:52:B6:B5:EB:07:69:3B:1F:96 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 30E29A19B606889C69C8536AC0A35449E5FD9408 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: BF Signing time: Fri 18 Apr 2025 09:31:44 +0000 Manifest this update: Fri 18 Apr 2025 09:26:44 +0000 Manifest next update: Mon 21 Apr 2025 19:24:44 +0000 Files and hashes: 1: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: 6fMeDxoi1jY0GpjOlITnyPYSb0AfBJs2FzjdklItaoM=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 19:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e2:9a:19:b6:06:88:9c:69:c8:53:6a:c0:a3:54:49:e5:fd:94:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Apr 18 09:26:44 2025 GMT Not After : Apr 21 19:24:44 2025 GMT Subject: CN=E62788702DEC4BCB1713DA52B6B5EB07693B1F96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:92:36:72:aa:f2:2c:76:85:8e:ac:fc:a7: 17:36:61:38:ca:f2:86:06:b0:a5:8d:31:7e:21:e5: 17:63:fa:84:8f:f6:7b:49:a9:ae:db:c4:1d:bd:e3: 50:6a:31:ad:cf:34:b5:37:1b:7e:1f:03:77:09:3e: 46:ca:5a:d8:29:8b:7a:f6:a7:62:0c:30:57:1a:f0: b2:a5:15:a8:e2:74:6d:78:07:97:ea:a5:bc:6d:77: cb:c7:b3:5d:4a:f6:46:00:04:e2:42:1e:0c:f5:cf: 44:2f:ab:59:f4:f3:84:c6:77:77:f0:dd:52:79:c2: 47:f8:d1:f8:b7:ce:1d:64:8e:2c:cf:dd:17:14:91: e6:9f:04:30:4c:6e:c9:bb:36:0c:07:72:66:ec:7d: e9:64:f0:7c:c7:46:49:24:96:02:22:63:36:89:e8: bf:f4:be:b6:e3:4b:86:25:a1:0c:4b:9d:04:e2:3e: 92:e1:9c:bb:f1:29:be:7f:0f:b0:ff:ac:50:b4:f3: 3d:d4:18:5b:8a:82:5b:aa:be:18:b5:88:92:ab:0e: 79:f8:b3:21:dd:67:90:20:f2:33:51:6d:70:15:c1: 57:50:0a:b6:94:de:4e:0e:8f:87:c4:ae:38:aa:f8: e8:7c:4c:e6:8f:a3:84:78:a1:71:e3:5f:8a:85:cb: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:88:70:2D:EC:4B:CB:17:13:DA:52:B6:B5:EB:07:69:3B:1F:96 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:de:47:af:09:42:44:71:b2:9b:ab:a4:6e:cd:6f:ad:7b:c1: 78:4f:94:c2:d6:10:de:dd:6c:22:c0:9f:0c:c0:79:bf:99:2a: 60:ed:4b:b4:fe:c7:c6:47:f5:cd:bd:45:23:40:9c:c0:0f:3f: be:fe:37:11:84:2a:6f:c2:43:bc:a3:32:91:ad:b7:93:da:ca: 79:cb:02:cf:5d:01:31:99:52:aa:06:ae:89:19:d7:ad:5b:35: 44:cd:60:80:ed:3b:82:a5:03:31:56:72:d2:a1:4f:d5:46:bf: 34:46:99:dc:8f:66:74:52:be:62:1d:bd:a7:a8:6d:5c:59:db: f3:2c:49:97:23:89:96:c4:15:c2:79:59:a4:8a:07:07:04:f3: ab:cb:eb:92:dc:8b:cd:4b:6f:f8:48:fa:82:d2:b1:7c:45:01: a6:41:68:f2:54:c5:10:db:4e:5f:ff:d7:a6:a5:e7:3d:70:f2: 16:55:c0:ef:f4:6b:27:68:76:e0:5e:bd:a6:2d:9a:d6:2a:b7: c8:83:71:d8:00:5f:32:22:6f:c2:90:3f:86:9a:28:f7:40:20: 2d:d1:b9:43:d6:8a:b1:2d:5e:af:2f:3a:46:a6:5e:66:05:fd: 3a:e7:f2:a7:eb:86:7a:e7:e4:dd:37:fb:ab:3a:99:a8:86:3d: 0a:93:22:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOKaGbYGiJxpyFNqwKNUSeX9lAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA0MTgwOTI2NDRaFw0yNTA0MjExOTI0NDRaMDMxMTAvBgNV BAMTKEU2Mjc4ODcwMkRFQzRCQ0IxNzEzREE1MkI2QjVFQjA3NjkzQjFGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82pI2cqryLHaFjqz8pxc2YTjK 8oYGsKWNMX4h5Rdj+oSP9ntJqa7bxB2941BqMa3PNLU3G34fA3cJPkbKWtgpi3r2 p2IMMFca8LKlFajidG14B5fqpbxtd8vHs11K9kYABOJCHgz1z0Qvq1n084TGd3fw 3VJ5wkf40fi3zh1kjizP3RcUkeafBDBMbsm7NgwHcmbsfelk8HzHRkkklgIiYzaJ 6L/0vrbjS4YloQxLnQTiPpLhnLvxKb5/D7D/rFC08z3UGFuKgluqvhi1iJKrDnn4 syHdZ5Ag8jNRbXAVwVdQCraU3k4Oj4fErjiq+Oh8TOaPo4R4oXHjX4qFy1QFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ieIcC3sS8sXE9pStrXrB2k7H5YwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7eR68JQkRxspurpG7Nb617wXhPlMLWEN7d bCLAnwzAeb+ZKmDtS7T+x8ZH9c29RSNAnMAPP77+NxGEKm/CQ7yjMpGtt5PaynnL As9dATGZUqoGrokZ161bNUTNYIDtO4KlAzFWctKhT9VGvzRGmdyPZnRSvmIdvaeo bVxZ2/MsSZcjiZbEFcJ5WaSKBwcE86vL65Lci81Lb/hI+oLSsXxFAaZBaPJUxRDb Tl//16al5z1w8hZVwO/0aydoduBevaYtmtYqt8iDcdgAXzIib8KQP4aaKPdAIC3R uUPWirEtXq8vOkamXmYF/Trn8qfrhnrn5N03+6s6maiGPQqTIuo= -----END CERTIFICATE-----Generated at Fri Apr 18 20:12:00 2025 by rpki-client