$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: HtFaKi8kfLE+nyYOf5y4FqH2tFDUg4rlhiiN/IkVVUI= Subject key identifier: 25:E4:DE:E6:10:DA:83:31:CE:04:87:CD:D1:FB:FA:D1:FA:72:CA:D9 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 77B19C79AB8E4EEC9DA0341194ECB0ABCFBC9964 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: B4 Signing time: Thu 03 Apr 2025 12:31:55 +0000 Manifest this update: Thu 03 Apr 2025 12:26:55 +0000 Manifest next update: Sun 06 Apr 2025 23:17:55 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: zR8T71bEtfbGMJ4aPWZI6CauERnxBNq6EMopxHl+M8o=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b1:9c:79:ab:8e:4e:ec:9d:a0:34:11:94:ec:b0:ab:cf:bc:99:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Apr 3 12:26:55 2025 GMT Not After : Apr 6 23:17:55 2025 GMT Subject: CN=25E4DEE610DA8331CE0487CDD1FBFAD1FA72CAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:7c:2a:3a:ef:42:7c:db:a7:bb:71:6d:9f: b7:16:f7:33:60:b4:32:ee:8f:b0:e1:c6:d7:e7:c6: 83:af:42:93:ba:fc:b1:3e:94:e5:7c:c6:e4:22:16: 27:9d:04:84:4c:65:4a:66:6c:02:c8:22:c1:13:d9: 1c:11:a5:e0:02:c3:58:cc:5a:ae:59:6c:f8:23:71: 91:57:4d:6a:66:bb:87:d1:b7:5f:6a:8a:b8:37:d0: 47:16:32:41:1e:2f:f5:bc:2c:f9:80:ce:82:9c:ef: 5c:0e:d4:f7:05:a7:4a:09:79:c4:75:97:af:f2:71: cc:26:33:32:c8:47:27:63:54:00:d9:00:c4:2a:df: 64:4c:e9:d7:ed:b6:23:9d:6f:23:ca:6f:a1:a6:d2: 64:19:d2:da:bd:fb:bf:16:6f:5d:22:17:f0:0f:a5: da:77:c5:4b:91:9c:6c:29:41:f9:e3:33:d7:18:f0: 72:c0:57:00:24:b6:9a:a7:ca:85:69:17:29:a5:8e: 7f:12:93:6c:50:68:6b:2c:63:8b:59:44:aa:c6:13: dd:48:45:e3:ff:01:5c:65:8b:af:f0:db:3a:d7:13: a9:83:1d:0d:c2:c0:42:54:c3:4d:6f:a7:c9:73:2a: 65:cf:12:a6:a4:56:e9:eb:e0:25:42:ba:8f:91:40: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E4:DE:E6:10:DA:83:31:CE:04:87:CD:D1:FB:FA:D1:FA:72:CA:D9 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4c:52:91:3c:95:38:8a:e2:86:20:bb:96:c4:30:a6:27:52: 00:5c:5d:ce:22:24:ee:ce:0f:7e:4b:82:10:ae:94:de:29:d8: 95:06:c9:1d:ae:6f:b7:ee:74:cd:36:0a:90:af:67:82:3a:6f: 8a:4e:be:71:ff:cb:a3:d1:1c:0f:3b:ce:03:88:c5:2b:19:e7: 87:86:eb:24:f3:7f:d7:53:9f:3d:60:f5:a9:a2:20:ce:a5:f2: df:56:a9:a3:09:c3:0d:35:05:25:5f:5f:b1:9b:e4:9b:2f:18: c3:4d:1a:07:80:55:dc:76:d2:d4:bc:91:9d:28:99:a9:00:f2: e0:21:56:38:e0:a9:49:71:2d:5f:6b:90:ee:d6:2b:04:03:02: 24:4a:cc:f5:0b:6a:6c:32:c8:59:70:29:9d:c0:d1:24:ac:a2: 58:5f:60:54:02:de:1e:43:ea:15:4d:74:01:23:e3:e5:6d:fe: cc:8c:22:40:3d:94:56:a3:c3:91:6a:92:cc:c6:21:f7:2a:52: ea:2d:79:17:c4:b3:ff:0c:7a:ed:a1:bf:55:24:56:b3:cc:11: 94:54:5f:e9:f9:a5:8b:7f:2a:db:02:f1:e3:bf:15:61:88:f5: 8b:f1:af:dd:a3:fd:b0:76:79:be:4c:92:14:00:70:74:ed:41: 4f:8a:0e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7GceauOTuydoDQRlOywq8+8mWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTA0MDMxMjI2NTVaFw0yNTA0MDYyMzE3NTVaMDMxMTAvBgNV BAMTKDI1RTRERUU2MTBEQTgzMzFDRTA0ODdDREQxRkJGQUQxRkE3MkNBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7nwqOu9CfNunu3Ftn7cW9zNg tDLuj7DhxtfnxoOvQpO6/LE+lOV8xuQiFiedBIRMZUpmbALIIsET2RwRpeACw1jM Wq5ZbPgjcZFXTWpmu4fRt19qirg30EcWMkEeL/W8LPmAzoKc71wO1PcFp0oJecR1 l6/yccwmMzLIRydjVADZAMQq32RM6dfttiOdbyPKb6Gm0mQZ0tq9+78Wb10iF/AP pdp3xUuRnGwpQfnjM9cY8HLAVwAktpqnyoVpFymljn8Sk2xQaGssY4tZRKrGE91I ReP/AVxli6/w2zrXE6mDHQ3CwEJUw01vp8lzKmXPEqakVunr4CVCuo+RQGiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJeTe5hDagzHOBIfN0fv60fpyytkwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVMUpE8lTiK4oYgu5bEMKYnUgBcXc4iJO7O D35LghCulN4p2JUGyR2ub7fudM02CpCvZ4I6b4pOvnH/y6PRHA87zgOIxSsZ54eG 6yTzf9dTnz1g9amiIM6l8t9WqaMJww01BSVfX7Gb5JsvGMNNGgeAVdx20tS8kZ0o makA8uAhVjjgqUlxLV9rkO7WKwQDAiRKzPULamwyyFlwKZ3A0SSsolhfYFQC3h5D 6hVNdAEj4+Vt/syMIkA9lFajw5FqkszGIfcqUuoteRfEs/8Meu2hv1UkVrPMEZRU X+n5pYt/KtsC8eO/FWGI9Yvxr92j/bB2eb5MkhQAcHTtQU+KDnk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:33:15 2025 by rpki-client