$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: dr8/k1fNKdZsi5zCbdRxRFVDlxW28YLRP/svb9sRQi0= Subject key identifier: 32:68:2C:E4:C2:00:54:70:3C:7E:49:3D:72:FB:FC:50:1F:9D:F6:CE Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 44DD3B517E70A4F49C9E47A68876AAA76AA1F783 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 045D Signing time: Thu 13 Mar 2025 13:40:48 +0000 Manifest this update: Thu 13 Mar 2025 13:35:48 +0000 Manifest next update: Sun 16 Mar 2025 18:48:48 +0000 Files and hashes: 1: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 2wmGpgdLLad+yQRBpECeWO5okHIOK5XLuX+ZtyFeGtw=) 2: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: +Sh30nDK5FN0F+rgaXdcf8t+v+X9RkFfwm8Ti8cbstU=) 3: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: b4KiMwiJASyBICznuxWYSVpBPiU9qpEIZ1f+n3s+3IM=) 4: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: n08ubr2CFqscCd9t5fjwUj0+rMzPeUtviO5IsIBPCQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 18:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:dd:3b:51:7e:70:a4:f4:9c:9e:47:a6:88:76:aa:a7:6a:a1:f7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Mar 13 13:35:48 2025 GMT Not After : Mar 16 18:48:48 2025 GMT Subject: CN=32682CE4C20054703C7E493D72FBFC501F9DF6CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:64:e6:49:01:bd:90:61:0a:11:e8:f2:24: c0:2a:a8:14:00:03:6b:fb:78:4e:8f:94:38:49:04: 46:57:0f:be:73:b1:43:81:9a:b3:a5:f7:b5:9a:83: 66:a1:b1:bf:61:65:94:8b:e9:3a:3a:16:f2:12:18: 69:78:0c:32:cd:ee:fe:9c:72:8f:c5:c5:fb:07:36: ba:28:47:7c:75:c2:8b:30:07:f1:d9:66:60:5f:7e: 65:96:f9:58:2c:94:4f:a2:ef:89:61:c0:6e:90:5a: 12:e9:57:c2:9a:af:86:57:a9:36:84:63:38:d5:8b: d2:e2:63:bd:47:d2:45:75:4d:5a:93:5f:2c:61:6a: 95:f9:5f:2f:38:89:1a:9f:78:25:1c:55:03:89:05: 66:33:32:9f:c2:05:38:65:a5:f4:af:d2:0c:fc:f0: dd:61:e4:f9:37:f9:37:05:94:07:41:14:40:75:4d: 31:fb:e1:f4:30:0d:e9:30:0d:bf:86:ea:80:58:ec: ee:f6:db:11:bc:68:3e:86:a4:77:18:5f:eb:47:90: 04:62:88:f1:39:92:b5:67:23:cf:26:fc:1e:e1:49: c9:f6:60:9f:13:13:ab:31:df:27:70:bd:e9:77:bb: 48:55:c6:fc:5b:4b:36:53:01:20:0c:70:4c:53:22: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:68:2C:E4:C2:00:54:70:3C:7E:49:3D:72:FB:FC:50:1F:9D:F6:CE X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:11:ff:d8:5d:40:86:01:63:87:1e:cc:cd:5f:f6:1a:10:96: 45:d0:ed:52:e3:b5:b8:07:ae:33:3b:13:14:d6:63:02:6a:b5: b2:0b:06:2a:e1:8f:ae:1e:8a:81:a8:2d:e7:e6:5f:90:f5:af: 2c:6d:51:bb:11:2e:e8:be:25:a8:18:e4:6c:b8:74:59:40:b0: 4d:7c:da:21:a3:08:c8:b7:e0:eb:3c:3d:c1:58:e3:00:a9:b0: 4a:25:30:bc:36:0c:15:3b:a5:d3:22:31:0e:dc:a5:8a:ff:8f: f9:cd:1e:bb:dd:2b:22:5d:f6:ee:e1:a3:8b:37:09:c9:2c:19: f6:14:c7:6f:23:cc:70:2c:da:0a:03:a7:d0:55:e7:4e:90:f2: 9f:88:95:f0:1b:8b:d0:73:d0:f7:e3:58:08:81:d0:18:62:43: d0:3f:3b:ad:0e:5a:70:9b:7e:f6:1a:33:05:cf:bd:13:f7:1d: 8c:1e:6e:b3:4c:aa:1e:b5:31:bb:b9:fc:24:a0:a5:9c:25:49: 22:3e:d8:d5:d7:98:35:9b:71:ff:78:9f:96:dd:ee:43:e4:40: f3:2c:83:95:c1:5d:da:21:b6:05:2e:f1:59:38:02:b1:a0:49: 6b:39:bd:d3:57:39:e6:be:2d:30:ed:81:dd:7b:5b:78:40:f1: 44:a5:9a:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURN07UX5wpPScnkemiHaqp2qh94MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNTAzMTMxMzM1NDhaFw0yNTAzMTYxODQ4NDhaMDMxMTAvBgNV BAMTKDMyNjgyQ0U0QzIwMDU0NzAzQzdFNDkzRDcyRkJGQzUwMUY5REY2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcmTmSQG9kGEKEejyJMAqqBQA A2v7eE6PlDhJBEZXD75zsUOBmrOl97Wag2ahsb9hZZSL6To6FvISGGl4DDLN7v6c co/FxfsHNrooR3x1woswB/HZZmBffmWW+VgslE+i74lhwG6QWhLpV8Kar4ZXqTaE YzjVi9LiY71H0kV1TVqTXyxhapX5Xy84iRqfeCUcVQOJBWYzMp/CBThlpfSv0gz8 8N1h5Pk3+TcFlAdBFEB1TTH74fQwDekwDb+G6oBY7O722xG8aD6GpHcYX+tHkARi iPE5krVnI88m/B7hScn2YJ8TE6sx3ydwvel3u0hVxvxbSzZTASAMcExTIsENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMmgs5MIAVHA8fkk9cvv8UB+d9s4wHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAR/9hdQIYBY4cezM1f9hoQlkXQ7VLjtbgH rjM7ExTWYwJqtbILBirhj64eioGoLefmX5D1ryxtUbsRLui+JagY5Gy4dFlAsE18 2iGjCMi34Os8PcFY4wCpsEolMLw2DBU7pdMiMQ7cpYr/j/nNHrvdKyJd9u7ho4s3 CcksGfYUx28jzHAs2goDp9BV506Q8p+IlfAbi9Bz0PfjWAiB0BhiQ9A/O60OWnCb fvYaMwXPvRP3HYwebrNMqh61Mbu5/CSgpZwlSSI+2NXXmDWbcf94n5bd7kPkQPMs g5XBXdohtgUu8Vk4ArGgSWs5vdNXOea+LTDtgd17W3hA8USlmhU= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:44 2025 by rpki-client