$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: 04s4R5ge8yiFz1P5OfSNJwO2ZULS4BgUyvjDgck2p9g= Subject key identifier: B5:7F:E7:92:3F:01:01:9E:0C:11:EB:EF:20:05:04:01:3E:A6:02:54 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 572DE529E40340C19AA922BFD0DA0F3E01206B9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 0452 Signing time: Sun 16 Feb 2025 03:10:49 +0000 Manifest this update: Sun 16 Feb 2025 03:05:49 +0000 Manifest next update: Wed 19 Feb 2025 12:50:49 +0000 Files and hashes: 1: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: rOL8a0Nb4iPf0+uwA1bVNcvEQJn8eMEFamV2abifeWA=) 2: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 2wmGpgdLLad+yQRBpECeWO5okHIOK5XLuX+ZtyFeGtw=) 3: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: b4KiMwiJASyBICznuxWYSVpBPiU9qpEIZ1f+n3s+3IM=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: +Sh30nDK5FN0F+rgaXdcf8t+v+X9RkFfwm8Ti8cbstU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 12:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2d:e5:29:e4:03:40:c1:9a:a9:22:bf:d0:da:0f:3e:01:20:6b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Feb 16 03:05:49 2025 GMT Not After : Feb 19 12:50:49 2025 GMT Subject: CN=B57FE7923F01019E0C11EBEF200504013EA60254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:5c:94:20:09:4f:b3:40:88:fb:55:ab:59: d8:10:6d:b9:ad:b1:d7:be:49:90:3f:93:e4:ba:b1: ca:b9:b2:2a:4b:9f:d4:6f:6e:b6:32:f5:e6:28:67: c5:a2:e6:fb:96:19:d6:db:a8:61:3a:c6:3e:b2:6a: 71:b4:52:6f:09:d7:c1:f5:0a:e7:0c:20:9c:a4:a6: 09:ff:99:4d:b4:32:cf:e8:f4:82:63:0d:ca:06:48: 37:56:eb:cd:85:87:e6:c5:ea:ce:5c:75:34:ad:63: c7:af:b8:56:cc:15:c0:7b:07:0f:62:96:6c:59:cd: ab:50:da:97:d5:07:ca:7b:85:45:5d:8a:47:30:23: c0:1a:41:07:74:2d:d8:da:31:9b:3c:45:99:c8:bb: 79:7d:82:6c:11:10:45:83:41:c5:ba:1b:31:b2:c0: 3f:b2:3d:07:06:be:4c:10:fd:53:5e:c6:ef:85:88: 52:53:98:36:4b:1e:c2:6a:26:1e:d1:87:f3:19:6d: 9f:d7:07:d2:2c:75:14:3f:90:a0:8f:94:a4:97:81: 1d:07:16:2b:51:da:e9:97:a4:70:c1:eb:3b:b1:85: c4:62:89:c1:73:7d:f3:78:0a:ea:74:a8:f7:af:64: af:6a:fb:26:38:b1:a2:1f:74:b0:64:3b:7e:08:a5: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7F:E7:92:3F:01:01:9E:0C:11:EB:EF:20:05:04:01:3E:A6:02:54 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b4:0e:33:e5:24:83:de:4f:a5:26:70:44:5b:48:2c:6d:55: 83:8d:34:ca:d7:90:3b:48:66:48:5b:df:71:1d:16:7f:98:dd: 4e:49:2e:a6:a6:7a:97:12:42:4c:b0:50:7c:df:59:41:31:ac: 77:99:c0:d5:69:09:71:2e:58:0f:47:7d:1a:d9:ae:e0:92:5d: c2:20:fb:e1:67:cf:0f:80:16:26:4c:f3:5b:3d:2f:d5:9f:d1: 8d:75:48:10:00:0b:c1:38:5f:c6:bf:b3:c6:5a:d0:25:36:93: 39:e1:f5:17:d7:f3:67:0d:76:d9:1b:95:63:50:5f:4b:e4:5e: a2:89:e3:e5:54:69:df:e7:57:a4:be:0a:3b:f9:bc:09:ed:5f: ad:11:1b:d6:d8:34:20:b9:9f:ff:ad:0b:eb:59:b5:be:05:32: cd:39:1f:cc:52:5f:d9:33:c1:b4:92:90:e6:21:c4:5e:23:f6: be:d0:87:88:f8:cd:54:e4:05:1e:59:82:da:4d:14:24:be:1e: 49:d9:9a:13:69:9c:da:cc:08:45:cd:5d:b9:b9:fd:60:c3:0f: fa:1f:c0:4d:41:b1:8a:29:40:d9:24:0e:f5:ad:c2:1f:1c:f6: 1a:44:f5:5e:bb:24:6e:78:93:7f:9d:d8:4d:b5:e4:2f:69:12: d4:05:e9:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVy3lKeQDQMGaqSK/0NoPPgEga5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNTAyMTYwMzA1NDlaFw0yNTAyMTkxMjUwNDlaMDMxMTAvBgNV BAMTKEI1N0ZFNzkyM0YwMTAxOUUwQzExRUJFRjIwMDUwNDAxM0VBNjAyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk31yUIAlPs0CI+1WrWdgQbbmt sde+SZA/k+S6scq5sipLn9RvbrYy9eYoZ8Wi5vuWGdbbqGE6xj6yanG0Um8J18H1 CucMIJykpgn/mU20Ms/o9IJjDcoGSDdW682Fh+bF6s5cdTStY8evuFbMFcB7Bw9i lmxZzatQ2pfVB8p7hUVdikcwI8AaQQd0LdjaMZs8RZnIu3l9gmwREEWDQcW6GzGy wD+yPQcGvkwQ/VNexu+FiFJTmDZLHsJqJh7Rh/MZbZ/XB9IsdRQ/kKCPlKSXgR0H FitR2umXpHDB6zuxhcRiicFzffN4Cup0qPevZK9q+yY4saIfdLBkO34IpTddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtX/nkj8BAZ4MEevvIAUEAT6mAlQwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIG0DjPlJIPeT6UmcERbSCxtVYONNMrXkDtI Zkhb33EdFn+Y3U5JLqamepcSQkywUHzfWUExrHeZwNVpCXEuWA9HfRrZruCSXcIg ++Fnzw+AFiZM81s9L9Wf0Y11SBAAC8E4X8a/s8Za0CU2kznh9RfX82cNdtkblWNQ X0vkXqKJ4+VUad/nV6S+Cjv5vAntX60RG9bYNCC5n/+tC+tZtb4FMs05H8xSX9kz wbSSkOYhxF4j9r7Qh4j4zVTkBR5ZgtpNFCS+HknZmhNpnNrMCEXNXbm5/WDDD/of wE1BsYopQNkkDvWtwh8c9hpE9V67JG54k3+d2E215C9pEtQF6WA= -----END CERTIFICATE-----Generated at Mon Feb 17 07:26:35 2025 by rpki-client