$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json) Hash identifier: RDUFl23LlJEltkFBIhrqwzhEbQYNgO5GhmxjnoYo1mQ= Subject key identifier: EB:D4:CE:BA:4E:F5:F4:F8:9E:6F:8C:99:42:3D:F3:D5:5D:15:ED:6D Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 4625E92AB90B14B9FBECBA3D8E60908AB4A007B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft Manifest number: 01B0 Signing time: Sat 05 Apr 2025 08:21:22 +0000 Manifest this update: Sat 05 Apr 2025 08:16:22 +0000 Manifest next update: Tue 08 Apr 2025 10:06:22 +0000 Files and hashes: 1: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: h8YaX6wwymRSIe/sAp529t61zMgEDjTZaS77CAZKk9U=) 2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: yNuk/WaxNIr8hCitKM0Fj2fYpqSLEg7Ounb0durD57g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:25:e9:2a:b9:0b:14:b9:fb:ec:ba:3d:8e:60:90:8a:b4:a0:07:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: Apr 5 08:16:22 2025 GMT Not After : Apr 8 10:06:22 2025 GMT Subject: CN=EBD4CEBA4EF5F4F89E6F8C99423DF3D55D15ED6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d2:31:b9:fe:55:db:c4:68:1e:49:0c:48:fa: e1:73:80:b4:09:bf:4c:77:6b:5a:4a:62:cb:2f:a1: 63:d0:69:ff:68:d5:06:4b:71:8f:1c:c4:ea:d6:dd: 80:15:e6:ba:1c:5a:ec:0b:7a:ab:8f:c4:09:cf:70: d8:29:02:f5:c5:55:c4:43:4b:ca:f5:7a:e3:df:92: 4a:5d:03:4f:0a:ef:15:1c:29:4a:12:e3:3c:6c:08: f1:72:3b:fa:cb:aa:aa:e7:3f:55:c8:d6:32:3d:64: b1:d3:52:8c:e1:8c:d6:57:cb:9e:9d:f0:4e:82:d8: 3c:96:c1:71:7f:ba:39:50:98:78:b9:a8:8a:98:f5: a3:e4:09:02:ae:e3:b8:4b:b0:29:39:a6:fe:02:44: 46:a8:f7:5a:30:46:20:4a:8e:b5:4b:e2:99:07:21: 93:66:5f:91:91:0b:f7:ac:97:52:fd:8a:57:4f:c0: be:5e:60:88:b2:98:d6:ba:8c:0f:4e:37:7b:a5:03: af:39:fc:c4:dc:79:ff:09:b2:a1:e1:d8:d1:4e:79: 65:db:64:5f:0e:62:04:e5:58:52:70:25:03:81:a9: e0:09:33:43:cc:59:eb:08:8a:20:6e:3d:e3:da:26: 0a:56:9e:46:5e:c6:2f:2d:59:f3:49:77:c4:bb:84: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D4:CE:BA:4E:F5:F4:F8:9E:6F:8C:99:42:3D:F3:D5:5D:15:ED:6D X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:be:e6:65:61:11:98:3f:dc:27:34:e0:3c:3a:c5:98:a0:fd: bb:20:3e:67:f7:95:a4:11:ac:8c:c9:db:46:6b:8d:67:e4:c7: 14:5f:48:ae:53:1a:9e:59:a2:ad:47:97:eb:72:73:f4:2e:8e: f9:0a:f5:1e:86:31:50:75:db:6b:bc:c4:3d:27:80:5b:08:72: 9e:54:38:68:3a:a4:20:43:d5:b9:b6:39:13:11:7b:a3:ea:01: bd:f9:70:0d:fe:8b:cd:9f:ec:04:f5:eb:82:62:f2:42:3e:f0: 09:5f:71:fd:b9:86:37:66:a1:32:af:12:e6:4e:26:43:13:3e: bc:ab:f1:01:d5:89:e6:65:2d:9c:12:7f:e7:e3:2d:70:1f:58: 77:53:5e:ba:11:59:3b:4d:80:4c:2b:de:3d:e0:0b:0b:e0:2f: dd:b3:3f:3e:d9:05:f6:b8:ab:60:50:3a:cf:51:0a:57:6f:ca: b8:40:e4:dc:d2:7b:98:aa:ec:67:04:95:e8:46:1b:cb:59:30: 58:da:90:b4:0f:7d:d8:0b:f6:03:fe:0a:62:d3:46:5f:f6:b3: 3e:bd:a0:c3:6e:8c:ce:c5:83:6d:22:9f:6b:63:07:98:22:43: 09:b3:63:b6:c5:97:de:53:5f:64:75:3d:99:53:f0:c4:99:6e: 7f:7e:a4:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiXpKrkLFLn77Lo9jmCQirSgB7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNTA0MDUwODE2MjJaFw0yNTA0MDgxMDA2MjJaMDMxMTAvBgNV BAMTKEVCRDRDRUJBNEVGNUY0Rjg5RTZGOEM5OTQyM0RGM0Q1NUQxNUVENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0jG5/lXbxGgeSQxI+uFzgLQJ v0x3a1pKYssvoWPQaf9o1QZLcY8cxOrW3YAV5rocWuwLequPxAnPcNgpAvXFVcRD S8r1euPfkkpdA08K7xUcKUoS4zxsCPFyO/rLqqrnP1XI1jI9ZLHTUozhjNZXy56d 8E6C2DyWwXF/ujlQmHi5qIqY9aPkCQKu47hLsCk5pv4CREao91owRiBKjrVL4pkH IZNmX5GRC/esl1L9ildPwL5eYIiymNa6jA9ON3ulA685/MTcef8JsqHh2NFOeWXb ZF8OYgTlWFJwJQOBqeAJM0PMWesIiiBuPePaJgpWnkZexi8tWfNJd8S7hB+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69TOuk719Pieb4yZQj3z1V0V7W0wHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENE QTE5MTVBQzc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFq+5mVhEZg/3Cc04Dw6xZig/bsgPmf3laQR rIzJ20ZrjWfkxxRfSK5TGp5Zoq1Hl+tyc/QujvkK9R6GMVB122u8xD0ngFsIcp5U OGg6pCBD1bm2ORMRe6PqAb35cA3+i82f7AT164Ji8kI+8Alfcf25hjdmoTKvEuZO JkMTPryr8QHVieZlLZwSf+fjLXAfWHdTXroRWTtNgEwr3j3gCwvgL92zPz7ZBfa4 q2BQOs9RCldvyrhA5NzSe5iq7GcElehGG8tZMFjakLQPfdgL9gP+CmLTRl/2sz69 oMNujM7Fg20in2tjB5giQwmzY7bFl95TX2R1PZlT8MSZbn9+pIs= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:38 2025 by rpki-client