$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: P0HM/WmYfWFOr5reYXRARQRD0xiDbmVaitIjdRb4nLE= Subject key identifier: 1B:1E:9B:A4:29:53:0D:8D:57:C9:07:C3:3E:50:F3:22:DC:21:DD:5B Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 74D624E1553F63481DC5DAFB0F182AD83F7BDC6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 9A Signing time: Wed 09 Apr 2025 09:32:04 +0000 Manifest this update: Wed 09 Apr 2025 09:27:04 +0000 Manifest next update: Sat 12 Apr 2025 16:25:04 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: A6lmT+4re8NJP6RZrWP6uSLhDKlk3n2nKGBixAMUJac=) 2: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: cqg5ByVGZDdl+ORqT6tFftKHpkoP80gRDbcv2Xc4xBk=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: yRf7DT4SMWKJd5i4r1s4nhb5FSivER/9Py910m3Jd4o=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: Yid8frpvCMkMf1ma76Hg9B9Pe7bRisQmq2+wHrZy8PM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d6:24:e1:55:3f:63:48:1d:c5:da:fb:0f:18:2a:d8:3f:7b:dc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Apr 9 09:27:04 2025 GMT Not After : Apr 12 16:25:04 2025 GMT Subject: CN=1B1E9BA429530D8D57C907C33E50F322DC21DD5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:5b:90:a2:09:74:67:98:30:4f:ee:c2:c3: 10:e6:fc:79:5b:e3:97:f8:fd:5f:d5:59:ce:ac:5b: 4e:bb:ea:0d:1f:3a:9e:ed:98:d2:68:94:a2:f4:59: 3e:97:0b:36:f0:18:d9:bf:ad:a2:3e:63:0d:38:7a: d7:be:9f:34:ef:86:af:79:b7:0f:2f:03:80:35:6d: f5:36:5f:24:99:ae:fc:c0:a8:e5:a7:0f:2c:05:ad: e9:5d:c9:0c:06:06:a1:74:3e:d1:2c:f0:7d:ad:77: 68:d2:d0:0d:1f:5b:db:b2:01:2f:65:01:0f:32:33: 8e:1a:2c:ca:e8:4a:b5:c9:ef:3a:32:f2:fd:ac:6c: a1:94:f7:2d:7b:1e:37:7b:c7:20:08:3c:73:29:4f: 09:b5:bb:60:d5:f9:19:a2:16:27:e8:38:eb:9a:71: fc:55:72:1b:72:77:67:24:e5:0f:f7:1f:6c:22:92: d5:bf:97:1f:5f:54:ba:67:f7:a8:23:9d:ce:69:e9: 24:0d:20:b6:c8:12:6f:3e:3d:a3:80:ae:26:47:fa: 36:fd:1f:ce:b0:d3:aa:79:74:33:30:4a:fe:4d:2f: b9:d9:f6:3b:7b:52:9d:dc:f9:18:17:f2:1c:f4:24: f8:28:33:40:d5:23:11:3c:24:b6:99:91:26:3d:0c: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1E:9B:A4:29:53:0D:8D:57:C9:07:C3:3E:50:F3:22:DC:21:DD:5B X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ef:8e:dd:37:80:47:c8:b9:ba:d5:38:76:f6:4e:a0:c2:8b: 18:8d:98:96:d6:19:92:18:0d:3a:19:f1:ac:31:49:1f:09:05: 51:98:c4:a5:b8:28:7c:c8:2a:f7:7b:45:bd:c2:c5:bb:26:36: 1f:9a:51:d1:3e:b9:83:ed:a8:16:99:19:a3:99:82:bc:03:c8: b0:26:02:33:c9:04:85:e8:99:6a:56:3d:b7:76:de:70:89:e6: 71:3f:c9:bd:9b:09:b2:98:73:88:a5:96:34:59:a2:e7:21:4e: b5:5f:d0:28:01:ef:5b:23:0a:f6:0a:a5:d3:2c:aa:52:65:38: df:4e:8d:cf:54:07:57:b3:88:13:54:14:24:d1:e3:9a:f8:5d: 46:10:8e:45:3c:9b:b3:4e:29:49:37:a2:3b:01:f3:1d:44:6e: 95:52:0c:63:43:34:5a:db:6f:c3:a1:5b:f3:b6:0c:0d:2e:10: ff:f5:15:f2:88:0a:6a:70:a7:f4:f0:85:09:d6:09:56:d9:38: d8:ae:31:cb:f6:60:3c:9e:ab:2f:9e:37:ed:82:39:2d:d8:dd: be:40:0c:44:9c:52:d2:9b:7d:21:06:f2:43:1a:d4:12:cb:1d: ff:12:75:00:ff:91:1b:32:52:c9:cb:ba:d6:d0:0d:20:bf:0f: c9:43:d8:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNYk4VU/Y0gdxdr7Dxgq2D973GowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA0MDkwOTI3MDRaFw0yNTA0MTIxNjI1MDRaMDMxMTAvBgNV BAMTKDFCMUU5QkE0Mjk1MzBEOEQ1N0M5MDdDMzNFNTBGMzIyREMyMURENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7C1uQogl0Z5gwT+7CwxDm/Hlb 45f4/V/VWc6sW0676g0fOp7tmNJolKL0WT6XCzbwGNm/raI+Yw04ete+nzTvhq95 tw8vA4A1bfU2XySZrvzAqOWnDywFreldyQwGBqF0PtEs8H2td2jS0A0fW9uyAS9l AQ8yM44aLMroSrXJ7zoy8v2sbKGU9y17Hjd7xyAIPHMpTwm1u2DV+RmiFifoOOua cfxVchtyd2ck5Q/3H2wiktW/lx9fVLpn96gjnc5p6SQNILbIEm8+PaOAriZH+jb9 H86w06p5dDMwSv5NL7nZ9jt7Up3c+RgX8hz0JPgoM0DVIxE8JLaZkSY9DC9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGx6bpClTDY1XyQfDPlDzItwh3VswHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnvjt03gEfIubrVOHb2TqDCixiNmJbWGZIY DToZ8awxSR8JBVGYxKW4KHzIKvd7Rb3CxbsmNh+aUdE+uYPtqBaZGaOZgrwDyLAm AjPJBIXomWpWPbd23nCJ5nE/yb2bCbKYc4illjRZouchTrVf0CgB71sjCvYKpdMs qlJlON9Ojc9UB1eziBNUFCTR45r4XUYQjkU8m7NOKUk3ojsB8x1EbpVSDGNDNFrb b8OhW/O2DA0uEP/1FfKICmpwp/TwhQnWCVbZONiuMcv2YDyeqy+eN+2COS3Y3b5A DEScUtKbfSEG8kMa1BLLHf8SdQD/kRsyUsnLutbQDSC/D8lD2Ek= -----END CERTIFICATE-----Generated at Wed Apr 9 16:41:07 2025 by rpki-client