$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: TnoEvxGY3sJ6Bihi2TdZiG7uommiwjxAeeC2zPFaARk= Subject key identifier: DB:30:89:92:AB:D1:58:FE:21:A1:E6:83:EF:E2:60:E4:07:0E:DD:AB Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 566F1F02F72B191CAAC95F398335E392A28385A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: BF Signing time: Wed 16 Apr 2025 10:12:40 +0000 Manifest this update: Wed 16 Apr 2025 10:07:40 +0000 Manifest next update: Sat 19 Apr 2025 18:20:40 +0000 Files and hashes: 1: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: My4pT+8Vxag+gkX2vmM+TYApJZFrmMqUHhkdkgrsnF4=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: bZtCXaxnCo0kXFhv+UgtkdHVo3axHOoHwsSEN85b1Nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 18:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6f:1f:02:f7:2b:19:1c:aa:c9:5f:39:83:35:e3:92:a2:83:85:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Apr 16 10:07:40 2025 GMT Not After : Apr 19 18:20:40 2025 GMT Subject: CN=DB308992ABD158FE21A1E683EFE260E4070EDDAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:9b:a4:2f:68:76:9c:52:42:1f:53:87:31: c6:2c:8e:c2:36:7e:2c:69:62:69:78:9f:83:09:06: 0b:01:f2:92:b3:ab:10:42:d2:ae:11:1e:32:5a:64: 1d:fc:63:f7:33:a8:a6:4f:e0:2a:2b:b1:25:93:ef: a3:a1:d4:06:68:24:e4:b6:e3:03:66:15:41:3a:f4: 69:07:5a:91:5e:2f:3a:77:33:19:41:09:cb:e5:d0: 47:24:2a:15:7e:48:a6:09:df:ed:ee:09:84:77:11: ec:68:a6:ce:5f:32:73:d9:0b:22:2b:16:b0:5b:63: 35:50:97:5f:0f:5a:59:c5:be:5f:38:02:6f:80:48: 6f:d0:79:fc:e5:29:3d:ad:fd:a4:03:8f:0a:a5:92: d2:0a:78:a8:eb:78:23:b4:9c:d9:47:77:e1:0d:6e: bf:e2:95:99:fa:e0:2c:59:91:69:22:94:2e:54:61: eb:b0:8c:53:66:83:40:b6:66:ca:f3:ad:09:6d:67: 67:e4:4c:1d:22:aa:55:03:00:3d:03:ce:90:8f:08: c6:a5:51:4a:67:ff:ab:3f:e0:89:7e:57:41:05:6d: 97:fd:b4:67:b7:85:ab:62:00:85:87:6b:d9:b3:4f: df:08:8d:84:b1:fc:18:8c:a0:1d:68:9a:27:ec:cd: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:30:89:92:AB:D1:58:FE:21:A1:E6:83:EF:E2:60:E4:07:0E:DD:AB X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d4:1f:6c:63:93:ee:ee:d4:58:a0:cb:f9:a4:83:b2:fd:4c: 12:79:35:e3:89:b1:5d:a6:d4:98:69:24:ac:cc:28:0d:19:f4: 92:2b:d5:ba:8e:c6:03:7d:f3:c9:b0:17:07:a7:73:a7:c0:32: 1c:45:97:7a:cb:6c:36:59:40:18:0e:75:dd:c7:23:c7:5e:38: 8f:43:fe:53:f8:32:b5:68:b0:0f:c0:53:7c:85:a0:5e:90:f9: 41:e8:d1:4e:b6:9b:44:38:5a:e7:17:5f:67:5e:cc:a2:66:90: 44:76:7a:a7:2a:b3:5d:2e:e8:e2:f9:ce:70:e0:9b:dc:d7:43: 11:4b:a3:ea:63:f6:ce:cd:13:4a:2b:fb:78:e0:6c:43:39:dd: eb:47:7e:92:a9:42:be:21:6f:6b:1c:22:2a:12:5e:19:a6:0d: 43:80:00:23:e2:82:04:d3:f3:f8:19:c8:e4:50:86:c3:02:94: 4b:cc:0f:14:fb:75:f5:e4:ea:14:ae:12:0f:f4:a7:55:df:44: b7:51:d0:88:f6:be:60:ba:5b:6a:f5:43:f1:73:c6:0c:02:29: 25:ef:7a:78:4a:26:90:da:62:96:46:3f:8e:7c:b1:e8:78:99: f9:a9:9d:22:6a:27:97:46:3d:a0:6c:11:75:99:61:93:d4:f6: e2:00:02:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVm8fAvcrGRyqyV85gzXjkqKDhaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNTA0MTYxMDA3NDBaFw0yNTA0MTkxODIwNDBaMDMxMTAvBgNV BAMTKERCMzA4OTkyQUJEMTU4RkUyMUExRTY4M0VGRTI2MEU0MDcwRUREQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2ZukL2h2nFJCH1OHMcYsjsI2 fixpYml4n4MJBgsB8pKzqxBC0q4RHjJaZB38Y/czqKZP4CorsSWT76Oh1AZoJOS2 4wNmFUE69GkHWpFeLzp3MxlBCcvl0EckKhV+SKYJ3+3uCYR3Eexops5fMnPZCyIr FrBbYzVQl18PWlnFvl84Am+ASG/QefzlKT2t/aQDjwqlktIKeKjreCO0nNlHd+EN br/ilZn64CxZkWkilC5UYeuwjFNmg0C2ZsrzrQltZ2fkTB0iqlUDAD0DzpCPCMal UUpn/6s/4Il+V0EFbZf9tGe3hatiAIWHa9mzT98IjYSx/BiMoB1omifszWaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2zCJkqvRWP4hoeaD7+Jg5AcO3aswHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/UH2xjk+7u1Figy/mkg7L9TBJ5NeOJsV2m 1JhpJKzMKA0Z9JIr1bqOxgN988mwFwenc6fAMhxFl3rLbDZZQBgOdd3HI8deOI9D /lP4MrVosA/AU3yFoF6Q+UHo0U62m0Q4WucXX2dezKJmkER2eqcqs10u6OL5znDg m9zXQxFLo+pj9s7NE0or+3jgbEM53etHfpKpQr4hb2scIioSXhmmDUOAACPiggTT 8/gZyORQhsMClEvMDxT7dfXk6hSuEg/0p1XfRLdR0Ij2vmC6W2r1Q/FzxgwCKSXv enhKJpDaYpZGP458seh4mfmpnSJqJ5dGPaBsEXWZYZPU9uIAAio= -----END CERTIFICATE-----Generated at Fri Apr 18 16:06:43 2025 by rpki-client