$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: +24/RQg1tg729gAZPLMnrxNYD8kcYPeap/3YLBh89qs= Subject key identifier: E5:6F:C3:E9:E4:F9:DA:8D:C1:F6:77:6D:BA:F2:0C:0F:F1:40:F7:C8 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 02B1D2F30525725EC168EDAFDC6FDAE5077CE119 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 0124 Signing time: Sat 05 Apr 2025 06:01:03 +0000 Manifest this update: Sat 05 Apr 2025 05:56:03 +0000 Manifest next update: Tue 08 Apr 2025 15:16:03 +0000 Files and hashes: 1: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: TgbYPBARci4k4FFuDC/BjaqPrp8JHyui9Gbu10x+DcY=) 2: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: 7At0OH1CsdZeT1tWdKcV4ul/BqEWnSHntfndOrIgjxM=) 3: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: UhM79RFTfIPwwT/QoShjuUaSFGtSKNvPZ0Ul+6U7iZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 15:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b1:d2:f3:05:25:72:5e:c1:68:ed:af:dc:6f:da:e5:07:7c:e1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Apr 5 05:56:03 2025 GMT Not After : Apr 8 15:16:03 2025 GMT Subject: CN=E56FC3E9E4F9DA8DC1F6776DBAF20C0FF140F7C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:bd:6c:bc:95:ab:84:48:55:b0:c6:26:d8: 2f:4c:5a:ea:2c:31:77:91:87:66:2f:61:c0:24:12: e6:3a:7e:fb:0d:ce:6f:c8:53:27:22:68:52:fb:6d: 2f:bf:f8:c0:63:4e:bd:d5:7a:33:2d:bf:6f:d3:01: 66:2b:05:bd:a5:44:ae:6c:c4:1f:eb:15:aa:c1:91: 26:c9:16:3f:a4:1b:a4:d7:07:d6:bc:f8:eb:70:c6: fb:0e:25:75:5b:c1:78:67:94:c6:6c:e7:af:1c:69: 26:e5:74:1c:8d:76:94:c0:29:17:0c:4c:50:8e:47: 2b:71:a2:e7:e4:6a:d4:16:cb:7a:05:87:8d:35:ee: 5a:d0:2d:44:47:b1:32:13:c6:a5:74:42:46:a1:fa: dc:36:ab:59:ae:c2:a7:a5:17:91:f4:4d:b1:67:13: 71:ac:ae:2c:0d:02:6a:b1:35:4e:97:2a:6e:3c:47: 19:01:c1:df:d4:2c:cf:b9:a3:42:ac:d5:56:05:4e: b1:2d:c0:4c:e5:c5:9e:fd:32:97:17:b2:97:e0:18: e2:3d:0c:d1:86:a1:ef:74:d2:9a:76:a4:89:69:bd: df:81:d9:53:9f:d7:88:a3:88:94:ad:71:82:79:5c: e8:b6:03:9e:42:59:3c:e0:2a:00:73:4f:c3:f9:38: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6F:C3:E9:E4:F9:DA:8D:C1:F6:77:6D:BA:F2:0C:0F:F1:40:F7:C8 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:72:61:36:f1:5d:0c:a7:5c:1f:02:d3:8e:b6:61:ed:5f:b2: 0c:c1:dd:3f:b8:2d:a7:8d:4c:48:2a:37:ea:a0:4c:c2:fe:12: 98:00:14:e1:58:26:4e:60:ef:c0:b3:6c:43:33:7d:76:f2:09: ad:69:b1:5e:d6:00:19:28:e0:b4:d8:bc:5a:b9:ec:cc:53:6f: f3:d7:22:96:f9:77:71:b1:2a:bb:3c:28:b6:d6:9e:1b:c6:1c: f8:ee:98:ee:9f:e7:46:20:28:50:c7:5a:9d:02:9d:af:01:86: 5e:03:fd:e3:f2:22:3e:86:d9:39:c2:bd:fc:a3:d7:31:76:bf: c0:83:c5:81:9d:59:ca:08:ce:ac:b6:f1:f5:bc:4e:b4:1f:17: 9c:5f:52:15:8b:ce:dd:dd:37:ed:95:3f:24:77:00:e4:92:38: fe:0b:33:a2:75:4f:63:44:e6:d2:91:09:5d:26:a4:28:67:24: a6:98:dc:b8:8b:2e:fe:dd:42:13:a0:a5:3c:da:a3:a8:ec:47: 39:e2:82:4e:22:49:d2:f4:a1:50:b2:ec:9b:06:72:ca:f4:68: 06:bc:6c:61:20:8d:c3:7f:98:a0:eb:9d:18:48:26:11:ce:2c: 57:51:d3:d8:29:f4:4c:0a:db:ac:8c:3c:b4:f4:73:58:a3:fe: bf:1b:27:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArHS8wUlcl7BaO2v3G/a5Qd84RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTA0MDUwNTU2MDNaFw0yNTA0MDgxNTE2MDNaMDMxMTAvBgNV BAMTKEU1NkZDM0U5RTRGOURBOERDMUY2Nzc2REJBRjIwQzBGRjE0MEY3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEV71svJWrhEhVsMYm2C9MWuos MXeRh2YvYcAkEuY6fvsNzm/IUyciaFL7bS+/+MBjTr3VejMtv2/TAWYrBb2lRK5s xB/rFarBkSbJFj+kG6TXB9a8+OtwxvsOJXVbwXhnlMZs568caSbldByNdpTAKRcM TFCORytxoufkatQWy3oFh4017lrQLURHsTITxqV0Qkah+tw2q1muwqelF5H0TbFn E3GsriwNAmqxNU6XKm48RxkBwd/ULM+5o0Ks1VYFTrEtwEzlxZ79MpcXspfgGOI9 DNGGoe900pp2pIlpvd+B2VOf14ijiJStcYJ5XOi2A55CWTzgKgBzT8P5OGKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5W/D6eT52o3B9ndtuvIMD/FA98gwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApyYTbxXQynXB8C0462Ye1fsgzB3T+4LaeN TEgqN+qgTML+EpgAFOFYJk5g78CzbEMzfXbyCa1psV7WABko4LTYvFq57MxTb/PX Ipb5d3GxKrs8KLbWnhvGHPjumO6f50YgKFDHWp0Cna8Bhl4D/ePyIj6G2TnCvfyj 1zF2v8CDxYGdWcoIzqy28fW8TrQfF5xfUhWLzt3dN+2VPyR3AOSSOP4LM6J1T2NE 5tKRCV0mpChnJKaY3LiLLv7dQhOgpTzao6jsRznigk4iSdL0oVCy7JsGcsr0aAa8 bGEgjcN/mKDrnRhIJhHOLFdR09gp9EwK26yMPLT0c1ij/r8bJ50= -----END CERTIFICATE-----Generated at Mon Apr 7 13:08:18 2025 by rpki-client