$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json) Hash identifier: szELGc77lfWhl+0siGxZjMRUd/6J/V4/2NYFYOPdYeo= Subject key identifier: 0F:4E:0C:48:50:CC:69:A6:ED:AB:E9:F5:EB:61:71:96:F3:EE:E6:D9 Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 3A3C3D64B6DCEA7AEB50BF0EB65F5E712369AB10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft Manifest number: 0175 Signing time: Fri 04 Apr 2025 10:11:41 +0000 Manifest this update: Fri 04 Apr 2025 10:06:41 +0000 Manifest next update: Mon 07 Apr 2025 14:14:41 +0000 Files and hashes: 1: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: +fRJ/PFTzZFtE/Yhys04jQ0Lc+l9KEAI96BumcKXFig=) 2: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: MogNaCj5sk3XJEpkfUEURE+ZZFPXBmpIW01mKoDb4Uw=) 3: 3130332e3133392e3132312e302f32342d3234203d3e20313335363336.roa (hash: e/+fdrBlXeDfzPxhtNh66HWs6aVcjxIjkZ4W4qgvVgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3c:3d:64:b6:dc:ea:7a:eb:50:bf:0e:b6:5f:5e:71:23:69:ab:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Apr 4 10:06:41 2025 GMT Not After : Apr 7 14:14:41 2025 GMT Subject: CN=0F4E0C4850CC69A6EDABE9F5EB617196F3EEE6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7a:51:41:d7:f5:16:c0:74:b1:3d:e1:05:c9: 69:03:6e:e1:d5:e6:39:de:9d:49:8f:c6:91:81:e5: d4:ae:ba:28:28:1e:9a:ef:6b:64:57:0f:38:77:ab: 92:89:be:9a:27:3e:df:62:38:b0:a2:e9:2f:89:76: 7a:16:85:37:bc:2a:02:a3:29:dc:6b:88:ed:b2:cb: 68:81:e4:44:9d:e2:97:0c:6a:16:5b:93:bf:4a:b8: 53:1a:bc:15:2f:30:77:1f:51:f7:a9:7a:29:11:ac: 0e:18:cb:3a:d2:81:e7:11:d8:4f:f0:ef:6d:1d:f8: 5d:8c:24:ce:b2:8e:39:41:55:03:f4:6c:3d:44:da: 6b:f5:02:62:b7:4f:be:be:c4:61:dc:4d:14:67:1e: d6:f7:96:25:b6:15:59:f2:1a:f3:0a:9f:62:38:aa: 17:30:dc:bb:2c:70:aa:03:97:e8:22:70:0a:34:b9: b2:25:2e:f1:5e:01:83:3d:66:0c:8a:9c:97:fc:5e: b9:64:39:5f:5e:88:bb:b7:b8:bf:3f:4a:9c:da:4d: ef:17:26:e1:b6:66:32:3a:c6:e2:12:d6:d1:ee:37: 73:75:c9:fa:4f:b9:a1:be:f1:d3:19:c7:a7:f4:6a: 7d:58:ef:85:61:d6:38:35:6d:1a:b2:e3:e3:2e:1f: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4E:0C:48:50:CC:69:A6:ED:AB:E9:F5:EB:61:71:96:F3:EE:E6:D9 X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e7:40:7e:f9:7f:23:a6:9f:fd:39:f8:82:d9:1f:8b:7f:35: 33:91:3e:95:71:23:ac:e6:93:98:df:68:3f:92:c8:e9:f2:39: 43:19:b5:b4:d6:b1:be:5b:ab:99:88:6f:6f:9f:c3:75:d2:ca: db:b7:d1:41:cd:9f:f2:7c:32:77:57:e0:dd:83:ef:b9:f3:b6: 12:39:ce:d6:f2:4d:2c:11:b6:cf:5c:b6:5a:30:4d:eb:8d:8f: 8f:83:91:c3:a7:22:73:2b:1d:7f:1a:1b:26:2b:a3:f1:c0:28: 19:80:96:44:77:e6:ec:a9:6d:36:72:04:3b:59:c4:53:08:8f: 9c:73:96:3e:52:98:ae:0f:9b:1d:a8:fb:a8:05:97:af:48:eb: fd:c1:e2:2b:a5:d8:b5:06:5d:f5:39:ab:d0:db:bb:f0:13:83: d8:30:0f:39:2a:1c:f0:8c:7e:8e:a8:a1:9a:4a:ec:73:39:af: 0a:8e:c3:60:6b:c6:e3:aa:dd:18:2a:7c:cd:a0:60:de:c8:59: 65:eb:1d:67:59:6e:88:6a:09:9f:cb:4b:9d:9e:de:5f:09:41: 6f:ac:5f:99:d8:d4:aa:60:9a:71:16:7f:f2:da:81:13:76:fa: d4:87:df:e7:08:60:69:e5:c5:3d:1f:90:c8:b5:76:b8:29:6f: 21:ea:b1:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjw9ZLbc6nrrUL8Otl9ecSNpqxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNTA0MDQxMDA2NDFaFw0yNTA0MDcxNDE0NDFaMDMxMTAvBgNV BAMTKDBGNEUwQzQ4NTBDQzY5QTZFREFCRTlGNUVCNjE3MTk2RjNFRUU2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDselFB1/UWwHSxPeEFyWkDbuHV 5jnenUmPxpGB5dSuuigoHprva2RXDzh3q5KJvponPt9iOLCi6S+JdnoWhTe8KgKj KdxriO2yy2iB5ESd4pcMahZbk79KuFMavBUvMHcfUfepeikRrA4YyzrSgecR2E/w 720d+F2MJM6yjjlBVQP0bD1E2mv1AmK3T76+xGHcTRRnHtb3liW2FVnyGvMKn2I4 qhcw3LsscKoDl+gicAo0ubIlLvFeAYM9ZgyKnJf8XrlkOV9eiLu3uL8/SpzaTe8X JuG2ZjI6xuIS1tHuN3N1yfpPuaG+8dMZx6f0an1Y74Vh1jg1bRqy4+MuH6szAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD04MSFDMaabtq+n162FxlvPu5tkwHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4 RTgwQ0RGNjNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvnQH75fyOmn/05+ILZH4t/NTORPpVxI6zm k5jfaD+SyOnyOUMZtbTWsb5bq5mIb2+fw3XSytu30UHNn/J8MndX4N2D77nzthI5 ztbyTSwRts9ctlowTeuNj4+DkcOnInMrHX8aGyYro/HAKBmAlkR35uypbTZyBDtZ xFMIj5xzlj5SmK4Pmx2o+6gFl69I6/3B4iul2LUGXfU5q9Dbu/ATg9gwDzkqHPCM fo6ooZpK7HM5rwqOw2BrxuOq3RgqfM2gYN7IWWXrHWdZbohqCZ/LS52e3l8JQW+s X5nY1KpgmnEWf/LagRN2+tSH3+cIYGnlxT0fkMi1drgpbyHqsaU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:56:15 2025 by rpki-client