$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: nWYSzhsdYCavfEmBj9zPE6/Cp3gKuwyyGeX/ZrbZpA4= Subject key identifier: 6F:B6:0A:80:40:71:E4:87:84:54:69:9A:42:41:8A:73:5A:64:7A:EE Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 6DDD84DD7120DE1F0BE372DAB706F1023EE68BBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 50 Signing time: Mon 14 Apr 2025 21:21:06 +0000 Manifest this update: Mon 14 Apr 2025 21:16:06 +0000 Manifest next update: Fri 18 Apr 2025 03:24:06 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: og3E6vNBR8RLFzBDbokbZVOyXclWst4qz0UC24IaQxE=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 22:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:dd:84:dd:71:20:de:1f:0b:e3:72:da:b7:06:f1:02:3e:e6:8b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Apr 14 21:16:06 2025 GMT Not After : Apr 18 03:24:06 2025 GMT Subject: CN=6FB60A804071E4878454699A42418A735A647AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:d6:b8:88:f1:3f:2c:74:79:90:fe:67:ba: 67:8c:72:b3:68:ec:4a:dc:b1:41:35:36:db:ed:cb: 7e:46:09:4a:03:91:cb:e5:04:0f:4a:ac:cf:ca:32: 03:3b:63:3f:59:fd:0a:28:3e:ac:9d:51:f4:8b:db: 4c:75:81:b5:a9:d8:a3:c4:2f:57:11:af:c3:5c:7e: 2a:4e:ca:3c:2e:68:7e:db:8f:5c:aa:b3:5f:83:31: 15:10:98:8d:13:44:9d:12:1e:db:aa:a9:f7:0c:63: 75:f5:4c:a9:39:c1:5f:ec:1e:b9:2b:86:da:11:84: 0d:8e:b7:3b:99:46:68:e1:3d:7d:2c:b8:42:5e:fd: 5a:ef:69:25:06:16:cb:31:b6:83:e8:2f:75:9a:28: 51:58:cb:f1:0f:64:30:bd:2f:ea:16:98:82:53:88: 9e:5f:35:1f:a5:46:b8:5b:e6:9d:1d:43:06:89:a4: 23:34:2e:76:d2:2c:eb:c7:87:af:4c:be:f7:0b:ac: ee:de:f1:06:92:a6:01:36:b1:22:ef:b6:ca:66:87: 63:cb:63:c2:a3:e7:34:c2:ee:0e:a5:ed:ac:a1:79: 10:a4:20:53:d0:44:da:4e:bf:51:53:59:b1:fa:ec: e8:f9:c8:79:13:78:ef:03:81:dd:e2:03:6b:2f:41: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B6:0A:80:40:71:E4:87:84:54:69:9A:42:41:8A:73:5A:64:7A:EE X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:79:04:17:f7:95:c6:5a:46:3c:bb:a6:c1:db:56:1f:36:20: 53:e4:89:5a:42:7f:06:f1:12:46:fc:ef:26:c8:2a:ff:0f:60: a7:c7:2e:8b:f9:e2:28:d5:31:a2:4b:4d:35:e0:a9:e6:78:03: df:fa:f1:52:fd:27:cf:39:52:3a:ea:84:2d:73:8c:3d:b0:98: 1c:95:4b:30:bb:00:1a:04:cf:66:74:f8:41:86:fb:90:5e:4f: 32:c1:26:96:e7:75:9c:34:20:1c:26:2e:61:af:43:bd:be:69: 7c:66:17:57:e7:45:5e:22:f2:56:1a:87:16:52:b0:8c:41:87: b4:ee:16:58:55:32:38:ae:7b:bc:a0:59:f6:83:f0:d0:b4:ec: 9b:25:d6:2f:fd:3e:72:f6:f4:9c:0e:44:da:5b:ee:db:72:34: 01:1b:e3:c4:22:a6:ac:83:4b:9a:e2:5b:6d:29:27:7b:1d:4d: c0:00:fe:e0:f2:df:16:f4:7d:70:6d:6a:82:42:cc:77:07:2f: af:8f:24:da:a5:b6:1c:94:15:70:01:e4:6f:29:cb:7f:9e:e0: 6d:6c:77:7d:05:11:f1:99:68:69:e1:ba:77:71:c7:ae:1c:f5: 4a:f7:dd:02:6b:52:48:6f:f5:8f:be:04:e9:de:c4:97:84:1c: 9d:d5:e3:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbd2E3XEg3h8L43LatwbxAj7mi70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTA0MTQyMTE2MDZaFw0yNTA0MTgwMzI0MDZaMDMxMTAvBgNV BAMTKDZGQjYwQTgwNDA3MUU0ODc4NDU0Njk5QTQyNDE4QTczNUE2NDdBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKda4iPE/LHR5kP5numeMcrNo 7ErcsUE1Ntvty35GCUoDkcvlBA9KrM/KMgM7Yz9Z/QooPqydUfSL20x1gbWp2KPE L1cRr8NcfipOyjwuaH7bj1yqs1+DMRUQmI0TRJ0SHtuqqfcMY3X1TKk5wV/sHrkr htoRhA2OtzuZRmjhPX0suEJe/VrvaSUGFssxtoPoL3WaKFFYy/EPZDC9L+oWmIJT iJ5fNR+lRrhb5p0dQwaJpCM0LnbSLOvHh69MvvcLrO7e8QaSpgE2sSLvtspmh2PL Y8Kj5zTC7g6l7ayheRCkIFPQRNpOv1FTWbH67Oj5yHkTeO8Dgd3iA2svQQV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7YKgEBx5IeEVGmaQkGKc1pkeu4wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ5BBf3lcZaRjy7psHbVh82IFPkiVpCfwbx Ekb87ybIKv8PYKfHLov54ijVMaJLTTXgqeZ4A9/68VL9J885UjrqhC1zjD2wmByV SzC7ABoEz2Z0+EGG+5BeTzLBJpbndZw0IBwmLmGvQ72+aXxmF1fnRV4i8lYahxZS sIxBh7TuFlhVMjiue7ygWfaD8NC07Jsl1i/9PnL29JwORNpb7ttyNAEb48QipqyD S5riW20pJ3sdTcAA/uDy3xb0fXBtaoJCzHcHL6+PJNqlthyUFXAB5G8py3+e4G1s d30FEfGZaGnhundxx64c9Ur33QJrUkhv9Y++BOnexJeEHJ3V480= -----END CERTIFICATE-----Generated at Tue Apr 15 05:22:32 2025 by rpki-client