$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: uGIQ6NgvCLC28Cir0I0bpaRrBWi1rYYEYx9oZdnLJSU= Subject key identifier: CF:D1:B1:3F:00:DD:4F:FF:0D:D4:8F:F7:88:A5:A4:85:33:7E:A1:FD Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 7CC35B1387A705704A3B0B61E2A5B30D5965CE05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 41 Signing time: Wed 12 Mar 2025 02:51:07 +0000 Manifest this update: Wed 12 Mar 2025 02:46:07 +0000 Manifest next update: Sat 15 Mar 2025 14:11:07 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: MuEHFdWNLcGu+rhOV/y/2XhduSLP/S3E2coQP7YJ8XI=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c3:5b:13:87:a7:05:70:4a:3b:0b:61:e2:a5:b3:0d:59:65:ce:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Mar 12 02:46:07 2025 GMT Not After : Mar 15 14:11:07 2025 GMT Subject: CN=CFD1B13F00DD4FFF0DD48FF788A5A485337EA1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:83:31:29:85:b8:be:a4:8e:c7:9d:ce:e0: 85:b7:7c:87:68:a7:49:e0:0f:6a:49:55:e1:98:c1: f6:bc:cb:dc:e8:2e:f7:b1:9f:f3:06:d5:00:b6:b1: 72:af:08:3b:b0:9c:87:f5:02:f2:3d:a8:40:b4:12: 4b:a5:98:55:02:da:d6:7e:f8:b1:f4:c7:68:30:5e: 42:ea:fd:0f:de:c5:df:dc:21:aa:ee:ef:86:50:d2: a4:62:fc:f6:b6:c8:f1:50:36:d3:f8:c2:7d:af:88: 25:e5:55:50:75:31:6d:3e:1f:a5:07:54:79:39:2b: 5a:86:b5:da:69:30:13:b7:98:91:84:11:02:b2:23: 03:93:f3:28:64:db:4d:65:5a:64:d3:e8:2c:10:45: 2b:99:82:87:4a:91:2c:b8:dd:73:f7:59:49:37:a3: 89:32:d5:71:b4:2e:4c:ce:f9:25:75:11:62:71:b7: 06:3f:54:83:4f:46:52:ab:3c:86:01:a5:fa:66:b2: cd:47:18:91:e2:90:61:d9:4f:54:97:f2:75:7a:1e: 92:b8:67:64:fb:be:58:24:8e:bd:5a:33:3e:67:b9: 2f:cd:50:17:ab:40:f4:66:12:84:0c:a0:ff:d5:13: 54:3a:61:62:f1:85:75:a5:28:a3:cd:45:41:78:74: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:B1:3F:00:DD:4F:FF:0D:D4:8F:F7:88:A5:A4:85:33:7E:A1:FD X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c6:42:17:b1:91:de:de:66:cf:e6:0c:ba:c6:a8:90:f5:da: 89:02:88:c8:e5:a2:cb:89:64:24:ba:8b:6c:fa:9c:6f:c9:db: 0f:98:26:f1:e2:09:4b:94:eb:b7:be:36:1d:44:56:4b:8c:6a: 00:d2:9e:ab:09:ed:7f:4e:9f:c8:2a:73:be:bf:54:18:31:97: 11:43:5c:2d:28:a6:53:ac:70:5b:50:08:b9:af:bd:e3:58:94: 90:e9:27:ac:34:f4:ff:e2:ae:e9:84:d5:7a:80:97:78:7c:aa: 34:ba:9d:ab:49:3a:0e:dd:1b:08:d2:ae:40:8d:9a:7c:64:e6: 16:ab:2b:bf:cd:ae:d5:c6:2c:9a:93:ae:0c:e7:e1:8c:84:29: 3f:98:52:84:15:1b:c8:19:f3:26:f9:d5:1e:dc:92:f4:26:ea: e6:4c:d7:bb:37:4a:2b:ed:d4:89:f2:49:a5:7a:83:b3:b6:07: d0:56:ad:51:04:fb:9c:5c:eb:c2:c0:25:a7:b3:23:ce:d6:16: 3b:c1:dc:96:d7:52:95:57:6d:da:ce:d1:70:58:b5:7f:06:ee: 95:d2:40:72:94:af:b7:82:79:f1:04:42:a7:5f:2f:09:64:a6: a3:31:1b:0c:d4:f9:b4:08:8b:93:f3:c4:e4:03:b8:e4:6a:6d: 14:c8:d9:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMNbE4enBXBKOwth4qWzDVllzgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTAzMTIwMjQ2MDdaFw0yNTAzMTUxNDExMDdaMDMxMTAvBgNV BAMTKENGRDFCMTNGMDBERDRGRkYwREQ0OEZGNzg4QTVBNDg1MzM3RUExRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fYMxKYW4vqSOx53O4IW3fIdo p0ngD2pJVeGYwfa8y9zoLvexn/MG1QC2sXKvCDuwnIf1AvI9qEC0EkulmFUC2tZ+ +LH0x2gwXkLq/Q/exd/cIaru74ZQ0qRi/Pa2yPFQNtP4wn2viCXlVVB1MW0+H6UH VHk5K1qGtdppMBO3mJGEEQKyIwOT8yhk201lWmTT6CwQRSuZgodKkSy43XP3WUk3 o4ky1XG0LkzO+SV1EWJxtwY/VINPRlKrPIYBpfpmss1HGJHikGHZT1SX8nV6HpK4 Z2T7vlgkjr1aMz5nuS/NUBerQPRmEoQMoP/VE1Q6YWLxhXWlKKPNRUF4dGrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9GxPwDdT/8N1I/3iKWkhTN+of0wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbGQhexkd7eZs/mDLrGqJD12okCiMjlosuJ ZCS6i2z6nG/J2w+YJvHiCUuU67e+Nh1EVkuMagDSnqsJ7X9On8gqc76/VBgxlxFD XC0oplOscFtQCLmvveNYlJDpJ6w09P/irumE1XqAl3h8qjS6natJOg7dGwjSrkCN mnxk5harK7/NrtXGLJqTrgzn4YyEKT+YUoQVG8gZ8yb51R7ckvQm6uZM17s3Sivt 1InySaV6g7O2B9BWrVEE+5xc68LAJaezI87WFjvB3JbXUpVXbdrO0XBYtX8G7pXS QHKUr7eCefEEQqdfLwlkpqMxGwzU+bQIi5PzxOQDuORqbRTI2bc= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:56 2025 by rpki-client