$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: OxFD0ltFYDA7th49wz+CIJ3Vr+bz5rhPQNDlB6yjM7Q= Subject key identifier: 94:BE:D6:D1:C2:8E:2C:89:D7:1B:ED:18:47:DC:6A:20:2F:DB:A9:16 Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 2191C4013A2D9F2961423EEAB9E00F76C9B1553C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 01E5 Signing time: Thu 17 Apr 2025 18:31:01 +0000 Manifest this update: Thu 17 Apr 2025 18:26:01 +0000 Manifest next update: Sun 20 Apr 2025 23:43:01 +0000 Files and hashes: 1: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) 2: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: 0Zn9POlQqH65/12X4lDxtC9nzyEWrvlIRlWHpkKpMdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 23:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:91:c4:01:3a:2d:9f:29:61:42:3e:ea:b9:e0:0f:76:c9:b1:55:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Apr 17 18:26:01 2025 GMT Not After : Apr 20 23:43:01 2025 GMT Subject: CN=94BED6D1C28E2C89D71BED1847DC6A202FDBA916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:11:a7:82:ed:f9:06:df:84:9e:3b:1d:be:13: 70:6c:a2:aa:13:80:b7:7f:cd:98:23:d9:23:55:99: af:4c:47:6d:75:3d:6b:b6:b7:59:c8:0c:df:16:53: 9f:89:11:5d:75:69:a3:3b:5b:cc:d3:70:7b:97:d0: e6:74:70:6a:1a:2c:f1:a2:e8:bc:74:5d:69:a3:8c: 36:f9:58:3a:89:4e:a0:82:f1:8e:f1:e1:27:39:5f: 8b:b2:ee:e9:40:d1:53:9b:33:b8:3c:54:34:fd:7b: 72:83:4e:2a:35:9d:1c:cb:67:6d:d7:b8:62:2d:68: f6:0d:16:97:b4:91:41:53:65:08:c7:df:b1:b3:08: b0:db:00:23:04:06:ca:b4:9c:29:a1:2e:33:6d:91: a2:54:b8:a5:50:ed:4c:ec:78:bb:61:d6:bf:68:4a: 04:cb:ef:dc:39:ac:d6:68:49:94:a5:e7:a6:91:e9: ad:9e:64:11:be:1b:2a:a7:90:fa:03:27:76:90:2a: 09:0e:71:a1:74:54:b0:99:c0:92:28:b5:96:aa:d1: fe:ca:17:44:5b:d6:4f:e1:4a:be:cc:a2:ae:4a:28: d0:f9:22:ce:63:9f:da:97:53:81:74:09:90:7b:17: a6:8c:af:cd:fa:73:05:5f:86:e9:a1:b0:13:9a:68: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BE:D6:D1:C2:8E:2C:89:D7:1B:ED:18:47:DC:6A:20:2F:DB:A9:16 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ac:15:15:72:44:3a:2c:aa:f3:20:37:fe:b0:c9:85:24:76: 50:84:d9:6f:98:5b:ce:33:b6:ed:27:0a:05:86:b0:60:86:69: f0:d2:cf:8a:e3:8c:00:d4:87:01:86:e3:14:6c:f2:21:5f:59: b0:34:80:b8:70:aa:da:f3:54:2c:74:82:54:8f:93:fd:e2:ba: c5:d5:c4:09:da:2b:a8:79:d0:4b:d2:92:76:a3:01:6f:fa:c0: d2:85:18:dd:51:66:42:94:22:50:f0:d2:13:b1:0e:63:ab:18: c0:c6:05:82:46:77:d1:b5:2d:0b:b5:49:e2:fa:be:43:69:5c: 7c:1b:ec:8f:e7:76:56:88:c2:e1:30:12:b2:e6:61:16:ab:de: 6c:85:b8:1c:ba:15:0b:fa:75:94:1c:e9:9a:a1:3a:fa:9a:b3: 50:16:fa:1d:d0:13:4d:c9:6b:1b:bd:e4:81:3a:e4:c0:23:c9: f8:cc:0b:2c:d4:47:a0:49:ec:a4:e2:0a:de:e7:7b:44:6b:db: 21:30:69:6e:29:23:c1:d2:bd:e7:09:8c:9f:c3:f6:3f:64:84: ba:08:19:ac:bd:1c:70:4b:5e:6b:e2:4d:2e:38:7e:cf:9c:41: f8:4d:49:77:5a:a1:bc:6a:8f:3c:0e:af:a0:3f:f3:ec:e9:a3: 25:ca:fa:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZHEATotnylhQj7queAPdsmxVTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTA0MTcxODI2MDFaFw0yNTA0MjAyMzQzMDFaMDMxMTAvBgNV BAMTKDk0QkVENkQxQzI4RTJDODlENzFCRUQxODQ3REM2QTIwMkZEQkE5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEaeC7fkG34SeOx2+E3BsoqoT gLd/zZgj2SNVma9MR211PWu2t1nIDN8WU5+JEV11aaM7W8zTcHuX0OZ0cGoaLPGi 6Lx0XWmjjDb5WDqJTqCC8Y7x4Sc5X4uy7ulA0VObM7g8VDT9e3KDTio1nRzLZ23X uGItaPYNFpe0kUFTZQjH37GzCLDbACMEBsq0nCmhLjNtkaJUuKVQ7UzseLth1r9o SgTL79w5rNZoSZSl56aR6a2eZBG+GyqnkPoDJ3aQKgkOcaF0VLCZwJIotZaq0f7K F0Rb1k/hSr7Moq5KKND5Is5jn9qXU4F0CZB7F6aMr836cwVfhumhsBOaaBzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlL7W0cKOLInXG+0YR9xqIC/bqRYwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJasFRVyRDosqvMgN/6wyYUkdlCE2W+YW84z tu0nCgWGsGCGafDSz4rjjADUhwGG4xRs8iFfWbA0gLhwqtrzVCx0glSPk/3iusXV xAnaK6h50EvSknajAW/6wNKFGN1RZkKUIlDw0hOxDmOrGMDGBYJGd9G1LQu1SeL6 vkNpXHwb7I/ndlaIwuEwErLmYRar3myFuBy6FQv6dZQc6ZqhOvqas1AW+h3QE03J axu95IE65MAjyfjMCyzUR6BJ7KTiCt7ne0Rr2yEwaW4pI8HSvecJjJ/D9j9khLoI Gay9HHBLXmviTS44fs+cQfhNSXdaobxqjzwOr6A/8+zpoyXK+nM= -----END CERTIFICATE-----Generated at Sat Apr 19 14:26:32 2025 by rpki-client