$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json) Hash identifier: w2Oa74l08+YKawYb8yJRvMtmRVlqSGZ+3251MSLurUk= Subject key identifier: 73:A5:74:B5:6D:D5:6C:97:2B:F7:64:0C:85:DD:F2:3A:CF:4A:B2:D5 Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 6ACB90318DACA675BCCBA2DE6677FA7DD2941464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft Manifest number: 75 Signing time: Sun 13 Apr 2025 04:10:35 +0000 Manifest this update: Sun 13 Apr 2025 04:05:35 +0000 Manifest next update: Wed 16 Apr 2025 11:25:35 +0000 Files and hashes: 1: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: YPP+fBzrduaWt9jpzUmr8KKEW+98sFuKadAgn+5x1Lk=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: j4rqvpCQiLF+pEFMZmXH9k9jEc3UXa+qBLPNLtNJ5rQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 11:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:cb:90:31:8d:ac:a6:75:bc:cb:a2:de:66:77:fa:7d:d2:94:14:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Apr 13 04:05:35 2025 GMT Not After : Apr 16 11:25:35 2025 GMT Subject: CN=73A574B56DD56C972BF7640C85DDF23ACF4AB2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:35:6b:c2:5e:78:ed:0e:ec:e3:80:93:d2: d9:f9:9b:35:9d:91:a9:dc:3f:36:23:af:10:66:a2: aa:c1:06:23:68:7c:4c:d1:62:db:b1:31:e5:4d:bf: a4:e4:e9:7b:aa:a8:6e:63:93:3c:e5:71:d1:5c:47: e7:db:23:38:76:8f:e4:01:81:1f:4e:db:02:03:40: 26:15:b2:fe:39:53:22:aa:a9:be:bb:ed:f9:d4:ee: f4:18:2c:ac:95:86:82:8f:49:57:30:f1:9e:68:7c: 18:1c:c6:89:39:72:52:e0:b9:44:14:2f:9a:e7:49: 3f:84:74:ff:14:ef:e2:4a:aa:78:4e:af:58:93:92: 32:2b:c3:38:1c:67:c4:33:b2:de:f1:fd:14:6a:53: a1:03:4b:50:85:a0:68:f5:45:b8:e1:ba:7c:79:85: d3:37:2e:ce:9c:ad:02:0c:d6:80:41:98:c7:b3:bc: ba:92:96:9a:2d:1e:1c:04:f4:ad:8f:39:81:07:6f: 39:56:27:38:de:30:fc:b2:3d:d7:c5:62:13:32:ca: 2b:3a:d0:ec:91:d6:57:c9:0a:e1:3f:fb:e6:76:de: f4:22:22:7c:c7:99:93:86:8a:35:35:73:81:52:43: ed:58:9c:24:88:16:27:7e:23:71:67:2a:8c:17:3d: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A5:74:B5:6D:D5:6C:97:2B:F7:64:0C:85:DD:F2:3A:CF:4A:B2:D5 X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3a:9d:8a:a3:5d:28:39:9d:eb:82:5d:bc:f7:de:f8:8c:cd: 20:3a:76:50:ae:06:ee:0c:ef:cb:7e:a0:ee:eb:43:c1:8b:5f: 16:bf:55:55:60:a1:26:e7:3c:8d:d0:6d:cb:eb:3b:fe:a1:e1: 31:d3:8c:41:23:63:d9:48:1f:e9:18:da:cb:69:a5:8a:f6:78: 5d:f2:38:40:05:f5:fb:44:75:5a:f4:54:d1:eb:70:c8:2d:ac: 1c:ea:27:06:63:29:8c:72:c1:e2:16:e7:d9:89:33:1c:5b:6e: 61:79:70:a5:58:84:71:be:d1:e8:c7:90:9b:32:ff:2e:ab:0e: 20:94:c7:4c:61:1e:0d:76:1c:c7:3a:a9:23:1b:e4:57:48:25: d7:56:68:98:c3:e0:b3:4a:1a:8a:08:2f:d4:ad:9d:4a:6b:e4: a6:3b:f0:30:2f:04:21:c5:e0:b0:a2:d5:ad:01:6a:76:13:04: 70:60:eb:13:d7:88:4f:79:30:d2:57:8f:fb:75:7f:c6:37:5f: c9:94:21:84:f4:98:fa:3d:1b:33:31:58:d8:87:36:42:a1:89: 59:00:75:66:f0:da:ad:88:db:72:0a:d0:57:72:3c:0b:19:fd: 3d:cc:51:dc:0a:c5:b0:65:6a:49:ed:3d:8c:e1:f5:63:88:fd: a7:6a:09:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasuQMY2spnW8y6LeZnf6fdKUFGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNTA0MTMwNDA1MzVaFw0yNTA0MTYxMTI1MzVaMDMxMTAvBgNV BAMTKDczQTU3NEI1NkRENTZDOTcyQkY3NjQwQzg1RERGMjNBQ0Y0QUIyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTjVrwl547Q7s44CT0tn5mzWd kancPzYjrxBmoqrBBiNofEzRYtuxMeVNv6Tk6XuqqG5jkzzlcdFcR+fbIzh2j+QB gR9O2wIDQCYVsv45UyKqqb677fnU7vQYLKyVhoKPSVcw8Z5ofBgcxok5clLguUQU L5rnST+EdP8U7+JKqnhOr1iTkjIrwzgcZ8Qzst7x/RRqU6EDS1CFoGj1Rbjhunx5 hdM3Ls6crQIM1oBBmMezvLqSlpotHhwE9K2POYEHbzlWJzjeMPyyPdfFYhMyyis6 0OyR1lfJCuE/++Z23vQiInzHmZOGijU1c4FSQ+1YnCSIFid+I3FnKowXPZdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6V0tW3VbJcr92QMhd3yOs9KstUwHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA46nYqjXSg5neuCXbz33viMzSA6dlCuBu4M 78t+oO7rQ8GLXxa/VVVgoSbnPI3QbcvrO/6h4THTjEEjY9lIH+kY2stppYr2eF3y OEAF9ftEdVr0VNHrcMgtrBzqJwZjKYxyweIW59mJMxxbbmF5cKVYhHG+0ejHkJsy /y6rDiCUx0xhHg12HMc6qSMb5FdIJddWaJjD4LNKGooIL9StnUpr5KY78DAvBCHF 4LCi1a0BanYTBHBg6xPXiE95MNJXj/t1f8Y3X8mUIYT0mPo9GzMxWNiHNkKhiVkA dWbw2q2I23IK0FdyPAsZ/T3MUdwKxbBlakntPYzh9WOI/adqCck= -----END CERTIFICATE-----Generated at Mon Apr 14 18:02:24 2025 by rpki-client