$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: QhxV3kt8ieC0b4KdJWjKqUEQJnhRzjJrpmRG+desdcY= Subject key identifier: EA:C1:7C:A7:23:F7:AA:7D:CB:FB:20:41:10:47:F3:0A:7C:37:B1:69 Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 49E97FD207C9589804BF72B8323E9B30FF49BA03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 0267 Signing time: Fri 18 Apr 2025 01:52:16 +0000 Manifest this update: Fri 18 Apr 2025 01:47:16 +0000 Manifest next update: Mon 21 Apr 2025 09:03:16 +0000 Files and hashes: 1: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=) 2: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: ti2faBsPNS+BKHKPQyDz8AGI/hyE4WLsnw/e0OLJO2A=) 3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 07:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e9:7f:d2:07:c9:58:98:04:bf:72:b8:32:3e:9b:30:ff:49:ba:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Apr 18 01:47:16 2025 GMT Not After : Apr 21 09:03:16 2025 GMT Subject: CN=EAC17CA723F7AA7DCBFB20411047F30A7C37B169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:0b:ed:e2:4d:d1:92:c5:8d:10:20:82:64: 2e:cc:74:c2:81:9e:75:0d:ff:77:ca:b7:e1:90:a1: 18:2e:9d:f0:bf:8a:2d:5a:57:c8:b6:a6:9b:0e:e6: 0f:78:e1:d9:3f:4e:1b:e3:cf:9f:be:9b:39:7e:93: e2:74:7f:85:67:db:fc:1f:21:c6:79:6e:c6:13:ef: 05:56:ec:2b:82:fe:58:10:e9:2d:db:b8:94:44:19: df:de:6c:97:f1:15:ba:5c:fd:63:2f:61:a3:a7:84: 1c:a4:86:b2:03:72:f6:3c:61:66:60:68:46:09:85: 33:e2:68:1b:d7:66:55:b5:6f:39:87:1d:e4:82:dd: df:52:f5:dc:a2:4d:53:3d:25:40:a1:6e:e7:76:92: 5c:43:9e:d0:30:91:73:42:b4:2d:6c:ec:3e:a0:42: ab:5c:62:24:e1:12:cd:5a:59:6a:a7:8b:47:46:50: 40:8e:af:2d:40:89:60:e9:9c:d3:95:92:72:98:1e: 56:fc:8a:3d:32:1d:9d:f3:3b:ad:fb:72:48:e1:86: 82:89:ca:ff:bb:c6:8f:ed:a5:46:d3:2e:0e:c3:d2: f3:01:3c:5a:58:62:23:58:e5:f6:20:fd:1d:4c:f5: 54:5a:b7:48:00:36:4d:2c:f8:14:e9:0c:a8:cb:53: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:7C:A7:23:F7:AA:7D:CB:FB:20:41:10:47:F3:0A:7C:37:B1:69 X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:eb:2c:c4:39:51:4f:0c:94:6a:6d:d6:61:42:d9:5a:0b:7a: b9:9e:37:0f:ac:72:38:4f:95:83:74:d5:92:b1:93:1d:00:a0: 8e:9a:3f:2a:dc:79:94:55:9b:52:27:28:c7:8d:58:10:ef:61: a9:55:4f:32:0c:dd:11:55:c6:6e:e8:60:b4:ed:f5:c4:35:07: c1:c9:b6:2e:6b:c3:82:fe:0e:3d:71:bf:d0:a7:0a:3a:6a:c1: ea:20:73:f2:91:7c:78:f6:a9:b5:40:86:8f:1f:35:f2:9f:31: ea:c2:7e:9e:22:47:5d:7b:94:53:56:72:08:d1:e2:29:74:8c: 3a:60:5a:1c:c9:c7:71:59:e1:45:af:a6:da:4f:90:5b:ea:e4: 66:28:c5:14:96:34:fd:ea:8f:f8:02:e5:ea:d0:bb:bb:a1:11: f3:cb:a5:60:97:63:19:6d:9d:40:73:d2:dd:67:a5:81:77:2d: 5d:86:57:ee:83:71:c7:41:53:f3:66:59:53:3c:f4:c7:81:70: c0:8a:b9:14:ef:b5:88:ea:d8:86:b1:b0:a9:3c:bf:83:69:e4: 44:0f:5d:66:b4:00:cc:25:b3:e3:35:77:36:07:8d:a0:b5:27: 9a:77:39:00:6c:87:7e:32:9e:4c:23:bb:39:55:7b:8e:ab:d6: cc:d6:e2:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSel/0gfJWJgEv3K4Mj6bMP9JugMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTA0MTgwMTQ3MTZaFw0yNTA0MjEwOTAzMTZaMDMxMTAvBgNV BAMTKEVBQzE3Q0E3MjNGN0FBN0RDQkZCMjA0MTEwNDdGMzBBN0MzN0IxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9Avt4k3RksWNECCCZC7MdMKB nnUN/3fKt+GQoRgunfC/ii1aV8i2ppsO5g944dk/Thvjz5++mzl+k+J0f4Vn2/wf IcZ5bsYT7wVW7CuC/lgQ6S3buJREGd/ebJfxFbpc/WMvYaOnhBykhrIDcvY8YWZg aEYJhTPiaBvXZlW1bzmHHeSC3d9S9dyiTVM9JUChbud2klxDntAwkXNCtC1s7D6g QqtcYiThEs1aWWqni0dGUECOry1AiWDpnNOVknKYHlb8ij0yHZ3zO637ckjhhoKJ yv+7xo/tpUbTLg7D0vMBPFpYYiNY5fYg/R1M9VRat0gANk0s+BTpDKjLU3HnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sF8pyP3qn3L+yBBEEfzCnw3sWkwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTrLMQ5UU8MlGpt1mFC2VoLermeNw+scjhP lYN01ZKxkx0AoI6aPyrceZRVm1InKMeNWBDvYalVTzIM3RFVxm7oYLTt9cQ1B8HJ ti5rw4L+Dj1xv9CnCjpqweogc/KRfHj2qbVAho8fNfKfMerCfp4iR117lFNWcgjR 4il0jDpgWhzJx3FZ4UWvptpPkFvq5GYoxRSWNP3qj/gC5erQu7uhEfPLpWCXYxlt nUBz0t1npYF3LV2GV+6DccdBU/NmWVM89MeBcMCKuRTvtYjq2IaxsKk8v4Np5EQP XWa0AMwls+M1dzYHjaC1J5p3OQBsh34ynkwjuzlVe46r1szW4h4= -----END CERTIFICATE-----Generated at Fri Apr 18 04:37:25 2025 by rpki-client