$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: cStxof0kjz8Bb36O0owm3hhVUEZ0Vi8TvLHhLyJypdg= Subject key identifier: DC:9B:A4:FD:12:83:7B:6A:09:81:19:87:18:98:45:65:C8:78:EF:54 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 76CB558D57D464BB3850165D40C8A8D3A7820B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 025A Signing time: Fri 04 Apr 2025 03:20:43 +0000 Manifest this update: Fri 04 Apr 2025 03:15:43 +0000 Manifest next update: Mon 07 Apr 2025 06:17:43 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 2: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) 3: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: 4JW6avUEsOr7FTQaPSRG3DFw/rIOf3XkpsL8QDQfBro=) 4: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:cb:55:8d:57:d4:64:bb:38:50:16:5d:40:c8:a8:d3:a7:82:0b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Apr 4 03:15:43 2025 GMT Not After : Apr 7 06:17:43 2025 GMT Subject: CN=DC9BA4FD12837B6A0981198718984565C878EF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:33:0e:89:44:67:cf:5b:24:91:64:08:7f: 63:60:d7:79:bd:dd:24:57:a8:36:dd:87:2a:af:dc: 60:d0:57:a1:f8:c3:2e:e2:6b:3a:53:a9:97:0d:9e: 4f:9e:2d:5b:46:e3:5d:2e:95:2e:20:ed:f8:57:47: 9b:89:75:85:cd:8a:42:5f:d5:97:ec:43:93:62:c1: d5:4a:b7:ca:cd:55:17:8c:8f:2f:0d:d8:93:9d:8f: c5:48:c8:77:a9:2e:d4:b5:d6:44:74:fa:8a:2b:48: b5:22:4a:63:f1:29:54:49:7a:7f:df:6f:66:49:e9: 9a:1c:b9:27:ee:94:7b:6e:e1:4f:fc:64:d0:47:cc: fd:0a:8e:2a:a3:c2:2a:13:e7:00:ae:07:23:93:3f: 3e:8f:31:cf:5b:90:d3:31:68:d9:31:3c:56:a0:4f: e8:99:be:3e:aa:5c:09:ad:b9:7b:e9:2a:8a:62:14: 88:2d:31:8b:f9:45:16:9b:5a:dc:df:8c:a9:ac:72: d2:bf:b9:58:1e:a4:48:a2:49:fb:21:2a:6d:66:a0: 1e:cf:05:ce:52:0b:56:ba:47:3c:82:df:af:72:bc: 89:01:10:2a:71:d4:30:72:83:35:e0:4a:7b:b7:aa: 07:08:07:0d:60:00:7d:17:4d:7f:4c:48:ce:73:8d: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:A4:FD:12:83:7B:6A:09:81:19:87:18:98:45:65:C8:78:EF:54 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:14:32:36:fa:a6:72:f1:13:09:f8:74:a6:f1:e8:3d:42:b9: bd:6c:f7:01:57:33:8d:1e:91:d2:10:6c:a4:e5:eb:8e:55:16: ba:6c:e4:21:26:46:8d:12:2c:92:2f:8d:cb:e3:ce:f0:f3:37: f1:02:c1:0a:2c:7b:95:a7:8c:c2:e3:95:ec:c6:b7:b7:13:fa: 3c:bc:39:76:48:d7:46:b2:fd:0d:88:8f:42:4c:c7:d4:d7:77: fb:c0:12:b5:ec:a3:75:5d:fe:f9:63:ed:1c:b3:9a:51:a9:db: c0:34:63:c6:fb:97:7c:6f:b6:f6:f7:f7:87:e7:ad:a9:2e:cd: c6:cc:23:74:01:00:c4:64:fc:a2:b0:cb:f0:be:a2:d0:be:ed: d2:4f:7b:52:2c:fd:b7:d2:1e:39:2e:ed:a2:17:46:33:c9:e5: ef:33:45:a5:a4:df:a5:c7:d0:fc:24:45:89:30:a9:4f:f1:9f: 25:03:fd:8b:11:1a:8b:1f:5f:58:e5:c7:78:bc:99:39:c9:33: d0:1e:79:27:42:2e:8e:f8:83:9c:79:4e:7e:6d:b3:b6:2f:e7: f5:4b:08:93:6b:b4:f0:29:d4:81:43:c2:31:12:9d:e4:cd:24: 8e:1d:78:d2:54:75:45:34:96:d0:33:2d:a6:95:05:10:a9:cf: d9:0d:c7:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdstVjVfUZLs4UBZdQMio06eCC0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTA0MDQwMzE1NDNaFw0yNTA0MDcwNjE3NDNaMDMxMTAvBgNV BAMTKERDOUJBNEZEMTI4MzdCNkEwOTgxMTk4NzE4OTg0NTY1Qzg3OEVGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaOzMOiURnz1skkWQIf2Ng13m9 3SRXqDbdhyqv3GDQV6H4wy7iazpTqZcNnk+eLVtG410ulS4g7fhXR5uJdYXNikJf 1ZfsQ5NiwdVKt8rNVReMjy8N2JOdj8VIyHepLtS11kR0+oorSLUiSmPxKVRJen/f b2ZJ6ZocuSfulHtu4U/8ZNBHzP0KjiqjwioT5wCuByOTPz6PMc9bkNMxaNkxPFag T+iZvj6qXAmtuXvpKopiFIgtMYv5RRabWtzfjKmsctK/uVgepEiiSfshKm1moB7P Bc5SC1a6RzyC369yvIkBECpx1DBygzXgSnu3qgcIBw1gAH0XTX9MSM5zjWnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Juk/RKDe2oJgRmHGJhFZch471QwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAUMjb6pnLxEwn4dKbx6D1Cub1s9wFXM40e kdIQbKTl645VFrps5CEmRo0SLJIvjcvjzvDzN/ECwQose5WnjMLjlezGt7cT+jy8 OXZI10ay/Q2Ij0JMx9TXd/vAErXso3Vd/vlj7RyzmlGp28A0Y8b7l3xvtvb394fn rakuzcbMI3QBAMRk/KKwy/C+otC+7dJPe1Is/bfSHjku7aIXRjPJ5e8zRaWk36XH 0PwkRYkwqU/xnyUD/YsRGosfX1jlx3i8mTnJM9AeeSdCLo74g5x5Tn5ts7Yv5/VL CJNrtPAp1IFDwjESneTNJI4deNJUdUU0ltAzLaaVBRCpz9kNx9E= -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:05 2025 by rpki-client