$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: ErXDslLRaw8WDzerWy7MakaT8e1WCVZYixNvZAlqzzs= Subject key identifier: 69:D4:03:32:24:5F:91:1C:B9:DF:4D:D5:2C:89:B5:4E:BE:29:E4:A0 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 3F1C5CA8D06C522E308E7D93F4BEA76C9D0A2F17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04B5 Signing time: Wed 12 Mar 2025 16:51:35 +0000 Manifest this update: Wed 12 Mar 2025 16:46:35 +0000 Manifest next update: Sun 16 Mar 2025 03:38:35 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 2: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: 4qLNGi/A/2Nusn9fOdkgGQAfH65+C/+F6uRVaqCMnSM=) 3: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 4: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 5: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: 0i71U6n3yU4D6qjZ2ZWnXvBsN+np3dM4iEC32GKiA68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 03:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1c:5c:a8:d0:6c:52:2e:30:8e:7d:93:f4:be:a7:6c:9d:0a:2f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Mar 12 16:46:35 2025 GMT Not After : Mar 16 03:38:35 2025 GMT Subject: CN=69D40332245F911CB9DF4DD52C89B54EBE29E4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:be:3f:0f:2d:25:33:30:a8:e2:a9:fb:d8: 07:47:0b:2d:9e:e2:f8:26:ac:1a:98:3e:d5:57:66: 29:c4:88:83:14:d7:8f:9b:08:7c:7d:0a:0d:e3:00: 0f:7c:fa:db:42:58:42:3f:88:c0:c1:71:23:55:f0: e4:42:14:d4:4a:e5:73:67:75:70:20:5d:c2:07:16: db:75:1b:96:02:cc:97:78:70:e3:aa:6d:cd:01:82: f7:0b:d3:d6:6d:16:7a:69:84:9a:6b:01:8f:a5:4b: 71:0d:e4:49:db:07:8f:02:7c:1c:b2:b7:c7:0c:13: a7:39:bc:b0:37:33:e8:17:ff:98:79:ab:83:d2:05: a5:14:69:f1:e4:00:ba:ee:c4:35:89:15:8e:16:9d: 78:85:1e:89:21:80:18:af:28:7d:ef:64:49:4c:66: 0a:ea:0b:3f:9d:b7:48:b9:b2:16:ef:88:37:2d:f0: 5f:f5:bc:d1:2f:48:1a:94:a0:d9:ab:aa:36:07:93: 00:6c:dc:0a:af:5d:77:2e:cc:44:8d:ac:da:a8:ac: 73:73:bf:3b:27:d2:c6:47:e6:1c:fe:5f:0d:fa:0b: b9:9d:33:9e:d5:57:f3:ba:e4:5e:ed:e3:49:39:52: 9c:80:0a:a5:8a:fb:0b:24:e9:d8:2c:f7:e7:88:05: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:03:32:24:5F:91:1C:B9:DF:4D:D5:2C:89:B5:4E:BE:29:E4:A0 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c9:ca:4c:0a:27:ea:31:ae:df:34:84:df:49:7f:cd:b6:0c: e2:ad:aa:97:77:a7:d0:f2:30:6a:c6:75:f6:97:38:7c:b7:b9: e6:d8:42:74:fb:2e:d6:28:09:1c:de:9b:e4:b2:22:8c:4c:9c: a2:53:bb:7d:3a:d1:67:94:42:5c:ae:67:db:9a:75:98:04:fd: 40:5a:d3:ab:59:e8:22:df:33:33:5d:28:f2:d2:d1:cd:c5:b1: b9:66:e2:84:f7:e7:88:15:1d:5d:50:cb:c1:0b:01:8c:74:eb: 3c:2e:7e:1b:27:3a:e1:9b:07:b1:69:30:cb:c9:b2:05:93:ce: 1d:ef:b2:37:d8:d0:41:c3:56:b1:23:bc:83:75:e8:55:eb:0f: 5f:81:20:45:b3:c0:e4:74:dc:e7:28:73:7a:d1:fc:31:ec:85: 11:62:8f:14:3b:a9:f2:6d:15:46:7d:54:96:5c:67:5d:92:af: bc:b8:f7:f7:9b:2a:d4:cd:5b:1f:63:04:9d:a1:34:fb:44:7b: a0:7f:d9:84:75:ef:60:4d:0d:fe:85:13:a6:13:5c:e5:9b:9a: 6e:b4:0e:01:70:e6:bd:a7:50:c5:9f:52:79:2c:27:37:82:8e: 61:bf:66:63:95:5c:86:aa:3a:39:55:fd:75:27:96:47:15:07: da:cc:38:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxxcqNBsUi4wjn2T9L6nbJ0KLxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTAzMTIxNjQ2MzVaFw0yNTAzMTYwMzM4MzVaMDMxMTAvBgNV BAMTKDY5RDQwMzMyMjQ1RjkxMUNCOURGNERENTJDODlCNTRFQkUyOUU0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqv74/Dy0lMzCo4qn72AdHCy2e 4vgmrBqYPtVXZinEiIMU14+bCHx9Cg3jAA98+ttCWEI/iMDBcSNV8ORCFNRK5XNn dXAgXcIHFtt1G5YCzJd4cOOqbc0BgvcL09ZtFnpphJprAY+lS3EN5EnbB48CfByy t8cME6c5vLA3M+gX/5h5q4PSBaUUafHkALruxDWJFY4WnXiFHokhgBivKH3vZElM ZgrqCz+dt0i5shbviDct8F/1vNEvSBqUoNmrqjYHkwBs3AqvXXcuzESNrNqorHNz vzsn0sZH5hz+Xw36C7mdM57VV/O65F7t40k5UpyACqWK+wsk6dgs9+eIBUGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadQDMiRfkRy5303VLIm1Tr4p5KAwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/JykwKJ+oxrt80hN9Jf822DOKtqpd3p9Dy MGrGdfaXOHy3uebYQnT7LtYoCRzem+SyIoxMnKJTu3060WeUQlyuZ9uadZgE/UBa 06tZ6CLfMzNdKPLS0c3Fsblm4oT354gVHV1Qy8ELAYx06zwufhsnOuGbB7FpMMvJ sgWTzh3vsjfY0EHDVrEjvIN16FXrD1+BIEWzwOR03Ococ3rR/DHshRFijxQ7qfJt FUZ9VJZcZ12Sr7y49/ebKtTNWx9jBJ2hNPtEe6B/2YR172BNDf6FE6YTXOWbmm60 DgFw5r2nUMWfUnksJzeCjmG/ZmOVXIaqOjlV/XUnlkcVB9rMONI= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:38 2025 by rpki-client