$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: HoidxSdhz0HClFPW/xyimsrurre2zTi2xmwjzOtII1s= Subject key identifier: 72:B0:CE:D7:AE:CE:EE:7D:B4:6D:45:B0:49:F9:92:BC:0F:9B:B4:EE Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 3DF907DE8627797D5F2F2B59D9530001EEF61B4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: 7D Signing time: Fri 04 Apr 2025 22:01:05 +0000 Manifest this update: Fri 04 Apr 2025 21:56:05 +0000 Manifest next update: Tue 08 Apr 2025 01:33:05 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: uCrO/TheTmT5JDmkvR9LLSLwfYgCtexW8+T2kZ9fffo=) 2: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: LCdA6LVKjSdNUc2veCquH5m/dYAsPpLP/YUO84fXe7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 01:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f9:07:de:86:27:79:7d:5f:2f:2b:59:d9:53:00:01:ee:f6:1b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Apr 4 21:56:05 2025 GMT Not After : Apr 8 01:33:05 2025 GMT Subject: CN=72B0CED7AECEEE7DB46D45B049F992BC0F9BB4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:eb:a7:55:dc:5f:ba:a0:42:68:0f:45:a7: af:a2:f5:4f:91:6c:03:7b:06:66:3c:ed:41:f3:f8: ee:d7:41:10:13:92:0a:35:00:5e:ed:55:e5:9d:b7: 75:bc:73:b4:3c:fb:bc:47:8d:f4:2e:49:b7:95:af: fe:c5:d0:d7:a6:7d:30:1d:df:89:5a:95:9f:c9:37: 32:9a:a5:66:6b:43:e7:8e:df:ae:d2:cd:91:95:33: e4:e5:9f:94:ee:d5:cd:b6:85:79:e2:a0:0c:65:40: ed:93:e0:be:98:b7:e3:03:48:07:6b:f3:3b:93:1b: c4:94:c9:d5:a9:fe:00:c2:a1:21:d9:5d:5e:81:5f: c3:bc:dd:5f:52:ce:44:7d:42:fa:57:06:e0:f4:98: 19:32:2e:36:9c:cf:75:f2:c6:55:60:6c:2e:f9:e5: 61:4d:3b:b1:60:a1:8c:f4:ba:5a:c8:fa:5c:f9:67: 02:bf:de:51:5a:8f:ba:89:59:46:8a:cb:97:9a:9e: 61:26:82:e8:ac:ca:cc:1c:87:cc:01:77:7f:e2:d1: bb:da:6f:b8:71:6c:b8:23:fd:45:f6:94:41:84:32: bd:9c:32:ad:3c:7e:06:4b:30:ae:23:be:6b:8b:85: ef:c5:db:bd:9f:7b:91:f4:69:68:9c:c8:47:d8:2c: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B0:CE:D7:AE:CE:EE:7D:B4:6D:45:B0:49:F9:92:BC:0F:9B:B4:EE X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:70:bb:31:ae:2f:93:b9:e0:64:da:fc:f0:3b:e8:9a:89:bb: 27:62:fb:fe:32:2f:bf:e0:df:b6:d7:c7:ba:62:af:cf:1e:84: 1c:5d:8c:0d:e1:46:ad:7e:9d:d6:03:2e:c8:4e:4e:28:58:0e: ac:23:63:2b:19:ae:5b:a2:6f:f1:d1:e8:4a:89:05:1a:1e:2d: df:e2:ae:f4:dd:1a:5e:55:13:75:01:45:57:80:cf:2d:e5:09: bc:3b:fc:c4:d7:d0:e9:32:ba:e1:7a:51:74:e2:60:18:1e:40: c7:39:c5:b4:f8:c8:d6:e1:3f:fd:5d:fa:38:4c:50:16:43:cb: 8b:05:4d:81:5b:8b:6c:df:1e:14:7d:76:23:d0:49:42:d4:89: 5d:ee:32:6b:b5:1c:35:4f:67:48:16:9b:18:17:cc:4b:da:d2: 79:ac:a0:5a:cd:04:f5:71:6a:d6:5e:31:ac:7e:1a:07:38:05: 37:b7:09:51:f3:fe:53:e6:fc:36:8d:cc:f9:8c:05:2e:45:20: c8:d5:59:a1:d1:95:4f:ef:48:01:a1:6c:6c:0b:79:b8:c0:a5: ea:ac:90:4c:e9:14:0b:d8:24:f0:cd:21:38:01:a3:00:c6:c8: f5:b3:3f:74:e8:e5:cc:4c:fe:90:f3:0b:fa:c9:92:fb:b5:ae: 19:90:5d:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfkH3oYneX1fLytZ2VMAAe72G0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTA0MDQyMTU2MDVaFw0yNTA0MDgwMTMzMDVaMDMxMTAvBgNV BAMTKDcyQjBDRUQ3QUVDRUVFN0RCNDZENDVCMDQ5Rjk5MkJDMEY5QkI0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkuunVdxfuqBCaA9Fp6+i9U+R bAN7BmY87UHz+O7XQRATkgo1AF7tVeWdt3W8c7Q8+7xHjfQuSbeVr/7F0NemfTAd 34lalZ/JNzKapWZrQ+eO367SzZGVM+Tln5Tu1c22hXnioAxlQO2T4L6Yt+MDSAdr 8zuTG8SUydWp/gDCoSHZXV6BX8O83V9SzkR9QvpXBuD0mBkyLjacz3XyxlVgbC75 5WFNO7FgoYz0ulrI+lz5ZwK/3lFaj7qJWUaKy5eanmEmguisyswch8wBd3/i0bva b7hxbLgj/UX2lEGEMr2cMq08fgZLMK4jvmuLhe/F272fe5H0aWicyEfYLFzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcrDO167O7n20bUWwSfmSvA+btO4wHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRwuzGuL5O54GTa/PA76JqJuydi+/4yL7/g 37bXx7pir88ehBxdjA3hRq1+ndYDLshOTihYDqwjYysZrluib/HR6EqJBRoeLd/i rvTdGl5VE3UBRVeAzy3lCbw7/MTX0OkyuuF6UXTiYBgeQMc5xbT4yNbhP/1d+jhM UBZDy4sFTYFbi2zfHhR9diPQSULUiV3uMmu1HDVPZ0gWmxgXzEva0nmsoFrNBPVx atZeMax+Ggc4BTe3CVHz/lPm/DaNzPmMBS5FIMjVWaHRlU/vSAGhbGwLebjApeqs kEzpFAvYJPDNITgBowDGyPWzP3To5cxM/pDzC/rJkvu1rhmQXT8= -----END CERTIFICATE-----Generated at Sun Apr 6 08:44:11 2025 by rpki-client