$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: 6x7ox9G8XFij7VGEbXmx1uB6ppLJ9z7CiKgcQjGtHKM= Subject key identifier: 97:24:FF:B9:46:74:68:41:3E:64:DA:6E:B0:39:68:18:2F:30:8E:89 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 7598877776CB3F201A1478ABC0DCEB1E376C4BDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 0150 Signing time: Thu 03 Apr 2025 20:10:41 +0000 Manifest this update: Thu 03 Apr 2025 20:05:41 +0000 Manifest next update: Sun 06 Apr 2025 21:37:41 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) 2: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: 5SDU/RXeUlETbZjyrZv3TAM3ARzsdZu+BxwEYWiqk2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:98:87:77:76:cb:3f:20:1a:14:78:ab:c0:dc:eb:1e:37:6c:4b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Apr 3 20:05:41 2025 GMT Not After : Apr 6 21:37:41 2025 GMT Subject: CN=9724FFB9467468413E64DA6EB03968182F308E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2b:ba:f9:f4:70:d2:1d:bc:52:33:01:21:2e: 0f:49:cc:6f:a1:4f:b4:14:6a:49:3e:43:2c:97:22: 5e:08:b4:81:72:ba:3f:0a:86:f7:cf:b1:7b:84:58: 12:61:9d:8d:a0:bd:6d:ec:03:7e:2e:c9:16:91:64: 35:b8:d4:db:9c:f6:30:29:8f:fe:8e:c5:f0:ab:66: ac:3a:ee:c5:ce:3a:d7:b8:da:d1:c1:ae:77:1e:4b: 15:f3:6a:fe:34:59:f6:5e:b4:25:32:f1:9a:44:7f: ec:00:cb:f9:22:83:67:f0:de:a3:7e:dc:2f:50:64: eb:79:ba:7f:86:f4:ef:89:84:52:1b:ff:43:9a:fd: ea:44:3d:14:7c:d0:df:1c:00:e2:9f:2b:1c:f6:f4: b3:2f:40:51:59:46:47:61:83:9e:94:6b:18:d2:a9: 90:a6:b3:2b:6d:19:3c:46:a3:6b:cf:e4:bd:8c:9b: c6:7c:0f:d5:eb:01:7b:c8:d1:69:94:6c:8a:8f:a8: 6f:2c:14:f5:4c:22:9e:c0:13:9e:17:6c:4d:49:77: d2:b9:e3:4f:bb:f0:5f:e3:98:c8:44:3c:98:f9:0d: cf:8c:ea:54:ee:f3:94:9b:dd:79:84:8a:7f:68:da: 61:68:14:0b:4f:b0:1a:9a:da:87:f5:6d:81:55:5f: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:FF:B9:46:74:68:41:3E:64:DA:6E:B0:39:68:18:2F:30:8E:89 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bb:27:95:49:b6:19:09:0d:0d:ff:6e:0c:dc:bc:b9:44:11: 6f:6d:77:11:34:0f:3f:fc:36:03:2d:f0:5d:2a:f8:d4:93:01: fd:07:6a:53:a1:ae:a5:53:a4:66:9d:6a:d2:e6:32:0f:07:33: e9:0a:ae:cc:0b:00:b4:99:8a:0b:dd:6d:30:91:78:fb:ee:b1: 0f:dc:cb:6b:c0:24:bf:3e:9a:3a:3e:55:22:22:2b:1d:45:12: 6d:4d:ce:42:c1:b3:a0:68:b8:1a:9b:9b:73:57:08:e2:09:74: 05:3b:f1:ac:16:de:28:3a:15:51:cc:60:b9:b0:ee:af:5b:32: 6f:c1:46:19:ee:09:b8:7f:ad:b7:1a:b8:77:c7:d4:f3:a3:bd: e5:dd:8a:67:79:6c:b2:6e:a3:d3:d2:9c:a2:48:56:49:82:0e: 73:b7:2f:2b:ba:c3:99:aa:ff:ee:72:68:ab:e0:2b:a2:8b:ff: 6d:9c:10:f1:68:eb:97:6c:fb:41:f0:d5:a1:95:0e:01:b7:51: ce:88:5e:42:66:e6:45:2b:cb:91:13:e6:f6:a8:73:39:0e:d1: 89:7d:78:61:22:11:99:ca:48:d9:d1:68:d0:6c:c4:b5:0f:e3: 11:83:81:2a:56:ee:14:98:66:5d:bf:4a:72:47:c3:a5:b9:e8: 6c:1c:58:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZiHd3bLPyAaFHirwNzrHjdsS9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTA0MDMyMDA1NDFaFw0yNTA0MDYyMTM3NDFaMDMxMTAvBgNV BAMTKDk3MjRGRkI5NDY3NDY4NDEzRTY0REE2RUIwMzk2ODE4MkYzMDhFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4K7r59HDSHbxSMwEhLg9JzG+h T7QUakk+QyyXIl4ItIFyuj8KhvfPsXuEWBJhnY2gvW3sA34uyRaRZDW41Nuc9jAp j/6OxfCrZqw67sXOOte42tHBrnceSxXzav40WfZetCUy8ZpEf+wAy/kig2fw3qN+ 3C9QZOt5un+G9O+JhFIb/0Oa/epEPRR80N8cAOKfKxz29LMvQFFZRkdhg56UaxjS qZCmsyttGTxGo2vP5L2Mm8Z8D9XrAXvI0WmUbIqPqG8sFPVMIp7AE54XbE1Jd9K5 40+78F/jmMhEPJj5Dc+M6lTu85Sb3XmEin9o2mFoFAtPsBqa2of1bYFVX2D1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlyT/uUZ0aEE+ZNpusDloGC8wjokwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe7J5VJthkJDQ3/bgzcvLlEEW9tdxE0Dz/8 NgMt8F0q+NSTAf0HalOhrqVTpGadatLmMg8HM+kKrswLALSZigvdbTCRePvusQ/c y2vAJL8+mjo+VSIiKx1FEm1NzkLBs6BouBqbm3NXCOIJdAU78awW3ig6FVHMYLmw 7q9bMm/BRhnuCbh/rbcauHfH1POjveXdimd5bLJuo9PSnKJIVkmCDnO3Lyu6w5mq /+5yaKvgK6KL/22cEPFo65ds+0Hw1aGVDgG3Uc6IXkJm5kUry5ET5vaoczkO0Yl9 eGEiEZnKSNnRaNBsxLUP4xGDgSpW7hSYZl2/SnJHw6W56GwcWDo= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:45 2025 by rpki-client