$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: J3Dpi5ims7yt7hcmsqfZPiCBJNKQ2ElvwKLq2PsTSHQ= Subject key identifier: DC:C1:36:5A:60:37:65:CE:89:75:59:CE:C2:D4:D8:40:2B:50:53:F8 Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 1A31B57BFB5BD31161EC9B01674D0189AFEC14B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 01C0 Signing time: Thu 17 Apr 2025 03:10:57 +0000 Manifest this update: Thu 17 Apr 2025 03:05:57 +0000 Manifest next update: Sun 20 Apr 2025 11:27:57 +0000 Files and hashes: 1: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: biAo6Z7R2SF20gptWP7/sssBvBE7Xn3+3RYGQ1W4VTI=) 2: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: YqLosN7xJjPh1qT/KHATxfBXYoRkNr6T/79hoUR1cPE=) 3: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: iMC6SYziMtJ3TeWR3+nkFXLvBELfk5TwNKTLlq7RrfI=) 4: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: isjwujFSvwjo39d15HTvsQAP67Ev79AX12W5Y0GSiMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 11:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:31:b5:7b:fb:5b:d3:11:61:ec:9b:01:67:4d:01:89:af:ec:14:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Apr 17 03:05:57 2025 GMT Not After : Apr 20 11:27:57 2025 GMT Subject: CN=DCC1365A603765CE897559CEC2D4D8402B5053F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:ce:36:3d:55:84:40:6e:2d:ab:8c:9b:80: 1b:cb:65:26:d1:fd:8b:9c:e3:c0:fd:15:58:ab:d4: 35:a1:e5:d1:a8:b3:3f:66:44:3f:b7:39:ad:49:4e: a5:04:c2:be:23:49:bf:ef:91:6e:78:e3:05:ab:b6: ef:7a:2a:c4:7c:0b:5b:ac:57:55:97:5b:09:f6:d3: db:15:21:c4:f8:73:dc:7c:2c:0d:dc:86:05:71:4e: e1:3f:42:20:77:ad:6d:2f:03:62:ad:4a:9f:af:ac: 13:af:eb:a8:61:8a:76:b2:a4:80:6b:b3:cc:d0:80: 86:79:17:94:7d:3f:76:65:e1:b7:fc:f2:fe:62:3f: 12:d5:f6:66:25:1f:84:9b:b3:39:c1:30:ab:ae:c7: 8c:c1:bf:18:b4:ed:79:de:22:40:34:82:71:28:82: b2:4f:32:1e:e1:e8:2f:30:8f:1c:c9:99:71:9e:3e: f1:01:f9:0d:22:48:7e:7c:02:39:37:d2:15:c1:40: 82:d7:bb:68:69:1a:4b:92:fa:13:f4:3e:28:74:20: 2d:73:c0:61:1f:b6:99:c1:d0:b7:4f:4d:62:0a:39: 7b:79:ff:07:9e:d3:e6:5e:15:3f:40:84:9c:ea:07: 37:ee:3f:d6:43:a9:2c:74:3c:f6:17:d5:28:21:06: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C1:36:5A:60:37:65:CE:89:75:59:CE:C2:D4:D8:40:2B:50:53:F8 X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:43:ec:18:26:9d:cf:03:56:d2:79:70:7d:bf:ed:ce:7c:c9: 9d:eb:fc:c9:98:a5:55:0e:52:7c:88:cd:d2:65:85:3b:4c:00: 7f:5b:62:d7:95:3e:4d:20:19:2a:f9:eb:9f:d0:7e:13:2f:1f: 7d:74:22:2c:91:2d:b1:e0:4f:be:f1:8b:6f:db:dc:9a:8b:6e: 64:61:af:22:31:e8:71:16:b9:be:d5:6d:a1:39:c6:3a:87:c1: c5:91:b5:bd:89:94:a4:de:0a:d3:7f:00:c5:a3:3b:dc:ee:a9: 95:df:63:bd:49:d1:24:c8:50:c9:97:45:16:3b:29:8b:ec:b9: 3f:4e:93:2b:55:80:0c:eb:bf:74:c7:f5:79:b0:0e:b0:bc:71: ea:b6:42:98:26:54:99:e4:67:21:d6:95:07:22:c9:50:4b:d3: f2:fb:90:dd:cd:09:55:1f:98:ed:c9:0b:91:8a:04:bc:dc:9c: d0:33:85:4b:7c:be:87:1b:c3:b9:43:a7:48:e0:16:05:a4:9a: 9e:59:6d:c8:c6:c8:58:9d:76:c5:96:52:c6:ee:bc:79:51:f2: af:1d:3a:a2:ea:56:87:c5:a8:c0:d4:93:39:74:fc:b2:da:c8: d1:fe:40:7f:10:eb:38:a2:27:1a:d8:e2:98:2b:4f:7b:97:6d: 70:9e:c4:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjG1e/tb0xFh7JsBZ00Bia/sFLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTA0MTcwMzA1NTdaFw0yNTA0MjAxMTI3NTdaMDMxMTAvBgNV BAMTKERDQzEzNjVBNjAzNzY1Q0U4OTc1NTlDRUMyRDREODQwMkI1MDUzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Cc42PVWEQG4tq4ybgBvLZSbR /Yuc48D9FVir1DWh5dGosz9mRD+3Oa1JTqUEwr4jSb/vkW544wWrtu96KsR8C1us V1WXWwn209sVIcT4c9x8LA3chgVxTuE/QiB3rW0vA2KtSp+vrBOv66hhinaypIBr s8zQgIZ5F5R9P3Zl4bf88v5iPxLV9mYlH4SbsznBMKuux4zBvxi07XneIkA0gnEo grJPMh7h6C8wjxzJmXGePvEB+Q0iSH58Ajk30hXBQILXu2hpGkuS+hP0Pih0IC1z wGEftpnB0LdPTWIKOXt5/wee0+ZeFT9AhJzqBzfuP9ZDqSx0PPYX1SghBuvlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ME2WmA3Zc6JdVnOwtTYQCtQU/gwHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVD7Bgmnc8DVtJ5cH2/7c58yZ3r/MmYpVUO UnyIzdJlhTtMAH9bYteVPk0gGSr565/QfhMvH310IiyRLbHgT77xi2/b3JqLbmRh ryIx6HEWub7VbaE5xjqHwcWRtb2JlKTeCtN/AMWjO9zuqZXfY71J0STIUMmXRRY7 KYvsuT9OkytVgAzrv3TH9XmwDrC8ceq2QpgmVJnkZyHWlQciyVBL0/L7kN3NCVUf mO3JC5GKBLzcnNAzhUt8vocbw7lDp0jgFgWkmp5ZbcjGyFiddsWWUsbuvHlR8q8d OqLqVofFqMDUkzl0/LLayNH+QH8Q6ziiJxrY4pgrT3uXbXCexIs= -----END CERTIFICATE-----Generated at Fri Apr 18 22:20:29 2025 by rpki-client