$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: SZfgDGQUyIqtczUsUm2ZYXHteJyjINRzjfux5FrCLSQ= Subject key identifier: 50:53:8C:41:FF:2C:FC:97:C8:CB:3E:2E:8C:B1:E9:29:AC:2B:00:AD Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 6C8508962C1A6FC0E470EF4E4ECD02DB8F2CB9CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 92 Signing time: Tue 08 Apr 2025 10:12:14 +0000 Manifest this update: Tue 08 Apr 2025 10:07:14 +0000 Manifest next update: Fri 11 Apr 2025 20:03:14 +0000 Files and hashes: 1: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: 3O/OW1Umefwg6OchQ44jpt1RJGa/f0UGdAnIHZM+ihI=) 2: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: 22B0/6dHWfAUqB/D2HIKtqdMjWpOw+/jtS9IhmmBaZ8=) 3: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: EvJq4OLjEBVOFbG73OwOsPdQAb4z66x1zbfCbpT8orA=) 4: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: lc89lFRvMQIz7uTqrlcEMfYnshZrWUp2xbVgo2KfUEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:85:08:96:2c:1a:6f:c0:e4:70:ef:4e:4e:cd:02:db:8f:2c:b9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Apr 8 10:07:14 2025 GMT Not After : Apr 11 20:03:14 2025 GMT Subject: CN=50538C41FF2CFC97C8CB3E2E8CB1E929AC2B00AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:72:5d:63:2c:5c:86:6c:c0:bb:b4:86:89: 72:a1:ee:1a:34:ca:af:0e:51:3f:ca:d6:aa:29:1c: a8:b9:6f:61:0b:67:ed:49:f9:f3:51:48:79:40:9d: 35:54:33:fd:55:9d:27:6e:d4:d4:64:fb:01:7f:1f: 0a:b6:9b:96:e6:dc:8e:87:d5:8e:39:30:31:4a:b3: b5:6f:ea:4b:40:c8:ad:52:ce:2e:28:92:44:94:02: d0:0e:55:65:f4:56:13:0e:45:b1:3c:ac:c3:cd:78: 3c:95:1c:92:5b:ef:59:b4:c0:6b:bb:c9:1a:17:09: dc:56:a8:a9:a2:5b:5d:c7:d9:93:10:c7:5e:10:6d: b9:78:fe:67:68:79:33:4f:1c:aa:70:b0:db:01:f5: f4:18:70:2a:97:8c:14:c6:84:06:42:d4:a2:6d:01: 09:95:d8:e8:f1:30:af:1a:16:e4:1f:3b:dd:75:64: 97:6b:b1:fe:f9:91:bc:f5:08:d1:7b:4f:3f:29:37: e8:57:9c:4a:e0:91:c4:1a:15:48:93:5f:fc:92:6f: 42:28:3e:a1:65:cb:88:36:0c:e1:6a:b7:2f:02:c3: 98:01:b3:3c:87:ac:c0:2a:b9:48:eb:02:2d:c9:8b: 2b:4e:4a:5b:b6:69:7d:d7:49:0e:a1:89:78:0b:dc: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:53:8C:41:FF:2C:FC:97:C8:CB:3E:2E:8C:B1:E9:29:AC:2B:00:AD X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:74:ab:5a:9d:d3:ad:e7:33:3f:77:1d:bd:27:eb:3c:f3: bd:52:e3:9a:fc:d9:41:dc:6e:71:94:02:63:4b:68:d9:f0:c3: 1e:9d:87:a5:f9:92:fd:6d:c8:33:89:58:7d:1d:35:b6:d2:79: d5:28:ff:28:75:cf:c1:b2:ff:bd:b5:9e:6a:c8:ea:d3:4f:b8: 71:32:8c:75:95:23:03:92:3f:04:5d:5d:21:08:38:16:a5:b0: 7d:82:fa:96:99:0c:55:f6:ff:cf:d0:32:e9:aa:09:71:8d:36: 91:29:65:ea:5e:24:ea:de:4c:8b:e5:f0:0e:da:2d:62:a5:2b: fd:2c:dd:3e:3f:ba:da:d3:bc:38:32:07:c8:45:bb:30:b5:db: 17:04:66:8d:cf:f5:0f:7d:ec:4e:52:ad:7b:ca:29:d0:a8:8f: cf:0c:87:19:02:79:63:aa:73:25:39:df:c4:aa:74:4a:d0:65: 06:53:ce:e9:9d:69:4b:14:30:67:8a:a3:f3:8e:59:04:4e:db: 96:f4:5a:7f:7f:d1:0b:ee:93:1c:59:4f:78:c9:60:7c:d5:bb: fa:29:9e:ff:56:36:95:33:e5:57:a0:d5:5d:b4:e3:60:3b:0d: 23:d9:a9:24:03:73:94:4c:58:75:23:d4:ab:af:ff:a9:06:a6: 91:8c:37:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIUIliwab8DkcO9OTs0C248suc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA0MDgxMDA3MTRaFw0yNTA0MTEyMDAzMTRaMDMxMTAvBgNV BAMTKDUwNTM4QzQxRkYyQ0ZDOTdDOENCM0UyRThDQjFFOTI5QUMyQjAwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBp3JdYyxchmzAu7SGiXKh7ho0 yq8OUT/K1qopHKi5b2ELZ+1J+fNRSHlAnTVUM/1VnSdu1NRk+wF/Hwq2m5bm3I6H 1Y45MDFKs7Vv6ktAyK1Szi4okkSUAtAOVWX0VhMORbE8rMPNeDyVHJJb71m0wGu7 yRoXCdxWqKmiW13H2ZMQx14Qbbl4/mdoeTNPHKpwsNsB9fQYcCqXjBTGhAZC1KJt AQmV2OjxMK8aFuQfO911ZJdrsf75kbz1CNF7Tz8pN+hXnErgkcQaFUiTX/ySb0Io PqFly4g2DOFqty8Cw5gBszyHrMAquUjrAi3JiytOSlu2aX3XSQ6hiXgL3EAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUFOMQf8s/JfIyz4ujLHpKawrAK0wHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB/dKtandOt5zM/dx29J+s8871S45r82UHc bnGUAmNLaNnwwx6dh6X5kv1tyDOJWH0dNbbSedUo/yh1z8Gy/721nmrI6tNPuHEy jHWVIwOSPwRdXSEIOBalsH2C+paZDFX2/8/QMumqCXGNNpEpZepeJOreTIvl8A7a LWKlK/0s3T4/utrTvDgyB8hFuzC12xcEZo3P9Q997E5SrXvKKdCoj88MhxkCeWOq cyU538SqdErQZQZTzumdaUsUMGeKo/OOWQRO25b0Wn9/0QvukxxZT3jJYHzVu/op nv9WNpUz5Veg1V2042A7DSPZqSQDc5RMWHUj1Kuv/6kGppGMN+o= -----END CERTIFICATE-----Generated at Wed Apr 9 18:23:55 2025 by rpki-client