$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: SYSxtt1Herl/fXpscTQ3OoaTMw1lVrTeroOubOD8WiE= Subject key identifier: 89:52:D0:58:BA:CC:38:05:24:9E:B0:D3:EC:2F:CD:BD:B9:FD:5F:C4 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 7B496B7464E9329A0A4D0F82806B124F577DBF25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 01E8 Signing time: Fri 04 Apr 2025 02:21:14 +0000 Manifest this update: Fri 04 Apr 2025 02:16:14 +0000 Manifest next update: Mon 07 Apr 2025 05:23:14 +0000 Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) 2: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: CAbhT0PB5sitNB0epiWWohmWk5iXSxtNWWPrQbhpoj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 05:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:49:6b:74:64:e9:32:9a:0a:4d:0f:82:80:6b:12:4f:57:7d:bf:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Apr 4 02:16:14 2025 GMT Not After : Apr 7 05:23:14 2025 GMT Subject: CN=8952D058BACC3805249EB0D3EC2FCDBDB9FD5FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:70:9e:1e:e1:ae:0a:03:df:18:c8:41:83: ab:8b:36:39:c2:85:6d:ae:01:61:59:f7:87:c0:01: 22:9b:75:ec:36:df:67:3f:d1:f2:f6:65:11:c4:4b: 1b:9d:87:3a:0f:f0:82:5b:11:df:7e:59:e3:a4:34: b7:f8:bb:d8:01:cb:33:6b:ae:cb:86:96:b3:40:69: 1b:38:25:93:64:b8:6d:44:fd:99:17:f7:43:b8:3d: ef:b7:81:60:c8:ca:1d:0c:26:77:a7:28:18:70:83: 58:72:8d:68:fa:34:2f:9a:23:c4:c4:c3:a5:0c:b8: 05:77:39:2c:2e:18:12:c5:0d:b6:db:9a:dd:1c:7e: 41:f8:90:7f:40:44:59:f6:49:b0:fc:bb:00:9b:dd: 22:b6:e0:51:82:5f:dc:fb:14:95:70:86:1a:0a:52: dd:2c:00:71:4e:b4:e4:1e:a0:27:39:46:f8:66:5b: 65:94:4b:a2:07:21:59:c3:01:18:e1:93:76:53:94: ec:8d:cb:b6:e0:51:c1:d9:b3:8c:11:4e:4e:68:d9: 3f:5a:8f:18:cd:ac:f4:aa:61:95:2e:d8:41:49:c1: 28:0a:f2:6a:ea:d7:d6:0c:b9:6d:c5:1b:ae:13:05: 49:ac:12:3f:ce:fe:09:26:15:5c:e1:7f:a1:4b:74: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:D0:58:BA:CC:38:05:24:9E:B0:D3:EC:2F:CD:BD:B9:FD:5F:C4 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:37:5a:00:db:02:15:73:20:3d:0a:28:bf:ae:24:2f:65:fa: 1b:4f:00:99:e9:4f:0a:cc:00:1f:0a:d1:57:cc:ba:7c:8a:65: 3b:f3:00:96:6a:a2:d1:68:bd:69:02:f0:f0:4f:ee:8f:94:de: 0f:8a:3c:70:66:de:11:58:16:f3:88:ee:c2:5e:07:c2:ef:6f: 64:a0:8e:40:57:d6:3d:d4:2b:41:77:10:73:61:07:a3:97:57: 29:d1:8b:d8:67:a0:e8:b5:5a:b1:d6:b1:67:4d:8e:17:03:c6: c3:27:42:35:2e:e3:7e:2d:c3:cc:09:a7:68:2b:12:49:74:e2: 8d:af:26:2d:fa:60:94:00:a5:39:aa:a4:e9:fd:cf:b4:92:2f: 7c:07:ac:6e:73:54:03:b9:a3:8c:90:49:5a:f8:d6:f0:7e:20: 3d:50:b3:04:09:06:79:b1:51:17:85:47:5c:91:3d:f8:18:04: 07:be:af:c6:21:ed:64:1e:7a:11:d0:88:4c:2b:9f:f9:e7:72: c1:67:d0:75:9d:f3:6e:13:9f:7e:b3:2a:b7:a6:01:3b:e3:db: 59:3a:92:a7:6d:46:a2:bf:54:65:44:83:9b:95:2d:ab:9a:c5: 3e:18:6b:1a:67:ba:dd:43:2e:3f:05:2f:4a:f6:ca:b1:ee:66: 9c:72:45:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0lrdGTpMpoKTQ+CgGsST1d9vyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTA0MDQwMjE2MTRaFw0yNTA0MDcwNTIzMTRaMDMxMTAvBgNV BAMTKDg5NTJEMDU4QkFDQzM4MDUyNDlFQjBEM0VDMkZDREJEQjlGRDVGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yXCeHuGuCgPfGMhBg6uLNjnC hW2uAWFZ94fAASKbdew232c/0fL2ZRHESxudhzoP8IJbEd9+WeOkNLf4u9gByzNr rsuGlrNAaRs4JZNkuG1E/ZkX90O4Pe+3gWDIyh0MJnenKBhwg1hyjWj6NC+aI8TE w6UMuAV3OSwuGBLFDbbbmt0cfkH4kH9ARFn2SbD8uwCb3SK24FGCX9z7FJVwhhoK Ut0sAHFOtOQeoCc5RvhmW2WUS6IHIVnDARjhk3ZTlOyNy7bgUcHZs4wRTk5o2T9a jxjNrPSqYZUu2EFJwSgK8mrq19YMuW3FG64TBUmsEj/O/gkmFVzhf6FLdIgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVLQWLrMOAUknrDT7C/Nvbn9X8QwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw3WgDbAhVzID0KKL+uJC9l+htPAJnpTwrM AB8K0VfMunyKZTvzAJZqotFovWkC8PBP7o+U3g+KPHBm3hFYFvOI7sJeB8Lvb2Sg jkBX1j3UK0F3EHNhB6OXVynRi9hnoOi1WrHWsWdNjhcDxsMnQjUu434tw8wJp2gr Ekl04o2vJi36YJQApTmqpOn9z7SSL3wHrG5zVAO5o4yQSVr41vB+ID1QswQJBnmx UReFR1yRPfgYBAe+r8Yh7WQeehHQiEwrn/nncsFn0HWd824Tn36zKremATvj21k6 kqdtRqK/VGVEg5uVLauaxT4Yaxpnut1DLj8FL0r2yrHuZpxyRSs= -----END CERTIFICATE-----Generated at Sat Apr 5 15:51:07 2025 by rpki-client